SAP/macOS-enterprise-privileges 2.4.1

Privileges 2.4.1

on GitHub

What's new?

• After careful consideration, we have decided to add an optional timer to the Privileges status menu. While we still recommend leaving it disabled for efficiency reasons, you can now enable it in the app's settings and using the key ShowRemainingTimeInMenuBar in a configuration profile.

• As requested in issue 237, we changed the behavior of the Dock Tile and the status item. Rather than disabling the Request Privileges menu entry when the user is required to provide a reason for becoming an admin, we now launch the Privileges app, which improves the user experience.

• The new version better addresses the very rare case where Privileges is unable to identify the current console user. This only occurs with corrupt user accounts, and is now properly handled and logged.

• We added another three new preference keys ForceUpdatePrebootVolume, RenewalNotificationInterval and RevokePrivilegesAfterSystemTimeChange:

  • When ForceUpdatePrebootVolume is set to true, the PrivilegesDaemon runs the command /usr/sbin/diskutil apfs updatePreboot / whenever a user's privileges change. You should normally never have to enable this function because the preboot volume is updated automatically after a while. However, we implemented this feature because it seems to be needed in some environments.
  • RevokePrivilegesAfterSystemTimeChange makes sure the user's administrator privileges are revoked if the system time did change. This feature should prevent users from extending their admin time by adjusting the time on their Mac. If you enable this feature, please be aware that users with admin rights can extend or retain their admin rights in various other ways. Therefore, this feature offers no protection against users misusing their admin rights.
  • RenewalNotificationInterval allows you to specify when Privileges should notify your users to renew their administrator privileges. By default, Privileges notifies users one minute before their admin rights expire but now you can change this interval to whatever works best for you.


  You can find more information about the new keys in our wiki.

• Besides of this we fixed some minor issues and added some additional logging.