Just to add to this & food for thought on the nuclear notification
blocking approach vs. a focused blocking scheme. Beyond giving end-users
a choice, there's an obvious benefit to allowing this new security
mechanism to do its job. It's entirely poss...
@jbutler47 This is not my experience. With the profile in place nothing
can be toggled on/off, admin or not. If you can toggle ALL items as
admin, I suspect your profile isn't properly signed. If it's just a few,
you might need to check your xml form...
No problem! Yeah, going out on a limb here, you might not want a
standard user willy nilly disabling anything Jamf haha! fwiw, a
couple I ran into were from Outset, Munki, and Zoom.
I just want to point out that a non-admin may still be able to disable
certain LaunchAgents critical to management (at least in my testing),
just be sure to test toggle all items in your environment if it's a
concern to you. Also, thanks @A-bomb for ...
@kwoodard Thanks! Sorry for the late response, it's been crazy busy
around here. But yeah, my intention for this was unattended lab
stations. It would need some tweaking for standard users due to the
heavy-handed logout, and despite working well late...
