We have Jamf LAPS enabled for a PreStage account and a jamf binary account.
For an unknown reason the PreStage account keeps getting locked out and requires a password change.
When I run this command:
usr/bin/pwpolicy -authentication-allowed -u prestageadminuser
I get this return:
User <prestageadminuser> is not be allowed to authenticate until password is changed: Credential verification failed because account is temporarily locked.Sometimes I get this return
User <prestageadminuser> is not be allowed to authenticate until password is changed: Password change is required by authentication server.I've gotten this result with and without a config profile for passcode.
From the terminal sometimes I am able use the command "login prestageadminuser" with theLAPS password and it will prompt me to change the password.
Sometimes it does not take the LAPS password at all.
I do not have any problems with the jamf binary account LAPS.