This control hides the Profiles section of System Settings on managed Macs. Use it so employees cannot see or remove the MDM profiles on their device.
Feature/Functionality
Overview
| macOS | Windows | Linux | iOS / iPadOS | Android |
|---|---|---|---|---|
| ✅ |
Factorial IT sends an MDM restriction that takes the Profiles entry out of System Settings. Employees can no longer open that section, look at the installed profiles or try to delete them.
The restriction only affects what the employee sees on the Mac. IT admins still see and manage profiles from Devices, on the device details page.
How to use
- Go to MDM > Controls > Add new control and choose Lock MDM profiles pane.
- There is nothing else to configure. Choose where the control applies: all macOS devices, specific device groups, or a custom target.
Change or switch off the control
Open the control from MDM > Controls to edit or disable it. Disabling stops enforcement. Settings already applied stay on the devices.
Tips and Best Practices
- Turn it on for every Mac. With no settings to fill in, it is a quick way to stop employees removing management.
- Manage profiles from the console. Hiding the pane on the Mac does not change what you can do from Devices.
- Remember that disabling does not clean up. Devices keep the restriction they already received after you switch the control off.
Troubleshooting and FAQ
Troubleshooting
- The Profiles section still appears on a Mac. Check that the Mac is online and included in the control's targeting.
- The Profiles section is still hidden after you disabled the control. This is expected. Disabling does not remove configurations already on the device.
FAQ
-
Does this control need any settings?
No. You only choose which devices it applies to.
-
Can I still see the profiles on a device?
Yes. Open the device from Devices. The restriction only hides the pane on the Mac.
-
Which platforms does it support?
macOS only.