@chovrud Are you running 9.93?

Known Issues Configuration profiles created in v9.93 with a Security & Privacy payload and a FileVault 2 Redirect payload contain an inactive automatic logout setting.

See: http://docs.jamfsoftware.com/9.93/casper-suite/release-notes/Known_Issues.html

Do you have any other profiles with Login Window/Login Items/Restrictions/Finder payloads?

I've found some very odd issues with these in 9.93 where unexpected settings are being set. Very similar to the issues outlined here - https://macmule.com/2016/05/09/icloud-spotlight-login-window-issues-with-jss-9-9-the-security-privacy-profile-payload/#more-2591

My workaround is to place all payloads in the same configuration profile.

You have to check the payload of the configuration profile itself, not what the JSS says is part of the profile.

Download the profile and open it in an xml editor and see if it says anything for "askForPasswordDelay"

These issues have been with the JSS since 9.90 so that has been about eight months or so without them being fixed.

Hey all -

Thank you for the responses. The strange thing is that this has been occurring since before I rolled out JSS profiles to these machines, in my futile attempt to manage devices via OSX server. Regardless, I'll check the config profile and report back with what I find.

Thanks.

@chovrud This post, might help your spelunking.

Just adding my two cents to this. First off, I am running 9.92.1466020067. I've checked all the profiles and do not see any other profiles asking for "askForPasswordDelay". I created a whole new profile to explicitly push that setting and does not overwrite that setting.

Anyone have a script to overwrite this?

Solution - it appears that some old profiles were carrying payloads that were not supposed to be associated with what was happening. In this instance I removed a couple old Power Saver payloads and it cleared out the random settings in Privacy & Security.

This is an Apple issue, not a JAMF one.

@chovrud Makes sense. I will try this out later and see if that resolves my issues and report back here.

FWIW [this](lhttps://macmule.com/2016/05/09/icloud-spotlight-login-window-issues-with-jss-9-9-the-security-privacy-profile-payload/) may help.

I had a similar issue, in my case I had a separate configuration profile to configure "Finder" once I deleted that separate configuration profile from our JSS it fixed the issue that kept putting the check mark on forcing users to log out after xx minutes.

also it fixed another issue I was having with screen saver not turning on "immediately" or after xx seconds.

if you have a configuration profile with the "Configure Finder" remove it to see if it fixes the issue.

Just seen the updated 9.96 should fix the “logout after x minutes of inactivity” bug.

[PI-002673] Fixed an issue where configuration profiles created in v9.93 with a Security & Privacy payload and a FileVault 2 Redirect payload contain an inactive automatic logout setting.

Source: http://docs.jamfsoftware.com/9.96/casper-suite/release-notes/Bug_Fixes_and_Enhancements.html