jamf / MakeMeAnAdmin

Provides temporary admin access for a standard user via Jamf Self Service
255 stars 65 forks source link

This script is not working on macOS Monterey on M1 Macs. #12

Open surajitpatra22 opened 2 years ago

ayotec2015 commented 2 years ago

``/Library/LaunchDaemons/removeAdmin.plist: service already loaded Load failed: 37: Operation already in progress

jcejka11 commented 2 years ago

I saw something similar on 12.3.0 intel side.

alyssawrightgledhill commented 2 years ago

I saw something similar on 12.3.0 intel side.

@jcejka11, @ayotec2015 - Did either of you find a workaround or fix for this?

jcejka11 commented 2 years ago

I did find a workaround Once I’m in front of my computer I’ll send ya what we did. The downside to either this script or gatekeeper or other bugs/features in Monterey is the return the act to standard perms. That piece mostly Works, but sometimes it either doesn’t remove it or the user reboots in the middle Of the timer and the that downgrade script doesn’t run upon startup. I haven’t nailed it down as it’s not always occurring either.

mrecek commented 2 years ago

We recently started testing this script as a way to stop assigning permanent local admin rights to our users. It seemed to be working during our initial tests but now it's not. We are seeing similar messages like:

/Library/LaunchDaemons/removeAdmin.plist: service already loaded
Load failed: 37: Operation already in progress

However, even when we see no errors it doesn't seem to work. These are all new MacBook Pros, M1, running MacOS Monterey.

@jcejka11, would you be able to share your work-around?