Blocking/Remove Boot Camp ablities I'm looking for a way to prevent Boot Camp from being used on a mac. IDEALLY while keeping the user as an admin (or close to it). The issue I see is that basic user access is too restrictive and admin is too liberal. Users should be trusted to install their own apps yet I don't want them booting from a different partition.
I've tried to delete Boot Camp Assistant but that is restricted, even when using csrutil. I can't even set the permissions on it.
Any ideas on how to disable or remove it while allowing users to install other apps?
I saw How to disable Boot Camp and prevent any other OS installations? but it doesn't have an accepted answer (because it doesn't answer the question)
One of the simplest methods of preventing the use of Boot Camp Assistant to install Windows on a drive is to create a Fusion Container on the drive and install macOS into this container. Normal, a Fusion Container is composed of a partition on a SSD and another partition on a HDD. Here, I intend for the Fusion Container to have both partitions on a single drive.
The Boot Camp Assistant requires very specific partitioning arrangements to exist before allowing Windows to be installed. The configuration I propose would not meet the requirements. Also, a user would not be able to change the partitioning from macOS to meets the requirements.