Skip to main content
The following MDM deployment methods have been tested and fully documented. Each method has its own page with detailed step-by-step instructions:
  1. Windows Origin Agent via Intune
  2. macOS Origin Agent via Intune
  3. macOS Origin Agent via Jamf
  4. macOS Origin Agent via Tanium

MDM Configuration Profile

All three macOS deployment guides use the same privacy preferences (PPPC) profile. It pre-grants the Origin agent Full Disk Access and Endpoint Security access, so the agent registers silently with no user-facing permission dialogs.
Save the contents below to a file named exactly origin-privacy.mobileconfig.
origin-privacy.mobileconfig
Upload the file to your MDM as a raw .mobileconfig. Do not recreate it in Jamf’s, Intune’s, or Tanium’s built-in payload editor — they rewrite the XML and break the code requirement that makes the permission grants work.
The install script each guide needs is included inline on that guide’s own page.
For manual installation instructions on macOS and Windows, refer to the macOS Agent Installation and Windows Agent Installation pages. MDM deployment is recommended for fleet-scale rollouts where per-endpoint manual installation is not practical.