Posted on 03-31-2020 02:39 AM
Hi All,
In our organization, we have restricted the admin rights to everyone, in that sometimes the zoom application asking admin credentials to allow the Microphone and Camera. How we resolve this issue via JAMF. Please help me to guide this.
Note: We have recently onboarded to Jamf pro server so we are not much familiar with the JAMF.
Posted on 03-31-2020 05:15 AM
Every app/program that uses mic and camera has to be granted access. All users have access to these panels. Google Meet has the exact same thing. It's an Apple feature, not JAMF.
Posted on 03-31-2020 06:16 AM
We implemented a "make me an admin" script with a 10 minute time window so users are able to put in the privileges they need.
https://github.com/jamf/MakeMeAnAdmin
Posted on 03-31-2020 06:29 AM
Just create a PPPC for Zoom in Jamf Pro and distribute to all your Macs.
Posted on 03-31-2020 07:42 AM
@udhayakumar Are you sure of what you're stating here? I just tested fired up Zoom on a non-admin account and it did what I expected...it prompted for the user to give permission for the mic and camera. No admin credentials were requested.
Also, I don't believe PPPC is an answer for this as my understanding is that you can't do mic and camera approvals with it. Someone feel free to correct me if I'm wrong but that's been my understanding.
Posted on 03-31-2020 08:39 AM
@udhayakumar, Zoom is not asking for admin credentials. Admin credentials are not required for a user to allow Zoom access to the microphone and camera.
The user is required, though, to grant permission. You can't control that. You'll need to educate your users to allow.
If a user accidentally denies access to the microphone or camera, direct him or her to open Apple menu > System Preferences > Security & Privacy > Privacy tab > Microphone/Camera and check the box next to Zoom. Note that the setting isn't dimmed and is completely accessible. This is a user-level setting and the user will have privileges to do so.
Posted on 03-31-2020 04:59 PM
I recently posted my workflow to automatically address this issue in our environment for Microsoft Teams. We are a Microsoft shop, but I can rework the process for other apps if the demand is there.