Bizarre issue with configuration profile

[AlistairCarr]

Hi, Wondering if someone can help please

We have two config profiles which set when the password is required

One profile for gatekeeper being switched on

One profile for gatekeeper switched off

In both instances the machine is set to require password immediately.

However in random instances on both profiles the actual machine will set to 5 minutes instead of immediately.

This is regardless of OS version (happens with Yosemite & El Cap)

Any thoughts as to why this is happening?

Thanks as always in advance.

[al_platt · Accepted solution]

It's a bug in 9.82

http://www.johnkitzmiller.com/blog/security-privacy-configuration-profile-bug-in-casper-9-82/

[howie_isaacks]

Yup. It's a bug. Very annoying. When I created a configuration profile to keep Gatekeeper on it also screwed up Safari auto-fill. Removing the profile brought Safari auto-fill back.

[AlistairCarr]

Thanks both,

I've modified the policy to 5 seconds and all seems well.

[gabester]

http://www.jamfsoftware.com/libraries/pdf/products/documentation/Casper-Suite-9.9-Release-Notes.pdf

This is specifically fixed in 9.9:

[D-010036] Fixed an issue where the JSS failed to respect the Require password immediately after sleep or screen saver begins setting in OS X configuration profiles Security & Privacy payload.