Locking Classroom macOS Preference Pane settings without PreStage Enrollment

[chrisdaggett]

Found the solution to my problem - How to lock classroom pane/options with a custom profile in JAMF explained in first comment

We are looking into deploying Classroom for our teachers and students next year. We would be doing Teacher Managed classes. (macOS devices, teacher and student). By default, students can change settings that include them being able to leave the class, and requires student approval to lock etc... Which is never going to work.

JAMF has a couple wonderful configuration profile setting under Restrictions - Functionality. However they ONLY work with Prestage Enrolled devices, not those enrolled via QuickAdd. I have tested and confirmed that with a clean install of 10.14.4 and QuickAdd that the configuration indeed does nothing. Students can still change settings and require permissions etc.

Allow Classroom to perform AirPlay and View Screen without prompting, Allow Classroom to lock the device without prompting,Require teacher permission to leave Classroom unmanaged classes

Solution Below - I honestly don't know why Apple (and to an extent JAMF) have locked this behind a Prestage requirement, pushing their own agenda I suppose.

[chrisdaggett · Accepted solution]

So it turns out it was pretty easy to duplicate.

To lock down Classroom settings without Prestage all you have to do is use a custom Configuration Profile.

Create a new Configuration profile in JAMF. General can be what ever you want, but set it to computer level
Create new Custom Setting
Preference Domain is com.apple.classroom
Upload XML file (com.apple.classroom.plist) (Download here or make your own if you want to customize)

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>forceClassroomAutomaticallyJoinClasses</key>
    <true/>
    <key>forceClassroomRequestPermissionToLeaveClasses</key>
    <true/>
    <key>forceClassroomUnpromptedAppAndDeviceLock</key>
    <true/>
    <key>forceClassroomUnpromptedScreenObservation</key>
    <true/>
</dict>
</plist>

Save and Scope

[glennlewandowsk]

Top Stuff Chris. Much appreciated

[Ivan_Wang]

Hi Chris, that's cool! Many thanks