How can we BLOCK "Erase all content and settings" in Monterey?

[cwaldrip]

For multiple reasons (mostly legal) we do not want users erasing data from their machines. I've looked but don't see anything obvious in Configuration Profiles in Jamf 10.32 so I'm guessing at best there might be a custom MDM config.

[cwaldrip · Accepted solution]

And Der Flounder is on top of it!
https://derflounder.wordpress.com/2021/10/25/disabling-the-erase-all-contents-and-settings-function-...

[cwaldrip]

Forgot to say this is under Monterey...

[cwaldrip · Accepted solution]

And Der Flounder is on top of it!
https://derflounder.wordpress.com/2021/10/25/disabling-the-erase-all-contents-and-settings-function-...

[Tlehr]

Thanks, I missed this feature. This is really important to restrict.

[CSCC-JS · Accepted solution]

Profile seems the more full proof way to go.

I used restricted software function

 

[fredrik_virding]

Im finding this a little tricky to apply that solution. 

Am i missing something? Anyone that can help?

[CSCC-JS]

The process to block is "Erase Assistant" 

I have a custom Smart Group that is All Computers macOS 12 or greater.

[GabeShack]

Also be aware non-admins cannot run this command/app (Erase Assistant which is located in /System/Library/CoreServices.)  Not sure if that helps in your situation though.