Firewall Settings Changing Without Admin Approval

Question

Level 1

10 points

Firewall Settings Changing Without Admin Approval

so I have a Mac mini m2 pro 2023 desktop and MacBook Air m2 2022 as well, and both devices constantly even since erasing and reinstalling the os

on both numerous times , enabling password authentication to make any setting changes and block all incoming connections and in stealth mode but consistently the devices will have that off as well as allowing installation of apps not only from the App Store like I set. Typically it’s airhost.app , ssh-keygenwrapper, remoted, universal control, sharingd, and netbiosd . I have never had privacy settings to allow

remote connections or use my devices anything but securely. I use a firewall router and have trend micro apex one as a service deployed on all my windows devices and synology NAS drive . I work from

home as an insurance broker and work on zoom and collect sensitive information so the security of my devices is important and id appreciate any assistance . Advanced troubleshooting methods are okay for me to use. I’m experienced with networking and windows and linux machines - not so much with Apple. Look forward to

the help, and thanks in advance

Mac mini

Posted on Aug 29, 2023 9:16 PM

Reply

Answer 1

jprime4 Author

Level 1

10 points

Aug 31, 2023 12:10 AM in response to ku4hx

ok its weird. I run EtreCheck scans on my MacBook Air m2 running Ventura and this device has the same issues as the Mac and as did my other Mac I don't use with this network or Apple ID any longer , but it detected issues when I was signed in as usual but with all programs besides my browser open and then same environment just logged out of my apple ID on the device and removing the iCloud files from my device it detected 'no issues'. I have a couple of Mac USB installers arriving tomorrow and the next day and are genuine apple OS installers. How would one suggest to best 'fresh' start my devices and remove any remanences of any connections or persistent connections that seem to have been developed given the fact that features like handoff are always turned on as well despite needing admin password and other changes that should not be occurring and no network wake enabled either , I run a tight ship on my network or try to. any software I can use to narrow this down as apple hasn't been of much help . check out the scans everyone. please please any advice is appreciated !

EtreCheck Pro Scan detected some strange things

être scan signed OUT of apple ID (none)

Reply