how and when will support for Full Disk Access, which is now a PPPC profile, be implemented seeing as this would be a DDM setting which Intune must deliver to Catalog?
Thanks for the follow-up! You are absolutely right that Apple is bringing configuration profiles into the DDM pipeline, but there’s a small catch in how they are doing it for settings like Full Disk Access.
Instead of creating a native DDM setting for Full Disk Access (like they did for Camera or Microphone), Apple uses a declaration called com.apple.configuration.legacy. This acts as a wrapper. It allows MDMs like Intune to use the faster DDM protocol to deliver the payload, but the payload inside is still the exact same traditional XML .mobileconfig file.
Your workflow doesn't change. Because there is no native DDM schema for Full Disk Access, you will still need to upload the standard PPPC .mobileconfig file provided in our documentation into Intune. Intune handles the delivery — whether via the old protocol or wrapped in DDM behind the scenes — but the configuration file itself remains exactly the same.
Log in to comment and vote
Comments2
Martin van Diemen
Aug 13
Thanks for the follow-up! You are absolutely right that Apple is bringing configuration profiles into the DDM pipeline, but there’s a small catch in how they are doing it for settings like Full Disk Access.
Instead of creating a native DDM setting for Full Disk Access (like they did for Camera or Microphone), Apple uses a declaration called
com.apple.configuration.legacy. This acts as a wrapper. It allows MDMs like Intune to use the faster DDM protocol to deliver the payload, but the payload inside is still the exact same traditional XML.mobileconfigfile.Your workflow doesn't change. Because there is no native DDM schema for Full Disk Access, you will still need to upload the standard PPPC
.mobileconfigfile provided in our documentation into Intune. Intune handles the delivery — whether via the old protocol or wrapped in DDM behind the scenes — but the configuration file itself remains exactly the same.null null
Aug 14
OK, thanks for a very enlightening reply!