Is it anticipated for a retail bought, non-provisioned gadgets configured with AMFI developer mode power enabled?
I lately purchased two MacBooks with AppleCare+ by Apple retail channels which might be developer mode power enabled. I did not buy the MacBooks with enterprise or developer accounts.
Machine 1
A MacBook Professional from Apple.com as an authorized refurbished unit (the one talked about above) for retailer pickup. After unusual mdm sort habits (wifi settings and so forth. altering with out my involvement and what look like mdm associated community calls) I took it the Genius bar and Apple carried out the next actions:
- Contemporary MacOS set up
- DFU restore
- Logic board alternative
Developer mode power enabled endured on the machine after every of the steps above. <– see under
Machine 2
Due to my expertise with the MacBook Professional I went and bought a MacBook Air M4 on the Cupertino customer heart retailer with AppleCare+ a couple of weeks in the past. I carried out the next analysis:
- Booted solely into Restoration Mode <– Notice, I’ve but to set the machine up with a neighborhood account.
- Whereas in restoration mode, I linked to the web.
- In terminal, I checked the AMFI logs and once more noticed developer mode power enabled. <– see under
Listed below are a few of outputs from terminal from each machines:
spctl kext-consent standing
Kernel Extension Person Consent: ENABLED
spctl --status
assessments enabled
csrutil standing
System Integrity Safety standing: enabled.
devtoolssecurity -status
Developer mode is at present disabled.
log present --predicate 'eventMessage CONTAINS "AMFI"' --info --last 7d
AMFI: developer mode is power enabled on this platform
Notes
- For the MacBook Professional, there are not any System Preferences seen configuration profiles or extensions put in on the system.
- Manually enabling / disabling developer mode has no affect on the AMFI developer mode setting for both machine.
- MDM is listed as disabled in terminal for each machines.
