Gatekeeper Override

[rkeleghan]

Hi all,

looking to see if anyone has successfully setup / deployed the config profile for disabling the gatekeeper override?
i have tried both JAMF UI and Apple doc - https://developer.apple.com/documentation/devicemanagement/systempolicymanaged

but both seem to be not applying ...

Back story - 
Im tasked by security to see if i can remove the "open" button when a user downloads a unidentified developer app and either right clicks and open or control clicks and opens ..

Any pointers are much welcomed..

rk

[mm2270]

You've tried using this option in the Security & Privacy payload, and it's not working?

[rkeleghan]

@mm2270 .. 

Thanks for coming back .. I dont seem to have the option under "Security & Privacy" but I do have ...
"Temporarily overriding the Gatekeeper setting by control-clicking to install any app" below the gatekeeper settings .. when i enable and restrict this setting it's not applied..

My jamf pro 10.37.2

Thanks

Rob

[mm2270]

Ah, yeah, I'm still on an older version of Jamf Pro, so the options are a little different. I'm looking on a more recent version and I see that the labeling of that option changed. I'll have to test this out under 10.37 or 10.38 to see why that may not be applying. I think you did the right thing by enabling the option and choosing "Restrict" just to be clear. That's what I would have done and assumed would work.

[BLongCP · Accepted solution]

com.apple.systempolicy.managed

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>DisableOverride</key>
	<true/>
</dict>
</plist>

 This is working for me. 

[rkeleghan]

@BLongCP - Thanks for the plist!

Seems to be working now! 

rk

[rkeleghan]

@BLongCP Thanks for the above! Seems to be working now!