How to block "open anyway" on mac os via intune without removing admin permissions on the machines?

Question

Hi, I need to block the installation of custom apps on mac machines, I have them enrolled directly on intune, but I can't remove users from administrators to guarantee various permissions on the cli or on the app permissions.

I have already set the compliance policies that allow the installation of apps only from the app store, but I have that damned "Open Anyway" button that bypasses everything... how can I do it??

Kind Regards

Answer 1

@Ismaele Giallombardo, Thanks for posting in Q&A. For your issue, you can set "Do not allow user to override Gatekeepe" to yes in endpoint protection to see if it can block.

https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-protection-macos#gatekeeper

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.