Skip to content

Privileges prompts for reason immediately after logging into a Mac #180

@mthielemann

Description

@mthielemann

Please let me know if this should be created as a separate topic as I've seen this happen prior to 2.2 as well.
When logging into a Mac that has Sequoia installed (15.3), I often see Privileges immediately prompt me to supply Reasoning so that it can try to elevate my rights - even though I had not yet told it to do so. I tell it to cancel, and all is fine going forward until I logout, and log back in the next morning.

Screenshot 2025-02-07 at 9 07 14 AM

My configuration profile is below - redacted to protect $org data.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>ExpirationInterval</key>
    <integer>10</integer>
    <key>ShowInMenuBar</key>
    <false/>
    <key>HideSettingsButton</key>
    <true/>
    <key>HideSettingsFromDockMenu</key>
    <true/>
    <key>HideSettingsFromStatusItem</key>
    <true/>
    <key>HideHelpButton</key>
    <true/>
    <key>LimitToGroup</key>
    <string>$USERGROUP01</string>
    <key>ReasonRequired</key>
    <true/>
    <key>ReasonCheckingEnabled</key>
    <false/>
    <key>ReasonPresetList</key>
    <array>
      <dict>
        <key>default</key>
        <string>Install Application(s)</string>
      </dict>
      <dict>
        <key>default</key>
        <string>Uninstall Application(s)</string>
      </dict>
    </array>
    <key>RequireAuthentication</key>
    <true/>
    <key>RevokePrivilegesAtLogin</key>
    <true/>
    <key>HideOtherWindows</key>
    <true/>
    <key>AllowCLIBiometricAuthentication</key>
    <false/>
    <key>EnableSmartCardSupport</key>
    <true/>
    <key>AllowPrivilegeRenewal</key>
    <true/>
    <key>RenewalFollowsAuthSetting</key>
    <true/>
    <key>RevokeAtLoginExcludedUsers</key>
    <array>
      <dict>
        <key>default</key>
        <string>$USERNAME01</string>
      </dict>
      <dict>
        <key>default</key>
        <string>$USERNAME02</string>
      </dict>
    </array>
  </dict>
</plist>

Originally posted by @tonyyo11 in #178 (comment)

Metadata

Metadata

Assignees

Labels

questionFurther information is requested

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions