Restrict user from changing computer name in Ventura

Mark-Kenny
New Contributor II

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.

What have I missed?

1 ACCEPTED SOLUTION

Mark-Kenny
New Contributor II

Sussed it. 

com.apple.loginwindow : Set Mac computer name to computer record name FALSE

And com.apple.systempreferences : 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DisabledSystemSettings</key>
<array>
<string>com.apple.Sharing-Settings.extension</string>
</array>
</dict>
</plist>

View solution in original post

7 REPLIES 7

sdagley
Honored Contributor III

@Mark-Kenny have you considered enforcing your Mac naming convention via policy? For my org the daily recon policy  includes a script payload that verifies the Mac name matches the org standard and changes it if it doesn't. 

Mark-Kenny
New Contributor II

Two environments, one has the policy and is good, the other doesn't. 

RobinJJ
New Contributor III

I actually change it on check-in. The only policy that runs every 15min 🙈

dmccluskey
New Contributor III

Restrict the Sharing area of system settings

This prevents users from going in and changing it.

2023-03-14_9-32-56.png

Doesn't work in Ventura as the name can be changed under General / About :-( 

Already have the CP in place for macOS 12, issue is 13.

dmccluskey
New Contributor III

I cant for my macs

its greyed out.

maybe because its standard user vs admin.2023-03-14_9-42-36.png

 

 

Mark-Kenny
New Contributor II

Sussed it. 

com.apple.loginwindow : Set Mac computer name to computer record name FALSE

And com.apple.systempreferences : 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DisabledSystemSettings</key>
<array>
<string>com.apple.Sharing-Settings.extension</string>
</array>
</dict>
</plist>