#!/bin/bash RED='\033[0;31m' GRN='\033[0;32m' BLU='\033[0;34m' NC='\033[0m' echo "" echo -e "监管机一站式自动化工具" echo "" PS3='Please enter your choice: ' options=("自动绕过（恢复模式）" "屏蔽通知（桌面模式）" "屏蔽通知（恢复模式）" "查看监管状态" "退出") select opt in "${options[@]}"; do case $opt in "自动绕过（恢复模式）") echo -e "${GRN}自动绕过（恢复模式）" if [ -d "/Volumes/Data" ]; then diskutil rename "Data" "Data" fi echo -e "${GRN}创建新用户" echo -e "${BLU}请按下回车继续" echo -e "请输入用户名 请使用纯英文且不包含特殊符号（默认:MacBook）" read realName realName="${realName:=MacBook}" echo -e "${BLUE}请输入用户名 ${RED}不允许字母间有空格和特殊符号，且保持与刚才输入的用户名一致！ ${GRN}（默认:MacBook）" read username username="${username:=MacBook}" echo -e "${BLUE}请输入密码（默认: 123456）" read passw passw="${passw:=123456}" dscl_path='/Volumes/Data/private/var/db/dslocal/nodes/Default' echo -e "${GREEN}创建用户中" # Create user dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" UserShell "/bin/zsh" dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" RealName "$realName" dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" RealName "$realName" dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" UniqueID "501" dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" PrimaryGroupID "20" mkdir "/Volumes/Data/Users/$username" dscl -f "$dscl_path" localhost -create "/Local/Default/Users/$username" NFSHomeDirectory "/Users/$username" dscl -f "$dscl_path" localhost -passwd "/Local/Default/Users/$username" "$passw" dscl -f "$dscl_path" localhost -append "/Local/Default/Groups/admin" GroupMembership $username echo "0.0.0.0 deviceenrollment.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 mdmenrollment.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 iprofiles.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 acmdm.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 albert.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo -e "${GREEN}成功隔绝本机与MDM服务器的通信${NC}" # echo "Remove config profile" touch /Volumes/Data/private/var/db/.AppleSetupDone rm -rf /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigHasActivationRecord rm -rf /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigRecordFound touch /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigProfileInstalled touch /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigRecordNotFound launchctl disable system/com.apple.ManagedClient.enroll echo "---------------------------" echo -e "${CYAN}------ 成功自动绕过 ------${NC}" echo -e "${CYAN}------ 在终端手动输入reboot进行重启！ ------${NC}" break ;; "屏蔽通知（桌面模式）") echo -e "${RED}请直接输入您的密码以继续（此处输入不会显示状态，请直接键入并按下回车）${NC}" sudo profiles remove -all sudo rm /var/db/ConfigurationProfiles/Settings/.cloudConfigHasActivationRecord sudo rm /var/db/ConfigurationProfiles/Settings/.cloudConfigRecordFound sudo touch /var/db/ConfigurationProfiles/Settings/.cloudConfigProfileInstalled sudo touch /var/db/ConfigurationProfiles/Settings/.cloudConfigRecordNotFound launchctl disable system/com.apple.ManagedClient.enroll echo "------ 上述如果报错为正常现象，并代表屏蔽成功 ------" echo -e "${CYAN}------ 成功屏蔽通知 ------${NC}" echo -e "${CYAN}------ 重启电脑即可正常使用，享受吧！ ------${NC}" break ;; "屏蔽通知（恢复模式）") echo "0.0.0.0 deviceenrollment.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 mdmenrollment.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 iprofiles.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 acmdm.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts echo "0.0.0.0 albert.apple.com" >>/Volumes/Macintosh\ HD/etc/hosts rm -rf /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigHasActivationRecord rm -rf /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigRecordFound touch /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigProfileInstalled touch /Volumes/Macintosh\ HD/var/db/ConfigurationProfiles/Settings/.cloudConfigRecordNotFound launchctl disable system/com.apple.ManagedClient.enroll echo "------ 上述如果报错为正常现象，并代表屏蔽成功 ------" echo -e "${CYAN}------ 成功屏蔽通知，输入reboot并回车电脑便会自动重启 ------${NC}" echo -e "${CYAN}------ 进入桌面以后，打开终端，再次索要代码运行“屏蔽通知（桌面模式）”！ ------${NC}" break ;; "查看监管状态") echo "" echo -e "${GRN}查看监管状态，报错则代表屏蔽成功${NC}" echo "" echo -e "${RED}请输入您的密码以继续（此处输入不会显示状态，请直接键入并按下回车）${NC}" echo "" sudo profiles show -type enrollment break ;; "退出") break ;; *) echo "Invalid option $REPLY" ;; esac done