Skip to main content
Question

Require all users to have a password

  • September 17, 2015
  • 2 replies
  • 16 views

Forum|alt.badge.img+3

I tried searching for this, but was unable to find what I was looking for.

We have quite a few users here (enterprise environment) that have no password on their Macs... and are also administrator users. We obviously would like to rectify this. I have been doing some testing with configuration profiles to require a password, but without luck. I believe I read somewhere that the password requirements coming from the configuration profile does not apply to users with Administrator privileges? Is that correct?

If so, what would be my best options moving forward?

We are in the process of implementing FileVault 2, which I suppose would require the user to create a password before being enabled... but it their another option I could use until then?

2 replies

Forum|alt.badge.img+24
  • Valued Contributor
  • September 17, 2015

It'll likely require a shell script to troll through DSCL. Certainly do-able, but FV2 may be your saving grace.


Forum|alt.badge.img+7
  • Contributor
  • September 17, 2015

Krypton has a good writeup of pwpolicy: http://krypted.com/mac-security/programatically-setting-password-policies/

This will work for admin users as well. This all assumes the users are local users, of course.