Skip to main content
Question

BeyondTrust EPM policy - Asking credentials even if 'Allowed'

  • September 11, 2025
  • 2 replies
  • 63 views

Forum|alt.badge.img

Hi!
Making changes to some of my policies inside BeyondTrust EPM. Could someone help me understand, because I feel lost. I have a policy, that comes from the Quick Start Template - regarding system settings options ['Authorize - System Preferences']. I checked the easiest one for testing - date and time settings. I set it up to be allowed + message 'Allow Message (Audit)'. Unfortunately, my test device still requires admin credentials when trying to change the 'Set time and date automatically' for example, as seen on the screenshot... Is there something I'm doing wrong? Using Sequoia 15.6.1
 

 

2 replies

Forum|alt.badge.img+4
  • Veteran
  • September 11, 2025

Hey Adam.

Is this the first deployment of Privilege Management for Mac?

We have multiple option to why this is going wrong.

  1. We have no License on the system.
  2. Workstyle Filters does not Match.
  3. The Extension are not allowed. https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0017165
  4. Our rule we created might not match.

I might have missed one, but those would be the starters.

The in general. leave the Macs to set time automatically works really great.


Forum|alt.badge.img+4
  • Veteran
  • September 11, 2025

This is what we are suppose to match on.