Unable to Restrict Profiles pane access

New Contributor III



Just updated a test Mac to MacOS Ventura and found that I am no longer able to restrict access to Profiles. I attempted to restrict access to Extensions and that is successful, but when I check mark Profiles, it does not grey out. 

Screenshot 2022-10-24 at 1.58.04 PM.png


Screenshot 2022-10-24 at 1.55.39 PM.png


Wondering if this is now only available for DEP enrolled devices vs devices that are manually enrolled and not supervised. 



New Contributor II

I am seeing the same behavior here.  The computer I am testing with is DEP enrolled.  I also notice I had to reboot the computer for some of the restrictions to apply.


New Contributor III

I noticed this too on a DEP-enrolled test machine. However, I also noticed that the "-" (minus) button is grayed out/inoperable. Profiles visible 👎 but not removeable 👍

New Contributor III

Seems like he behavior is mainly for devices that were user enrolled and not DEP enrolled. Devices that are User enrolled, the option to remove the MDM management profile is not greyed out. going to have to keep the MacOS Ventura upgrade restriction until this is fixed. 

Contributor II

in some cases if you block the profiles pane, profiles don't install. this could affect profiles that you are trying to deploy

Valued Contributor II

This is by design from Apple.  In order to be more open about what settings are being applied to a device Apple has removed the ability to restrict access to the Profiles Menu.  The only way to lock down your MDM Profile is to mark it as not removable within your Pre-Stage Enrollment.  

Its recommended if you don't want users to install profiles they download you can use the following 



Honored Contributor II

Apple disallowed this with Ventura. Not being able to restrict System Settings > Profiles is working as intended.