Is anyone else seeing the "Parental Controls" checkbox being enabled on AD accounts, on first login? There doesn't seem to be a way to control this in JSS.
System Preferences > Accounts > Password > [x] Enable parental controls
Hi Larry and Ben,
MCX is disabled in JSS. I tested this after the imaging guys left to make sure the box isn't being checked manually, confirmed it comes on by itself (gremlins?).
JSS is at 7.31 (we're generally a version behind - change control is a b!tc#). Looking for a defaults command to disable this so we can handle post-boot.
I presume you're using the built-in AD plugin? Perhaps it has some way of doing MCX that it enables by default...
If that checkbox doesn't bother you, I wouldn't worry about it. It's just an indicator that MCX is enabled for that account (by some means: local, Casper, ADmitMac, OD, whatever). It doesn't necessarily mean any settings are applied beyond that.
Are these mobile accounts?
For us it's checked for all standard student mobile managed accounts, and the check populates the controls with defaults.
If a parent changes it for their kid, the next time the kid logs in it's wiped out.
I tested with Catalina and the new Screen Time and things work better. (I suspect because the parental control check box is no longer there.) We're working with jamf support, but it has been over 24 hours and we're not much closer to a solution.