I'm sure someone's seen this before, I'm still a noob when it comes to administrating Casper. Right now we've got configuration profiles pushed out for our security settings (display message on lock screen, lock after X minutes, etc.) In the profiles, the option to allow users to reset their password IS checked - meaning users should be able to change their password. But in System Preferences>Users & Groups, the Change Password button is greyed out. Doesn't matter if you authenticate as admin user or not. Anyone seen this?
Solved
Users can't change password - greyed out
+3Best answer by youngj
The work around below seems to work: (from JAMF Support)
The following plist file will be used to upload to the configuration profile:
plist file: /var/db/SystemPolicy-prefs.plist
Do the Following:
- Make a copy of the plist above and move this to your desktop
- Open terminal and run the following command: a. plutil -convert xml1 /path/to/plist_file.plist
- Log into the JSS web application
- Click the Computers tab
- Click Configuration Profiles
- Click New
- Fill out the general payload and name the configuration profile
- Scroll down and click on the Custom Settings payload
- Click Configure
- For the preference domain please enter the following: a. SystemPolicy-prefs.plist
- Click Upload
- Navigate to your desktop and choose the SystemPolicy-prefs.plist and upload that file
- Click scope and scope this profile to the proper end users
- Click Save
Go -> Utilities -> Keychain Access
Keychain Access -> Preferences
"Reset My Default Keychains"
Reset the Login and you are good to go. Be careful though coz you'll lose currently stored keys. And have to login again on other connected devices as well.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.