Skip to main content
Question

Enable DLP profile in system preferences automatically

  • September 14, 2023
  • 4 replies
  • 95 views
Y
Forum|alt.badge.img+3

 

Hi everyone, 

 

I am trying to deploy DLP profile for Microsoft purview.
I follow this link to deploy profile with jamf:

https://learn.microsoft.com/en-us/purview/device-onboarding-offboarding-macos-jamfpro-mde

I can see both profile on mac os (see image)

 but by default its OFF. I have to enable it manually (Asking for admin password).

Is there anyway I can enable it with a script i can deploy from JAMF pro ?

Thanks

    4 replies

    J
    Forum|alt.badge.img+14
    • jtrant
    • Honored Contributor
    • September 14, 2023

    Deploy the preferences using an MDM profile, not a script - Computers > Configuration Profiles. From there, choose the "Privacy Preferences Policy Control" payload for Full-Disk Access and Accessibility for that part of things. You can also simply upload the sample profiles provided by Microsoft.

    Note that whatever you push via MDM does not show up in the GUI. If you don't get prompted on a fresh Mac with the profile installed, you're good to go. You can verify that the profiles are installed by going to System Settings > Privacy & Security > Profiles.

    Y
    Forum|alt.badge.img+3
    • Yvan
    • Author
    • New Contributor
    • September 15, 2023

    Hi - profiles are deployed withtout any issue.
    With PPPC - I can make it availble for end-user without admin right but i can't force it to ON (enable) - or I dont know how.
    Thanks

    J
    Forum|alt.badge.img+14
    • jtrant
    • Honored Contributor
    • September 15, 2023

    Hi - profiles are deployed withtout any issue.
    With PPPC - I can make it availble for end-user without admin right but i can't force it to ON (enable) - or I dont know how.
    Thanks


    If you're deploying PPPC via MDM, the settings are forced, regardless of what you see in the UI. What you're seeing is manually-added Full-Disk Access and Accessibility permissions.

    Please see my previous reply in terms of testing and verifying that the profiles are applied.

    Y
    Forum|alt.badge.img+3
    • Yvan
    • Author
    • New Contributor
    • September 18, 2023

    Hi - What I tought - when you deploy a PPPC profile - it will allow standart user to toogle ON without admin right but it wont enable it automatically.
    Thats what I have for instance with screensharing with Teams apps - user can enable it but by default its not enable.
    Thanks

    Terms & ConditionsCookie settingsAccessibility statement