Remove enrollment profile policy and test label (#44683)

Delete the macOS policy 'enrollment-profile-up-to-date' and the 'Nudge
test devices' label, and remove their references from it-and-security
manifests. Files removed:
it-and-security/lib/macos/policies/enrollment-profile-up-to-date.yml and
it-and-security/lib/all/labels/nudge-test-devices.yml; references
dropped from it-and-security/default.yml,
it-and-security/fleets/testing-and-qa.yml, and
it-and-security/fleets/workstations.yml to avoid loading deleted
artifacts.
This commit is contained in:
Allen Houchins
2026-05-04 13:15:58 -05:00
committed by GitHub
parent ec3c86dc8a
commit 6a5c67dbdf
5 changed files with 0 additions and 31 deletions
-1
View File
@@ -110,7 +110,6 @@ labels:
- path: ./lib/all/labels/windows-screen-lock-exclusions.yml
- path: ./lib/all/labels/team-g-mdm.yml
- path: ./lib/all/labels/team-g-software.yml
- path: ./lib/all/labels/nudge-test-devices.yml
- path: ./lib/all/labels/macs-with-microsoft-autoupdate-installed.yml
- path: ./lib/all/labels/macs-with-fleet-maintained-apps-installed.yml
- path: ./lib/all/labels/macs-with-fleet-desktop-installed.yml
@@ -82,7 +82,6 @@ controls:
- path: ../lib/linux/scripts/install-fleet-desktop-required-extension.sh
policies:
# macOS policies
- path: ../lib/macos/policies/enrollment-profile-up-to-date.yml
# Linux policies
- path: ../lib/linux/policies/check-fleet-desktop-extension-enabled.yml
reports:
-1
View File
@@ -155,7 +155,6 @@ policies:
- path: ../lib/macos/policies/1password-emergency-kit-check.yml
- path: ../lib/macos/policies/latest-macos.yml
- path: ../lib/macos/policies/all-software-updates-installed.yml
- path: ../lib/macos/policies/enrollment-profile-up-to-date.yml
- path: ../lib/macos/policies/disk-encryption-check.yml
- path: ../lib/macos/policies/disk-space-check.yml
# - path: ../lib/macos/policies/1password-installed.yml https://github.com/fleetdm/fleet/pull/44179
@@ -1,10 +0,0 @@
- name: Nudge test devices
description: Macs testing Nudge
label_membership_type: manual
platform: darwin
hosts:
- "allens-macbook-pro.local"
- "allens-mac-mini.local"
- "noah-talerman-macBook-pro.local"
- "mitchs-macbook-pro.local"
- "harrisons-macbook-pro.local"
@@ -1,18 +0,0 @@
- name: macOS - Enrollment profile up to date
query: |
SELECT 1 FROM mdm
WHERE topic = "com.apple.mgmt.External.8a3367bf-49d7-4dc3-ae41-c9de95f7b424"
OR topic IS NULL
OR topic = '';
critical: true
description: Recently we had to update files used for managing Apple devices. This policy checks to see if you have the most recent enrollment profile installed. Not having this profile means this device is no longer communicating with Fleet via MDM.
resolution: |-
You must manually remove your enrollment profile to fix this issue by following these steps:
 > System Settings > General > Device Management > Click on the profile "Fleet enrollment" followed by the "-" (minus) button
After a few minutes, your device may initiate automatic re-enrollment. If it does not, open Fleet Desktop and follow the steps for manually enabling MDM.
If you encounter any issues, please reach out via #help-dogfooding.
platform: darwin
calendar_events_enabled: false