Restrict user from changing computer name in Ventura

[Mark-Kenny]

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.

What have I missed?

[sdagley]

@Mark-Kenny have you considered enforcing your Mac naming convention via policy? For my org the daily recon policy  includes a script payload that verifies the Mac name matches the org standard and changes it if it doesn't. 

[Mark-Kenny]

Two environments, one has the policy and is good, the other doesn't. 

[RobinJJ]

I actually change it on check-in. The only policy that runs every 15min 🙈

[dmccluskey]

Restrict the Sharing area of system settings

This prevents users from going in and changing it.

[Mark-Kenny]

Doesn't work in Ventura as the name can be changed under General / About :-( 

Already have the CP in place for macOS 12, issue is 13.

[dmccluskey]

I cant for my macs

its greyed out.

maybe because its standard user vs admin.

[Mark-Kenny · Accepted solution]

Sussed it. 

com.apple.loginwindow : Set Mac computer name to computer record name FALSE

And com.apple.systempreferences : 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DisabledSystemSettings</key>
<array>
<string>com.apple.Sharing-Settings.extension</string>
</array>
</dict>
</plist>

[Jacek_ADC]

@Mark-Kenny How to set the first part of your solution?

com.apple.loginwindow : Set Mac computer name to computer record name FALSE

[Mark-Kenny]

[Mark-Kenny]

Two payloads in the config profile as show above block changing computer name.