Customize the System Features on your Mac
Set up a new profile on the Mac with limited access to specific apps and content.
Within your profile, there are several settings that we strongly recommend enabling. These settings will help you by disabling different features that can enable bypass.
Disable Guest Mode Accounts on Your Mac
Guest mode is a common bypass technique, so it should be disabled using the MDM.
Disable Users & Groups on Your Mac
Although Mobile Device Management settings apply to all user accounts, it's recommended that you restrict the ability to create new user accounts.
After you distribute this profile, you'll notice the Users & Groups section in System Preferences is greyed out.
If you try to navigate to Users & Groups from the search bar you'll get an error.
Disable Profiles on Your Mac
Within the first 30 days of managing a device, the profiles panel will allow you to remove the initial MDM profile to revoke device management. If you want to prevent this, add Profiles
to the Disabled Preference Panes
table in iMazing > System Preferences > Disabled
.
Next Up
Enable built-in Content Filtering on Mac:
Enable Built-in Content Filtering
Enable Built-in Content Filtering
Enforce Screen Time on your Managed Mac to add another layer of filtering.