{"id":5395,"date":"2023-03-14T08:29:00","date_gmt":"2023-03-14T00:29:00","guid":{"rendered":"https:\/\/ixyzero.com\/blog\/?p=5395"},"modified":"2023-03-10T23:41:20","modified_gmt":"2023-03-10T15:41:20","slug":"macos%e4%b8%8a%e7%9a%84%e9%85%8d%e7%bd%ae%e6%8f%8f%e8%bf%b0%e6%96%87%e4%bb%b6","status":"publish","type":"post","link":"https:\/\/ixyzero.com\/blog\/archives\/5395.html","title":{"rendered":"macOS\u4e0a\u7684\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6"},"content":{"rendered":"\n<p>=Start=<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">\u7f18\u7531\uff1a<\/h4>\n\n\n\n<p>macOS\u7cfb\u7edf\u7684\u9690\u79c1\u548c\u6743\u9650\u63a7\u5236\u505a\u7684\u5176\u5b9e\u8fd8\u662f\u53ef\u4ee5\u7684\uff0c\u628a\u7edd\u5927\u591a\u6570\u654f\u611f\u64cd\u4f5c\u7684\u6388\u6743\u90fd\u4ea4\u7ed9\u4e86\u7ec8\u7aef\u7528\u6237\u8fdb\u884c\u5904\u7f6e\u3002\u4f46\u662f\u5bf9\u4e8e\u4f01\u4e1a\u5b89\u5168\u6765\u8bf4\uff0c\u524d\u9762\u6240\u8bf4\u7684\u8fd9\u4e2a\u5b89\u5168\u9690\u79c1\u7279\u6027\u53c8\u662f\u5b58\u5728\u5f88\u9ad8\u98ce\u9669\u7684\uff0c\u6bd4\u5982\u516c\u53f8\u914d\u53d1\u7684\u529e\u516c\u7535\u8111\u4e0a\u5b89\u88c5\u7684\u6740\u6bd2\u8f6f\u4ef6\u6216\u8005\u6570\u636e\u9632\u6cc4\u6f0f\u8f6f\u4ef6\u5982\u679c\u6ca1\u6709\u5b8c\u5168\u78c1\u76d8\u8bbf\u95ee\u6743\u9650\uff0c\u5219\u65e0\u6cd5\u8fdb\u884c\u6709\u6548\u7684\u626b\u63cf\uff0c\u4ece\u800c\u65e0\u6cd5\u53d1\u73b0\u548c\u8986\u76d6\u76f8\u5173\u5b89\u5168\u98ce\u9669\uff0c\u5b58\u5728\u5f88\u5927\u7684\u5b89\u5168\u9690\u60a3\u3002\u5bf9\u4e8e\u8fd9\u79cd\u60c5\u51b5Apple\u63d0\u4f9b\u4e86\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u6765\u63a7\u5236\u548c\u8bbe\u7f6e\u7cfb\u7edf\u548c\u5e94\u7528\u7684\u884c\u4e3a\uff0c\u4e0eWindows\u4e2d\u7684\u7ec4\u7b56\u7565\u529f\u80fd\u7c7b\u4f3c\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">\u6b63\u6587\uff1a<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">\u53c2\u8003\u89e3\u7b54\uff1a<\/h5>\n\n\n\n<h5 class=\"wp-block-heading\">\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u662f\u4ec0\u4e48\uff1f<\/h5>\n\n\n\n<p><strong>\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u662f\u4e00\u4e2a XML \u6587\u4ef6\uff08\u4ee5 .mobileconfig \u7ed3\u5c3e\uff09\uff0c\u5176\u4e2d\u5305\u542b\u5c06\u8bbe\u7f6e\u548c\u6388\u6743\u4fe1\u606f\u8f7d\u5165\u5230 Apple \u8bbe\u5907\u7684\u6709\u6548\u8d1f\u8f7d\u3002<\/strong>\u8fd9\u4e9b\u6587\u4ef6\u53ef\u901a\u8fc7 MDM \u89e3\u51b3\u65b9\u6848\u6216 Apple Configurator \u521b\u5efa\uff0c\u4e5f\u53ef\u624b\u52a8\u521b\u5efa\u3002<\/p>\n\n\n\n<p><strong>\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u7528\u4e8e\u5c06\u914d\u7f6e\u4fe1\u606f\u5206\u53d1\u5230\u53d7\u7ba1\u7406\u7684 Apple \u8bbe\u5907\u3002<\/strong>\u5b83\u4f1a\u81ea\u52a8\u914d\u7f6e\u8bbe\u7f6e\u3001\u5e10\u6237\u3001\u8bbf\u95ee\u9650\u5236\u548c\u51ed\u8bc1\u3002\u6709\u4e09\u79cd\u7c7b\u578b\u7684\u63cf\u8ff0\u6587\u4ef6\uff1a\u7528\u6237\u3001\u8bbe\u5907\u548c\u79fb\u52a8\u8bbe\u5907\u7ba1\u7406 (MDM) \u6ce8\u518c\u3002\u5982\u679c\u770b\u5230\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\uff0c\u5219\u4f60\u7684 Mac \u53ef\u80fd\u662f\u53d7\u7ba1\u7406\u7684\u7535\u8111\u3002<\/p>\n\n\n\n<p>\u7531\u4e8e\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u53ef\u88ab\u52a0\u5bc6\u548c\u7b7e\u540d\uff0c\u56e0\u6b64\u4f60\u53ef\u4ee5\u5c06\u5176\u9650\u5236\u7528\u4e8e\u7279\u5b9a\u7684 Apple \u8bbe\u5907\uff0c\u5e76\u963b\u6b62\u9664\u62e5\u6709\u7528\u6237\u540d\u548c\u5bc6\u7801\u7684\u7528\u6237\u5916\u7684\u4efb\u4f55\u4eba\u66f4\u6539\u5176\u4e2d\u7684\u8bbe\u7f6e\u3002\u4f60\u8fd8\u53ef\u4ee5\u5c06\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u6807\u8bb0\u4e3a\u88ab\u9501\u5b9a\u5230\u8bbe\u5907\u3002<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">\u5982\u4f55\u67e5\u770b\u5b89\u88c5\u7684\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6<\/h5>\n\n\n\n<p>\u7528\u6237\u53ef\u4f7f\u7528 profiles \u547d\u4ee4\u884c\u5de5\u5177\u3001\u201c\u7cfb\u7edf\u8bbe\u7f6e\u201d\uff08\u5728 macOS 13 \u6216\u66f4\u9ad8\u7248\u672c\u4e2d\uff09\u6216\u8005\u201c\u7cfb\u7edf\u504f\u597d\u8bbe\u7f6e\u201d\uff08\u5728 macOS 12.0.1 \u6216\u66f4\u4f4e\u7248\u672c\u4e2d\uff09\u6267\u884c\u6b64\u64cd\u4f5c\u3002<\/p>\n\n\n\n<h6 class=\"wp-block-heading\">\u56fe\u5f62\u5316\u64cd\u4f5c<\/h6>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u3010Monterey\u53ca\u65e9\u671fmacOS\u7cfb\u7edf\u3011\u5728 Mac \u4e0a\uff0c\u9009\u53d6\u82f9\u679c\u83dc\u5355 \uf8ff &gt;\u201c\u7cfb\u7edf\u504f\u597d\u8bbe\u7f6e\u201d\uff0c\u7136\u540e\u70b9\u6309\u201c\u63cf\u8ff0\u6587\u4ef6\u201d\u3002\u5982\u679c\u60a8\u672a\u5b89\u88c5\u4efb\u4f55\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\uff0c\u201c\u63cf\u8ff0\u6587\u4ef6\u201d\u504f\u597d\u8bbe\u7f6e\u5c06\u4e0d\u53ef\u7528\u3002<\/li>\n\n\n\n<li>\u3010Ventura\u3011\u5728 Mac \u4e0a\uff0c\u9009\u53d6\u82f9\u679c\u83dc\u5355 \uf8ff &gt;\u201c\u7cfb\u7edf\u8bbe\u7f6e\u201d\uff0c\u70b9\u6309\u8fb9\u680f\u4e2d\u7684\u201c\u9690\u79c1\u548c\u5b89\u5168\u6027\u201d\uff0c\u7136\u540e\u70b9\u6309\u53f3\u4fa7\u7684\u201c\u63cf\u8ff0\u6587\u4ef6\u201d\u3002\uff08\u4f60\u53ef\u80fd\u9700\u8981\u5411\u4e0b\u6eda\u52a8\u3002\uff09<\/li>\n\n\n\n<li>\u5728\u201c\u63cf\u8ff0\u6587\u4ef6\u201d\u5217\u8868\u4e2d\uff0c\u9009\u62e9\u63cf\u8ff0\u6587\u4ef6\u4ee5\u3010\u67e5\u770b\u3011\u76f8\u5173\u4fe1\u606f\u3002<\/li>\n\n\n\n<li>\u3010\u6dfb\u52a0\u3011\u63cf\u8ff0\u6587\u4ef6\uff1a\u70b9\u6309\u6dfb\u52a0\u6309\u94ae + \u3002<\/li>\n\n\n\n<li>\u3010\u5220\u9664\u3011\u63cf\u8ff0\u6587\u4ef6\uff1a\u9009\u62e9\u63cf\u8ff0\u6587\u4ef6\uff0c\u7136\u540e\u70b9\u6309\u79fb\u9664\u6309\u94ae &#8211; \u3002\u5982\u679c\u65e0\u6cd5\u79fb\u9664\u63cf\u8ff0\u6587\u4ef6\uff0c\u5219\u4f60\u7684 Mac \u53ef\u80fd\u662f\u53d7\u7ba1\u7406\u7684\u7535\u8111\u3002\u8bf7\u8054\u7cfb\u5411\u4f60\u63d0\u4f9b\u7535\u8111\u7684\u5b66\u6821\u6216\u673a\u6784\u7684\u7cfb\u7edf\u7ba1\u7406\u5458\u4ee5\u83b7\u5f97\u66f4\u591a\u4fe1\u606f\u3002\u90e8\u5206\u63cf\u8ff0\u6587\u4ef6\u53ea\u80fd\u7531 Mac \u7684\u7cfb\u7edf\u7ba1\u7406\u5458\u79fb\u9664\u3002<\/li>\n<\/ul>\n\n\n\n<h6 class=\"wp-block-heading\">\u547d\u4ee4\u884c\u64cd\u4f5c<\/h6>\n\n\n\n<pre class=\"wp-block-code\"><code>man profiles\n\n# \u67e5\u770b\u6240\u6709\u5df2\u5b89\u88c5\u7684\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\uff0c\u8fd4\u56de\u7684\u5185\u5bb9\u5e94\u8be5\u662f\u6700\u5168\u6700\u8be6\u7ec6\u7684\nsudo profiles -P -o stdout\n\nsudo profiles list -all\n\nsudo profiles show\n\nsudo profiles remove -identifier com.example.profile1 -password pass<\/code><\/pre>\n\n\n\n<h5 class=\"wp-block-heading\">\u5982\u4f55\u5220\u9664\u53d7\u5230\u5bc6\u7801\u4fdd\u62a4\u7684\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\uff1f<\/h5>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>You can back up the Mac and then boot to recovery and erase it. The MDM profiles are designed to resist cracking so erase and restore is often the fastest method.<\/p>\n<\/blockquote>\n\n\n\n<p>\u7b80\u5355\u6765\u8bf4\u5c31\u662f\u7531MDM\u4e0b\u53d1\u7684\u53d7\u5bc6\u7801\u4fdd\u62a4\u7684\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u8bbe\u8ba1\u4e0a\u5c31\u8003\u8651\u5230\u4e86\u9632\u5f02\u5e38\u5220\u9664\u7b49\u7834\u89e3\u624b\u6bb5\uff0c\u56e0\u6b64\u4f60\u60f3\u8fbe\u5230\u6b64\u76ee\u7684\u6700\u5feb\u7684\u65b9\u6cd5\u5c31\u662f\u5907\u4efdMac\u7535\u8111\u4e0a\u7684\u6587\u4ef6\uff0c\u7136\u540e\u542f\u52a8\u81f3\u6062\u590d\u6a21\u5f0f\u8fdb\u884c\u78c1\u76d8\u5220\u9664\u3002<br>\u56e0\u4e3amacOS\u7cfb\u7edf\u7684\u66f4\u65b0\u8fd8\u662f\u6bd4\u8f83\u9891\u7e41\u7684\uff0c\u6240\u4ee5\u4f60\u5728\u7f51\u4e0a\u641c\u5230\u7684\u90a3\u4e9b\u89e3\u51b3\u529e\u6cd5\u5f88\u6709\u53ef\u80fd\u53ea\u5bf9\u8001\u7248\u672c\u7684macOS\u7cfb\u7edf\u751f\u6548\uff0c\u5982\u679c\u4f60\u662f\u8f83\u65b0\u7248\u672c\u7684macOS\u7cfb\u7edf\uff0c\u597d\u50cf\u9664\u4e86\u62b9\u76d8\u8fd8\u771f\u7684\u6ca1\u4ec0\u4e48\u7a33\u5b9a\u53ef\u7528\u7684\u65b9\u6cd5\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$ man profiles\n...\nEXAMPLES\n     profiles remove -path \/profiles\/testfile2.mobileconfig\n              Removes the configuration profile file '\/profiles\/testfile2.mobileconfig' into the current user.\n\n     profiles list -type provisioning\n              Displays a list of installed provisioning profiles.\n\n     profiles list -all\n              When running as root, this will list all configuration profiles on the system.\n\n     profiles show\n              Displays extended information for installed configuration profiles for the current user.\n\n     profiles status -type startup\n              Displays information on whether or not startup profiles are set up.\n\n     profiles remove -identifier com.example.profile1 -password pass\n              Removes any installed profiles with the identifier com.example.profile1 in the current user and using a removal password of 'pass'.\n\n     profiles show -type enrollment\n              Displays the current DEP configuration information.\n\n     profiles renew -type enrollment\n              Re-enables the DEP user notification enrollment messages.\n\n     profiles install -type bootstraptoken\n              Creates or updates the Bootstrap Token APFS record and escrows the information to the server.\n\n     profiles show -type enrollment -cached\n              Displays the cached information of an existing DEP enrollment configuration.\n...\n\n\n$ \/usr\/bin\/profiles -P -o stdout | \/usr\/bin\/grep -c 'allowCloudDocumentSync = 0'\n\n$ \/usr\/bin\/profiles -P -o stdout | \/usr\/bin\/grep -c 'allowCloudKeychainSync = 0'\n\n$ \/usr\/bin\/profiles -P -o stdout | \/usr\/bin\/grep -c 'allowCloudDesktopAndDocuments = 0'<\/code><\/pre>\n\n\n\n<h5 class=\"wp-block-heading\">\u53c2\u8003\u94fe\u63a5\uff1a<\/h5>\n\n\n\n<p>\u5728 Mac \u7535\u8111\u4e0a\u4f7f\u7528\u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6\u4ee5\u6807\u51c6\u5316\u8bbe\u7f6e<br><a href=\"https:\/\/support.apple.com\/zh-cn\/guide\/mac-help\/mh35561\/mac\">https:\/\/support.apple.com\/zh-cn\/guide\/mac-help\/mh35561\/mac<\/a><\/p>\n\n\n\n<p>Mac\u82f9\u679c\u7535\u8111\u7684\u63cf\u8ff0\u6587\u4ef6\u5728\u54ea\u91cc\u627e\u5462\uff1f<br><a href=\"https:\/\/www.jianshu.com\/p\/7e033921d4e8\">https:\/\/www.jianshu.com\/p\/7e033921d4e8<\/a><\/p>\n\n\n\n<p>iMazing Profile Editor \u521b\u5efa\u3001\u7f16\u8f91\u548c\u7b7e\u7f72 Apple \u914d\u7f6e\u63cf\u8ff0\u6587\u4ef6<br><a href=\"https:\/\/imazing.com\/zh\/profile-editor\">https:\/\/imazing.com\/zh\/profile-editor<\/a><\/p>\n\n\n\n<p>\u5b89\u88c5\u4e86\u4e0d\u53d7\u82f9\u679c\u8ba4\u8bc1\u7684\u63cf\u8ff0\u6027\u6587\u4ef6\u6709\u54ea\u4e9b\u98ce\u9669\uff1f<br><a href=\"https:\/\/www.zhihu.com\/question\/46343793\">https:\/\/www.zhihu.com\/question\/46343793<\/a><\/p>\n\n\n\n<p>MacBook macOS\u7cfb\u7edf \u65e0\u6cd5\u5220\u9664\u63cf\u8ff0\u6587\u4ef6\uff0c\u9700\u8981\u5bc6\u7801\uff0c\u6765\u5927\u795e\uff01\uff01\uff1f\uff1f<br><a href=\"https:\/\/www.zhihu.com\/question\/389672632\">https:\/\/www.zhihu.com\/question\/389672632<\/a><\/p>\n\n\n\n<p>iOS \u7684\u300c\u63cf\u8ff0\u6587\u4ef6\u300d\u662f\u4ec0\u4e48\uff1f<br><a href=\"https:\/\/www.zhihu.com\/question\/19899208\">https:\/\/www.zhihu.com\/question\/19899208<\/a><\/p>\n\n\n\n<p>CIS-macOS-Security\/custom\/rules\/cisicloud\/cisicloud_drive_disable.yaml<br><a href=\"https:\/\/github.com\/mvdbent\/CIS-macOS-Security\/blob\/main\/custom\/rules\/cisicloud\/cisicloud_drive_disable.yaml\">https:\/\/github.com\/mvdbent\/CIS-macOS-Security\/blob\/main\/custom\/rules\/cisicloud\/cisicloud_drive_disable.yaml<\/a><\/p>\n\n\n\n<p>macOS, delete profiles that need password<br><a href=\"https:\/\/apple.stackexchange.com\/questions\/411065\/macos-delete-profiles-that-need-password\">https:\/\/apple.stackexchange.com\/questions\/411065\/macos-delete-profiles-that-need-password<\/a><\/p>\n\n\n\n<p>\u5982\u679c\u4f60\u65e0\u6cd5\u4ece\u201cmacOS \u6062\u590d\u201d\u542f\u52a8<br><a href=\"https:\/\/support.apple.com\/zh-cn\/HT201314\">https:\/\/support.apple.com\/zh-cn\/HT201314<\/a><\/p>\n\n\n\n<p>=END=<\/p>\n","protected":false},"excerpt":{"rendered":"<p>=Start= \u7f18\u7531\uff1a macOS\u7cfb\u7edf\u7684\u9690\u79c1\u548c\u6743\u9650\u63a7\u5236\u505a\u7684\u5176\u5b9e\u8fd8\u662f\u53ef\u4ee5\u7684\uff0c\u628a\u7edd\u5927\u591a\u6570\u654f\u611f\u64cd\u4f5c\u7684\u6388\u6743\u90fd\u4ea4\u7ed9\u4e86\u7ec8\u7aef [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,560,25],"tags":[1780,1771,1773,1906,724],"class_list":["post-5395","post","type-post","status-publish","format-standard","hentry","category-knowledgebase-2","category-mac","category-security","tag-macos","tag-mdm","tag-mobileconfig","tag-profiles","tag-724"],"views":7134,"_links":{"self":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts\/5395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/comments?post=5395"}],"version-history":[{"count":1,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts\/5395\/revisions"}],"predecessor-version":[{"id":5396,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/posts\/5395\/revisions\/5396"}],"wp:attachment":[{"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/media?parent=5395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/categories?post=5395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ixyzero.com\/blog\/wp-json\/wp\/v2\/tags?post=5395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}