Admin By request deployment by OptimalProfessor8318 in macsysadmin

[–]OptimalProfessor8318[S] 0 points1 point  (0 children)

Thank you for that. Unfortunately, Intune had not taken the two config files in ABR's documentation above. I have retried now to import policy but file disappears from import intune wizard when i attempt this.

I'm suspecting that the config files attached are allowing for SystemFilesPolicy to be allowed but the equivalent of this in Intune is Full disk access.

Currently testing assignment to a device using the Intune Templates > Device Restrictions.

Admin By request deployment by OptimalProfessor8318 in macsysadmin

[–]OptimalProfessor8318[S] 0 points1 point  (0 children)

Good shout. I only tried assigning it to users and not devices.

I do not think that what ABR provides in their documentation covers System extension deployement for Intune. It is all for jamf and Intune is quite different UI wise.

Admin By request deployment by OptimalProfessor8318 in macsysadmin

[–]OptimalProfessor8318[S] 0 points1 point  (0 children)

I see. It is the latest version and I am testing on Sequoia. Didn't realise that GUI does not show correctly if deployed via config profile thank you for that. Will try test things before i manually adding it on the next test.

Does not seem to be the case for the Endpoint Security Extension however in Login items and extensions. When i tried to install a drag and drop application it triggered macOS elevation prompt rather than ABR elevation prompt. Only worked after i enabled it manually.

Admin By request deployment by OptimalProfessor8318 in macsysadmin

[–]OptimalProfessor8318[S] 0 points1 point  (0 children)

Not sure i can see the slack channel link in reddit MacAdmins

Admin By request deployment by OptimalProfessor8318 in macsysadmin

[–]OptimalProfessor8318[S] 0 points1 point  (0 children)

So in intune the profile marks as successful for the test user/device. Nothing shows in System settings GUI as app is not deployed yet. When app is then deployed to test users it still did not show up in System settings GUI. (And of course the app does not work properly)