#### Is it expected for a retail purchased, non-provisioned devices configured with AMFI (Apple Mobile File Integrity) developer mode force enabled? I recently bought two MacBooks with AppleCare+ through Apple retail channels that are AMFI developer mode force enabled. I didn't purchase the MacBooks with business or developer accounts. #### Machine 1 A MacBook Pro from Apple.com as a certified refurbished unit (the one mentioned above) for store pickup. After strange mdm type behavior (wifi settings etc. changing without my involvement and what appear to be mdm related network calls) I took it the Genius bar and Apple performed the following actions: - Fresh MacOS install - DFU restore - Logic board replacement Developer mode force enabled persisted on the machine after each of the steps above. In MacOS, are AMFI developer mode force enabled and developer mode managed through devtoolssecurity different settings? Under what circumstances, if any, would you expect AMFI developer mode force enabled with a fresh retail MacBook? ##### Key Differences Summarized | | AMFI Developer Mode "Force Enabled" | Developer Mode via devtoolssecurity / System Settings | | - | ----- | ----- | | **Purpose** | Relaxes core code signature validation for running unsigned/self-signed code at a lower system level. | Allows admin or _developers group users to run Apple-signed debugging and performance analysis tools without a password; allows Xcode to run apps on devices. | | **Control Level** | Deeper system-level setting, often requiring more intrusive modifications or specific provisioning. | User-facing setting, designed to be easily toggled by administrators or developers. | | **Security Impact** | Significantly reduces the overall security posture of the system by relaxing fundamental code integrity checks. | Offers a controlled relaxation of security for development tools, with explicit user consent. | | **Visibility** | Often discovered through system logs (log show --predicate 'eventMessage CONTAINS "AMFI"') or specific diagnostic tools. | Clearly visible and manageable in System Settings > Privacy & Security and via devtoolssecurity command. | | **Control** | Modifying AMFI developer mode force enabled settings on macOS is not part of standard user configuration — it involves low-level system changes that can compromise security and are typically reserved for Apple internal use, MDM provisioning, or advanced development scenarios. | DevToolsSecurity -enable | > "AMFI developer mode force enabled" implies a more profound and potentially less secure state where the system's fundamental code integrity checks are bypassed for development, while the "Developer Mode" controlled by devtoolssecurity is a more granular and user-controlled setting designed for everyday development tasks with Apple's tools.

I’m new to working with Macbooks and need to quickly provision one for a contractor. I need to setup MDM (something like Jamf or Mosyle) on the device. But I don’t have an Apple Business Manager account and won’t be getting one (it’s just one laptop I’m provisioning). From my reading, it seems like the way to do MDM without ABM on a Macbook is as follows: 1. Create an admin account on the Macbook 2. Add the MDM to the Macbook using the admin account 3. Setup the user as a standard user account and manage it with the MDM 4. Never give the user the login for the admin account Am I correct that this is the best way to add and enforce MDM on the device without an ABM account? My understanding is that this method still allows the user to perform a full reset of the device and then do what they want with it. But if they don’t reset the device, is their ability to circumvent the MDM blocked? Any pointers for this situation would be greatly appreciated.

I’m having recurring issues with Screen Time on my daughter’s iPhone (running iOS 18), and I would appreciate any help in closing the loopholes she’s found. She has discovered two reliable ways to bypass the daily Screen Time limits I’ve set up: 1. Changing the region of the device — When she switches to another region in Settings > General > Language & Region, the Screen Time usage stats and limits appear to reset or be disabled temporarily. This effectively gives her a fresh start on screen time. 2. Restarting the iPhone — After restarting the device, Screen Time limits stop working for the rest of the day. It’s as if the usage clock or restrictions aren’t reapplying until the next day, or perhaps not at all. I’ve already taken the following steps: - Set up Screen Time using Family Sharing, with a passcode only I know. - Enabled “Block at End of Limit” for all apps I want restricted. - Turned on “Set Automatically” under Date & Time and tried to restrict changes via Content & Privacy Restrictions — though I can’t find a way to lock region or fully restrict this setting in iOS 18. - The phone is up to date and not jailbroken. Questions: * Is there a way to lock or restrict region changes on an iPhone? * Has anyone found a workaround to prevent Screen Time from breaking after a reboot? * Is there a more robust way (via MDM, profiles, etc.) to prevent these loopholes from being exploited?

I'd like to put my Apple hardware UUIDs into a database, and I wonder if they are always in the standard UUID format. For example: `b5e2cf01-8bb6-4fcd-ad88-0efb611195da ` Is there an Apple device in the last 10 years that has a non-standard hi-mom hardware UUID? What about an upcoming device?

Is there any way to start the process of migrating from Android to iPhone using the iOS app (com.apple.movetoios) from scratch, after I made a mistake during a previous attempt? The process of moving from Android to Apple is strange, poorly documented and time-consuming. I made a mistake during the step where on the Android device, using the iOS app, I had to select many rows of data to transfer. I did not see that I had to scroll for more rows, I was excited that after many attempts Apple finally presented the 'transfer screen' and I wanted to move on before any of the 3 devices necessary during the process went back to sleep or ran out of power. As a result, only part of the personal data from Android was transferred to the iPhone. I wiped to iPhone yet again, to try and fix it, but now Apple installed the iPhone with the partial data that was already tied to the iCloud account. The problem is, I used a real name to create the iCloud account and it's my child's account. If I make a new iCloud account it will always be the Childsname Lastname_1 account. (but maybe that is the price to pay)

Every time Apple releases new iOS software, it's a bit of a rush to get things downloaded and the servers can be slow in delivering the bits. I would like to know where the Apple Configurator Version 1.2.1 (169) stores downloaded iOS software so I could transfer the files from iTunes or another computer so I can have several machines grab one each of the builds and then distribute them to avoid having each machine have to re-download all images each time. Can I move IPSW in to or out of Apple Configurator rather than having it control the downloads from Apple for iOS software?

It's my personal parent control issue. I have an iPhone and MacBook which has screen time. My kid can bypass it * By spamming unlock it seems that there is a way to prolong extra time endlessly! * By doing factory reset kid simply can resign to new appleid to device without problem! The answer is, the Mobile Device Management for iPhone and proprietary company lock for apple laptops provided for companies. How can I have this for family causes?

I followed all the steps mentioned in Link and also watched the Apple developer video to understand the required JSON structure. **Problem:** However, I am still encountering the error "*Sign-in Failed: Your Apple ID does not support the expected services on this device*" while trying to sign in to a work or school account from my personal iPhone to test Apple account driven user enrollment. **Cross Checked:** 1. I ensured the domain name used is federated in Apple Business Manager, and accounts with this domain name can sign in to ABM as staff. Although ABM does not allow initial sign-in, it does recognize the account. 2. I am using Microsoft Intune to enroll any iOS device to access company resources and have followed MS recommendation mentioned in thislink 3. Currently, the device is not enrolled. When I attempt to enroll, I expect to see a log on the server side where the well-known file is hosted, but there is no trace of it. However, when I manually access the well-known endpoint via a browser or using curl, I receive an HTTP 200 response, and the content-type shows 'application/json', which confirms the server is responding properly. curl -I https://contoso.com/.well-known/com.apple.remotemanagement.json This is the response I get when I ran the above command from Terminal "HTTP/2 200 content-type: application/json content-length: 172 date: Mon, 29 Apr 2024 09:18:21 GMT" So, as you can above I have examined the well-known file hosted, seems to be responding as expected, and I think the issue lies on something is not correct while Apple tries to access this well-known endpoint and I have no clue at this point. Therefore, if you have faced the same issue in the past and solved it please shed some light here.

I need to configure a bunch of iPads with the same settings. For instance, volume level, auto-lock, side-button, timezone and light level. Currently I'm doing this manually on each iPad through the Settings app in the device. This is both tedious and error-prone... I'm thinking it should be possible to create a master settings file or image file (or something) with the correct settings which could then be loaded on to each device. Is that possible? **Background:** We need deliver iPads preconfigured with our "kiosk" app for customers to place in their office/retail locations. For instance, disabling auto-lock is crucial here. Currently I have some 20-30 iPads that needs to be configured the same way.

I configured a bunch of iPads at my previous job, and I had to do it one at a time. Granted, there were only like 6 of them, but I am wondering what I would do if I needed to configure a whole bunch of iDevices. I know at the Apple Store they apply updates on a bunch of them without taking them out of the package, so there must be some sort of way to do this.

I bought the Apple Watch 9 not knowing that it cannot run on my iPhone 8 Plus. I am trying to make a save! I signed up for iOS 17 developer beta and got it installed, but it is not running. My software update window still shows iOS 16.7.2. I have watched the videos I can find, and I follow the steps, but I must be missing something. Does anyone have any experience or resources that could help me get the iOS 17 Developer software running? Or any other workarounds for the Apple Watch 9?

I have an 1st generation iPad Pro 11 with a broken screen with no video image and unresponsive to touching. I would like to run some hardware diagnostics on it before committing to replacing the screen. So far, I've managed to successfully clean and reinstall iPadOS 14.2 by tethering it to my MacBook Pro using a USB cable. I'm able to see the initial iOS setup screen via QuickTime, but can't proceed any further without a functioning touch screen. Is there an alternative input device I can use? Also, is there any diagnostic mode or software utility available for testing the device's hardware?

I have an old Macbook Pro that was previously managed by Mosyle. I’ve tried to remove it by 1) Erase Content & Settings and 2) reinstalling the OS however upon the first start up after the reinstall, I’m greeted by a Remote Management configuration window. How can I fully remove this software? It’s worth noting that I cannot access anything outside of the first few initial set up screens. Thanks!

I am trying to solve the following ask: Shared iphones within a healthcare setting, ipads are not an option. They need these phones to scan QR codes and open a website that allows the nurses to fill out surveys, but they don't want any website data saved. They also cannot have access to the camera app or photos since its again healthcare and you don't want patient photos ending up on there by mistake. I can solve for almost all of their asks on this using the hidden code scanner app, tested a fully supervised device and it worked great. My issue is just trying to make access easier to the code scanner app outside of being able to add it to the control center, really would like to just have a shortcut or something on the main home screen they can click on to open it. I just cannot land on a way to get this done, maybe its not even possible due to how the app is hidden by apple? workspace one is the mdm btw

I have this weirdest problem for MacOS BigSur version 11.1. I want to change the screen saver "Start after:" parameter to 1 minute. But every time I quit and reopen the System Preferences I see it defaults back to 20 Minutes as in the picture below. (It is like the 1990's jokes of forgetting to "save" before leaving the window.) I have a suspicion about a zombie profile can be causing this because the computer used to be managed by an MDM profile of a company that I worked for, for a while. But after my project is finished, we removed all profiles. (My suspicion is, still there may be something left that prevents modifying such System Preferences data.) I don't want to reinstall the whole system only for this silly problem, but still it is extremely annoying considering every time I leave my computer in the wild, when I come back I find it as vulnerable as a gazelle roaming in lions territory. That's why any comments / suggestions are welcome. PS: Following command, even though it does not give error, can not modify the value either:

sudo defaults -currentHost write com.apple.screensaver idleTime -int 60

### My question How can I disable the YouTube Kids autoplay feature — on iOS, on MacOS, or on any other platform? Please assume: * I own a non-jailbroken iPhone. * I have administrator rights on my computer. * I can freely install any desktop browsers, mobile browsers, extensions, and/or [userscripts](https://en.wikipedia.org/wiki/Userscript) that you want me to install. * I can also install uBlock Origin on my computer, and can create any custom element-hiding or script-blocking rules that you suggest. ### Background to my question "YouTube Kids" is YouTube's official interface for kids 12 and under. It isn't 100% safe for kids, but it's still cleaner than regular YouTube. Children can watch YouTube Kids through [the iOS app](https://apps.apple.com/us/app/youtube-kids/id936971630) , through the Android app, or directly on [the website](https://www.youtubekids.com/) . It looks like autoplay is always on, and there's no way to shut it off. This means that, after one video finishes, the next one starts automatically. I think this is a suboptimal design, especially for kids. Various sources [suggest](https://offspring.lifehacker.com/turn-off-autoplay-on-your-kids-tv-shows-1822738108) that autoplay makes the service more addictive and mind-numbing. I've looked in the parental settings and the kids' settings, and have found no way to disable autoplay. There's a "timer" feature which lets you schedule the app to stop working in a configurable number of minutes from now (e.g. 30 minutes), but setting a timer is not the same as simply disabling autoplay. [This article](https://www.lifewire.com/video-streaming-apps-just-for-kids-3486111) indirectly implies that, on iOS, it may be possible to disable autoplay. But maybe that article is outdated and it's impossible nowadays. ### Edit I've made [a Reddit post](https://www.reddit.com/r/uBlockOrigin/comments/iiemd9/youtube_kids_is_safer_than_regular_youtube/) . The post asks about the idea of somehow using uBlock Origin to disable autoplay in the YouTube Kids web app. If that doesn't work, maybe I'll ask some userscripting community.

I have purchased a MacBook Pro a year ago and after upgrading to Sierra started to receive notifications from a company that owned a laptop before. I have tried contacting Apple Service and the actual company, no luck so far. I have learned that I need to find two files: /System/Library/LaunchAgents/com.apple.ManagedClientAgent.enrollagent.plist /System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist But I can't move them (and even create folders where they can be moved): /Library/LaunchAgentsDisabled and /Library/LaunchDaemonsDisabled Can anyone please help how I can turn off device enrollment notifications?

The following situation this morning on my MacBook Pro 16-inch 2021 running Monterey 12.5.1: hundreds of kernel extensions were waiting for allowing to be installed. Am running BlockBlock, set to ask for permission to install kernel extensions. All of them were from com.apple.MobileSoftwareUpdate.UpdateBrainService. Did do a search on that, the few results pertained iPhone updates. Which begs my question: what are all these kernel extensions for on my laptop?

I enrolled my private MBP with my employer's Intune Company Portal and got access to company resources. Now they changed the policy and private MacBooks are no longer allowed to be be enrolled. That wasn't a problem for me since my old MBP is already enrolled and worked fine, but now I've decided to replace it. Is there any possibility to transfer data to a new Mac including all of the enrolment profiles and certificates so it just continues working like if it was the "old" one?

We are trying to publish an app for our own organization. Initially we submitted to app store review. It got rejected, because app designed for specific organizations. So we look the other options, 1. Apple business manager - it need managed apple id 2. Apple enterprise account - it also needs to manage apple id My understanding, **managed apple id** means it belongs to organization, we can't use it with our private device. Is it right? We want to install this to their private devices and private apple account. What's the best choice for this case? Feel free to give your own suggestion! Thanks!