LockDown Browser Admin Password Required on Mac (Workarounds for Managed Macs)
Why admin is required
macOS Sonoma 14.4 changed the privilege escalation model for installer packages writing to /Applications + setting up TCC entries. LDB needs both - it installs to /Applications and requests Camera, Microphone, Screen Recording, and (rarely) Accessibility / Full Disk Access permissions. All of these now require admin authentication at install or grant time.
This is not LDB-specific. Any third-party app that requests these permissions on Sonoma 14.4+ requires admin authentication during install.
Path 1 - Use a personal Mac
The cleanest path. If you have access to a personal MacBook outside university MDM:
- Install LDB on your personal Mac via the standard procedure.
- Take the exam from your personal Mac.
This is the path most universities recommend in their IT policy. Managed loaner Macs aren't designed for installing arbitrary third-party apps.
Path 2 - Have your IT desk pre-install LDB
Most MDM-managed Mac fleets at universities have an option to push LockDown Browser as a managed app via Munki, Jamf, or Apple Business Manager. Procedure:
- Identify your university's IT support desk (usually
helpdesk@[school].eduor in the IT services portal). - Email them: "I have a proctored exam on [date] requiring LockDown Browser. My laptop is MDM-managed; please push LDB via Self Service / Software Center."
- Most IT desks will install within 1-2 business days.
- After install, LDB appears in /Applications - launch it normally from your LMS.
This is the lowest-friction path on managed Macs. Don't wait until exam day.
Path 3 - Request a temporary admin grant
Some universities have a process where IT temporarily elevates a student account to admin specifically to install LDB:
- Email IT: "I need to install LockDown Browser; please grant temporary admin to my account [username] for [duration]."
- IT grants a 1-hour or 4-hour admin window.
- You install LDB during that window.
- IT revokes admin afterward.
This is more uncommon than Path 2 - most universities prefer to push LDB themselves rather than grant student admin.
What does NOT work in 2026
Workarounds documented for Big Sur and Monterey no longer apply on Sonoma 14.4+ and Sequoia. Specifically:
- "Right-click → Open" Gatekeeper bypass: doesn't bypass the admin requirement for installers writing to /Applications.
- "Anywhere" Gatekeeper option (
spctl --master-disable): requires admin to enable, defeating the purpose. - Per-user app install at
~/Applications: Respondus does not ship a per-user installer; the installer hardcodes/Applications. - Drag-install from .dmg directly to
/Applications: some apps support this but LDB's installer also sets up a LaunchAgent and TCC pre-grants which require admin.
The unauthorised-install warning
Even where some workarounds technically still work, an unauthorised install on a managed Mac is a violation of most universities' acceptable-use policies. Your IT department logs all install events; bypassing the admin requirement on a managed Mac is detectable and can lead to disciplinary action.
The legitimate paths above are not optional courtesies - they're the right way to handle this.
For non-managed Macs (personal Macs)
You ARE the admin on your personal Mac. Just enter your account password when the installer prompts. The "admin password" macOS asks for IS your normal login password.
- Run the installer from the .dmg.
- When macOS prompts, enter your password (the one you use to log in).
- Click "Install Software" or "OK".
- Install completes.
Frequently asked questions
I forgot my Mac's password - can I still install LDB?
No. The macOS installer requires your account password (admin or otherwise on Apple Silicon) to authenticate. If you forgot it, follow Apple's password reset procedure first: Apple Menu → Restart → Recovery Mode → Reset Password.
Can my friend with admin access install LDB on my Mac for me?
Yes. Sign your friend into a guest account or temporarily transfer admin to them, install, then revert. Awkward but works. Use Path 1 (personal Mac) or Path 2 (university IT) instead.
My Mac is family-shared with parents who have admin. Can they install for me?
Yes - exact same as above. Have the admin user install LDB. The install is system-wide; once installed, any user (including non-admin) can launch LDB from their account.