
macOS 27 changes how Macs are managed: binary control is in, PPPC is out
WWDC 2026 brought two big shifts for managed Macs: native binary allow and deny lists through the Endpoint Security framework, and a new declarative privacy framework that replaces PPPC. Here is what changes, with the exact MDM keys, and what UK businesses should do before the autumn release.




















