Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro
Focus
Focus
GlobalProtect

Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro

Table of Contents

Remove System Extensions on macOS Monterey Endpoints Using Jamf Pro

You can use Jamf Pro to remove system extensions on macOS Monterey endpoints.
Where Can I Use This?What Do I Need?
  • Prisma Access
  • PAN-OS
  • GlobalProtect Subscription
  • Prisma Access Mobile Users license (for use with Prisma Access)
  • GlobalProtect Gateway license (for use with PAN-OS)
  • GlobalProtect app for macOS 6.0.4 and later and 6.1 and later releases
  • Endpoints running macOS 11 (Big Sur), macOS 12 (Monterey), or macOS 13 (Ventura)
In macOS Monterey 12, Apple introduced a feature in which system extensions can be removed using a configuration profile that is pushed from Jamf Pro.
If you uninstall the GlobalProtect 6.0.4 and later or 6.1 app from macOS Monterey 12.2.1 endpoints by running the /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh command inside a shell script, end users are not prompted to enter the administrator username and password to remove system extensions during the uninstallation of the GlobalProtect app.
If you uninstall the GlobalProtect app from macOS Monterey endpoints using the GlobalProtect app PKG file, end users ares still prompted by a pop-up to enter the administrator username and password to remove the system extension.
On macOS endpoints earlier than macOS Monterey, regardless of whether the GlobalProtect app is uninstalled using a command or PKG file, end users ares still prompted by a pop-up to enter the administrator username and password to remove the system extension.
To remove the system extension for the GlobalProtect app by pushing a configuration profile from Jamf Pro:
  1. Select ComputersConfiguration ProfilesNew.
  2. Create a configuration profile to remove GlobalProtect system extensions.
    1. Enter a Display Name for the configuration profile.
    2. Select System ExtensionsConfigure.
    3. (Optional) Enter a Display Name.
    4. In System Extension Types, select Removable System Extensions.
    5. Enter the Team Identifier for the GlobalProtect app (PXPZ95SK77).
    6. In the REMOVABLE SYSTEM EXTENSIONS section, Add the Bundle Identifier for GlobalProtect system extensions (com.paloaltonetworks.GlobalProtect.client.extension) and Save the removable system extension that you configured.
    7. Save the configuration profile.