Posted on 01-22-2020 05:50 AM
Hi,
Using the script below I can silently install Google Drive on the workstations. I just run into the following problem, and that a pop-up appears from System Extension Blocked, in which I have to approve Google.
Is there a way to forcefully approve this in the script?
Thanks in advance.
# Script to download, Silent Install and then clean up once installed Google DrivE FileStream
#Make temp folder for downloads.
mkdir "/tmp/filestream/";
cd "/tmp/filestream/";
#Download filestream.
curl -L -o /tmp/filestream/GoogleDriveFileStream.dmg "https://dl.google.com/drive-file-stream/GoogleDriveFileStream.dmg";
#Mount, Install, and unmount GoogleDriveFileStream.dmg
hdiutil mount GoogleDriveFileStream.dmg;
sudo installer -pkg /Volumes/Install Google Drive File Stream/GoogleDriveFileStream.pkg -target "/Volumes/Macintosh HD";
hdiutil unmount /Volumes/Install Google Drive File Stream/;
#Tidy up
sudo rm -rf /tmp/filestream/
Posted on 09-08-2021 02:01 PM
Trying your Missing F right now, crossing fingers
Posted on 09-08-2021 02:19 PM
Even with that and a reboot, I am still seeing this:
Posted on 09-08-2021 02:44 PM
With M1 and Big Sur
Posted on 09-09-2021 10:35 AM
Still Nada with Big Sur and Intel
Posted on 09-09-2021 10:36 AM
Iam still trying also still havent found anything that is working
Posted on 09-08-2021 01:34 PM
I got one to work with an intel computer with 10.15 on it with a kext. I noticed that there is a letter missing in the com.google.drivefs.filesystems.dfsuse it should be
com.google.drivefs.filesystems.dfsfuse notice that there is a F missing from the first one. Never got anything about allowing and never had to go security and privacy to do anything
Posted on 09-08-2021 01:40 PM
Thanks! Actually you are totally right this is missing.
Posted on 09-08-2021 01:52 PM
Thank you for that trying now
Posted on 09-09-2021 07:53 AM
@Geissbuhler those are the same popups i get when installing google drive for desktop. I have users install google drive via self service (using the pkg provided directly by the google drive download).
I haven't applied any system extension config profile yet.
Did you apply the system extension config profile before installing google drive?
are you testing on both intel and m1 ?
Posted on 09-09-2021 08:56 AM
For me on my M1 with Big Sur i didnt have any system extensions profile sent to the computer just installed it and then it launched. On my Intel with 10.15 I put the profile on before i installed and there was no pop up. I then installed drive before the profile was sent to the computer and had a pop up. I quit Drive and then pushed the KEXT profile and relaunched drive and then I didnt get any pop ups. I am getting ready to try it on a Intel with Big Sur.
09-09-2021 08:58 AM - edited 09-09-2021 09:01 AM
Currently still at with the System Extension and PPPC config profile like above:
Big Sur on M1 = Works
Big Sur on Intel = Fails
Monterey Beta (21a5506j) on Intel = Works
Monterey Beta (21A5304g) on M1 = Works
Posted on 09-15-2021 08:13 AM
Still having issues with this. Getting this pop up telling us we need to approve it in Security and Privacy area.
When we go to Security and Privacy it isn't listed to allow.
Odd thing is we just setup a new MAC before it got put into DEP and Google Drive worked fine. It stopped working as soon as we wiped it and put it through DEP and had Jamf manage it. I've gone through each Profile on jamf and removed them from the MAC one by one and the only ones that are left on there are the default ones that Jamf installs.
Posted on 09-16-2021 06:52 AM
@Geissbuhler@konstantinb hi - i'm going to try the following system extension config profile on Big Sur M1 @ Intel machines. Let me know if any of it is extra stuff that i shouldn't need.
The third image is a little smaller because i wanted to include the whole 'system extensions' section in 1 screenshot.
Posted on 09-21-2021 08:34 AM
Having the same issue as the rest with intel macs on Big Sur, real head scratcher. Tried so many different settings in sysext but can't find a silent way to get this to work without a users manually accepting the new sysext and rebooting.
09-22-2021 08:59 AM - edited 09-22-2021 09:37 AM
I manually accept the system extension but when i go to terminal and put in systemextensionsctl list
i do not see anything for google drive !!!! does anyone else see this?
my system extension config profile doesn't work
Posted on 09-22-2021 09:52 AM
@Geissbuhler i'm testing with the PPC settings and the System Extensions settings - but only the 'allowed system extensions' like you have in your images.
do you see the system extensions listed in your terminal when you put in the command systemextensionsctl list ???
Posted on 10-14-2021 04:12 PM
Any update to this matter? Have a Intel MBP 11.6 where the user has nothing to approve in Sys Prefs...
Posted on 10-15-2021 12:50 AM
Our issues was we had multiple PPPC profiles being installed. It seems like all the PPPC settings have to be in one profile so if you have multiple bits of software that require PPPC settings then put them all into one profile. This seemed to fix it for us.
Posted on 10-15-2021 09:04 AM
I was able to fix it by deploying the Kernel Extension as follows:
Posted on 11-03-2021 09:03 AM
Sort of off topic/on topic, I made a thread for this but probably more useful posting it here.
I am trying to push Google Drive from Jamf using the scripts provided here, however when it asks for permissions (I am not at the point of making PPPC or system/kernal extensions), but when this pop up comes up:
"To approve, open System Preferences > Security & Privacy. Click the lock to make changes, and enter your administrator ID and password. Under the “General” tab, you’ll see that some system software requires your attention before it can be used. After you give approval, restart your computer."
There is no "allow" and Google Drive does not appear in the General tab where you would generally allow this. Has this happened to anyone/have any tips on how to resolve this?
Posted on 11-03-2021 09:15 AM
We have seen this and the only fix for us was to deploy the kernel extension per my screenshot above. Since Google Drive is widely used in our Org - it was necessary to deploy it to all Macs.
You could try resetting all your kext approvals in Recovery via Terminal and:
kmutil trigger-panic-medic -R “/Volumes/Macintosh HD”
All previously installed kexts will prompt the user to re-approve them when they are loaded or installed.
Posted on 11-03-2021 12:04 PM
I missed your response above with the config file, it would perfectly. Thanks you for sharing.
Posted on 11-14-2021 08:08 AM
@kevin_v @jlombardo did you apply that Kernel Extension to Big Sur running macs? did Google Drive prompt the user afterwards when they installed Google Drive for desktop?
I have Google Drive for Desktop in Self Service and whenever a BigSur user installs it there are all sorts of popups and even a restart prompt.
I have that kernel extension for Catalina
Posted on 11-18-2021 09:48 AM
Sorry haven't heard of any additional pop-ups with the above CP in place
11-23-2021 09:54 AM - edited 11-23-2021 10:01 AM
@kevin_v so you have that exact same configuration profile running on a BigSur intel Mac and it works?
I get nothing but system popups after installing google drive and then signing into my google drive account.
Once I sign into the google drive account then all the system popups to verify google drive was downloaded from google, then to approve the system extension and then restart.
so in total there is like 3 things that a user would have to do
1 - approve it was downloaded from google
2 - approve extension
3- restart
Posted on 02-05-2022 08:25 PM
Fun fact, if you mess up your hosts file, Google Drive will fail to load on an M1 Mac (macOS 12.2) and complain about the system extension, despite having a PPPC profile.
I had to regenerate the "127.0.0.1 localhost" definition before Google Drive would load off-campus (for some reason it would load fine on the campus network but not offsite).
Just leaving this here in case it helps another user or frustrated googler.