Managing macOS Privacy Permissions (PPPC): What MDM Can and Cannot Force
Windows admins reach for PPPC to 'disable the webcam' and hit a wall. PPPC controls per-app TCC policy; Restrictions disables hardware. Here's the real map — with working profiles and the limits Apple enforces.