Endpoint Standard: Full Disk Access Not Shown as Enabled When Deployed Using MDM (JAMF PRO)

[#1]

Environment

• Endpoint Standard Sensor: 3.5.1.x - 3.5.2.x
• Apple macOS: 11.0 and Higher (Big Sur)

Symptoms

Running repcli status command returns the following for FDA config:

Full Disk Access Configurations:
Repmgr: Not Configured
System Extension: Unknown
OSQuery: Unknown
Uninstall Helper: Unknown
Uninstall UI: Unknown

Cause

1. Detection algorithm used by Sensor
2. Operating System limitation related to correctly displaying this information when pushed via MDM profile

Resolution

The behavior is expected to be fixed in a future sensor release (3.5.3.x). Upgrade affected sensors to this version when it becomes available.

Additional Notes

• As a workaround, Full Disk Access can be granted manually
• Even after granting Full Disk Access via MDM (JAMF Pro) "com.carbonblack.defense.ui" is unchecked under the System Preferences, this is OS limitation

Related Content

CB Defense: How to Enable Full Disk Access for Sensor on macOS 10.14.5 and Higher