Skip to main content
Question

Change Password Grayed Out under Configuration Profile

  • August 22, 2014
  • 3 replies
  • 43 views

Forum|alt.badge.img+6

So we are trying to allow GateKeeper settings from anywhere as well as lock down the "Require password immediately after sleep or screen saver begins", so we decided to use a configuration profile. We go through and set it up (making sure that!) the check box that says "allow user to change password" is enabled. However, it keeps graying out the change password option in both Security & Privacy as well as Users & Groups. This is on a machine running 10.9.4.

We are avoiding managed preferences because they keep breaking our Network Home connection if applied at the user level. Has anyone seen this or have a solution for it?

3 replies

Forum|alt.badge.img+21
  • Honored Contributor
  • August 22, 2014

yes. Solution is to not use a config profile for Gate Keeper and set it via a script

#!/bin/sh


spctl --master-disable

Forum|alt.badge.img+6
  • Author
  • Contributor
  • August 24, 2014

That works for allowing app installs, however it does not solve my problem of preventing users from unchecking the require password box.


Forum|alt.badge.img+5
  • Contributor
  • September 1, 2014

This is a know defect of casper. I think you need temporarily add the computers who want to change their password to the exclusion list of the configuration profiles. by scope->exclusion.
This works for me, give it a go.