Ever want to NOT be monitored or get past the controls that are keeping you out o
Disabling MDM Profiles MacOS
Introduction:
Here is a "run book" that will inform individuals on how to bypass security controls on your "managed" Mac Laptop or Desktop. This works for both the Intel and M1 Mac's.
There are many posts about this already however; I do believe this information should be transparent and easy to understand in order for the companies to finally fix issues that are known for both individual privacy and eavesdropping concerns. The ease to bypass security controls allows for many bad things to happen from both the end users or the companies who are attempting to control their endpoints.
NOTE: Look up the word "ETHICS" and do not be a jerk or use this for EVIL reasons. This also may violate company policies in your organization so if you so choose to try this out do so with caution.
I do not accept any liability for what you do with this. This is for informational purposes only!
Common words that will help a NOOB out!
Privileges
| nounplural noun: privileges a special right, advantage, or immunity granted or available only to a particular person or group. "education is a right, not a privilege" |
Administrator Access
| A user account that allows one to make changes to the Local System in order to bend your computer to your will. |
Local Access
| The ability to have the computer in front of you with, turned on and the ability to login to it. |
Nutshell | nutshell noun nut·shell ˈnət-ˌshel 1:the hard external covering in which the kernel of a nut is enclosed 2: something of small size, amount, or scope |
Terminal | The thing that you type "commands" or words that do things into |
MDM
| Mobile device Management that allows companies and schools to monitor, allow access or deny access to things that they do not want you to do, see or interact with. Cloaked as Security and Privacy controls. |
JAMF
| A software framework that enables the MDM Administrators from a virtual location manage and, enable or disable your computer. |
Framework | framework noun frame·work ˈfrām-ˌwərk 1 a: a basic conceptional structure (as of ideas)the framework of the U.S. ConstitutionThese influences threaten the very framework of our society.b: a skeletal, openwork, or structural frameAn iron framework surrounds the sculpture. |
JAMF and MDM in a Nutshell
JAMF is a software framework that allows your computer to be managed by a "third-party" which is USUALLY the company that you work for or the school that provided the computer to you.
Things that you need to have available, know or do before you start
Also known as: "Prerequisites"
Have
Local Administrator privileges WITH the Username and password
The ability to open a "Terminal" window
Local Access to your Mac for either Intel or M1 based MacOS managed computers
Know
How to follow directions on this page
DO
Get them jamf profiles off your system
Into the System
Enter system recovery mode:
M1 Mac: Power on your mac and hold down the power button until it boots into the system recovery portal
Intel Mac: Power on your mac and hold down the "command" + "R" buttons until you enter the system recovery portal
Click on "Options" icon and login with your account with admin privileges
Click Utilities Menu button at the top of the screen
Select and Open the terminal
Type in the command:
csrutils disable Restarting and Removing the Profiles
Click on the Apple Menu icon and click restart
after the computer restarts login with your usual account
Click on the Apple Menu icon and click on "System Preferences"
Click on "Security and Privacy"
Click on the "padlock" on the bottom Left of the window
Enter your admin user credentials
Click on the "Privacy" button
Click on the "Developer Tools" Icon on the Left hand panel
Select the "Terminal" icon and save your changes
Open the terminal and type
'sudo -i' ( press enter and then type in your admin password when prompted)
'rm -r /var/db/ConfigurationProfiles' (press enter)Verify and get the security protection re-enabled
Restart your computer
Verify that the Profiles Icon is GONE!
Once confirmed then go back into the system restore and re-enable "csrutils" and then restart your system again with the bellow command and by using the same clickie methods above :D
csrutils enable (press enter)Hope this helps. And if there is any clarity that I can provide please reach out to me at PANDA [AT] SLothPandas DOT COM
Comments