Posted on 01-11-2023 09:58 AM
I can't seem to figure out where the config profile payload for handling these lock screen options are. Also, is there a way to let standard users adjust these without admin credentials?
Posted on 01-11-2023 11:56 AM
Those will be in the Energy Saver Configuration Profile payload, and under the Portable > Battery and Portable > Power Adapter tabs.
As for allowing end users to adjust those, I don't know the exact syntax, but my guess is some security authorizationdb command would allow standard users to edit those settings. However, if you apply those settings via Config Profile, I don't think they would then be able to adjust any of them. Most profile settings lock down the settings its applying to.
Posted on 01-11-2023 12:01 PM
In Jamf, the energy settings payloads allow me set a value, but I can't see where I would allow standard users to change the settings on their own. Something is requiring admin credentials for that, but I don't see where I can manage that.
Posted on 01-11-2023 12:11 PM
I don't think that's a Jamf thing. I believe it's the OS that locks those once the device is under MDM management.
You can try the following to see it opens the settings up. Again, uncertain if this will work alongside an applied profile managing those settings, but you can try it.
/usr/bin/security authorizationdb write system.preferences allow /usr/bin/security authorizationdb write system.preferences.energysaver allow
Posted on 04-10-2023 09:55 AM
Worked great for me, stuffed the script in a policy and my standard user account can now change the lock screen settings, Thanks!
Posted on 01-11-2023 01:50 PM
iMazing is a great app for figuring out payloads.
+1 for the authorizationdb to change user permissions
Posted on 02-01-2023 02:14 AM
I have tried to set display off on battery and power adapter for our Macbooks. Both with Configuration Profile and script running at recurring checking. But still users are able to change these settings in Mac OS Ventura. The settings jumps back at next check-in. I want these options be locked for our users, so they can't change them.
Posted on 02-01-2023 01:44 PM
Unfortunately I have the same experience. Not sure if this is a bug or intended behaviour
Posted on 04-26-2023 04:28 AM
unfortunately having the same issue here