If you use a third-party UEM or MDM solution to manage your devices, you can use that solution to distribute a configuration file to the affected devices that will disable iCloud Private Relay.
The following code can be used to create a configuration profile. Copy the code into a file, updating the UUID values as required for your UEM or MDM solution. Then save the file in .mobileconfig format, upload it to the UEM or MDM solution, and distribute it to the relevant devices:
Note:
For macOS devices, you may need to restart the device after distributing the configuration profile to finish disabling iCloud Private Relay.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDisplayName</key>
<string>Restrictions</string>
<key>PayloadIdentifier</key>
<string>com.apple.applicationaccess.88CAB354-2E2F-4C93-B7FB-E5C6939CC7AA</string>
<key>PayloadType</key>
<string>com.apple.applicationaccess</string>
<key>PayloadUUID</key>
<string>3AC76E86-02F5-4AC3-BFBD-554494CC3067</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>allowCloudPrivateRelay</key>
<false />
</dict>
</array>
<key>PayloadDescription</key>
<string>Disables the iCloud Private Relay feature.</string>
<key>PayloadDisplayName</key>
<string>Disable iCloud Private Relay</string>
<key>PayloadIdentifier</key>
<string>D823C0A6-BC69-43F9-A211-0A7CC90C5825</string>
<key>PayloadOrganization</key>
<string>Company Name</string>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>488044F2-609B-4AF3-85CC-CED3111DAB6F</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>Apple iCloud Private Relay is disabled for the devices.