Add MDM Support for macOS (Jamf, Kandji, Intune)

Ideas Feature Requests
1

We are deploying Cursor across our organization using MDM platform. To streamline management and ensure compliance, we would like the ability to control application settings via configuration profiles.

Key Feature Request:

  • Support for macOS Managed Preferences (com.todesktop.* domain)
  • Ability to disable auto-updates through MDM
  • Enforcement of settings like "update.mode": "none" via configuration profiles
  • Provision of a cursor cli installer
2

I second this request.

Not having a configuration profile for MacOS devices that allows us to manage the AllowedExtensions policy poses a security risk that means we are currently remaining with VSCode.

3

+1

we do have requests to align certain settings across the org.

4

also +1, would love to be able to centrally manage the Global Ignore File

5

Before my org could rollout cursor, we had to restrict macOS updates, for anyone still looking it can be blocked user-level (a script to add In these json values works, but this should still be controllable MDM level) :
‘~/Library/Application Support/Cursor/User/settings.json’

{
  "update.mode": "none"
}

Also spotted the pkg Installer in Silent Installer needed for Kandji MDM Deployment
https://www.cursor.com/download/stable/darwin-universal-pkg

But the biggest block is mass deployment of the cursor cli. Closest I’ve come is:

sudo ln -sf /Applications/Cursor.app/Contents/Resources/app/bin/code /usr/local/bin/cursor && sudo chown -h root:wheel /usr/local/bin/cursor

Works, but outputs:

 % cursor -h
[0626/055909.206828:ERROR:codesign_util.cc(109)] SecCodeCheckValidity: Error Domain=NSOSStatusErrorDomain Code=-67062 "(null)" (-67062)
Cursor 1.1.6
6

+1 very much needed

7

+1!

8

+1, we need it too

9

Bump…
all we need is a zero day actively being exploited. (My versioning is pretty bad…)

For those on Jamf Pro and Kandji, Do check out installomator.. my team is attempting to explore using that.

Btw, if anyone here is on Mac Admins Slack… please join the cursor channel if you want to chat on this

10

Not sure why Cursor support hasn’t responded to this thread (I had to do some digging), but Cursor actually expanded their Mac MDM Enterprise Support Settings starting with version 1.3:

They even added this demo mobile config locally:
/Applications/Cursor.app/Contents/Resources/app/policies/com.todesktop.230313mzl4w4u92.mobileconfig

Electron apps (which Cursor is built on) are notoriously unfriendly for non-admin auto-updates, but Installomator can be a solid solution:
Great deep dive video demo of Installomator (MDM agnostic) https://www.youtube.com/watch?v=WU6o3iJNQM4
but Installomato’s wiki is also really well documented: Home · Installomator/Installomator Wiki · GitHub

Cursor has also added an improved CLI installation method:

11

My team uses installomator extensively (we also wrote something similar for windows).
That said, we still need more then just 2 pitiful enterprise settings.

I have been scolded by non sudo users… who say why we cannot make native updating for non sudo users, and not have them use the installomator tile all the time. :rofl: