Sometimes as part of troubleshooting mobile device management (MDM) problems, you need to look at the list of installed profiles to make sure the profile you need is actually installed. On macOS Sequoia, the list of installed profiles appears in System Settings: General: Device Management.

But where do you go to look for declarative device management (DDM) settings that have been deployed to your Mac? Those can also be looked up via System Settings: General: Device Management, by locating the MDM enrollment profile in the list of profiles and double-clicking on it.

When you scroll to the bottom of the enrollment profile’s window, you should see a Device Declarations section. That’s where you’ll be able to see what DDM-deployed settings have been applied to your Mac. For example, if you’re deploying configurations for the sudo command line tool, you should see a Device Declarations section, with a listing for Configuration Files: com.apple.sudo.

If you click on the Configuration Files: com.apple.sudo listing, it should provide the path to the tamper-resistant directory where it stored the DDM-deployed configuration file for the sudo command line tool. This should be the following location:

/private/var/db/ManagedConfigurationFiles/com.apple.sudo

If you’re deploying a software update plan via DDM, you should see a listing for that software update plan in the Device Declarations section.

If you click on that listing, you should see the details of the plan.