App is converting the admin accounts without configuration

SAP / macOS-enterprise-privileges

For Mac users in enterprise environments, this application gives users control over the administration of their machine by elevating their level of access to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or removing an application.

Apache License 2.0

1.4k stars 150 forks source link

App is converting the admin accounts without configuration #139

Open praveenlnrs opened 5 days ago

praveenlnrs commented 5 days ago

We used the Privileges app before but stopped using it a while ago. We removed the configuration profile that manages the app but the Privileges app itself was still on the devices.

Admin accounts were converted to standard accounts when the Privileges app was updated to 2.0 even though there was no configuration profile to manage it which impacted our users.

I think the new version is configured to convert the admin account if no configuration is present. I know I should have removed the app along with configuration but I am sure many organizations still have it somewhere without noticing.

Can this behaviour of converting admin accounts if none of the configurations is present be changed?

mthielemann commented 5 days ago

Actually this never happened before and I am unable to reproduce it on my end. Privileges does not automatically remove admin rights after installation. Can you send me additional information that allows me to reproduce it on my end? Thanks.

breisig commented 4 days ago

I am having the similar issue. I setup a fresh MacOS install (15.1.1) which the first account created is an admin account and then I create a secondary account which is also an admin account. If I install Privileges v2.0 app on the first account, open it and, sign out and then sign back in to the first or secondary account, it automatically converts the accounts from admin to standard on login. [Which is a pain]

mthielemann commented 4 days ago

@breisig Did you use our installer package? Did you change the default configuration or do you have any configuration profiles for Privileges installed?

mthielemann commented 4 days ago

I now tried twice what @breisig did:

Installed a fresh 15.1.1 with (of course) an admin account.
Installed the Privileges package from GitHub.
Logged out from the admin account.
Logged in again.

And I still have admin rights as expected. Anything else I can try to reproduce it on my end? Thanks.

breisig commented 4 days ago

I just tried it again on another Macbook Air running MacOS 14.7.1 and its still happening.

Erase HD and re-install a fresh MacOS install
Created the initial admin account and signed in.
Opened Safari and downloaded + install Privileges_2.0.0.pkg file [ https://github.com/SAP/macOS-enterprise-privileges/releases/download/2.0.0/Privileges_2.0.0.pkg ]
Once finished installing, log off the admin account and sign back in again.
Check the users account status and its now shows my admin account has been demoted to 'Standard' user.

mthielemann commented 4 days ago

Exactly what I did twice, without seeing this issue. 🤷🏻‍♂️ Can anyone else reproduce this?

dhuckmann commented 18 hours ago

I think I'm encountering the same issue. After upgrading to 2.0 I've been demoted to a standard user, and have no (simple) way to elevate back to admin in order to install the helper that would allow me to do so.

mthielemann commented 17 hours ago

@dhuckmann How did you upgrade? Using the Jamf App Catalog or the package we provide on GitHub? Did you have any 3rd-party tools like PrivilegesDemoter installed? Just wondering because we've upgraded about 40,000 machines using our package and haven't seen this issue once.