smashism

#!/bin/bash

# Extension attribute to see if a local user account is mdm enabled.
# Based on https://derflounder.wordpress.com/2025/04/04/identifying-mdm-managed-user-accounts-on-macos-sequoia/, thanks Rich.
# ekw 2025-10-16

# Get the GUID of the managed local user account
MDMManagedUserGUID=$(/usr/sbin/system_profiler SPConfigurationProfileDataType | grep "Managed User" | sed -E 's/.* ([0-9A-F-]{36}) .*/\1/')

# Find the username of the mdm enabled user account based on GUID

smashism

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>AutoOpenAppAtLogin</key>
	<false/>
	<key>Appearance</key>
	<dict>
		<key>ShowWelcomeWindow</key>
		<false/>

smashism

<!-- Notes about this config (remove this section before using) -->
<!-- Example plists are available at https://github.com/jamf/Setup-Manager/blob/main/ConfigurationProfile.md -->
<!-- This is simply what I configured for the JNUC demo video -->
<!-- Proceed with caution, you should start with an example plist and modify to your organizational requirements before using -->
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>enrollmentActions</key>
	<array>

smashism

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>SkipSetupItems</key>
        <array>
            <string>Intelligence</string>
        </array>
</dict>
</plist>

smashism

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDisplayName</key>
			<string>Restrictions Payload</string>
			<key>PayloadIdentifier</key>

smashism

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>allowExternalIntelligenceIntegrations</key>
        <false/>
        <key>allowExternalIntelligenceIntegrationsSignIn</key>
        <false/>
</dict>
</plist>

smashism

#!/bin/bash
# determine if current user has opted-in for Generative Assistant settings for Apple Intelligence & Siri on macOS 15.2 or later
# ekw 2024-10-24
# built at time of macOS 15.2 beta 1
currentUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' )
# global check if there is a user logged in
if [ -z "$currentUser" -o "$currentUser" = "loginwindow" ]; then
  echo "no user logged in, cannot proceed"
  exit 1
fi

smashism

#!/bin/bash

appName="$4"

# Kill the app, if running
echo "Killing $appName app process"
killall "$appName"

exit 0

smashism

#!/bin/bash

# determine if current user has opted-in for Apple Intelligence on macOS 15.1 or later
# ekw 2024-08-07
# built at time of macOS 15.1 beta 1
# disclaimer: forward-looking statement… this may not work forever, and likely won't be needed long-term as
#             MDM vendors prepare for macOS 15 support.
#             this EA for jamf pro is provided as-is with no warranty (express or implied). please test!

currentUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' )

smashism

#!/bin/bash

##########
#       title:  unmanage-devices-modern-auth.sh
#      author:  dr. k | @smashism on github
#        date:  2024-03-28
#        note:  include jssIDs where specified, other server/cred details will
#               prompt when run via terminal.app
#  disclaimer:  provided as-is with no warranty (express or implied). please test!
#