![]() ![]() Of course I could include these in my new config profile so that it includes all three. ![]() Then I loose the disabling of iCloud and Profiles. So if I were to push a new configuration profile to my special machines requesting that the Bluetooth preference pane by disabled ie. ![]() So if you are managing a `` which in this case is `DisabledPreferencePanes` then the newer configuration profile takes over. Unfortunately Configuration Profiles don’t do this kind of compositing. In the old days of MCX and Workgroup Manager, I would simply apply another MCX setting to these machines at a group level or computer level, MCX on the client would then composite all these settings and apply all of the valid payloads to make one big honking MCX payload. ![]() But sometimes I have some “special” machines that require even further lockdown. Usually installing that profile on your machines is enough. Its pretty trivial to do this with a configuration profile and using the following payload: DisabledPreferencePanesĬom. When managing systems, there is often a need or desire to disable certain system preference panes to avoid users making configuration errors or enabling services that we as admins would rather they didn’t.įor most of my environments in education with shared machines the big two preference panes that I disable are iCloud and Profiles. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |