Intune – macOS – System Preference Restriction

if you are deploying mac book using Intune then this post would help you setting up system preference restriction. Currently, in Intune there is no way to set this type of restriction.

To know list of disabled System Preferences panes, check out apple developers link

add system preferences either under disabled or enabled preference panes

<key>DisabledPreferencePanes</key>

<key>EnablePreferencePanes</key>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EditorSettings</key>
<dict>
<key>DisableOptionalKeys</key>
<true/>
<key>DistributionMethod</key>
<string>Any</string>
<key>PayloadContentStyle</key>
<string>Profile</string>
<key>PlatformIOS</key>
<true/>
<key>PlatformMacOS</key>
<true/>
<key>PlatformTvOS</key>
<true/>
<key>ScopeSystem</key>
<true/>
<key>ScopeSystemManaged</key>
<true/>
<key>ScopeUser</key>
<true/>
<key>ScopeUserManaged</key>
<true/>
<key>ShowCustomizedKeys</key>
<true/>
<key>ShowDisabledKeys</key>
<true/>
<key>ShowHiddenKeys</key>
<false/>
<key>ShowSupervisedKeys</key>
<true/>
<key>ShowUserApprovedKeys</key>
<true/>
<key>SignProfile</key>
<false/>
</dict>
<key>PFCConfVersion</key>
<integer>1</integer>
<key>PayloadSettings</key>
<dict>
<key>manifestsApple</key>
<dict>
<key>com.apple.systempreferences</key>
<array>
<dict>
<key>DisabledPreferencePanes</key>
<array>
<string>com.apple.preferences.FamilySharingPrefPane</string>
<string>com.apple.preferences.internetaccounts</string>
<string>com.apple.preferences.parentalcontrols</string>
<string>com.apple.prefpanel.fibrechannel</string>
<string>com.apple.ClassroomSettings</string>
<string>com.apple.Xsan</string>
<string>com.apple.preferences.sharing</string>
<string>com.apple.preferences.icloud</string>
</array>
<key>EnabledPreferencePanes</key>
<array>
<string>com.apple.preference.universalaccess</string>
<string>com.apple.preferences.Bluetooth</string>
<string>com.apple.preference.datetime</string>
<string>com.apple.preference.dock</string>
<string>com.apple.preference.keyboard</string>
<string>com.apple.preference.internet</string>
<string>com.apple.preference.notifications</string>
<string>com.apple.preferences.softwareupdate</string>
<string>com.apple.preference.startupdisk</string>
<string>com.apple.preference.trackpad</string>
<string>com.apple.preferences.appstore</string>
<string>com.apple.preference.digihub.discs</string>
<string>com.apple.preference.desktopscreeneffect</string>
<string>com.apple.preference.energysaver</string>
<string>com.apple.preference.ink</string>
<string>com.apple.Localization</string>
<string>com.apple.preference.mouse</string>
<string>com.apple.preference.screentime</string>
<string>com.apple.preference.sidecar</string>
<string>com.apple.preference.sound</string>
<string>com.apple.prefs.backup</string>
<string>com.apple.preferences.users</string>
<string>com.apple.preferences.AppleIDPrefPane</string>
<string>com.apple.preference.displays</string>
<string>com.apple.preferences.extensions</string>
<string>com.apple.preference.general</string>
<string>com.apple.preference.expose</string>
<string>com.apple.preference.network</string>
<string>com.apple.preference.printfax</string>
<string>com.apple.preference.speech</string>
<string>com.apple.preference.security</string>
<string>com.apple.preference.spotlight</string>
<string>com.apple.preferences.password</string>
<string>com.apple.preferences.wallet</string>
</array>
<key>HiddenPreferencePanes</key>
<array>
<string>com.apple.preferences.configurationprofiles</string>
</array>
<key>PFC_SegmentedControl_0</key>
<string>Enabled</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>com.github.erikberglund.ProfileCreator.1ACA4B6F-42CC-43BA-BAE7-CBE0AA2D884A.com.apple.systempreferences.2347BD5B-FEE2-4DCB-BAC5-33DD68196F51</string>
<key>PayloadUUID</key>
<string>2347BD5B-FEE2-4DCB-BAC5-33DD68196F51</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</array>
</dict>
</dict>
<key>ProfileSettings</key>
<dict>
<key>PayloadDescription</key>
<string>System Preference Pane</string>
<key>PayloadDisplayName</key>
<string>System Preference Pane</string>
<key>PayloadIdentifier</key>
<string>com.github.erikberglund.ProfileCreator.1ACA4B6F-42CC-43BA-BAE7-CBE0AA2D884A</string>
<key>PayloadOrganization</key>
<string>AzureEssentials</string>
<key>PayloadRemovalDisallowed</key>
<true/>
<key>PayloadScope</key>
<string>user</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>1ACA4B6F-42CC-43BA-BAE7-CBE0AA2D884A</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<key>ViewSettings</key>
<dict>
<key>manifestsApple</key>
<dict>
<key>Configuration</key>
<array>
<dict>
<key>PayloadDescription</key>
<dict>
<key>Enabled</key>
<false/>
</dict>
<key>PayloadOrganization</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>PayloadRemovalDisallowed</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>PayloadScope</key>
<dict>
<key>Enabled</key>
<false/>
</dict>
</dict>
</array>
<key>com.apple.systempreferences</key>
<array>
<dict>
<key>DisabledPreferencePanes</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>EnabledPreferencePanes</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
<key>HiddenPreferencePanes</key>
<dict>
<key>Enabled</key>
<true/>
</dict>
</dict>
</array>
</dict>
</dict>
</dict>
</plist>

The above profile can be added in Intune under device configuration as custom profile.

Published by sujithcy

Resourceful IT Professional consistently responds to a wide range of technical challenges with a specific focus on Azure Cloud and Office 365. Provide technical solutions, performance optimization, and technical improvements with a good understanding of the latest cutting-edge technologies and creative approach.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: