Skip to main content
Question

Policy Banner Pre filevault login

  • Dec 1, 2023 5:25 AM UTC
  • 5 replies
  • 155 views

aburrow007
Forum|alt.badge.img+4

We've been using the Apple solution - How to set up policy banners in macOS – Apple Support (AU)

To apply a policy banner at login since we started using Jamf Pro.

Recently we implemented Jamf Connect which as you know uses the policy banner.

What I'm seeing though is the policy banner is appearing before filevault login (which everything I've read says shouldn't happen).  It then appears as it should in Jamf Connect.

It's only happening on Apple Silicon and only since Jamf Connect (I'm sure it's a coincidence), but wanted to see if anyone else is having/seeing the same issue?

5 replies

DBrowning
Forum|alt.badge.img+26
  • Esteemed Contributor
  • Dec 1, 2023 12:34 PM UTC

Been seeing this ever since Apple Silicon.  I opened a bug with Apple but nothing has come of it.


aburrow007
Forum|alt.badge.img+4
  • Author
  • Jamf Heroes
  • Dec 19, 2023 5:54 AM UTC

Been seeing this ever since Apple Silicon.  I opened a bug with Apple but nothing has come of it.


DBrowning,

Thanks, as it doesn't look like it's going to be resolved anytime soon, I'll reconfigure Jamf Connect so that it doesn't use the Policy Banner but points to another location and remove the Policy Banner


Forum|alt.badge.img+4
  • Contributor
  • Dec 29, 2023 8:25 PM UTC

Plus one for this issue, I will be raising it with Apple shortly


Forum|alt.badge.img+4
  • Contributor
  • Dec 29, 2023 11:53 PM UTC

@aburrow007 may I ask why you chose to remove the policy banner?


aburrow007
Forum|alt.badge.img+4
  • Author
  • Jamf Heroes
  • Jan 8, 2024 4:03 AM UTC

@aburrow007 may I ask why you chose to remove the policy banner?


jezza,

JamfConnect by default uses the same file "/Library/Security/PolicyBanner.*"

As users have started to see it prior to filevault login (which shouldn't happen) and then again as part of the JamfConnect login flow it was a nuisance.  I moved the file to another location so that it wasn't appearing at filevault stage and updated the configuration profile for JamfConnect to point at the new file location.  It now only appears as part of the JamfConnect login flow.