Hi everyone,
As macOS environments continue to expand in enterprise IT infrastructure, managing Privacy & Security settings (TCC / System Extensions) across remote fleets is becoming a growing challenge.
While MDM profiles (PPPC) handle most app permissions smoothly, recent macOS updates have introduced tighter user-prompt restrictions around screen recording, local network access, and background items that often trigger unexpected prompts for end-users—even when profiles are properly deployed.
I’d love to hear how other IT admins and sysadmins are handling this balance:
Are you enforcing zero-touch configurations via declarative device management (DDM)?
How are you dealing with non-standard developer tools or internal software that require elevated security permissions?
What MDM solutions (Jamf, Kandji, Intune, etc.) are giving you the smoothest compliance workflows for macOS lately?
Looking forward to hearing your strategies and best practices!