LogMeIn is a remote access tool that lets IT administrators connect to and control Mac devices remotely. You can deploy LogMeIn silently across your fleet using Addigy Smart Software paired with a Privacy Preferences Policy Control (PPPC) profile — no manual installation required on each device.
Overview
This guide walks you through two parts of the deployment:
- PPPC Device Setting (MDM Profile) — grants LogMeIn the system permissions it needs to function (Accessibility and Screen Recording) without prompting the end user
- Smart Software item — silently downloads and installs the latest version of LogMeIn using a deployment script
Note: You must be a subscriber of LogMeIn Central to use this deployment method. You will need a Deploy ID from your LogMeIn Central account.
Prerequisites
- An active LogMeIn Central subscription
- A LogMeIn Deploy ID (found in your LogMeIn Central account under Deployments)
Step 1: Create the PPPC Device Setting (MDM Profile)
The PPPC profile grants LogMeIn the permissions it needs to control Accessibility and Screen Recording silently, without prompting end users for approval.
- Log in to your Addigy instance and navigate to Catalog > Device Settings.
- Click New in the top right, then select PPPC.
- Under Accessibility, click Add New and enter the following for the first entry:
-
Identifier:
com.logmein.logmeinguiagent - Identifier Type: Bundle ID
-
Code Requirement:
anchor apple generic and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* - Check the Allowed box
-
Identifier:
- Click Add New again and enter the following for the second entry:
-
Identifier:
com.logmein.logmeinserver - Identifier Type: Bundle ID
-
Code Requirement:
anchor apple generic and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* - Check the Allowed box
-
Identifier:
- Under Ability to Capture Screen, click Add New and enter the following:
-
Identifier:
com.logmein.logmeinguiagent - Identifier Type: Bundle ID
-
Code Requirement:
anchor apple generic and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* - Allowed: Let Standard Users Approve
-
Identifier:
- Click Save in the bottom right.
Note: Make sure the Allowed checkbox is checked for each Accessibility entry. Unchecked entries will not grant the required permissions.
Step 2: Create the Smart Software Item
The Smart Software item uses a script to automatically download and silently install the latest version of LogMeIn. It also includes a condition to skip installation if LogMeIn is already present on the device.
- Navigate to Catalog > Software > Smart Software.
- Click New in the top right.
- Enter a name (e.g.,
LogMeIn). - Under Installation, paste the following script into the Installation Command field:
#!/bin/sh ############################################ # LogMeIn for Mac silent deployment script # Requires a LogMeIn Central subscription # Automatically downloads the latest version — no installer file needed # Tested on macOS 13 Ventura, deployed via Addigy ############################################ # Set your Deploy ID below # To find your Deploy ID: log in to LogMeIn Central Deployments create or select a deployment # The Deploy ID (e.g., "xyz") appears in the generated URL: https://secure.logmein.com/i?l=en&c=xyz DEPLOYID=1 # Replace 1 with your actual Deploy ID echo "Deploy ID is: $DEPLOYID" echo "Running LogMeIn host install" cd /tmp rm -rf /tmp/LMI mkdir LMI cd LMI echo "Downloading LogMeIn installer" curl -O https://secure.logmein.com/LogMeInInstallerMac.zip echo "Unzipping LogMeIn installer" unzip LogMeInInstallerMac.zip FILE="$(ls | grep LogMeIn*.app)" echo "File name is: $FILE" echo "Setting deploy ID as attribute" xattr -w com.logmein.deployid $DEPLOYID "$FILE" echo "Reading deploy ID attribute to confirm" xattr -p com.logmein.deployid "$FILE" echo "Running the LogMeIn installer" ./"$FILE"/Contents/MacOS/Lili --silent echo "Cleaning up temp files" rm -rf /tmp/LMI echo "Exiting with success" exit 0
Important: Replace
DEPLOYID=1with your actual Deploy ID from LogMeIn Central before saving.
- Expand the Condition for Install section and configure it so LogMeIn is only installed if it isn't already present:
- Check the box for Path to file or folder, and enter:
/Applications/LogMeIn Client.app
- Check the box for Path to file or folder, and enter:
- Click Save in the bottom right.
The Smart Software item and Device Setting are now ready to be added to a Policy. Once deployed, Addigy will check for the presence of /Applications/LogMeIn Client.app before each install attempt — if it's already there, the script will be skipped.
Frequently Asked Questions
Do I need to upload a LogMeIn installer file?
No. The installation script automatically downloads the latest version of LogMeIn directly from LogMeIn's servers, so no file upload is needed in the Smart Software item.
Where do I find my Deploy ID?
Log in to your LogMeIn Central account, navigate to Deployments, and create or open an existing deployment. The Deploy ID is the short code (e.g., xyz) at the end of the generated deployment URL: https://secure.logmein.com/i?l=en&c=xyz.