Skip to main content
Solved

Gatekeeper Override

  • May 25, 2022
  • 6 replies
  • 46 views
R
Forum|alt.badge.img+5

Hi all,

looking to see if anyone has successfully setup / deployed the config profile for disabling the gatekeeper override?
i have tried both JAMF UI and Apple doc - https://developer.apple.com/documentation/devicemanagement/systempolicymanaged

but both seem to be not applying ...

Back story - 
Im tasked by security to see if i can remove the "open" button when a user downloads a unidentified developer app and either right clicks and open or control clicks and opens ..

Any pointers are much welcomed..

 

rk

Best answer by BLongCP

com.apple.systempolicy.managed

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisableOverride</key> <true/> </dict> </plist>

 This is working for me. 

    6 replies

    mm2270
    Forum|alt.badge.img+24
    • mm2270
    • Legendary Contributor
    • May 25, 2022

    You've tried using this option in the Security & Privacy payload, and it's not working?

     

    R
    Forum|alt.badge.img+5
    • rkeleghan
    • Author
    • Contributor
    • May 25, 2022

    @mm2270 .. 

    Thanks for coming back .. I dont seem to have the option under "Security & Privacy" but I do have ...
    "Temporarily overriding the Gatekeeper setting by control-clicking to install any app" below the gatekeeper settings .. when i enable and restrict this setting it's not applied..

    My jamf pro 10.37.2

    Thanks

    Rob

    mm2270
    Forum|alt.badge.img+24
    • mm2270
    • Legendary Contributor
    • May 25, 2022

    Ah, yeah, I'm still on an older version of Jamf Pro, so the options are a little different. I'm looking on a more recent version and I see that the labeling of that option changed. I'll have to test this out under 10.37 or 10.38 to see why that may not be applying. I think you did the right thing by enabling the option and choosing "Restrict" just to be clear. That's what I would have done and assumed would work.

    R
    B
    Forum|alt.badge.img+3
    • BLongCP
    • New Contributor
    • Answer
    • May 25, 2022

    com.apple.systempolicy.managed

    <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisableOverride</key> <true/> </dict> </plist>

     This is working for me. 

    aparten11
    R
    R
    Forum|alt.badge.img+5
    • rkeleghan
    • Author
    • Contributor
    • May 26, 2022

    @BLongCP - Thanks for the plist!

    Seems to be working now! 

    rk

    aparten11
    R
    Forum|alt.badge.img+5
    • rkeleghan
    • Author
    • Contributor
    • May 26, 2022

    @BLongCP Thanks for the above! Seems to be working now!

    aparten11
    Terms & ConditionsCookie settingsAccessibility statement