From 06bb4f708da0e20d0de7b29239860db90a3a1bad Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Mon, 21 Oct 2024 11:08:05 -0400 Subject: [PATCH] Custom OS settings guide: Modify OS settings on macOS, iOS, iPadOS, and Windows (#23046) Document interim best practice for modifying OS settings. Later Fleet might add an "Edit" button in the UI so the IT admin doesn't have to add a new profile and then remove the old. --- articles/custom-os-settings.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/articles/custom-os-settings.md b/articles/custom-os-settings.md index 1e7dbdee697d..1b28774d4558 100644 --- a/articles/custom-os-settings.md +++ b/articles/custom-os-settings.md @@ -6,7 +6,7 @@ In Fleet you can enforce OS settings like security restrictions, screen lock, Wi You can enforce OS settings using the Fleet UI, Fleet API, or [Fleet's GitOps workflow](https://github.com/fleetdm/fleet-gitops). -For macOS hosts, Fleet recommends the [iMazing Profile Creator](https://imazing.com/profile-editor) tool for creating and exporting macOS configuration profiles. +For macOS, iOS, and iPadOS hosts, Fleet recommends the [iMazing Profile Creator](https://imazing.com/profile-editor) tool for creating and exporting macOS configuration profiles. For Windows hosts, copy out this [Windows configuration profile template](https://fleetdm.com/example-windows-profile) and update the profile using any configuration service providers (CSPs) from [Microsoft's MDM protocol](https://learn.microsoft.com/en-us/windows/client-management/mdm/). @@ -18,6 +18,10 @@ Fleet UI: 3. Select **Upload** and choose your configuration profile. +4. To modify the OS setting, first remove the old configuration profile and then add the new one. + +> On macOS, iOS, and iPadOS, removing a configuration profile will remove enforcement of the OS setting. + Fleet API: API documentation is [here](https://fleetdm.com/docs/rest-api/rest-api#add-custom-os-setting-configuration-profile) ### OS settings status