Gatekeeper Override

rkeleghan
New Contributor III

Hi all,

looking to see if anyone has successfully setup / deployed the config profile for disabling the gatekeeper override?
i have tried both JAMF UI and Apple doc - https://developer.apple.com/documentation/devicemanagement/systempolicymanaged

but both seem to be not applying ...

Back story - 
Im tasked by security to see if i can remove the "open" button when a user downloads a unidentified developer app and either right clicks and open or control clicks and opens ..

Any pointers are much welcomed..

 

rk

1 ACCEPTED SOLUTION

BLongCP
New Contributor II

com.apple.systempolicy.managed

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>DisableOverride</key>
	<true/>
</dict>
</plist>

 This is working for me. 

View solution in original post

6 REPLIES 6

mm2270
Legendary Contributor III

You've tried using this option in the Security & Privacy payload, and it's not working?

mm2270_0-1653488488706.png

 

rkeleghan
New Contributor III

@mm2270 .. 

Thanks for coming back .. I dont seem to have the option under "Security & Privacy" but I do have ...
"Temporarily overriding the Gatekeeper setting by control-clicking to install any app" below the gatekeeper settings .. when i enable and restrict this setting it's not applied..

My jamf pro 10.37.2

Thanks

Rob

mm2270
Legendary Contributor III

Ah, yeah, I'm still on an older version of Jamf Pro, so the options are a little different. I'm looking on a more recent version and I see that the labeling of that option changed. I'll have to test this out under 10.37 or 10.38 to see why that may not be applying. I think you did the right thing by enabling the option and choosing "Restrict" just to be clear. That's what I would have done and assumed would work.

BLongCP
New Contributor II

com.apple.systempolicy.managed

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>DisableOverride</key>
	<true/>
</dict>
</plist>

 This is working for me. 

rkeleghan
New Contributor III

@BLongCP - Thanks for the plist!

Seems to be working now! 

rk

rkeleghan
New Contributor III

@BLongCP Thanks for the above! Seems to be working now!