Configuring a system policy managed setting

This setting allows you to disable the contextual menu that macOS users can display in the Finder application. The contextual menu allows macOS users to bypass system policy restrictions, such as rules regarding which applications macOS users can install, execute, or open through a contextual menu

Only one policy is allowed per macOS device. You can define multiple policies and assign a priority level to each, such that Ivanti EPMM can determine which policy it sends to macOS devices.

This policy is supported on devices running macOS 10.10 or supported newer versions.

Procedure

  1. Select Policies & Configs > Policies.
  2. Select Add New > iOS and macOS > macOS > System Policy Managed.
  3. Use the guidelines in System policy managed settings to complete this form.
  4. Select Save.
  5. Apply the policy to a macOS label.
Table 20.  System policy managed settings

Item

Description

Name

Enter a name for the policy.

Status

Select the relevant radio button to indicate whether the policy is Active or Inactive.

Only one active policy can be applied to a device.

Priority

Specifies the priority of this policy relative to other custom policies of the same type. This priority determines which policy is applied if more than one policy is available.

Select Higher than or Lower than, then select an existing policy from the drop-down list.

For example, to give Policy A a higher priority than Policy B, you would select “Higher than” and “Policy B”.

Description

Enter an explanation of the purpose of this policy.

Disable override

Select to disable the contextual menu in the Finder application.

Related topics