Skip to main content

How can I enable / disable the setting "Require an administrator password ... to access systemwide settings"?

 

You must specify each thing you want users to be able to access and change the permissions on that thing. Each thing would have access granted a bit differently. Below is a script I use to allow users to modify Wi-Fi and Printer settings.

 

#!/bin/bash

#For WiFi

echo allowing everyone to write to network and wifi services
/usr/bin/security authorizationdb write system.preferences.network allow
/usr/bin/security authorizationdb write system.services.systemconfiguration.network allow
/usr/bin/security authorizationdb write com.apple.wifi allow

#For printing

# echo allowing everyone to write to printing services
/usr/bin/security authorizationdb write system.preferences.printing allow
/usr/bin/security authorizationdb write system.print.operator allow
/usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin
/usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group _lpadmin

echo script completed
exit 0;

 

Looked this up because I was curious. I thought in the past you can set this via a configuration profile, but I guess not.

Here is another thread in case it helps: https://community.jamf.com/t5/jamf-pro/require-an-administrator-password-to-access-system-wide/td-p/290935


 


Also, could look up the CIS macOS Sonoma Control 2.6.8 Ensure an Administrator Password Is Required to Access System-Wide Preferences (Automated).

Reply


Terms & ConditionsCookie settings