Hello
Someone helped me once before to prevent local admins to unlock the screen saver so that only the console user can unlock it.
This is the script that works. But for some reason root can still unlock the screen saver if a standard user is logged in to the console. Has anyone got around this?
#!/bin/sh
# Correct the ScreenSaver bug on 10.6 http://support.apple.com/kb/TS3287
/usr/libexec/PlistBuddy -c 'Set rights:system.login.screensaver:comment "(Use SecurityAgent.) The owner or any administrator can unlock the screensaver."' /etc/authorization
# Setting so that only the logged in user can unlock the screen saver
/usr/libexec/PlistBuddy -c 'Set rights:system.login.screensaver:rule "authenticate-session-owner"' /etc/authorization
