Issue with Security Config Profile

DBrowning
Valued Contributor

Since JSS 9.82 the Security & Privacy Config Profile doesn't seem to be working properly. I have Require password Immediately after sleep and Screensaver but its setting its self to 5 mins.

Anyone else seeing this?

1 ACCEPTED SOLUTION

Aziz
Valued Contributor

Hey @ddcdennisb

This appears to be an issue with JSS 9.82, I'm having the same problem as well.

Case Number: D-010036.

From a TAM: "If you set the time delay to any other setting other than immediately, the config profile works fine."

JAMF Nation post: https://jamfnation.jamfsoftware.com/discussion.html?id=18244

View solution in original post

6 REPLIES 6

Aziz
Valued Contributor

Hey @ddcdennisb

This appears to be an issue with JSS 9.82, I'm having the same problem as well.

Case Number: D-010036.

From a TAM: "If you set the time delay to any other setting other than immediately, the config profile works fine."

JAMF Nation post: https://jamfnation.jamfsoftware.com/discussion.html?id=18244

View solution in original post

DBrowning
Valued Contributor

Thanks @Abdiaziz

I've set to 5 seconds and that seems to be working.

murph
New Contributor III

@ddcdennisb Do you have a Login Window profile too? If so having both a Login Window profile and Security profile causes conflicts for some reason. I was having the same issue too. Removed the Login Window profile and the require password setting works as expected. I believe this is defect D-009503.

DBrowning
Valued Contributor

@smurphyusd346

looks like both are writing to the com.apple.loginwindow plist and they are both setting things for ScreenSaver which is conflicting data is my guess.

DBrowning
Valued Contributor

So I downloaded and looked through both Security and Login Banner profiles and in both of them it writes to com.apple.screensaver and both write to the key "askForPassword"

Here is the code from the Login Banner

<dict>
        <key>PayloadUUID</key>
        <string>C8AF92BA-D979-41AC-A7FB-4C994598421B</string>
        <key>PayloadType</key>
        <string>com.apple.screensaver</string>
        <key>PayloadOrganization</key>
        <string>Company, Inc</string>
        <key>PayloadIdentifier</key>
        <string>C8AF92BA-D979-41AC-A7FB-4C994598421B</string>
        <key>PayloadDisplayName</key>
        <string>Login Window:  Screen Saver Preferences</string>
        <key>PayloadDescription</key>
        <string/>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>PayloadEnabled</key>
        <true/>
        <key>loginWindowIdleTime</key>
        <integer>900</integer>
        <key>idleTime</key>
        <integer>900</integer>
        <key>loginWindowModulePath</key>
        <string>/System/Library/Screen Savers/Flurry.saver</string>
        <key>askForPassword</key>
        <false/>
        </dict>

Here is the code from the Security & Privacy Config Profile

<dict>
        <key>PayloadUUID</key>
        <string>9D226BC4-4E25-4F14-96DD-7AD26B3A9754</string>
        <key>PayloadType</key>
        <string>com.apple.screensaver</string>
        <key>PayloadOrganization</key>
        <string>Company, Inc</string>
        <key>PayloadIdentifier</key>
        <string>9D226BC4-4E25-4F14-96DD-7AD26B3A9754</string>
        <key>PayloadDisplayName</key>
        <string>Login Window:  Screen Saver Preferences</string>
        <key>PayloadDescription</key>
        <string/>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>PayloadEnabled</key>
        <true/>
        <key>askForPassword</key>
        <true/>
        <key>askForPasswordDelay</key>
        <integer>5</integer>
    </dict>

DJRizzo
New Contributor II

Can anyone tell me if this was resolved in a later version of the JSS/Casper Suite? Thanks.