Configuration Profile for screensaver start/Idle Time

[gachowski]

Eveyone,

As I am getting ready for the next version of the Mac OS, I plan to move to configuration profiles. I have used mcxToProfile script for all of them, but I am stuck on my last one screensaver start/Idle Time.

It is the only one that is a Byhost, anybody have any success with this? Share a working one? : )

C

[frozenarse]

Here are the guts of the PLIST that I imported into a computer level Configuration Profile.

This is a test profile that starts the screensaver after 1 minute but waits 15 minutes before actually requiring a password to resume.

Preference domain is: com.apple.screensaver

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "{field{*fldinst{HYPERLINK "http://www.apple.com/DTDs/PropertyList-1.0.dtd"}}{fldrslt cf4 http://www.apple.com/DTDs/PropertyList-1.0.dtd}}">
<plist version="1.0">
<dict>
<key>askForPassword</key>
<integer>1</integer>
<key>askForPasswordDelay</key>
<integer>900</integer>
<key>idleTime</key>
<integer>60</integer>
</dict>
</plist>
}

[gachowski]

Greg, Thanks!!!

How do your users "feel" about this screensaver set up? I think my users would go crazy, but I think it's a good way to work around the loss of MCX often. I couldn't even come up with anything that I thought I could get security and the users to agree on.

I am working with Apple but I think the "New" key is "maxInactivity" in the Passcode Policy Payload ...

http://developer.apple.com/library/ios/#featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html

C

[frozenarse]

That was just a test profile I had handy... Our production policy is something like 15 minutes of idle time and require password. I wouldn't be ALIVE if I pushed it out with only 1 minute of idle time!