Skip to main content
Question

High Sierra remove lock screen

  • January 17, 2018
  • 16 replies
  • 88 views

Forum|alt.badge.img+11

Has anyone come across a way to remove the lock screen option from a mac? In our busy student open access and teaching rooms we don't want them to be able to lock a mac and walk away from it for obvious reason.

We have a way of checking idle time and forcing a log off, but I'd prefer to just remove the menu item altogether instead.

16 replies

Forum|alt.badge.img
  • New Contributor
  • February 2, 2018

Yes, I see this as a potential problem as well. Hoping for a resolution.


Forum|alt.badge.img+13
  • Valued Contributor
  • February 2, 2018

You could:
1. Set the Preference in 'Security and Privacy' settings as you want them i.E Uncheck 'require password after x mins of activity.
2. Disable the 'Security and Privacy' System Pref via restrictions.

That should do the trick?

Gluck!


Forum|alt.badge.img+11
  • Author
  • Valued Contributor
  • March 21, 2018

@kerouak Hi thanks for the suggestion but I don't think that would do anything as the "Lock Screen" option is still there under the Apple menu in the top left of the screen.


Forum|alt.badge.img+8
  • Valued Contributor
  • June 7, 2018

Has anyone come up for a solution for this? I, too, am configuring for public labs and would like to remove or disable (grey out) this menu option. Currently running 10.13.4 on desktop clients.


Forum|alt.badge.img+7
  • New Contributor
  • June 7, 2018

I can't find any way to disable that function. Your best option here may be between these two pieces of the Login Window payload in Configuration Profiles:

  • Enable Fast User Switching - Even in an AD environment this works fairly well, and would allow extra users to login, even if someone else is logged in
  • Log Out Users After - Pretty obvious what the function is here, but I'm not quite sure how it functions in combination with Fast User Switching

Forum|alt.badge.img+4
  • Contributor
  • June 15, 2018

Hello!
The good folks on the Penn State MacEnterprise Mailing List helped me figure this out today.

You can remove the 'Lock Screen' button from the Apple menu with this command:
/usr/bin/defaults write /Library/Preferences/com.apple.loginwindow DisableScreenLockImmediate -bool true

I imported the plist as a custom configuration profile in Jamf and assigned it to my High Sierra labs, but you could also just create a script and add it to a policy. Works great!


Forum|alt.badge.img+11
  • Author
  • Valued Contributor
  • June 17, 2018

@Discher This is brilliant if it works! It's another perfect example of Apple not "getting" education at all. You could enable the lock screen before but none of our students ever worked out how to but giving them a button was plain stupid as it meant we would have to implement some sort of idle logout (which we may still do anyway).

I will give this a go tomorrow.


Forum|alt.badge.img+11
  • Author
  • Valued Contributor
  • June 18, 2018

@Discher This works!!! Thanks so much.


Forum|alt.badge.img+8
  • Valued Contributor
  • July 3, 2018

Yes, this worked perfectly for me also! Big load off my mind knowing the students in the labs can't lock the screen. I'm hoping to do the same thing (disable) the Shut Down menu item for our Lecture Halls, as it has been a standing request for these desktops.

Cheryl


Forum|alt.badge.img+1
  • New Contributor
  • July 10, 2018

@ctarbox

This might work for you:

https://github.com/rtrouton/profiles/tree/master/ShutdownRemovedFromAppleMenu

@Discher

Could I take a look to see what the config profile looks like?


Forum|alt.badge.img+8
  • Valued Contributor
  • July 25, 2018

@criebrie2 Thanks for the link to the script. I opted to create a Policy with this command: /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow DisableScreenLockImmediate -bool true, as @Discher posted above. Both this Policy and the Config Profile with the Finder Payload (Commands) to Hide the ShutDown option are working well for me.


Forum|alt.badge.img+1
  • New Contributor
  • April 25, 2019

Hi

According to the command shared by Discher I updated the com.apple.loginwindow and with it with the help of mcxtoprofile I made this profile
High Sierra and Mojave

Anula bloqueo de pantalla


Forum|alt.badge.img+5
  • New Contributor
  • May 15, 2019

Our school will be moving to Mojave in the summer-to-fall timeframe. I just tried to use this on a Mojave installation and it did not work, is there a similar way to accomplish this on Mojave?


Forum|alt.badge.img+11
  • Author
  • Valued Contributor
  • May 16, 2019

@tx-wolf Are you sure? I've just tested it on Mojave and it successfully removes the lock option from the Apple menu.


Forum|alt.badge.img+1
  • New Contributor
  • May 20, 2019

@tx-wolf try with this profile, I have it installed in High Sierra and Mojave

Anula e impide bloqueo de pantalla.mobilconfig


Forum|alt.badge.img+5
  • New Contributor
  • July 11, 2019

Well it took me a while to get back to this (other things happening)....turns out I was both wrong and right. The defaults write command DOES work, but only after the machine in enrolled to JAMF. Doing the command on a machine before it is enrolled (which is what I had tried previously) has no effect. I tested today and confirmed that if I do the defaults write command post-enroll, it works very well.