Can we avoid/handle uninstallation of system extension while drag the container app to the trash.

Here we are able to Restrict the app deletion successfully

How are you restricting that?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

We are restricting app deletion while we met certain conditions not always.we are doing this By providing protection(denying permission to delete files inside that directory on certain conditions) to that specific app folder in applications directory.

we capture the delete event with apple end point security

Ah, right. I’m not surprise that this isn’t handling an embedded sysex properly. The system does the sysex check before it deletes the app, obviously, and at that time it can’t tell that the deletion will fail in the future.

The standard way to restrict app deleting is using a configuration profile, and I would expect that to do the right thing when it comes to a sysex embedded in the app. Have you tried that approach?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

I have tried this approach.As per Configuration-Profile-Reference.pdf allowAppRemoval key which disables removal of apps will be under restrictions payload .But I was unable to find allowAppRemoval key in restrictions payload on Jamf Pro dashboard.This option was available only for IOS devices or for both MacOs & IOS. If it was available for MacOs also Could you please point me to where we can find that or share any reference Document to do this if has.

I’m using Jamf pro version 10.37.2 and MacOS Big Sur and after.

But I was unable to find allowAppRemoval key in restrictions payload on Jamf Pro dashboard.

I can’t help you with third-party management tools.

MDM products are layered on top of Apple infrastructure documented under Device Management. allowAppRemoval is part of the Restrictions (com.apple.applicationaccess). The payload itself is listed as being supported on macOS 10.7 and later, but that property is labelled as “Available in iOS 4.2.1 and later.” I don’t know whether that means it’s not supported on macOS at all.

Keep in mind that the Restrictions payload isn’t the only way to prevent app removal. MDM supports the concept of managed apps, installed via the install application command. Managed apps support attributes, and one of those attributes is Removable, which prevents the app from being removed.

If you have questions about this stuff, you can start a new thread here on DevForums with the Device Management or talk to Apple Support (configuration profiles and MDM fall under their purview, not DTS).

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Hi, did you manage how to solve this problem?