Just updated a test Mac to MacOS Ventura and found that I am no longer able to restrict access to Profiles. I attempted to restrict access to Extensions and that is successful, but when I check mark Profiles, it does not grey out.
Wondering if this is now only available for DEP enrolled devices vs devices that are manually enrolled and not supervised.
Seems like he behavior is mainly for devices that were user enrolled and not DEP enrolled. Devices that are User enrolled, the option to remove the MDM management profile is not greyed out. going to have to keep the MacOS Ventura upgrade restriction until this is fixed.
This is by design from Apple. In order to be more open about what settings are being applied to a device Apple has removed the ability to restrict access to the Profiles Menu. The only way to lock down your MDM Profile is to mark it as not removable within your Pre-Stage Enrollment.
Its recommended if you don't want users to install profiles they download you can use the following