Closed PhantomPhixer closed 3 years ago
I believe the PPPC Utility has the correct value in this case. The downloads folder should have the Allow/Deny options and should not have the "Allow standard users to approve".
From the MDM spec only the ListenEvent and the ScreenCapture keys support the "Allow standard users to approve".
I'm going to close this one out but feel free to add more context if I misunderstood the issue.
I think you have missed the point. in the PPPC utility window it does indeed show the correct value, however when uploaded to jamf it shows the incorrect value as shown in the screen shot. This only happened when Big Sur compatibility was on.
Thanks for the clarification!
This is a known issue with Jamf Pro (PI-009068) where the Authorization value is being changed to 'AllowStandardUserToSetSystemService' when the .mobileconfig is uploaded to Configuration Profiles. The PPPC Utility is still creating the profile with the correct value as 'Allow'. The workaround in Jamf Pro is to set the value manually back to 'Allow' after upload for now.
Thanks @ty-wilson, closing this out again.
Testing out the Big Sur compatibility setting gives a result that setting allow on a setting that doesn't have the allow standard users setting uploads to jamf with that value set. I noticed this setting a profile up that had the screen capture setting in it as well.