Disable ‘Find My Mac’ and ‘Back to My Mac’ for Big Sur and higher OS versionsSolved

To restrict ‘Find my mac’, you can create custom configuration profile using iMazing Profile Editor and deploy them via Hexnode. Create and save a configuration profile enabling the ‘Disable Find My iCloud Setting’ option (DisableFMMiCloudSetting) under the ‘iCloud Find My’ payload. You can also uncheck the option ‘Allow iCloud Find my Mac’ (allowCloudFMM) under the Restrictions payload to restrict find my mac. Now, deploy the profile using Hexnode’s custom configuration feature. This will disable toggling the Find my Mac option in the device’s iCloud settings.

Regarding the ‘Back to My Mac’ restriction, Apple has stopped support for this setting since rolling out Mojave. Check this Apple support page:

https://support.apple.com/en-gb/HT208922

If you’re looking to restrict file sharing between devices, there’s an option to disable icloud drive in iMazing which will prevent files from being uploaded to iCloud automatically.

@Verbnigge Wasn’t aware that Apple pulled out Back to My Mac. Thank you for your valuable inputs! Appreciate it.

Here’s the .plist file content to restrict ‘Find my Mac’:

You can upload this using the ‘Deploy Custom Configuration’ feature in Hexnode policies.

@Smedt Thanks for the .plist file! I deployed the profile on few of our devices but it looks like it just grays out the option. Device that had the find my mac setting toggled on still have it on. Has anyone found a way to remotely toggle the setting OFF?

The config. profile I shared above only grays out the ‘Find My Mac’ option in the Mac’s iCloud settings so that the user will not be able to modify it from the device end. I’d suggest you can initially check if the device has ‘Find my mac’ enabled using the following script:

https://www.hexnode.com/mobile-device-management/help/script-to-check-if-find-my-mac-is-enabled-on-mac/

If the device has Find My mac ON, it should be turned off manually from the device end. Then, you could gray out the option by pushing the configuration profile I shared above.