Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

DevToolsSecurity -enable seems to not work

Hi

I'm having an issue with Mac OSX 10.8.4 and Xcode 4.6.2. I'm running a lab of Macs with users who are learning iPhone and iPad programming. They are authenticated by a Microsoft AD domain.


When they try to run a program they have written, they get a popup asking for a userid and password for the Developer Tools group. I prefer not to add each of them to the Administrator or Developer group individually (we have a large number of accounts and I would have to do this every semester on each machine).


I have tried using DevToolsSecurity -enable to disable the prompts, but it seems to have no effect.


I have tried making the authenticated_users group a subgroup of the _developer_tools group with no effect. When a network user runs the id command, only Active Directory groups are shown, not local groups.


Is there a nice workaround to this issue?


Thanks,

Kelly

Xcode-OTHER, OS X Mountain Lion (10.8.4)

Posted on Jun 5, 2013 1:36 PM

Reply
Question marked as Best reply

Posted on Jun 5, 2013 2:03 PM

There are two authentications that are needed. One is the "enable this Mac for development" that needs to be run after a reboot. Anyone can click "yes" to this. The other is the _developer group issue. You will see this if you try to run Instruments. I recently setup a new drive running as a Standard user so I'm recently familiar with these.


The DevToolsSecurity -enable appears to only apply to the "enable this Mac for development" setting. The _developer group is a separate issue. You should be able add your users with:


sudo dscl . append /Groups/_developer GroupMembership


You can combine that with other dscl commands and authorize all members of authenticated_users.


If you have access to AD, you should be able to do it there and have it apply to all machines at once. Otherwise, you would have to run the script on each machine.

2 replies
Question marked as Best reply

Jun 5, 2013 2:03 PM in response to Kelly Kuykendall

There are two authentications that are needed. One is the "enable this Mac for development" that needs to be run after a reboot. Anyone can click "yes" to this. The other is the _developer group issue. You will see this if you try to run Instruments. I recently setup a new drive running as a Standard user so I'm recently familiar with these.


The DevToolsSecurity -enable appears to only apply to the "enable this Mac for development" setting. The _developer group is a separate issue. You should be able add your users with:


sudo dscl . append /Groups/_developer GroupMembership


You can combine that with other dscl commands and authorize all members of authenticated_users.


If you have access to AD, you should be able to do it there and have it apply to all machines at once. Otherwise, you would have to run the script on each machine.

DevToolsSecurity -enable seems to not work

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.