Intune MDM

Gusgabre

How to Allow System Extension, Driver Extension & Network Extension using MDM profile?

Is there any workaround to auto-approve the Network Extension without user interaction on macOS?

I'm currently using Intune as my Device Management Solution.

I have done creating the policy for extension for another permissions,

Sethu Laks

Hi @Gusgabre

If you’re looking to auto-approve system, driver, or network extensions on Macs managed with Intune, here’s the quick guide:

1. What You’ll Need

You’ll need to create a custom configuration profile in Intune. This tells macOS to automatically trust your extensions, so no annoying user pop-ups asking for approval.

2. How to Set It Up

A. Create the Custom Profile in Intune:

• Go to Intune Admin Center → Devices → macOS → Configuration profiles → Create profile
• Choose Custom as the type
• Upload a .plist (XML) file with the correct settings

B. Example .plist for Extensions:

<dict>  <key>PayloadContent</key>  <array>    <dict>      <key>PayloadType</key>      <string>com.apple.system-extension-policy</string>      <key>AllowedSystemExtensions</key>      <array>        <string>TEAMID.BUNDLEID</string>      </array>      <key>AllowedSystemExtensionTypes</key>      <array>        <string>DriverExtension</string>        <string>NetworkExtension</string>      </array>      <key>AllowedTeamIdentifiers</key>      <array>        <string>TEAMID</string>      </array>    </dict>  </array></dict>

Replace TEAMID with your developer Team ID, and BUNDLEID with your extension’s bundle ID.

3. Will Users See Prompts?

Nope! As long as the MDM profile is in place, users won’t be asked to approve anything. It’s seamless.

4.Things to Keep in Mind

• The profile must be installed before the extension is deployed
• This only works for extensions managed via MDM (like Intune)
• Apple doesn’t provide a way to auto-approve extensions outside of MDM

Useful Links

• Apple: System Extensions
• Microsoft: Custom macOS Profiles in Intune

Summary: Deploy a custom Intune profile with the right settings, and your macOS extensions get auto-approved—no user action required.