Articles in this section

ActivTrak's macOS Agent

Contents

Latest macOS Agent Version: 8.5.0

  • Most Agents auto-update without Admin action. However, under some circumstances, a manual update may be necessary. Learn more here.
  • Enable the Weekly Digest to receive timely notifications about new Agent versions.
  • Check which Agent version is installed on each device by going to Settings > Users and Groups > Computer Agents.
  • Note: We require Agents to be up to date before troubleshooting any issues.

 

macOS Agent Change Log
Version

Release Date MM/DD/YY

(GA)

Notes

9.0.0

06/04/26

New: Firefox no longer requires the browser extension for URL capture (reach out to ActivTrak Support to enable)

Enhanced: Data protection

8.5.0

09/10/25

New: Control whether Location Services is enabled at install time (to address MacOS 15+ permissions re-prompting); Improved identification of which user launched mouse-jiggler processes.

Fixed: Files left behind after remote uninstall.

Enhanced: Minor autoupdate improvements

8.4.2

10/29/24

New: Prevent MacOS Sequoia's 30-day Screen Capture re-prompt for customers not using screen features — e.g. those who have not purchased the Screen Details add-on

New: Agent Health Status Beta – optional dashboard to evaluate network and permissions issues (contact support@activtrak.com to inquire and enroll)

8.4.1

10/01/24

New: Reduce permissions prompts in MacOS 15 Sequoia

Note: macOS Admins, please keep an eye out for ActivTrak email updates regarding macOS Sequoia changes

8.4.0

05/13/24

New: Ability to remotely enable and install extensions for Chrome and Edge

Fixed: Issue where screenshot capture could have an incorrect timestamp

Enhanced: Security

8.3.3

12/15/23

New: URL capture when running websites as apps on Safari (Sonoma), Chrome, and Edge

Enhanced: Security

Fixed: Performance issue on a small number of machines causing the Agent to stop reporting activities

8.3.2

10/06/23

New: For Agents not requiring screen recording permission, the prompt can now be optionally disabled at install time

New: Support for Arc Browser

Enhanced: Security

Fixed: Issue capturing URL on Chrome while searching page

8.2.18

03/13/23

Fixed: Activities not reporting when title bar is blank

Fixed: URL appears as "Search:/" or "unavailable" in Chromium browsers (MS Edge, Opera, etc.)

8.2.16

12/13/22

New: Mouse-mover apps will generate an Activity Log entry with details, which can be used to build Alarms.

8.2.15

10/07/22

Fixed: Over-reporting from sleep/closed events and errant mouse movements.

8.2.14

08/22/22

Enhanced: Stability of macOS Agent auto-update feature to enable devices to update automatically to the latest Agent versions.

Fixed: General bug fixes.

Important considerations

macOS Agent compatibility

The macOS Agent works with macOS 10.14 (Mojave) through macOS 16 (Tahoe) and includes Apple-specific security compliance features.

Key resources

macOS deployment methods

Review the different types of deployment methods in this article.

macOS screen recording permissions

Why does ActivTrak need the Screen Recording permission?

ActivTrak will never record your screen unless you explicitly use the screenshot actions in the alarms.


With macOS 10.15, Apple has introduced a new Screen Recording permission. According to the name, one would assume that this permission only covers screen recording. Unfortunately, that's not the case. It also protects an API that is used in ActivTrak and to access other app's window titles.

What happens if I don't grant the screen recording permissions? For the most part, ActivTrak will still work properly. Only a few applications will not be able to use window snapping. Other actions like screenshotting and moving windows between spaces will break.
Why does ActivTrak / need access to other app's window titles? To track and pull the appropriate data as well as move your windows around. ActivTrak needs to first figure out which window to move. This might seem like a simple task, and that's true for most apps. However, in various cases, it's not as easy as it seems. For example, application windows might have transparent overlays or other invisible parts which in some situations can be hard to identify. In such cases, ActivTrak uses the window titles of these problematic apps to identify whether it is moving the correct window. This has worked quite well during the last 10 years and allowed ActivTrak to work with almost all applications.
Is there any Apple documentation that confirms what you are saying? Yes. You can watch the video from WWDC: https://developer.apple.com/videos/play/wwdc2019/701/. There is a large part about screen recording, which also talks about window titles now also being protected by this permission.
How did it work before Catalina? Before macOS Catalina, there were no such permissions. Any app could access the window title of any other app - and any app could record your screen.
Are there other ways to access the window titles? Yes, ActivTrak could also use the Accessibility API to access other app's window titles. However, this doesn't work in some specific situations and is less performant.
Can I enable/disable the permission later? Yes, you can always choose to disable/enable the permission via System Settings > Privacy & Security > Screen & System Audio Recording.
Is there any indication of whether an application is currently recording my screen? Unfortunately, no. Applications that get the Screen Recording permission can record your screen at any time without any indication.
Why did Apple protect window titles with this permission? We are currently unsure. We will continue to watch and see how the macOS evolves and adjust accordingly to ensure the agent runs properly on Apple machines.

macOS Agent troubleshooting

Mac naming issues

When installing ActivTrak on multiple Mac computers, duplicate computer entries may appear, skewing reporting. This is caused by a naming conflict with Apple's networking services. All Mac computers with the ActivTrak agent installed must have unique names.

To change the computer name to something unique, log in to the Mac that needs renaming, refer to this Apple user guide, and select your specific OS version for instructions.

Screenshots showing desktop wallpaper

If you are collecting screenshots for a Mac user and can only see their desktop wallpaper rather than the actual applications on their screen, this is due to Apple's Security & Privacy settings. You will need to follow these instructions. After completion, restart either the agent or the machine itself for the new screenshot permissions to take effect.

Mac Agent not installing

  1. Verify Agent installation requirements:
  • Admin credentials required: ActivTrak can only be installed by a computer administrator
  • File name intact: Don't rename the installer file, including removing "(1)" or "(2)" suffixes that browsers sometimes add
  • Installation timing: Install during scheduled monitoring hours when possible. New users automatically join the Default Schedule, which typically runs 24/7 for simplicity. If installation occurs outside scheduled times, users will appear the next time they're active on their machine during the Default Schedule. You can view, edit and apply tracking schedules in Settings > Schedules > Track tab.
  1. If running Catalina or later, the installer may require permission to run. If so, you will see a similar message below when trying to install the Agent:
Screen_Shot_2019-10-24_at_12.05.46_PM.png

 

  1. To fix this, click the Apple icon in the top-left corner of your screen and navigate to System Settings > Privacy & Security. Scroll down and click the Open Anyway button to confirm your intent to open or install the app.
In System Settings, choose to open an app despite the security warning if you're certain the app is from a trustworthy source.

 

  1. The warning prompt reappears, and if you're absolutely sure you want to open the app anyway, you can click Open.

Gatekeeper

MacOS includes a feature called Gatekeeper, which allows only trusted software from the App Store and/or identified developers. If Gatekeeper is preventing the installation of legitimate software such as ActivTrak, follow the steps below.

  1. Click on the Apple icon in the top left of your screen and navigate to System Settings > Privacy & Security. Scroll down to the Security section and select Allow applications from 'App Store & Known Developers':

 

  1. When changing the selection, authentication will be required:

Screenshot 2024-12-27 at 3.34.10 PM.png

 

  1. Close the window. Uninstall ActivTrak and reinstall a fresh copy of the Agent.
  2. Navigate to /Library/PrivilegedHelperTools, right-click on the PrivilegedHelperTools folder and select Get Info. At the bottom under Sharing & Permissions, verify Read & Write privileges for everyone. If it says 'No Access', this will need to be adjusted for a successful installation.

Mac Agent not reporting

After installing the Mac Agent, data should appear in ActivTrak within minutes of user login. If data doesn't appear or stops unexpectedly, follow these troubleshooting steps.

Check ActivTrak settings

Within the ActivTrak application:

  1. Verify filters
    Check all Date Range and User/Group filters at the top of applicable pages. Incorrect filters can hide data and make users appear inactive.
  2. Check license limits
    Click your account menu (circle icon in top right) to view the users-to-licenses ratio. Paid accounts that exceed their limits have a 14-day grace period before data is hidden. Free plans (3 users, 3GB storage) hide data immediately when limits are exceeded. Data will still be collected, but it will not be viewable until you either reclaim licenses or purchase new ones.
  3. Review the Do Not Track list
    Go to Settings > Users & Groups > Do Not Track. Remove any users you want to monitor—they'll reappear after generating their first activity log.
  4. Confirm tracking schedules
    Check Settings > Schedules > Track tab. New users join the Default Schedule (typically 24/7). The tracking schedule for each user will be based on their computer's local time zone and not the Account Time Zone.
  5. Check Agent status
    View Last Log Record and Agent Version at Settings > Users & Groups > Computer Agents. If outdated, download the latest version from Home > Admin Panel and redeploy.

Check the Computer

  1. Verify Agent services
    Open Activity Monitor on the monitored machine. Under the CPU tab, look for SCTHOST and SCTHOSTP. If SCTHOST and SCTHOSTP are shown, double-click on one of them and then click Quit in the bottom left. Once one has been done, do the same for the other. They should both reappear within a few seconds, and data should begin uploading within a few minutes.

 

  1. Verify security settings
    Verify that Birch Grove Software, Inc. is enabled in System Settings > General > Login Items & Extensions under 'Allow in the Background.' This allows the ActivTrak agent to run in the background. Otherwise, the agent can be installed on the device, but will not track the user.

 

  1. Included with Apple's macOS Catalina release were several changes to privacy settings on the Mac, including the requirement to give applications explicit access to capture the screen. When ActivTrak first attempts to capture a screenshot on a Mac running macOS Catalina or higher, this message will pop up:
Screen_Shot_2019-12-12_at_12.33.42_PM.png

 

To grant ActivTrak permission to capture the screen for screenshot-based alarms, click Open System Preferences. You can update permissions later by clicking the Apple icon in the top-left corner of your screen and navigating to System Preferences > Privacy & Security > Screen & System Audio Recording. Toggle the switch next to scthostp.

 

  1. Allowlist the Agent

Ensure there are no conflicts due to security software on the monitored computer by following this guide. The Agent can work on some computers but not others, and security updates can suddenly stop a working Agent.

Learn more

Was this article helpful?
2 out of 2 found this helpful