Posted on 03-07-2018 11:40 AM
Hi, I'm having a recurring issue with my configuration profile for our Lab mac minis. Under our Security and Privacy payload we have "Require Password after "whatever minutes" unchecked but keeps reverting back to checked on the computer. We notice this when we switch users on the computer and the computers time out and go to a lock screen. Any info would be helpful. Thanks
Posted on 03-07-2018 12:24 PM
Can you copy and paste your config profile plist?
To convert the config profile to readable XML format:
https://macmule.com/2015/11/16/making-downloaded-jss-configuration-profiles-readable/
Posted on 03-08-2018 08:51 AM
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Restrictions</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>44B05661-1A5E-46B7-AA2C-1506870155FE</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.applicationaccess</string>
<key>PayloadUUID</key>
<string>44B05661-1A5E-46B7-AA2C-1506870155FE</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>allowAirPrint</key>
<true/>
<key>allowAirPrintiBeaconDiscovery</key>
<true/>
<key>allowAutoUnlock</key>
<false/>
<key>allowCloudAddressBook</key>
<false/>
<key>allowCloudBTMM</key>
<false/>
<key>allowCloudBookmarks</key>
<false/>
<key>allowCloudCalendar</key>
<false/>
<key>allowCloudDesktopAndDocuments</key>
<false/>
<key>allowCloudDocumentSync</key>
<false/>
<key>allowCloudFMM</key>
<false/>
<key>allowCloudKeychainSync</key>
<false/>
<key>allowCloudMail</key>
<false/>
<key>allowCloudNotes</key>
<false/>
<key>allowCloudReminders</key>
<false/>
<key>allowContentCaching</key>
<true/>
<key>allowDiagnosticSubmission</key>
<true/>
<key>allowFingerprintForUnlock</key>
<false/>
<key>allowMusicService</key>
<false/>
<key>allowSpotlightInternetResults</key>
<false/>
<key>forceAirPrintTrustedTLSRequirement</key>
<false/>
<key>forceDelayedSoftwareUpdates</key>
<false/>
</dict>
<dict>
<key>AdminMayDisableMCX</key>
<false/>
<key>AllowList</key>
<array/>
<key>AlwaysShowWorkgroupDialog</key>
<false/>
<key>ChangePasswordDisabled</key>
<true/>
<key>CombineUserWorkgroups</key>
<true/>
<key>DenyList</key>
<array/>
<key>DisableConsoleAccess</key>
<true/>
<key>EnableExternalAccounts</key>
<false/>
<key>FlattenUserWorkgroups</key>
<false/>
<key>HideAdminUsers</key>
<true/>
<key>HideLocalUsers</key>
<false/>
<key>HideMobileAccounts</key>
<false/>
<key>IncludeNetworkUser</key>
<false/>
<key>LocalUserLoginEnabled</key>
<true/>
<key>LocalUsersHaveWorkgroups</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Login Window</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>E11F8186-BE8A-48A1-805C-CBB3AFE7759B</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.loginwindow</string>
<key>PayloadUUID</key>
<string>E11F8186-BE8A-48A1-805C-CBB3AFE7759B</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>RetriesUntilHint</key>
<integer>3</integer>
<key>SHOWFULLNAME</key>
<true/>
<key>SHOWOTHERUSERS_MANAGED</key>
<true/>
<key>ShutDownDisabled</key>
<true/>
<key>UseComputerNameForComputerRecordName</key>
<false/>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Login Window: Screen Saver Preferences</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>D8ED3631-9A32-4443-9E41-3B30FBC9E3FF</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.screensaver</string>
<key>PayloadUUID</key>
<string>D8ED3631-9A32-4443-9E41-3B30FBC9E3FF</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>AutoSubmit</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Security And Privacy</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>783279F0-1F9B-4D98-92B8-0919613EFDD0</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.SubmitDiagInfo</string>
<key>PayloadUUID</key>
<string>783279F0-1F9B-4D98-92B8-0919613EFDD0</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>SystemPolicyManaged</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>F25F04E8-6ACF-49E9-AB38-DDEBC4F96C28</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.systempolicy.managed</string>
<key>PayloadUUID</key>
<string>F25F04E8-6ACF-49E9-AB38-DDEBC4F96C28</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>PreferenceSecurity</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>545335D0-9D15-4551-92F2-BC7338FE31D5</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.preference.security</string>
<key>PayloadUUID</key>
<string>545335D0-9D15-4551-92F2-BC7338FE31D5</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>dontAllowLockMessageUI</key>
<true/>
<key>dontAllowPasswordResetUI</key>
<true/>
</dict>
<dict>
<key>Applications</key>
<array/>
<key>BlockAllIncoming</key>
<false/>
<key>EnableFirewall</key>
<false/>
<key>EnableStealthMode</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Firewall</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>27C74E88-B084-4E61-9134-1F6185CA33F3</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.security.firewall</string>
<key>PayloadUUID</key>
<string>27C74E88-B084-4E61-9134-1F6185CA33F3</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>AllowIdentifiedDevelopers</key>
<true/>
<key>EnableAssessment</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>SystemPolicyControl</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>51F5B729-854E-44BC-B30C-60B1CF6DD06B</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.systempolicy.control</string>
<key>PayloadUUID</key>
<string>51F5B729-854E-44BC-B30C-60B1CF6DD06B</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>DestroyFVKeyOnStandby</key>
<false/>
<key>DisableGuestAccount</key>
<true/>
<key>EnableGuestAccount</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>MCX</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>09CDDE3A-E21E-4070-A039-91941B7C1E09</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.MCX</string>
<key>PayloadUUID</key>
<string>09CDDE3A-E21E-4070-A039-91941B7C1E09</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>dontAllowFDEDisable</key>
<false/>
<key>safariAllowAutoFill</key>
<false/>
</dict>
<dict>
<key>MultipleSessionEnabled</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Login Window: Global Preferences</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>5C8B92F0-0367-478A-98DB-1DD141C2C34D</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>.GlobalPreferences</string>
<key>PayloadUUID</key>
<string>5C8B92F0-0367-478A-98DB-1DD141C2C34D</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Login Window: Scripts</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>D3E6DD15-5AED-4B24-9989-41D84ABF356B</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.mcxloginscripts</string>
<key>PayloadUUID</key>
<string>D3E6DD15-5AED-4B24-9989-41D84ABF356B</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>skipLoginHook</key>
<false/>
<key>skipLogoutHook</key>
<false/>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Login Window: Setup Assistant</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>8B5F64CF-8026-404A-A741-B47F2012927D</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.SetupAssistant.managed</string>
<key>PayloadUUID</key>
<string>8B5F64CF-8026-404A-A741-B47F2012927D</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>SkipCloudSetup</key>
<true/>
<key>SkipSiriSetup</key>
<false/>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Application Restrictions</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>7558556F-3BE3-4AF7-A903-4876486C995D</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.applicationaccess.new</string>
<key>PayloadUUID</key>
<string>7558556F-3BE3-4AF7-A903-4876486C995D</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>familyControlsEnabled</key>
<false/>
</dict>
<dict>
<key>DisableAirDrop</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>AirDrop</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>DC885295-6B07-4709-ADAE-60E7173CBB16</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.NetworkBrowser</string>
<key>PayloadUUID</key>
<string>DC885295-6B07-4709-ADAE-60E7173CBB16</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Dashboard Widget Restrictions</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>2B8A5ED1-1DF8-4EB7-ABEE-8E99189EDE6E</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.dashboard</string>
<key>PayloadUUID</key>
<string>2B8A5ED1-1DF8-4EB7-ABEE-8E99189EDE6E</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>WhiteList</key>
<array/>
<key>whiteListEnabled</key>
<false/>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Desktop</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>EA427543-81CA-4BD8-8644-77538C2842DE</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.desktop</string>
<key>PayloadUUID</key>
<string>EA427543-81CA-4BD8-8644-77538C2842DE</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>locked</key>
<true/>
</dict>
<dict>
<key>BurnSupport</key>
<string>on</string>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Media Access: Disc Recording</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>2401EFB9-2520-425B-B9D6-85E0F12360D9</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.DiscRecording</string>
<key>PayloadUUID</key>
<string>2401EFB9-2520-425B-B9D6-85E0F12360D9</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Media Access: Finder Settings</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>EDB301FE-4BA8-4B8B-ADFB-E867A4D88686</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.finder</string>
<key>PayloadUUID</key>
<string>EDB301FE-4BA8-4B8B-ADFB-E867A4D88686</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitBurn</key>
<false/>
</dict>
<dict>
<key>GKFeatureAccountModificationAllowed</key>
<false/>
<key>GKFeatureAddingGameCenterFriendsAllowed</key>
<false/>
<key>GKFeatureGameCenterAllowed</key>
<false/>
<key>GKFeatureMultiplayerGamingAllowed</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Game Center</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>C05FCE71-D97A-493B-BE55-32B2BE826E14</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.gamed</string>
<key>PayloadUUID</key>
<string>C05FCE71-D97A-493B-BE55-32B2BE826E14</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Restrictions</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>1C17EB7A-518A-420F-BA3C-2DCBD9F705A0</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.ShareKitHelper</string>
<key>PayloadUUID</key>
<string>1C17EB7A-518A-420F-BA3C-2DCBD9F705A0</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>SHKAllowedShareServices</key>
<array/>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>App Store</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>8BB98A07-4E2D-4EC1-B017-4A7967A00893</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.appstore</string>
<key>PayloadUUID</key>
<string>8BB98A07-4E2D-4EC1-B017-4A7967A00893</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>restrict-store-disable-app-adoption</key>
<false/>
<key>restrict-store-require-admin-to-install</key>
<false/>
<key>restrict-store-softwareupdate-only</key>
<false/>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>Media Access</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>F2CC7F26-22F0-47AD-94D3-B0CE5EC245AB</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.systemuiserver</string>
<key>PayloadUUID</key>
<string>F2CC7F26-22F0-47AD-94D3-B0CE5EC245AB</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>logout-eject</key>
<dict/>
<key>mount-controls</key>
<dict>
<key>blankcd</key>
<array/>
<key>blankdvd</key>
<array/>
<key>cd</key>
<array/>
<key>disk-image</key>
<array/>
<key>dvd</key>
<array/>
<key>dvdram</key>
<array/>
<key>harddisk-external</key>
<array/>
<key>harddisk-internal</key>
<array/>
</dict>
</dict>
<dict>
<key>EnabledPreferencePanes</key>
<array>
<string>com.apple.preference.universalaccess</string>
<string>com.apple.preferences.appstore</string>
<string>com.apple.preference.datetime</string>
<string>com.apple.preference.desktopscreeneffect</string>
<string>com.apple.preference.speech</string>
<string>com.apple.preference.dock</string>
<string>com.apple.prefpanel.fibrechannel</string>
<string>com.apple.Localization</string>
<string>com.apple.preferences.parentalcontrols</string>
<string>com.apple.preference.printfax</string>
<string>com.apple.prefs.backup</string>
</array>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>System Preferences</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>DB985FD9-DB56-4CBE-8AEF-0829B389665B</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.systempreferences</string>
<key>PayloadUUID</key>
<string>DB985FD9-DB56-4CBE-8AEF-0829B389665B</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>Device Access Allowed</key>
<true/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>CoreMediaIO Support</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>C08E5B14-0B4D-4ED1-91AF-F1A1ABE7FF7A</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.coremediaio.support</string>
<key>PayloadUUID</key>
<string>C08E5B14-0B4D-4ED1-91AF-F1A1ABE7FF7A</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>DisableUsingiCloudPassword</key>
<false/>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>User Preferences</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>6DB309EB-2FFE-49FB-9CD5-26F7B54C60C0</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.preferences.users</string>
<key>PayloadUUID</key>
<string>6DB309EB-2FFE-49FB-9CD5-26F7B54C60C0</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>PayloadDescription</key>
<string></string>
<key>PayloadDisplayName</key>
<string>AirPlay</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>F9FD4AA0-F9D2-4AA3-B397-7A7A628C7046</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadType</key>
<string>com.apple.airplay</string>
<key>PayloadUUID</key>
<string>F9FD4AA0-F9D2-4AA3-B397-7A7A628C7046</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>Whitelist</key>
<array>
<dict>
<key>DeviceID</key>
<string>GOULD</string>
</dict>
<dict>
<key>DeviceID</key>
<string>Ford</string>
</dict>
<dict>
<key>DeviceID</key>
<string>Spanish</string>
</dict>
</array>
</dict>
</array>
<key>PayloadDescription</key>
<string>Login window with username and password fields. Also has Energy Saver configured.</string>
<key>PayloadDisplayName</key>
<string>OES141-Lab Login</string>
<key>PayloadEnabled</key>
<true/>
<key>PayloadIdentifier</key>
<string>8A8D2E8A-2DE6-4FED-BB07-1E86E2B09015</string>
<key>PayloadOrganization</key>
<string>OES141</string>
<key>PayloadRemovalDisallowed</key>
<true/>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>8A8D2E8A-2DE6-4FED-BB07-1E86E2B09015</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>