Seems to be Working on macOS 15.1 (kinda)

[kajteklau]

Let me preface this by saying 1) as I'm typing this out, I'm still observing MDM fetching behavior using activity monitor and 2) the script doesn't work outright.

It seems like on macOS Sequoia 15.1, Apple either changed the file paths or the files are located at slightly different places between intel and apple silicon Macs (not too sure, just guessing for the reason behind the discrepancy):
From line 60 - 62, the host file location should be at "/Volumes/{system volume name}/private/etc/hosts".
From line 66 - 70, I changed the file path to "/Volumes/{data volume name}/private/var/db/ConfigurationProfiles/....".

User profile creation only works when I manually type in the commands. Scripting is not my field so I'm not sure why.

Booting into the system and search for "mdm" in Activity Monitor, "mdmclient" runs periodically before quitting itself with no apparent change or any signs of an mdm profile. This can also be observed on Macs that have never been enrolled in Apple MDM (it just happened as I was ready to submit this issue). Running sudo profiles show -type enrollment from user space yields "error fetching device enrollment configuration", this is expected behavior and it might be related to "mdmclient" quitting on its own as observed in Activity Monitor.

[kajteklau]

To add to mdm behavior (or lack there of) on non-enrolled devices, running sudo profiles show -type enrollment would yield "Client is not DEP enabled". While on enrolled devices, if bypassed correctly, should yield variations of "the device failed to request configuration from the cloud.".

[pinkyshit]

Please cut a long story short, you mean scripts can't work on macOS 15 perfectly. But I don't follow what exactly problems exist. Do apple silicon ones have the problems as well? With those problems, are the bypassed Macs available to use or just wasted?

[kajteklau]

It's not a long story. The issue with the script is the file path because both the hosts file and the ConfigurationProfiles folder are in different folders.

I don't know if Apple Silicon Macs have the same issue.

Bypassed Macs are usable because MDM check is bypassed.

[pinkyshit]

Ok, thanks for the further explanation.so the difference in file path won't actually trouble in use

[kajteklau]

You would need to dig around your system folder to look for the "hosts" and "ConfigurationProfiles" folders.