Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro
Focus
Focus
GlobalProtect

Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro

Table of Contents

Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro

You can use Jamf Pro to remove system extensions on macOS Monterey endpoints.
Where Can I Use This?
What Do I Need?
  • Prisma Access
  • PAN-OS
  • GlobalProtect Subscription
  • Prisma Access Mobile Users license (for use with Prisma Access)
  • GlobalProtect Gateway license (for use with PAN-OS)
  • GlobalProtect app for macOS 6.0.4 and later and 6.1 and later releases
  • Endpoints running macOS 11 (Big Sur), macOS 12 (Monterey), or macOS 13 (Ventura)
In macOS Monterey 12, Apple introduced a feature in which system extensions can be removed using a configuration profile that is pushed from Jamf Pro.
If you uninstall the GlobalProtect 6.0.4 and later or 6.1 app from macOS Monterey 12.2.1 endpoints by running the
/Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh
command inside a shell script, end users are not prompted to enter the administrator username and password to remove system extensions during the uninstallation of the GlobalProtect app.
If you uninstall the GlobalProtect app from macOS Monterey endpoints using the GlobalProtect app PKG file, end users ares still prompted by a pop-up to enter the administrator username and password to remove the system extension.
On macOS endpoints earlier than macOS Monterey, regardless of whether the GlobalProtect app is uninstalled using a command or PKG file, end users ares still prompted by a pop-up to enter the administrator username and password to remove the system extension.
To remove the system extension for the GlobalProtect app by pushing a configuration profile from Jamf Pro:
  1. Select
    Computers
    Configuration Profiles
    New
    .
  2. Create a configuration profile to remove GlobalProtect system extensions.
    1. Enter a
      Display Name
      for the configuration profile.
    2. Select
      System Extensions
      Configure
      .
    3. (Optional) Enter a
      Display Name
      .
    4. In
      System Extension Types
      , select
      Removable System Extensions
      .
    5. Enter the
      Team Identifier
      for the GlobalProtect app (
      PXPZ95SK77
      ).
    6. In the
      REMOVABLE SYSTEM EXTENSIONS
      section,
      Add
      the Bundle Identifier for GlobalProtect system extensions (
      com.paloaltonetworks.GlobalProtect.client.extension
      ) and
      Save
      the removable system extension that you configured.
    7. Save
      the configuration profile.

Recommended For You