From 8e44fb59f11025124717dcaa459758b625b6d4ef Mon Sep 17 00:00:00 2001
From: Steven Palmesano <3100993+spalmesano0@users.noreply.github.com>
Date: Wed, 22 Jul 2026 14:41:00 -0500
Subject: [PATCH] Add Set time and date automatically config profile (#49468)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This enforces NTP on macOS devices.
The "Set date and time automatically" toggle can be verified with
`systemsetup - getusingnetworktime` (you can write a script to put the
output of that into a file, then use the `file_lines` table in a
policy), and set with `systemsetup - setusingnetworktime on` (which
could be a script automation that kicks off if a device fails the
policy).
If you want to prevent users from changing it, you can use the attached
config profile. Note that it requires setting the NTP server, but this
is most likely just the default Apple server. The `setusingnetworktime`
will work even with the Ul locked.
## Summary by CodeRabbit
* **New Features**
* Added a macOS configuration profile that automatically configures
devices to use Appleās time server.
* Included a human-readable profile name and standard configuration
metadata for easier deployment.
---
...t-time-and-date-automatically.mobileconfig | 32 +++++++++++++++++++
1 file changed, 32 insertions(+)
create mode 100644 docs/solutions/macos/configuration-profiles/set-time-and-date-automatically.mobileconfig
diff --git a/docs/solutions/macos/configuration-profiles/set-time-and-date-automatically.mobileconfig b/docs/solutions/macos/configuration-profiles/set-time-and-date-automatically.mobileconfig
new file mode 100644
index 0000000000..cb0e0337a8
--- /dev/null
+++ b/docs/solutions/macos/configuration-profiles/set-time-and-date-automatically.mobileconfig
@@ -0,0 +1,32 @@
+
+
+
+
+ PayloadContent
+
+
+ PayloadType
+ com.apple.MCX
+ PayloadIdentifier
+ com.fleetdm.timeserver
+ PayloadUUID
+ 0E6CD857-2B26-4B38-BF20-61DD08372CF3
+ PayloadVersion
+ 1
+ timeServer
+ time.apple.com
+
+
+ PayloadDisplayName
+ Time Server Configuration
+ PayloadIdentifier
+ com.fleetdm.timeserver.profile
+ PayloadType
+ Configuration
+ PayloadUUID
+ AEE78D8D-2A1E-4BE9-B133-32FE56C5F0E3
+ PayloadVersion
+ 1
+
+