Permanently disable iCloud Private Relay

[bogdanw]

This is not about why, but about how.
Apple provides instructions on how to Turn Off Private Relay here https://support.apple.com/HT212614
However, there is another way, creating and installing a .mobileconfig profile that can disable it for all users of a Mac, as long as the profile is installed.
The value allowCloudPrivateRelay is mentioned by Apple here https://developer.apple.com/documentation/devicemanagement/restrictions
and better explained by Microsoft here https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-macos
Profiles can be created with the Apple Configurator https://apps.apple.com/app/apple-configurator-2/id1037126344
ProfileCreator https://github.com/ProfileCreator/ProfileCreator
other software or with any txt editor.
In TextEdit, make a new document, select the Plain text format (https://support.apple.com/guide/textedit/change-textedit-preferences-txted1063/1.17/mac/12.0) copy-paste the text below and save it as Disable-iCloud-Private-Relay.mobileconfig or other meaningful name.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDescription</key>
            <string>Configures restrictions</string>
            <key>PayloadDisplayName</key>
            <string>Restrictions</string>
            <key>PayloadIdentifier</key>
            <string>My.Restrictions.Payload.2</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>PayloadUUID2</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>allowCloudPrivateRelay</key>
            <false/>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Disables iCloud Private Relay</string>
    <key>PayloadDisplayName</key>
    <string>Disable iCloud Private Relay</string>
    <key>PayloadIdentifier</key>
    <string>My.Restrictions.Payload.1</string>
    <key>PayloadOrganization</key>
    <string>NotApple</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>PayloadUUID1</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

The only thing to keep in mind is that PayloadUUIDs have to be unique, you cant’t have two profiles with the same PayloadUUID installed on your system.
To install, double-click it and then authorize its installation from System Preferences – Profiles, where it shows up like this


User log out is recommended for the changes to take effect and should be visible in Apple ID like this


To reenable iCloud Private Relay, remove the profile from System Preferences – Profiles.

 

[one more]

Why not simply use an ON/OFF switch in Settings > Your Name (at the very top) > iCloud?

 

[bogdanw]

Why not simply use an ON/OFF switch in Settings > Your Name (at the very top) > iCloud?

I mentioned the official Apple instructions in the second sentence of the post.
Some reasons to use a profile:
- as per official page, at this moment (13 May 2022), “iCloud Private Relay is [...]currently in beta”. One of the many bugs was not being able to turn it off as per instructions or being turned off, but showing as active in System Preferences – Network.
- the profile survives system updates and log off/log into iCloud for any account
- it disables iCloud Private Relay for all users of a Mac with Monterey, not just for the current one. That’s useful for a family computer, for example.

 

[oscarodas]

Created the document but when double click it opens it and can't see anything on System Settings.

 

[bogdanw]

Created the document but when double click it opens it and can't see anything on System Settings.

I don’t have Sonoma at the moment. In Ventura, Profiles are in System Settings – Privacy & Security - scroll all the way down - Profiles, Double-click to review & Install.

The attached profile was created with iMazing Profile Editor and tested in Ventura.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDisplayName</key>
            <string>Restrictions</string>
            <key>PayloadIdentifier</key>
            <string>com.apple.applicationaccess.B1B1B1B1-85C1-4E64-87A7-05BD1A74D8F0</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>B1B1B1B1-85C1-4E64-87A7-05BD1A74D8F0</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>allowCloudPrivateRelay</key>
            <false/>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Disable iCloud Private Relay</string>
    <key>PayloadDisplayName</key>
    <string>Disable_iCloud_Private_Relay</string>
    <key>PayloadIdentifier</key>
    <string>Mac.A0A0A0A0-77E8-441C-9902-E53EF8826008</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>A0A0A0A0-77E8-441C-9902-E53EF8826008</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>TargetDeviceType</key>
    <integer>5</integer>
</dict>
</plist>

 

[jelko]

is there a way to DISABLE: screensharing message “Your screen is being observed” Mac once i access to someones computer? thanks

 

[bogdanw]

is there a way to DISABLE: screensharing message “Your screen is being observed” Mac once i access to someones computer? thanks

There is another thread for that https://forums.macrumors.com/thread...ge-your-screen-is-being-observed-mac.2324292/