os_mdm_require.yaml needs to be updated for macOS 11 #301

New Issue

michael · 2026-01-19T18:29:59Z

michael commented

2026-01-19 18:29:59 +00:00

Originally created by @golbiga on GitHub.

/usr/bin/profiles status -type enrollment | /usr/bin/awk -F': ' 'END{print $2}' | /usr/bin/grep -c "Yes" will not work in macOS 11.

The output of /usr/bin/profiles status -type enrollment is:
Enrolled via DEP: Yes
MDM enrollment: Yes (User Approved)
MDM server: https://MDMSERVER:8443/mdm/ServerURL

The check should be updated to:
/usr/bin/profiles status -type enrollment | /usr/bin/awk -F: '/MDM enrollment/ {print $2}' | /usr/bin/grep -c "Yes (User Approved)"

This could also be used for Catalina if we want to go back.

Originally created by @golbiga on GitHub. `/usr/bin/profiles status -type enrollment | /usr/bin/awk -F': ' 'END{print $2}' | /usr/bin/grep -c "Yes" `will not work in macOS 11. The output of /usr/bin/profiles status -type enrollment is: Enrolled via DEP: Yes MDM enrollment: Yes (User Approved) MDM server: https://MDMSERVER:8443/mdm/ServerURL The check should be updated to: `/usr/bin/profiles status -type enrollment | /usr/bin/awk -F: '/MDM enrollment/ {print $2}' | /usr/bin/grep -c "Yes (User Approved)"` This could also be used for Catalina if we want to go back.

michael closed this issue

2026-01-19 18:29:59 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: usnistgov/macos_security#301