macOS - Privacy Preference Policy Controls - MDM Settings Catalog

Zaidan258 

Working with the Microsoft InTune Engineers, I’ve been gradually stepping back through the technological advances and went right back to basics.

I created a .mobileconfig file using JAMF’s free PPPC Utility app and was able to apply that as a Custom Template, which seems to have worked for Microsoft Teams.

This is the result of my findings then from the newest Technology, working backward:

1. Configuration Profiles > macOS > Settings Catalog > Privacy Preferences policy Control >>> This is delivered (according to the Microsoft Team) but not applied. Microsoft Engineers are investigating with a view to fixing it.
2. Configuration Profiles > macOS > Template > Device Restrictions >>> This is applied and Accessibility is applied but Screen Recording cannot be applied to an 'Allow' state. A non-Admin user cannot switch Screen Recording on without some Admin credentials which is the exact opposite of what this is intended to do.
3. Configuration Profiles > macOS > Custom Policy > Upload .mobileconfig file >>> This is applied, the settings for Accessibility and Screen Recording are applied as 'Allow'.
1. Screen recording for the apps is shown in System Settings > Security and Privacy > Screen Recording.
2. It can be controlled (on/off) by a non-Admin user

Option 3, while it appears to be the oldest technology and the one that has the most complicated steps, in terms of generating the .mobilconfig file does appear to work as required.

This is it so far.

I'm hoping for an update from the Intune Engineers this week.

HTH

Stephen