[Imogen Participant 2 March 2022 Imogen Participant]

Have you tried using the Wi-Fi policy? I think that will do the job…

They even have an option send alerts if the devices are offline for some set period of time…https://www.hexnode.com/forums/topic/alert-disconnecting-wifi/

I think this will get half of your job done.

[Erin Participant 3 March 2022 Erin Participant]

Yeah, tried the Wi-Fi policy, though it gets automatically connected to the configured network, we are able to change the network…

Saw an option called “permit Wi-Fi connections to MDM connected wi-fi network only” but that was for iOS. Didn’t see anything similar for Mac.

[Archer Hexnode 3 March 2022 Archer Moderator]

Hey @erin-scott,
Thanks for reaching out.

Please follow the instructions to fulfill your requirement:

First, create a macOS Wi-Fi configuration policy so that your macOS devices will get connected to the institution’s Wi-Fi network automatically.

To ensure that the users do not change the Wi-Fi network or turn it OFF, you must get some additional settings configured.

You can get it done with the help of the Execute Custom Script action, where you embed the necessary settings as Terminal commands on a script and then execute it from the UEM console.

Script to prevent Wi-Fi network changes

#!/bin/bash#Require Admin authentication to "create computer-to-computer networks", "Change Networks", "Turn Wi-Fi on or off "/usr/libexec/airportd prefs RequireAdminNetworkChange=YES RequireAdminPowerToggle=YES exit 0

1 2 3

#!/bin/bash#Require Admin authentication to "create computer-to-computer networks", "Change Networks", "Turn Wi-Fi on or off "/usr/libexec/airportd prefs RequireAdminNetworkChange=YES RequireAdminPowerToggle=YES exit 0

Here, the values of RequireAdminNetworkChanges and RequireAdminPowerToggle are set to YES. This implies that whenever a non-admin user tries to change the Wi-Fi network or turn Wi-Fi ON or OFF, the system prompts for authentication with the Admin credentials. Unless the user is an Admin, you can rest assured that they do not connect to a different network or turn Wi-Fi off.

If you wish to add more parameters to the existing script, you are free to do it as well.
It is always recommended that you verify how these commands work on a single device before executing them in bulk. Also, the device model and the OS version solely determine how these commands are executed. Therefore, we cannot be responsible if the device behaves indifferently after executing the scripts.

Please feel to reach out for further queries.

Cheers!
Archer Woods
Hexnode UEM