Jamf Protect secures configuration files and prevents tampering activity including threats designed to disable, block, or remove the application from the computer.
Administrator privileges are required to remove applications.
- Tamper prevention enabled in a plan that is scoped to the test computer.Note:
Disclaimer:
Some of the tests in this guide require downloading known malware. Ensure proper precautions are taken when conducting any of the tests. We recommend testing in a controlled environment, segregated from any production or critical infrastructure, and on computers approved for or dedicated to testing malicious software. Jamf does not accept any responsibility or liability for any loss, damage, cost, or expense you might incur as a result of the use of, or reliance upon, the materials which appear in this document or any linked website.
Attempting to remove Jamf Protect from Applications by deleting the application.
Open Finder and in Applications, navigate to the Jamf Protect application.
- For the Jamf Protect application, attempt either of the following:
Drag-and-drop the Jamf Protect application to the Trash.
- Press Ctrl+Click on the Jamf Protect application and select Move to Trash.Note:
Either of the aforementioned actions result in a denied operation.
Attempting to remove Jamf Protect using the Terminal.
Open Terminal.
- Run the following command:
sudo rm -Rf /Applications/JamfProtect.appand the following results should display:sudo rm-rf /Applications/JamfProtect.app rm: /Applications/JamfProtect.app/Contents/_CodeSignature/CodeResources: Operation not permitted rm: /Applications/JamfProtect.app/Contents/_CodeSignature: Operation not permitted rm: /Applications/JamfProtect. app/Contents/MacOS/JamfProtect: Operation not permitted rm: /Applications/JamfProtect.app/Contents/MacOS: Operation not permitted