Previously in macOS Catalina, any local user (standard or admin) could approve screen capture and input monitoring PPPC requests. The latest updates to PPPC in macOS Big Sur changes this. This made it impossible for standard users to approve screen capture and input monitoring for common business apps, like Zoom, without admin approval. While standard users on macOS Catalina were able to approve apps on their own to access these features, in an early beta of macOS Big Sur, this was initially changed to require admin authentication. For MDM, these PPPC features were considered “deny only.” So, IT had no power to enable them via MDM and had to rely on users to provide approval. These features included screen capture and input monitoring. In macOS Catalina, the ability for standard users to approve apps to access some of these system-level sensitive features was enabled by default. These resources include access to Desktop, Documents, Contacts, and other sensitive features like screen capture, camera, microphone and input monitoring. These tools gave IT more control over cross-application data requests, such as if certain apps could access protected user and system resources without prompting users for approval. In macOS Mojave, Apple introduced a set of security controls referred to as Privacy Preferences Policy Control ( PPPC). In this quick article, we’re going to see what’s changing and explore what its implications are for device management. However, a more recent release allows IT to use MDM and the PPPC profile to allow standard macOS users to approve defined applications for Screen Capture and Input Monitoring on macOS Big Sur.
With macOS Big Sur, standard users are prevented from approving applications for certain sensitive system-level PPPC controls, Screen Recording and Input Monitoring, which was not the case for macOS Catalina.
Apple recently announced new changes coming to PPPC on macOS Big Sur.
0 kommentar(er)
