search

SAP / macOS-enterprise-privileges

For Mac users in enterprise environments, this application gives users control over the administration of their machine by elevating their level of access to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or removing an application.
Apache License 2.0
1.35k stars 148 forks source link

App doesn't work anymore since Catalina 10.15.x #20

Closed eici closed 3 years ago

eici commented 3 years ago

The App still works on a factory reset Mac with Catalina 10.15.1

After updating to 10.15.7 the following functionality is missing:

This is also true for all Big Sur Versions and for the latest Monterey

Are there any plans to fix this?

rtrouton commented 3 years ago

Make sure you're using the latest release. It has been tested and verified to work on macOS Sierra through macOS Monterey:

https://github.com/SAP/macOS-enterprise-privileges/releases/latest

eici commented 3 years ago

image

We are using the latest Version, please see the attached Screenshot. Can you please reopen the issue?

rtrouton commented 3 years ago

We use Privileges 1.5.2 every single day in our Mac environment and we only support the shipping OS, which was macOS Big Sur and is now macOS Monterey. The problems you're experiencing are not appearing in our environment. This is not a product issue.

I would suggest that something is not configured correctly on your end. Specifically, I would recommend making sure that the helper app is installed and loaded correctly.

For deployment, I would recommend building an installer package using the process described in this blog post:

https://derflounder.wordpress.com/2019/03/20/building-an-installer-package-for-privileges-app/

aleksozerov commented 3 years ago

I am seeing similar issue on BigSir but in reverse, once privileges are granted the icon stay yellow and never times out. Followed these instructions above.

rtrouton commented 3 years ago

If the issue being reported is that the default behavior of clicking on the dock icon does not give you time-limited admin, that is a separate issue. Please refer to the FAQ:

By default, is there a time limit on the admin rights granted by Privileges?

No. Admin rights are granted until some process (like running Privileges again) takes them away.

https://github.com/SAP/macOS-enterprise-privileges/wiki/Frequently-Asked-Questions#by-default-is-there-a-time-limit-on-the-admin-rights-granted-by-privileges

Can I set Privileges to give me administrator rights for a defined amount of time?

Yes. You can use the Toggle Privileges option on the dock icon to get admin rights for a set amount of time (the default amount is 20 minutes.)

https://github.com/SAP/macOS-enterprise-privileges/wiki/Frequently-Asked-Questions#can-i-set-privileges-to-give-me-administrator-rights-for-a-defined-amount-of-time

The only way to get time-limited admin is to use the Toggle Privileges option on the dock icon. Time-limited admin is not available otherwise from the Privileges app.

eici commented 3 years ago

The only way to get time-limited admin is to use the Toggle Privileges option on the dock icon. Time-limited admin is not available otherwise from the Privileges app.

Thank you very much for talking the time to answer. I think i understood this all correctly and as stated above it works, as you are describing it, on a fresh catalina mac. It dosn't work on all the macs with newer versions.

On the Catalina 10.15.1 i can use the "Toogle Privileges" Menu, everything works.

On a fresh installed Big Sur, Monterey (or updated Catalina): There isn't a "Toogle Privileges" menu-item on the dock icon!

image

I would suggest that something is not configured correctly on your end. Specifically, I would recommend making sure that the helper app is installed and loaded correctly.

I would be very happy to check! Can you point me in any direction? As i said the Mac is a fresh install, no MDM, no Profile. Is there any log i can check?

aleksozerov commented 3 years ago

In my case, I do see Toggle Privileges but it's grayed out but the stting for Toggle Timeout is set by default to 15 mins through DockToggleTimeout.mobileconfig as you can see in the attachment. I don't see a countdown and it never locks. Screen Shot 2021-11-03 at 11 11 31 AM Screen Shot 2021-11-03 at 11 18 13 AM Screen Shot 2021-11-03 at 11 19 28 AM

rtrouton commented 3 years ago

This issue is closed. I will no longer be responding in this thread.