This way, the profiles pushed to your managed devices cannot be removed by the user.
Associate this DEP profile, if not already done, with your devices. Enable device supervision and uncheck Allow MDM Profile Removal. Navigate to Admin > Apple Business/School Manager > Apple DEP, select DEP Configuration Profiles and configure a new profile or modify your existing DEP profile. You can apply this setting in three steps – If you still want to prevent the user from removing your profiles or the MDM profile, you can restrict removing any managed profiles from the devices using the Prevent MDM profile removal options for supervised macOS devices enrolled via Apple DEP in Hexnode. The user will need to authorize the action by providing admin credentials. So, starting macOS 10.15, even if you apply ‘password lock’ to a policy, the user may remove the associated profiles by going to System Preferences > Profiles, selecting the profile and clicking on the – button. DELETE USER PROFILE ON MAC PASSWORD
macOS will prompt your for your password when moving the deleted. This will open a Finder window which should show you either the deleted user account or a folder called 'Deleted Users' which should contain the user account you want to remove.
The Ask for password when removing policy option for managed profiles is no longer supported from macOS 10.15. In Finder click on the 'Go' menu and type the following followed by pressing the 'Return' key. However, this option works on macOS version 10.15 and below. Hi you can use that option to restrict users from removing associated policies on your Mac by setting a passcode lock.
0 kommentar(er)
