Platform compatibility
Set up the control
1
Go to MDM > Controls > Add new control
Select Lock MDM profiles pane.
2
Select targeting
No additional configuration is required. Choose which devices to apply the control to: all macOS devices, specific device groups, or a custom target.
How it works
Primo pushes an MDM restriction that removes the Profiles entry from System Settings. Employees can no longer navigate to that section, view installed profiles, or attempt to remove them.This control restricts the user-facing interface only. IT administrators can still view and manage profiles from the cockpit and device panel.