Forum Discussion
macOS - Privacy Preference Policy Controls - MDM Settings Catalog
Working with the Microsoft InTune Engineers, I’ve been gradually stepping back through the technological advances and went right back to basics.
I created a .mobileconfig file using JAMF’s free PPPC Utility app and was able to apply that as a Custom Template, which seems to have worked for Microsoft Teams.
This is the result of my findings then from the newest Technology, working backward:
- Configuration Profiles > macOS > Settings Catalog > Privacy Preferences policy Control >>> This is delivered (according to the Microsoft Team) but not applied. Microsoft Engineers are investigating with a view to fixing it.
- Configuration Profiles > macOS > Template > Device Restrictions >>> This is applied and Accessibility is applied but Screen Recording cannot be applied to an 'Allow' state. A non-Admin user cannot switch Screen Recording on without some Admin credentials which is the exact opposite of what this is intended to do.
- Configuration Profiles > macOS > Custom Policy > Upload .mobileconfig file >>> This is applied, the settings for Accessibility and Screen Recording are applied as 'Allow'.
- Screen recording for the apps is shown in System Settings > Security and Privacy > Screen Recording.
- It can be controlled (on/off) by a non-Admin user
Option 3, while it appears to be the oldest technology and the one that has the most complicated steps, in terms of generating the .mobilconfig file does appear to work as required.
This is it so far.
I'm hoping for an update from the Intune Engineers this week.
HTH
Stephen
Could you please maybe provide me the .mobileconfig that you have created so maybe i can try to apply it and test ?
- Glad to be able to help.
If you get anywhere with Microsoft, an update in this would be most useful. - AH ok! Thanks a lot, i was just confused regarding the settings in the PPPC Tool beacuase this option does not exist. I would assume that you have just replaced the parameters in the XML.
Thanks a lot for the support and i will befollwoing this flow up regarding the standrd solution from Microsoft, at some point this has to work 🙂 It's now called Screen Recording in the Settings on the Mac
Looks like they haven't updated the XML to match
I've taken the file down as I've just noticed our Org name is shown in it.
I appreciate your discretion.
- Thanks a lot. this has worked for me.
I only have one question more, i have read the Config file and it seems like you have a Screen Capture Parameter in the PPPC Toll an i am using the same tool but i can' find this oprion, there is only screen recording and that's it. Does the Toll has some update or something ?