I want to make it so that the user cannot connect to any other network other than the specified network. I know I can do this with GUI by removing preferred networks, but this way, I will have to do it for every single one of them. It will be even harder when more networks keep showing up in the networks list.

Is there a method that lets the Mac block every single network and only lets the user connect to specified networks? See the answer in the link below where the guy is doing this through a script for a single network at a time by periodically running the script. Is it possible to do this for all networks?

How to completely block specific Wi-Fi SSID on macOS?

  • If you have only one machine to manage, I still recommend the MDM method, since it's really the best way to script things - but for only one machine you could also make a second account, prevent anyone from knowing the admin password and just lock network preferences entirely. Since you're already scripting, I figured I'd do the pro path for you.
    – bmike
    Nov 22, 2020 at 20:53
  • Thank you. I think I can go with this one for now, and will follow the other method in the mean time. Nov 22, 2020 at 21:29

1 Answer 1


I prefer to do this with MDM supervision as that’s the easiest way.

I would start with the free JAMF Now trial since I’ve used it but I hear great things about FleetSmith.

Here is the specific portion of MDM that lets you disable WiFi and push only the approved networks to each managed device.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .