Reverse mobileconfig Settings from AIR CB Secure Tester

[cboatwright]

Morning All!
I have setup computer-based testing in my district for years, but this will be the first "high stakes" test we give on 1:1 Macbooks. I have it rolled out on testing clients fine - AIR (College Board) provides a dmg with app, and a mobileconfig to assist in locking down all the necessary shortcuts a student could potentially use to break the rules. Problem is that the mobileconfig seriously hoses trackpad gestures, lookup, mission control, and more! I am trying to find the easiest way to reverse the changes it makes, so students can click to run in Self Service.

Best idea I have so far is manually editing the mobileconfig and re-packaging, then run a script to install the new profile over the old one, then remove it from client, then reboot (to make all settings take effect).

As far as editing settings back to useable, would I just change anything marked "false" to "true", and "0" to "1"?

EA1219
12/9/2014 -->
<plist version="1.0">
<dict> <key>PayloadContent</key> <array> <dict> <key>PayloadContent</key> <dict> <key>com.apple.symbolichotkeys</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2020-12-05T15:51:33Z</date> <key>mcx_preference_settings</key> <dict> <key>AppleSymbolicHotKeys</key> <dict> <key>28</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>51</integer> <integer>20</integer> <integer>1179648</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>29</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>51</integer> <integer>20</integer> <integer>1441792</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>30</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>52</integer> <integer>21</integer> <integer>1179648</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>31</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>52</integer> <integer>21</integer> <integer>1441792</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>181</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>54</integer> <integer>22</integer> <integer>1179648</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>182</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>54</integer> <integer>22</integer> <integer>1441792</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>184</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>53</integer> <integer>23</integer> <integer>1179648</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>164</key> <dict> <key>enabled</key> <false/> <key>value</key> <dict> <key>parameters</key> <array> <integer>65535</integer> <integer>65535</integer> <integer>0</integer> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>79</key> <dict> <key>enabled</key> <string>0</string> <key>value</key> <dict> <key>parameters</key> <array> <string>65535</string> <string>123</string> <string>262144</string> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>80</key> <dict> <key>enabled</key> <string>0</string> <key>value</key> <dict> <key>parameters</key> <array> <string>65535</string> <string>123</string> <string>393216</string> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>81</key> <dict> <key>enabled</key> <string>0</string> <key>value</key> <dict> <key>parameters</key> <array> <string>65535</string> <string>124</string> <string>262144</string> </array> <key>type</key> <string>standard</string> </dict> </dict> <key>82</key> <dict> <key>enabled</key> <string>0</string> <key>value</key> <dict> <key>parameters</key> <array> <string>65535</string> <string>124</string> <string>393216</string> </array> <key>type</key> <string>standard</string> </dict> </dict> </dict> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.2</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>2E6C0DC3-8A76-4187-B00B-514FBADE48D3</string> <key>PayloadVersion</key> <integer>1</integer> </dict> <dict> <key>PayloadContent</key> <dict> <key>NSGlobalDomain.ByHost</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2020-12-05T15:51:33Z</date> <key>mcx_preference_settings</key> <dict> <key>com.apple.trackpad.fiveFingerPinchSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.fourFingerHorizSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.fourFingerPinchSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.fourFingerVertSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.threeFingerDragGesture</key> <integer>0</integer> <key>com.apple.trackpad.threeFingerHorizSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.threeFingerTapGesture</key> <integer>0</integer> <key>com.apple.trackpad.threeFingerVertSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.twoFingerFromRightEdgeSwipeGesture</key> <integer>0</integer> <key>com.apple.trackpad.version</key> <integer>5</integer> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.3</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>7AC55E0C-1F09-49F8-8B4B-C15CF04E0268</string> <key>PayloadVersion</key> <integer>1</integer> </dict> <dict> <key>PayloadContent</key> <dict> <key>com.apple.AppleMultitouchTrackpad</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2020-12-05T15:51:33Z</date> <key>mcx_preference_settings</key> <dict> <key>TrackpadFiveFingerPinchGesture</key> <integer>0</integer> <key>TrackpadFourFingerHorizSwipeGesture</key> <integer>0</integer> <key>TrackpadFourFingerPinchGesture</key> <integer>0</integer> <key>TrackpadFourFingerVertSwipeGesture</key> <integer>0</integer> <key>TrackpadThreeFingerHorizSwipeGesture</key> <integer>0</integer> <key>TrackpadThreeFingerTapGesture</key> <integer>0</integer> <key>TrackpadThreeFingerVertSwipeGesture</key> <integer>0</integer> <key>TrackpadTwoFingerFromRightEdgeSwipeGesture</key> <integer>0</integer> <key>UserPreferences</key> <true/> <key>version</key> <integer>12</integer> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.4</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>3F272FED-B9EA-4EA0-B4F5-851C67A73B71</string> <key>PayloadVersion</key> <integer>1</integer> </dict> <dict> <key>PayloadContent</key> <dict> <key>com.apple.AppleMultitouchMouse</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2020-12-05T15:51:33Z</date> <key>mcx_preference_settings</key> <dict> <key>MouseTwoFingerDoubleTapGesture</key> <integer>0</integer> <key>MouseTwoFingerHorizSwipeGesture</key> <integer>0</integer> <key>UserPreferences</key> <true/> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.5</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>FF578A93-6742-43F6-8FF9-E765DDEDF531</string> <key>PayloadVersion</key> <integer>1</integer> </dict> <dict> <key>PayloadContent</key> <dict> <key>com.apple.dock</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2020-12-05T15:51:33Z</date> <key>mcx_preference_settings</key> <dict> <key>mcx-expose-disabled</key> <true/> <key>showDesktopGestureEnabled</key> <false/> <key>showLaunchpadGestureEnabled</key> <false/> <key>showMissionControlGestureEnabled</key> <false/> <key>showAppExposeGestureEnabled</key> <false/> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.6</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>EBC5E9B3-3B1C-4CB5-937A-7D311FFDB61B</string> <key>PayloadVersion</key> <integer>1</integer> </dict> <dict> <key>PayloadContent</key> <dict> <key>.GlobalPreferences</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2020-12-05T15:51:33Z</date> <key>mcx_preference_settings</key> <dict> <key>com.apple.keyboard.fnState</key> <true/> <key>com.apple.trackpad.forceClick</key> <false/> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.7</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>16403BF6-6E41-4B0D-BB30-856278B5EE73</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </array> <key>PayloadDescription</key> <string>Common settings required for assessment applications. NOTE: Applies all settings, once, to all users on machine. Removing this profile and re-pushing it will cause settings to be overwritten if they were changed. Some settings require a restart before they take effect.</string> <key>PayloadDisplayName</key> <string>Common Assessment Application Settings</string> <key>PayloadIdentifier</key> <string>com.apple.commonassessmentsettings.1</string> <key>PayloadOrganization</key> <string>Apple</string> <key>PayloadRemovalDisallowed</key> <true/> <key>PayloadScope</key> <string>System</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>A18A0DE9-0A79-4422-9316-04CF2223F695</string> <key>PayloadVersion</key> <integer>1</integer>
</dict>
</plist>

[cboatwright]

Wow, looks like I found a knowledge void... or maybe the right person just hasn't looked at Jamf Nation yet.

[cboatwright]

In case anyone runs a Google search here is my "resolution" which is just okay...
Created a second mobileconfig file reversing true/false and 0/1 on every key but PayloadEnabled, then packaged that up to deploy to clients putting both the original and new mobileconfig files in a tmp location for use by a script.
Script first does a profiles -R -F /location/of/original.mobileconfig
Then follows with profiles -I -F /location/of/new.mobileconfig
After a reboot all the changes that were made are reversed, and users have the option to set their own preferences for hotkeys, functions, gestures, siri, etc.