I ended up having to run this for a couple users. Basically reset the Teams TCC data.
I have a Config Profile set to push down the Teams settings. I needed a way to reset the TCC Teams settings but the config profile would always over rule. I got around this by using the script to remove the machine from the scope of the config profile, make the change and then put the machine back in scope. I cobbled it together from a bunch of other suggestions.
The script below will: quit Teams, create a dummy receipt, run a Jamf recon to add the machine to the smart group for exclusion, reset the TCC settings for Teams, quit System Preferences (if it gets opened), create a new dummy receipt to mark completed and remove the original dummy receipt, and finally run a Jamf Recon. The last recon will remove the machine from the config profile exclusions and allow the Teams config profile to be installed again.
I have this script in a policy that's available to the users, so all they have to do is run it. Once this is complete, have the user open Teams again and they should be prompted to accept the new Screen Recording authentication. If it doesn't prompt, have them join a meeting then click the Share Content button. It's worked for the few users I've tested with on 10.15.6.
If you're not using a config profile for Teams, you could just remove the dummy receipts and the recon's from the script and run that.
Smart Groups Used:
macOS - TCC_ScreenCap - Reset Needed
- Criteria: Package installed by casper - HAS - jamf.mgmt.tcc_acc_screencap_resetcompleted.pkg
--- Exclude this group from your Teams config profile
macOS - TCC_ScreenCap - Reset Completed
- Criteria: Package installed by casper - HAS - jamf.mgmt.tcc_acc_screencap_resetcompleted.pkg
--- This group isn't really needed, I'm just curious and wanted to be able to track how many times it was used.
#!/bin/bash
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Reset the TCC / Accessibility and Screen Recording settings
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Quit the Microsoft Teams App
/usr/bin/osascript -e 'quit app "Microsoft Teams"'
#Set a package receipt to modify smart computer group membership
/usr/bin/touch /Library/Application Support/JAMF/Receipts/jamf.mgmt.tcc_acc_screencap_resetneeded.pkg
#Run Jamf Recon to update Smart Computer membership
/usr/local/jamf/bin/jamf recon
sleep 5
#Use TCCUTIL to reset the Security & Privacy > Accessibility
/usr/bin/tccutil reset Accessibility com.microsoft.teams
#Use TCCUTIL to reset the Security & Privacy > Screen Recording
/usr/bin/tccutil reset ScreenCapture com.microsoft.teams
# Quit the System Preferences App
/usr/bin/osascript -e 'quit app "System Preferences"'
#Set a package receipt to modify smart computer group membership
/usr/bin/touch /Library/Application Support/JAMF/Receipts/jamf.mgmt.tcc_acc_screencap_resetcompleted.pkg
#Remove the previous Jamf receipt for reset needed
rm -fr /Library/Application Support/JAMF/Receipts/jamf.mgmt.tcc_acc_screencap_resetneeded.pkg
#Run Jamf Recon to update Smart Computer membership
/usr/local/jamf/bin/jamf recon
exit 0
