Ventura restricting preference panes

tdenton
Contributor

Afternoon jamf nation.

Just looking to get some insight, into how you are all dealing with restricting preference panes in macOS Ventura.

I have created a config profile with a few bits I want to restrict.

While most of it seems to work it's breaks the ability to remotely manage it via VNC.

I think it has something to do with what Apple have depricated when re designing system preferences. 

I have raised a call with Jamf, they have confirmed it is product issues but that's about all. We are moving to jamf cloud soon so hoping that will better experience.

 

5 REPLIES 5

AJPinto
Honored Contributor II

VNC is managed in two different Areas in JAMF. The sharing preference pane has not been updated yet, so that one is safe for now.

 

If you want to totally block VNC from being used, you want to uncheck the "Allow AirPlay, View Screen by Classroom, and Screen Sharing (macOS 10.14.4 or later, enrolled via a PreStage enrollment)" box. If your intent is to be able to enable Remote Desktop or VNC from JAMF, you need to leave this box checked. If this box is checked you can enable VNC, set the password then lock down the preference pane in the next example to block users from messing with things.

AJPinto_0-1679412061569.png

AJPinto_1-1679412159912.png

If you want to just block users from enabling VNC and Apple Remote Desktop, restrict Sharing.

AJPinto_3-1679412335929.png

 

AJPinto_2-1679412242858.png

 

 

tdenton
Contributor

Thanks @AJPinto   which version of Jamf pro are you using I assume its a cloud verison. I have diffirent settings for blocking the sharing section.

 

AJPinto
Honored Contributor II

On Prem 10.42.1.

 

In blocking System Preferences you just want to check (or uncheck depending if you are blocking or allowing the checked items) to block Sharing, the other options don’t matter. For the functionality bit, that was updated within the last year. If you JAMF instance is not current you may be missing the allow Remote Desktop check boxes. 

tdenton
Contributor

@AJPinto  it's started working again not really sure why.

As I had the settings your mentioned apart from the third one.

 Turn that on and off once I figured out what it did and it now seems ok.

 

AJPinto
Honored Contributor II

Never doubt the age old wisdom of turning it off and back on again. Sometimes keys just get mixed up, and need to be toggled. 

 

In the great words of Roy Trenneman.

AJPinto_1-1679598770790.png