Security & Privacy Beyond Trust Remote Support in Catalina

[roethelbc]

Hi all,

So in order to use Beyond Trust Remote Support tool in Catalina this option has to be checked in Screen Recording. However, it does not look like PPPC is able to add this section. Does anyone have a method to auto enable with Jamf Pro?

[gachowski]

Of the top of my head, I don't think so. Apple has blocked many if not all the tricks to remotely and programmatically do this.

[MacWarrior1]

https://github.com/jamf/PPPC-Utility

[sdagley]

@MacWarrior1 Screen Recording, Microphone, and Camera can not be enable via a PPPC Profile, only Deny is supported for those per Apple's design.

[MacWarrior1]

Hmmm, we only use Zoom for screen recording and that has no issues. Bomgar is only for remoting in and escalating to admin rights when we need to. But good to know. thanks.

[shaquir]

I find it weird that Bomgar does not present users with the "Don't Allow" or "Okay" options. Hopefully this has been resolved in a newer version.

[JamfMyMac]

any update on this?

[cwaldrip]

This may have something to do with the options you use to build your BeyondTrust jump client. There are options for "Jump Policy", "Customer Present" policy, and "Customer Not Present" policy. We had to have these enabled on the backend and afterwards the installer only prompts for the Accessibility option (which you CAN take care of with a PPPC policy). Not sure which of the three is the one, and I still need to do more testing myself.

Edit: still looks like the user has to click to allow screen recording. 🤦🏼‍♂️

[SlidewaysF30]

Is there still no solution for this? This kind of renders Bomgar useless for our Catalina endpoints because the user's are not admin and cannot check the box themselves.

Edit: Might be wrong about the admin rights needed to check the box...

[jmahlman]

@SlidewaysF30 Admin rights are not needed for allowing screen recording on 10.15. In Big Sur you do at this time.

[PCAE2981]

If the jump client is installed and is only view only, how do you get Bomgar to elevate as its all greyed out with the padlock requiring admin? Im currently stuck by this.

[sgiesbrecht]

bump - still an issue