Screen & System Audio Recording Script

[Chillbot500]

Hi team

I think I already know the answer to this one (cheers Apple for that brick wall) but asking anyway as there are smarter brains at work here than I :)

Using Display Link for dock drivers and keen to know if System settings to enable Display Link Manager (And Jamf Remote Assist for that matter) can be scripted as part of the app policy in Jamf Pro? 

[elliotjordan]

Depends on which specific PPPC allowances the app needs.

Camera, Microphone, and Screen Recording permissions can only be denied by MDM. Approvals must be done manually by the user. See the Apple Platform Deployment documentation.

Apple's Device Management documentation also includes ListenEvent as a deny-only permission.

However, if the app needs other permissions than those, you may be able to do that using a PPPC profile, system extension profile, or similar.

[sdagley]

You might find some older posts regarding directly manipulation of the database used to store PPPC settings, but it's a safe bet that Apple has closed all of the security holes which allowed that access, and any newly discovered ones would also be quickly fixed so looking for a technical way around the limitations of PPPC settings is a waste of time. Better off to focus on educating users on the process for enabling the needed access. 

[Tangentism]

Exactly this.

Work on adapting user behaviour rather than trying to break Apples security.

Theres tools such as Screen Nudge that can prompt the user to enable screen recording for each application that requires it.