With the introduction of the macOS Mojave, new privacy controls will prevent ScreenConnect from accessing the device's keyboard and mouse. In order to ensure that the ScreenConnect can work as expected from Addigy it must be given the appropriate Privacy Preferences on the device. The are two ways to provide those preferences:
- The user can manually allow ScreenConnect in System Preferences -> Security & Privacy.
- Addigy MDM can deploy a Privacy Preferences Policy Control (PPPC) payload.
Allowing ScreenConnect with Manual Approval
When ScreenConnect is installed on a device, the user can allow the necessary access to keyboard and mouse by going following these steps.
1. Open System Preferences and go to the Security & Privacy pane.
2. In the Privacy section, unlock the settings with an admin account and enable "bash" under Accessibility.
That's it. ScreenConnect will now have sufficient access to remote control the device.
Whitelisting ScreenConnect with Addigy MDM
To avoid manually allowing ScreenConnect, Addigy can deploy a PPPC profile. This will require having the Addigy MDM Profile approved on the device. To learn more about getting profiles approved, see our article Approved MDM Profiles.
Once the MDM Profile has been approved, Addigy will begin to automatically deploy PPPC payloads relevant to the device. You can verify that the payloads have been installed by opening System Preferences and looking in the Profiles pane.
Once the MDM payload has been applied, the end-user will not receive future prompts related to ScreenConnect. If you do not see the MDM Profiles appear, go to the Policies -> Deploy Changes within Addigy and select Deploy Now. This will force the deployment of MDM profile payloads like the PPPC payloads required by ScreenConnect.