Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

bogdanw

macrumors 603
Original poster
Mar 10, 2009
6,103
3,018
This is not about why, but about how.
Apple provides instructions on how to Turn Off Private Relay here https://support.apple.com/HT212614
However, there is another way, creating and installing a .mobileconfig profile that can disable it for all users of a Mac, as long as the profile is installed.
The value allowCloudPrivateRelay is mentioned by Apple here https://developer.apple.com/documentation/devicemanagement/restrictions
and better explained by Microsoft here https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-macos
Profiles can be created with the Apple Configurator https://apps.apple.com/app/apple-configurator-2/id1037126344
ProfileCreator https://github.com/ProfileCreator/ProfileCreator
other software or with any txt editor.
In TextEdit, make a new document, select the Plain text format (https://support.apple.com/guide/textedit/change-textedit-preferences-txted1063/1.17/mac/12.0) copy-paste the text below and save it as Disable-iCloud-Private-Relay.mobileconfig or other meaningful name.

Code:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDescription</key>
            <string>Configures restrictions</string>
            <key>PayloadDisplayName</key>
            <string>Restrictions</string>
            <key>PayloadIdentifier</key>
            <string>My.Restrictions.Payload.2</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>PayloadUUID2</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>allowCloudPrivateRelay</key>
            <false/>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Disables iCloud Private Relay</string>
    <key>PayloadDisplayName</key>
    <string>Disable iCloud Private Relay</string>
    <key>PayloadIdentifier</key>
    <string>My.Restrictions.Payload.1</string>
    <key>PayloadOrganization</key>
    <string>NotApple</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>PayloadUUID1</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

The only thing to keep in mind is that PayloadUUIDs have to be unique, you cant’t have two profiles with the same PayloadUUID installed on your system.
To install, double-click it and then authorize its installation from System Preferences – Profiles, where it shows up like this
Profiles.jpg

User log out is recommended for the changes to take effect and should be visible in Apple ID like this
AppleID.jpg

To reenable iCloud Private Relay, remove the profile from System Preferences – Profiles.
 

bogdanw

macrumors 603
Original poster
Mar 10, 2009
6,103
3,018
Why not simply use an ON/OFF switch in Settings > Your Name (at the very top) > iCloud?
I mentioned the official Apple instructions in the second sentence of the post.
Some reasons to use a profile:
- as per official page, at this moment (13 May 2022), “iCloud Private Relay is [...]currently in beta”. One of the many bugs was not being able to turn it off as per instructions or being turned off, but showing as active in System Preferences – Network.
- the profile survives system updates and log off/log into iCloud for any account
- it disables iCloud Private Relay for all users of a Mac with Monterey, not just for the current one. That’s useful for a family computer, for example.
 

bogdanw

macrumors 603
Original poster
Mar 10, 2009
6,103
3,018
Created the document but when double click it opens it and can't see anything on System Settings.
I don’t have Sonoma at the moment. In Ventura, Profiles are in System Settings – Privacy & Security - scroll all the way down - Profiles, Double-click to review & Install.

The attached profile was created with iMazing Profile Editor and tested in Ventura.

Code:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDisplayName</key>
            <string>Restrictions</string>
            <key>PayloadIdentifier</key>
            <string>com.apple.applicationaccess.B1B1B1B1-85C1-4E64-87A7-05BD1A74D8F0</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>B1B1B1B1-85C1-4E64-87A7-05BD1A74D8F0</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>allowCloudPrivateRelay</key>
            <false/>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Disable iCloud Private Relay</string>
    <key>PayloadDisplayName</key>
    <string>Disable_iCloud_Private_Relay</string>
    <key>PayloadIdentifier</key>
    <string>Mac.A0A0A0A0-77E8-441C-9902-E53EF8826008</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>A0A0A0A0-77E8-441C-9902-E53EF8826008</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>TargetDeviceType</key>
    <integer>5</integer>
</dict>
</plist>
 

Attachments

  • Disable_iCloud_Private_Relay.zip
    686 bytes · Views: 88

jelko

macrumors newbie
Nov 20, 2021
7
0
is there a way to DISABLE: screensharing message “Your screen is being observed” Mac once i access to someones computer? thanks
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.