Hi Team,
How To Disable the Apple ID on the MacOS devices? There is a restriction profile where I can do this in the ws1 cloud environment. But I couldn't see it in ten premise versions. I tried a few scripts for this but got "payload missing" errors. Is there any solution about this issue? In addition, a case has been opened on this subject.(SR:23394154701)
WS1 UEM Version: 2203/on premise
BR.
Hey,
What do you mean by "Disable the Apple ID on the macOS devices" ?
If you don't want to use iCloud or download any apps from the Apple App Store, just log out of the Account and that's it.
But that also means that you won't be able to install macOS updates given they're served as apps.
A suitable alternative would be to offer all of the apps that your users need either as VPP if available at the app store or through package distribution.
Cheers,
I guess you didn't understand what I want to do. Frankly, I can do this in the airwatch cloud version (ws1 version 2210). Users should not do this. I should be able to manage this process via airwatch. If you examine the picture I added, we need to restrict apple ID login. We can block the app store and icloud, we have no problem with this stage.
Indeed I'm not quite sure I understand fully your use case here but if you say you're able to have the profile as you want it from a SAAS environment, why not create it there and import it in your On Prem environment ?
Else, just add the delta between SAAS profile and OP Profile in custom settings for OP Profile for the command lines that rule this aspect ?
Our bank customer does not have the necessary country-based approvals to use the cloud environment. Therefore, bank customers cannot use the cloud. The structures of our bank customers are ten premise. If we can block the Apple ID login button with a script, I can test it. When I try the following script as "custom settings", "-106 Invalid profile: A payload in the profile is missing the “PayloadIdentifier” key.
I am getting the error.
The script I use: <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DisabledPreferencePanes</key>
<array>
<string>com.apple.preferences.AppleIDPrefPane</string>
</array>
</dict>
</plist>
MacOS Version : Version 12: "Monterey
Seems the payload identifier and payload type are missing ?
Payload Type
com.apple.systempreferences
https://developer.apple.com/documentation/devicemanagement/systempreferences
Payload Identifier
https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf
Actually, I got the payload IDs from the site you sent. I encountered the error in my previous answer.
I tried this way but still got the error.
The script I use: <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>DisabledPreferencePanes</key>
<array>
<string>com.apple.preferences.AppleIDPrefPane, com.apple.preferences.appstore</string>
</array>
</dict>
</plist>
I had it disabled on all of my devices, but once I upgraded to Ventura it is now asking all of my "generic" users to sign in. I can't find anywhere in Workspace one to disable it. Have you found a solution?
As a result of the case I opened to vmware teams, I wrote a script about this issue and I can share it with those who want to solve my problem.
Hello.
I have the same problem. Please, can you send your script?
One of the updates in Ventura fixed this. I haven't seen the problem lately.
The profile doesn't even apply.I really need another script. MacOS Version : Version 13.2: "Ventura"
Hello sorry for delay..
You can use the script below.
<dict>
<key>DisabledPreferencePanes</key>
<array>
<string>com.apple.preferences.icloud</string>
<string>com.apple.preferences.AppleIDPrefPane</string>
</array>
<key>RestrictSystemPreferences</key>
<true />
<key>PayloadDisplayName</key>
<string>Preferences</string>
<key>PayloadDescription</key>
<string>Preference.Plural</string>
<key>PayloadOrganization</key>
<string></string>
<key>PayloadType</key>
<string>com.apple.systempreferences</string>
<key>PayloadUUID</key>
<string>f66f9e60-52b3-4948-9f35-ef82da9d3aae</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PayloadIdentifier</key>
<string>7a2ce9c1-c099-4526-8d44-2f677ec61f3c.Preferences</string>
</dict>
Works.You're a genius.