Issue with Security Config Profile

[DBrowning]

Since JSS 9.82 the Security & Privacy Config Profile doesn't seem to be working properly. I have Require password Immediately after sleep and Screensaver but its setting its self to 5 mins.

Anyone else seeing this?

[Aziz · Accepted solution]

Hey @ddcdennisb

This appears to be an issue with JSS 9.82, I'm having the same problem as well.

Case Number: D-010036.

From a TAM: "If you set the time delay to any other setting other than immediately, the config profile works fine."

JAMF Nation post: https://jamfnation.jamfsoftware.com/discussion.html?id=18244

[DBrowning]

Thanks @Abdiaziz

I've set to 5 seconds and that seems to be working.

[murph]

@ddcdennisb Do you have a Login Window profile too? If so having both a Login Window profile and Security profile causes conflicts for some reason. I was having the same issue too. Removed the Login Window profile and the require password setting works as expected. I believe this is defect D-009503.

[DBrowning]

@smurphyusd346

looks like both are writing to the com.apple.loginwindow plist and they are both setting things for ScreenSaver which is conflicting data is my guess.

[DBrowning]

So I downloaded and looked through both Security and Login Banner profiles and in both of them it writes to com.apple.screensaver and both write to the key "askForPassword"

Here is the code from the Login Banner

<dict>
        <key>PayloadUUID</key>
        <string>C8AF92BA-D979-41AC-A7FB-4C994598421B</string>
        <key>PayloadType</key>
        <string>com.apple.screensaver</string>
        <key>PayloadOrganization</key>
        <string>Company, Inc</string>
        <key>PayloadIdentifier</key>
        <string>C8AF92BA-D979-41AC-A7FB-4C994598421B</string>
        <key>PayloadDisplayName</key>
        <string>Login Window:  Screen Saver Preferences</string>
        <key>PayloadDescription</key>
        <string/>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>PayloadEnabled</key>
        <true/>
        <key>loginWindowIdleTime</key>
        <integer>900</integer>
        <key>idleTime</key>
        <integer>900</integer>
        <key>loginWindowModulePath</key>
        <string>/System/Library/Screen Savers/Flurry.saver</string>
        <key>askForPassword</key>
        <false/>
        </dict>

Here is the code from the Security & Privacy Config Profile

<dict>
        <key>PayloadUUID</key>
        <string>9D226BC4-4E25-4F14-96DD-7AD26B3A9754</string>
        <key>PayloadType</key>
        <string>com.apple.screensaver</string>
        <key>PayloadOrganization</key>
        <string>Company, Inc</string>
        <key>PayloadIdentifier</key>
        <string>9D226BC4-4E25-4F14-96DD-7AD26B3A9754</string>
        <key>PayloadDisplayName</key>
        <string>Login Window:  Screen Saver Preferences</string>
        <key>PayloadDescription</key>
        <string/>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>PayloadEnabled</key>
        <true/>
        <key>askForPassword</key>
        <true/>
        <key>askForPasswordDelay</key>
        <integer>5</integer>
    </dict>

[DJRizzo]

Can anyone tell me if this was resolved in a later version of the JSS/Casper Suite? Thanks.