Unlock Specific Preference for non-admin account

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-03-2018 02:34 AM
I'd like to unlock Network Preferences for non-admin accounts under Sierra and High Sierra.
I've worked enough with security authorization db that I can unlock panes like Printing - however, I haven't yet found a solution for Network - despite Google.
How can I unlock Network Preferences for my non-admin accounts
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-03-2018 02:52 AM
I normally send these commands out via ARD / Jamf:
security authorizationdb write system.preferences allow
security authorizationdb write system.preferences.network allow
security authorizationdb write system.services.systemconfiguration.network allow
I can confirm it worked on Sierra - haven't tested on High Sierra yet so there may be some discrepancies.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-03-2018 03:03 AM
Anyone worked out how to unlock Security & Privacy?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-03-2018 02:38 PM
It works beautifully under 10.13.3 and on Sierra.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-05-2018 06:17 AM
I used this a long time ago but I think it's still relevant go here and go here with the help of @rtrouton and @bentoms (who did the donkey work back in the day).
Doing some Googlin' I come across what appears to be a pretty solid (and up to date) list of what/where you can grant rights check me out.
@jaz TL;DR - try system.preferences.security

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-16-2018 12:16 AM
root# security authorizationdb write system.preferences.security allow
YES (0)
is actually no...

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-24-2018 12:25 PM
So, I'm running 10.12 and trying to unlock the Network preference pane using the following commands with Outset from the boot-once (would be running with root access, right?) folder...
#!/bin/bash
security authorizationdb write system.preferences allow
security authorizationdb write system.preferences.security allow
security authorizationdb write system.services.systemconfiguration.network allow
But the Network prefpane is still locked. If I run the commands manually (with sudo as a sudo eligible user) the prefpane is still locked even though I got YES (0) as a response. I log out and back in (assuming it needs that), and it's still locked. Restart, and it's still locked.
If I run security authorizationdb read... each preference shows "allow".
Anyone have any idea what I'm missing?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-25-2018 11:40 AM
@cwaldrip I notice that you're writing to Security preferences, but expecting it to take effect in Network preferences. The following should work - it does in my environment.
#!/bin/sh
security authorizationdb write system.preferences.network allow
security authorizationdb write system.services.systemconfiguration.network allow

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 08-03-2018 10:44 AM
@al.erickson That was exactly my problem. Thanks. I must have copy/pasted the wrong thing at some point and not noticed. :facepalm:

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 04-03-2019 06:12 AM
@EduMac89
Just a question:
what's the need of this?
security authorizationdb write system.preferences allow
Aren't enough those 2 below..?
security authorizationdb write system.preferences.network allow
security authorizationdb write system.services.systemconfiguration.network allow

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-21-2020 11:07 AM
@G.M. security authorizationdb write system.preferences allow is required as a prerequisite of the other commands.
One way to think of it is a hierarchy, where system.preferences is the top level and the others are sub-level. You need to allow access to the top-level so that the other commands can be applied properly.
