topic Deploy Global Protect to Mac OS via Tanium in GlobalProtect Discussions

Deploy Global Protect to Mac OS via Tanium

GHUNT-CW — Fri, 05 Sep 2025 16:34:10 GMT

Hello,

The goal is to deploy the client to Mac laptops via Tanium Deploy. I've attached screenshots from Tanium of two most recent failed installs. If you can assist that would be great.

Re: Deploy Global Protect to Mac OS via Tanium

BPry — Fri, 05 Sep 2025 20:15:00 GMT

@GHUNT-CW,

Have you verified that the command that you're using to install the PKG is actually functioning and works outside of your MDM? Generally what you would want to do is have a script that pre-runs to create the com.paloaltonetworks.GlobalProtect.settings.plist file to pre-stage basic configurations like whether or not you're using the default-browser, the connection method, and the actual portal address. Then you would deploy the PKG after that script is created successfully.

Re: Deploy Global Protect to Mac OS via Tanium

GHUNT-CW — Fri, 05 Sep 2025 20:54:25 GMT

FYI the .pkg is on my Desktop

When I attempted to run in Terminal, a small window popped up asking if I wanted to allow opening or running files from the Desktop. I clicked allow and was asked for a password. Upon entering the pw of user, I received a msg indicating that user is not in the sudoers file.
What do you recommend?
Finally, everything after your 1st question, is foreign to me. Can you help with the script?