Hello,
I was under the assumption that Config Profiles in Jamf Pro would prevent even admin from changing the configuration defined. However, that doesn't seem to be a given. For example I have enabled the Firewall using the native settings under Security and Privacy in Jamf Pro config Profiles. However, Sudo user are still able to disable the firewall in the terminal for example using
sudo defaults write /Library/Preferences/com.apple.alf globalstate -int 1
Is it possible to completely block an admin from changing a specific subset of settings using jamf pro. Without removing admin rights all together.
