Disable WiFi computer configuration profile

[rstasel]

Hi All,

Back in the MCX days, there was a way to disable wifi and bluetooth on computers via WGM. This was good for labs that were all hardwired, as it kept students from being silly, and turning on wifi.

Is there any way to do this with a configuration profile?

[easyedc]

We used this JAMF Script long ago when we were only deploying desktops, which I think worked.

[rstasel]

Definitely won't work with 10.11 and SIP. =/

Thanks for the suggestion!

[easyedc]

like I said, long ago :)

Can you do something like write a plist file with the network services turned off or disabled and make that a force profile? That's where my mind would go for something like this. It gives me a recoverable point if I do want to enable wifi.

[rstasel]

=D

Yeah, looks like:

networksetup -setairportpower Wi-Fi Off

then

networksetup -setnetworkserviceenabled Wi-Fi Off

That should do it. Thanks! I always forget networksetup is a thing.

[rstasel]

And grabbed the mobileconfig to disable wifi menu icon from this thread.

https://www.jamf.com/jamf-nation/discussions/21787/removing-wifi-menu-icon

Thanks!

[Torrens]

Hi Staze, I'm relatively new to this, is what you've put here with the..

networksetup -setairportpower Wi-Fi Off then
networksetup -setnetworkserviceenabled Wi-Fi Off

something you put in as a command line, or are you editing a plist file?

[rstasel]

Those are both "scripted" command line statements via a policy. There is no plist that'll do those. =/

[Torrens]

Fantastic, testing now.. Thank you.

[clrlmiller]

We've been using a script that was originally given to us and titled "Air Defense" from a few years ago. A bug just presented itself, so I'll see about posting it later.

EDIT: Okay, found the bug and fixed it. This seems to be working for both our older and newer systems with the USB-C ports. Feel free to edit, mangle, whatever.

https://github.com/ctmiller/Bridge-Block

-CTM