2 weeks ago
Hello! About a month ago, we started receiving messages from a few of our users that when they try to go to "Users & Groups" in System Preferences to change their password, they see a message saying "Users & Groups" settings are not available. These settings are controlled by a profile." However, we have no profile in place that would completely lock the users out of that preference pane. This has only happened on a handful of Macs, and we've been unable to determine a cause. All of the machines in question are getting the same set of Configuration Profiles. We've seen it on Macs running both macOS Sonoma and Sequoia. The even stranger thing is that on at least one of the Macs, it just disappeared one day and the "Users and Groups" pane went back to working normally. If anyone has an idea why this might be happening and what we can do to fix it, we'd love to hear about it. Thank you!
2 weeks ago
Are you 100% certain that there isn't a (rogue/mis-configured) profile causing this? On an affected Mac, download and install LowProfile which allow you to inspect all profiles installed.
2 weeks ago
I'll give that a try as soon as I can get my hands on one of the misbehaving Macs. Thanks!
2 weeks ago
@jkarpenske You can install the prefs CLI tool (https://scriptingosx.com/2024/03/prefs-cli-tools-for-mac-admins/) to examine the prefs settings on a Mac. Install it then use it to report on the com.apple.systempreferences prefs domain and look to see if com.apple.preferences.users shows up as being managed.