topic Re: Help with configuring MacOS user login items in Endpoint Security

Help with configuring MacOS user login items

jarvis meier — Wed, 29 Jun 2022 21:31:23 GMT

I've done some hunting on the internet but can't find the answer I'm looking for. I'm trying to remotely configure user accounts via pkg deployments and was wondering how to add items to a local users "Login Items". I'm thinking it has to be done using dscl but I don't know the exact syntax or what keys to use. Any help would be appreciated.

Re: Help with configuring MacOS user login items

BlakeRichardson — Thu, 30 Jun 2022 04:09:50 GMT

I know from a Jamf perspective its configured using a profile however I cannot see any options in System Manager. You might need to contact support to see if this is possible.

Re: Help with configuring MacOS user login items

matmorg2 — Thu, 30 Jun 2022 06:19:24 GMT

Hey @jarvis meier there is a macOS profile payload called LoginItemsManagedItems that I see Systems Manager does not support in the SM > Settings page yet. I'll add that in as a feature request so Systems Manager can look to add that to the UI in the future, thank you for that feedback!

In the meantime, you should still be able to add LoginItemsManagedItems to macOS devices via a custom .mobileconfig with Systems Manager. Just configure the Path of the app and Hide from User&Groups setting you need, something like this:

<key>AutoLaunchedApplicationDictionary-managed</key>
            <array>
                <dict>
                    <key>Path</key>
                    <string>/System/Applications/Example.app</string>
                    <key>Hide</key>
                    <false/>
                </dict>
            </array>

Checkout the full profile example in the Apple developer documentation. Create the .mobileconfig how you need and then upload and install through SM. Here's the steps for that part: https://documentation.meraki.com/SM/Profiles_and_Settings/Using_Custom_Apple_Profiles_with_Systems_Manager

SM should be able to add this into the SM > Settings page in the future, but for now use this custom .mobileconfig route to accomplish the same thing. Good luck!