Skip to main content

Hello everyone,


 

I've encountered an issue where some employees in our organization receive this notification on their MacBooks:


 



 

We are looking for a way to disable these notifications across multiple devices using Jamf Pro. Has anyone else faced this issue or found a solution to manage or suppress these alerts through Jamf Pro configurations?


Any guidance or advice would be greatly appreciated.


Thank you!


As far as I can tell, the forceBypassScreenCaptureAlert MDM key doesn't suppress these notifications fully, only the initial prompt. The root cause is the fact that the installed version of Teams is using the outdated ScreenCapture API, so you'll need to update Teams to fully resolve.


 


We are seeing these alerts caused by the "logger" process in Proofpoint DLP. We deployed a profile earlier this year to all Macs running Sequoia to stop these alerts. I guess Proofpoint is also using an outdated ScreenCapture API. One other characteristic of Proofpoint DLP is that it will launch System Settings - Privacy & Security and turn on screen recording access for itself. To a user, this looks like someone has taken control of their Mac. I caught this behavior in a screen recording. I left my test Mac running with an active screen recording running for about 20 minutes. During that time, the "logger" process gave itself screen recording access. Since only the user can do this, it must be running as the user. This seems like something Apple would want to block from happening.


Reply