Skip to content

Gatekeeper Disabled

Gatekeeper is a security feature designed to protect users from downloading and running malicious or unauthorized software on macOS devices. Advanced users and developers may be required to temporarily disable Gatekeeper in order to install and run apps that are not signed or notarized by Apple.

Creating a new Gatekeeper Disabled policy

To create a new Gatekeeper Disabled policy:

  1. From the Device Posture tab, select + ADD:

    Add new device posture policy

  2. Select Add to macOS.

    The Add new device policy to macOS dialog appears.


    The Gatekeeper Disabled device policy is currently supported for macOS devices.

  3. Select Gatekeeper Disabled from the Select policy type dropdown.

    Add new Gatekeeper Disabled policy

  4. Configure the following attribute:

    • Action: Select Enforce or Review.
  5. Enter label names (predefined or custom) to the Labels field listed under Apply policy to devices with these labels to apply the new policy to specific groups of devices.

    Apply device policy labels

  6. Select SAVE.

    The policy is created with the configured settings.


    When Gatekeeper is disabled on a macOS device, a Gatekeeper disabled ticket type is created.

The policy can be viewed by selecting the dropdown next to Gatekeeper Disabled on the Device Posture tab. See: Device posture configuration overview.

The following policy details are displayed:

  • Device labels applicable to the policy.

  • The action(s) applicable to the policy, for example, Enforce.

View Gatekeeper Disabled policy