Configuration profile to disallow account modification on macOS devices

Allowing the addition of Internet Accounts and Apple IDs not associated with the organization can pose risks and challenges to managed devices. By restricting account modifications, administrators can maintain control over the devices’ account settings, ensuring compliance with the organization’s policies.

Disallowing account modifications on macOS devices can be effectively achieved by using a custom configuration profile. This configuration profile, which can be deployed using Hexnode’s Deploy Custom Configuration feature, helps enforce security measures across all devices.

Disallow account modification on macOS devices

Here, allowAccountModification is the key that controls whether users can modify the Internet Accounts and Apple ID on a device. When allowAccountModification is set to false, it means that the ability to change, add, or remove Internet Accounts and Apple IDs is disabled on the device. If an account already exists, users can’t modify it.

What happens at the device end?

After deploying the configuration profile to the macOS device, the ability to add Internet Accounts on the device will be disabled. You can check this by accessing the Internet Accounts section in the System Settings of the Mac.

Likewise, the option to add an Apple ID will also be disabled. This can be confirmed by clicking on the Sign in with your Apple ID option within the System Settings.