- Jamf Nation Community
- Products
- Jamf Pro
- Re: Jamf Pro, MacOS Ventura and Profiles locking
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Jamf Pro, MacOS Ventura and Profiles locking
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 02:35 AM
I know there are some topics and solutions to lock Profiles, but none of them are working right now to prevent users from removing MDM Profile and uninstall Jamf from the company laptop.
May be someone can advise and help what is the solution for Ventura to lock removing MDM Profile option?
We are not using ADE, thats why cant select option to disallow removing MDM.
Please help guys.
10 REPLIES 10
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 03:39 AM
as they are user enrolled, by design the user can un-enroll, a fudge: maybe to block access to terminal (for obvious reasons) and use a config profile to block access to config profiles in System Prefs, not sure if that brings its own issues.. ABM / ADE is the way forward though..
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 03:42 AM
Config Profile not locking Profiles as it was moved from separate setting "Profiles" into Privacy and Security setting and Apple disabled extension remove of Privacy and Security.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 03:42 AM
To my regret we cant move to ADE =((
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 05:46 AM
@itinspectorio Is it an organizational policy that prevents you from moving to ADE? If so you might want to let your management know that if they are serious about using Macs in the org then they need to find a way to move to ADE as that's the only way you can enforce MDM.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 05:47 AM
We cant migrate because we are not able to enroll vendors into Apple Business Manager account as we have too many and sometimes we buy from other vendors that are not in the list and to add every time new one is very complicated. @sdagley
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 06:15 AM
@itinspectorio One would hope persuading your management that standardizing your Mac purchasing process is critical to supporting Macs isn't an insurmountable obstacle.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 05:48 AM
Before Ventura making Profiles grey was good idea, but now it is impossible
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 08:00 AM
This is actually reversed right now (i.e. Disable to Enable) and is part of PI109427: Restrictions: Preferences > Restrict items in System Preferences > Profiles
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 08:02 AM
This is the question or issue I am trying to ask big minds, if someone found any solution how to lock it =))) @markdmatthews
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 11-21-2022 08:07 AM
Yes "Uncheck" Profile under "disable selected items" in Restrictions until PI109427 is completed. It is currently behaving for Profiles opposite of what is intended.
