macOS security settings

Apple introduced several remote support security features starting with macOS 10.14 (Mojave). These limit remote access control until a user approves it. Without approval the Mac does not allow interaction with the remote desktop and behaves as if it is in view-only mode.

As of macOS 15 (Sonoma) and continuing with macOS 26 (Tahoe), Apple introduced a new permission model for remote desktop applications. This affects how Take Control operates on macOS devices after an OS upgrade.

macOS 15+ introduce a new permission type:

  • Previously: Screen Capture permission (valid for 30 days, required monthly re-approval).
  • Now: Remote Desktop Access permission (does not expire monthly).

OS upgrades reset permissions:

  • When upgrading from macOS 14 or earlier to macOS 15 or later, users must manually re-authorize Take Control using the new permission model.
  • This is expected behavior and not a bug.

N-central or N-sight devices enrolled in Device Management for Apple (DMA) have reduced end-user notifications and all installed applications on those devices are automatically given the required permissions.

For more information, see:

Set macOS permissions for Take Control

macOS security settings need to be configured after the Take Control agent is installed.

Applying these settings during a remote session can cause control problems. Close and reconnect the remote session after applying the settings to avoid issues.

When logged in to the Mac as an admin user:

  1. Go to System Preferences > Security & Privacy.
  2. For each of the following sections:
    • Full Disk Access
    • Accessibility
    • Remote Desktop
    • Screen & System Audio Recording
  3. Enable the toggle for Take Control Agent or Applet.

    4. Where the Take Control agent or applet is not listed, you can Manually add the Take Control Agent to macOS Security & Privacy .

  4. Enter suitable credentials with admin permissions when prompted.
  5. Quit & Reopen when prompted.
  6. Close the Security & Privacy window to save your settings.

    7. The device is now controllable using Take Control.

Manually add the Take Control Agent to macOS Security & Privacy

When the Take Control Agent is installed but not displayed in the Security & Privacy sections, you can add it manually.

You cannot configure this setting remotely. An administrator must set it locally on the device.

When logged in to the Mac as an admin user:

  1. Go to System Preferences > Security & Privacy.
  2. For each of the following sections:
    • Full Disk Access
    • Accessibility
    • Remote Desktop
    • Screen & System Audio Recording
  3. Select the plus icon under the list.
  4. Use the Finder to navigate to your Applications folder.
  5. Select the Take Control Agent, then choose Open.

    The agent or applet appears in the list.

Related articles