With how much user interaction Apple requires on macOS. Apple really needs to bake something like this in to the OS. Either direct a user how to deal with a popup, or provide a link that will send the user to an Apple page with screenshots or a video on how to do the thing (apples text walls are not good enough).
Hello @JRM5513 !
Thank you for this!
I have some questions:
I tried to test this on Jamf Pro and it looks like we will still need Terminal for Full Disk Access.
From above script, I thought we need Full Disk Access when testing on Terminal but when I tried to run this on Jamf Pro, it looks like we need Full Disk Access on Terminal either way to complete.
Are you able to get this running without Full Disk Access on Terminal when pushing from Jamf Pro?
Running script Google Chrome (Google Meet) Screen Recording Prompt... Script exit code: 0 Script result: Error: unable to open database "/Library/Application Support/com.apple.TCC/TCC.db": authorization denied Waiting for 2... Opening Screen Recording Privacy 0 Error: unable to open database "/Library/Application Support/com.apple.TCC/TCC.db": authorization denied Waiting for 2... Opening Screen Recording Privacy 0 Error: unable to open database "/Library/Application Support/com.apple.TCC/TCC.db": authorization denied Waiting for 2... Opening Screen Recording Privacy 0 Google Chrome permission has been enabled |
1st try Error: Chrome uncheck (Screen Recording) and Terminal unchecked (Full Disk Access)
2nd try Error again: Chrome check (Screen Recording) but Terminal unchecked (Full Disk Access)
3rd try Successful: Chrome check (Screen Recording) and Terminal checked (Full Disk Access)
Issue with this is:
We cannot push users to checkmark Full Disk Access on Terminal without the prompt when end users can't even checkmark Chrome 😂
Running script Google Chrome (Google Meet) Screen Recording Prompt... Script exit code: 0 Script result: Error: unable to open database "/Library/Application Support/com.apple.TCC/TCC.db": authorization denied Waiting for 2... Opening Screen Recording Privacy 0 Error: unable to open database "/Library/Application Support/com.apple.TCC/TCC.db": authorization denied Waiting for 2... Opening Screen Recording Privacy 0 Error: unable to open database "/Library/Application Support/com.apple.TCC/TCC.db": authorization denied Waiting for 2... Opening Screen Recording Privacy 0 Google Chrome permission has been enabled |
1st try Error: Chrome uncheck (Screen Recording) and Terminal unchecked (Full Disk Access)
2nd try Error again: Chrome check (Screen Recording) but Terminal unchecked (Full Disk Access)
3rd try Successful: Chrome check (Screen Recording) and Terminal checked (Full Disk Access)
Issue with this is:
We cannot push users to checkmark Full Disk Access on Terminal without the prompt when end users can't even checkmark Chrome 😂
Hello sudoErase,
If you are pushing it with Jamf, yon don't need to allow Terminal full disk accesses, but the Jamf agents instead. With the help of PPPC Utility, I would create a configuration profile for the following binaries :
/Library/Application Support/JAMF/Jamf.app
/usr/local/jamf/bin/jamf
A similar profile was already deployed on my computer before I created the script, maybe that's why I didn't have error. I will update the original post if fixes your issue.
Hello sudoErase,
If you are pushing it with Jamf, yon don't need to allow Terminal full disk accesses, but the Jamf agents instead. With the help of PPPC Utility, I would create a configuration profile for the following binaries :
/Library/Application Support/JAMF/Jamf.app
/usr/local/jamf/bin/jamf
A similar profile was already deployed on my computer before I created the script, maybe that's why I didn't have error. I will update the original post if fixes your issue.
Do you have the profile again? I was cleaning my computer and lost it. It looks like the site is down. :(
Do you have the profile again? I was cleaning my computer and lost it. It looks like the site is down. :(
I have!
