This guide applies to Mac computers
What are Helper Tools?
Helper tools in macOS are specialized programs or agents that allow applications to perform privileged operations without granting the entire application elevated privileges. These tools are particularly useful for tasks that require higher security permissions than the application typically possesses. For instance, helper tools can manage file permissions, create or delete files, open privileged ports, and modify system settings, among other tasks.How Helper Tools Work
Helper tools operate as separate processes that run with elevated privileges while the main application runs with standard user permissions. This separation provides security benefits by limiting the scope of elevated access to only the specific operations that require it. When an application needs to perform a privileged operation, it communicates with its helper tool, which then executes the operation on behalf of the application.When to Expect Prompts about Helper Tools
Regardless of installation method, apps installed in the system Applications folder in macOS require administrator credentials to update. If an installed app has a built-in update mechanism that automatically checks for updates, users logged in with standard user credentials may see prompts to provide administrator authentication to allow a Helper Tool to run so that the updates can be completed. Users logged in with admin user credentials should not see prompts to allow Helper Tools to run.How to Avoid Helper Tool Prompts
The best way to prevent your users from seeing Helper Tool Prompts is to ensure that app updates are managed via MDM. Some application vendors provide an MDM payload that can be configured to disable automatic update checks, while others may require a scripted solution. If you’re unsure what methods an application supports, please contact the application vendor. For more information about MDM management, see MDM Overview.The applicable method for disabling automatic updates varies between applications. Not all application titles support disabling automatic updates.
Example Custom Profile
The following steps can be used to disable the in-app update mechanism for Slack using a Custom Profile. For more information about using Custom Profiles in Iru Endpoint, please see our Custom Profile Overview support article.1
Download Profile Editor
Download, install, and open iMazing Profile Editor.
2
Configure General Settings
In the General domain, give your profile a Payload Display Name and a unique Identifier.
3
Add Slack Domain
On the left hand side, scroll down to Available Application Domains and click on Slack, then click +Add Payload.
4
Disable Auto Update
In the Policy tab in the Slack Domain, uncheck the checkbox next to Auto Update.
5
Save and Deploy
Optionally configure any other settings you would like to apply to Slack, save your configuration as a .mobileconfig, and upload your .mobileconfig to Iru Endpoint as a Custom Profile.
The app must be closed and re-opened after the profile has been deployed to the computer for the changes to take effect.