Leveraging Jamf Pro to push Password policy to macbook login on startup

[tegus232]

Hi,

We are looking into the following scenarios:

1. Leverage a script or a jamf config where if someone attempts x amount of times of fail login attempts on a macbook, it lockouts out the machine.

2. We leverage OKTA IdP and Jamf Connect. How can we leverage this so password policies for lockouts are being enforced.

Apple Builtin seems to leverage brute force which is varied for lockouts

[ghost117]

Following as we have a similar use case.

[tegus232]

here is what jamf support recommended. we are testing next week 

-We can set up a configuration profile with a passcode payload. This allows us to set a specific number of failed attempts before the machine locks. Navigate to Computers > Configuration profiles > Passcode > set this is up to best suite your environment.