Jamf Connect 2.45 SecurityAgentHelper Popup

[PaulHazelden]

I am testing Connect 2.45 and have had a popup appear on the Login Screen.
Its a really "Helpful" Popup.

All it says is SecurityAgentHelper wants to make changes, and it asks for an Administrator username and password.

None of my users are Administrators, so they will not be able to fill this in.
Is this a bug?

Is there a way to fix it so that it does not pop up?

What process is it that wants this access?

Thanks

Paul

 

[Valcovish · Accepted solution]

Hey there Paul,

Are you deploying Jamf Connect 2.45 by creating the package yourself and then pushing it via a policy? If so, you might want to consider using Mac Apps -> Jamf App Catalog instead. It simplifies deployment since it will automatically install both the helper tool and the necessary configuration profile for Jamf Connect.

This method helps ensure that the required permissions are set properly, preventing users from encountering the SecurityAgentHelper popup requesting admin credentials. If you still need to deploy it manually, you might want to check if the PPPC (Privacy Preferences Policy Control) profile is configured correctly to grant the necessary permissions for Jamf Connect.

Let me know how it goes!

[PaulHazelden]

In this case I downloaded the pkg and pushed that out in a policy.
I will look at the Jamf Apps method. Thank you.

[PaulHazelden]

A push out of the Jamf Connect App from the Jamf Apps catalogue, with Install Supporting Config Profiles checked,  fixed the issue.
Thank you @Valcovish 

[shannon_pasto]

I just installed 2.45 using the pkg and I didn't receive this pop-up. I know you have a solution but perhaps there's something missing in your deployment? Some more information would be helpful

[ManuelBrotz]

We have the same problem. Does anybody know how to manually create a config profile to solve this? We have some machines where jamf connect is installed via policy instead of mac apps.

[PaulHazelden]

You can have more than one instance of an app in the Jamf apps section. I now have three of Jamf Connect, one for testing and the other two are for classrooms and laptops. So whilst the Jamf Apps section can only use one group for distribution, you can have the app there multiple times and send them out to different groups. All you do is rename the app when you first set it up, I simply added Classrooms, Testing and Laptops to the end of the App name.

I do not know exactly what is required in a PPPC profile to fix it with a distribution of a profile.

[user-mmQHlqLPWS]

Having this issue with my org as well, I have a test device that is pretty much clean from any config profiles but still asks for this when I deploy the Jamf Apps version of Connect. Currently with Jamf Support to see if they are able to figure something out.

[ManuelBrotz]

Uninstalling and reinstalling Jamf Connect does not help at all. Would appreciate to hear from you what Jamf Support is saying.

[user-mmQHlqLPWS]

I think this is more on Apple's side. Most of our org devices use Ethernet, but there are a few setups that rely only on Wi-Fi. For the Ethernet setups, we completely disabled AirPort for Wi-Fi, and the prompt seems to only appear on Wi-Fi-enabled devices.

It turns out we also had the "Requires Admin Authorization To: Turn Wi-Fi ON or OFF" setting enabled. After turning it off, the prompt stopped appearing.

I'm currently looking into granting access to the helper via a separate PPPC to see if that resolves the issue. If not, we’ll likely disable this setting across all devices.

[ManuelBrotz]

I can confirm that enabling the setting "Requires Admin Authorization To: Turn Wi-Fi ON or OFF" is the cause of the popup! I have disabled it, and the popup no longer appears!

Thank you very much!