Same here, I can't find the MCX that is causing this. I want my users to be able to change their local user passwords without my admin intervention. Additionally, all local accounts show as managed.

Steve

Are you all disabling the Accounts system preferences pane as this is where they could change their password?

As far as allowing them to add printers, I usually add all users to the lpadmin group with a line in a script

/usr/sbin/dseditgroup -o edit -n /Local/Default -a 'Domain Users' -t group lpadmin

This works for my domain environment. If working with local accounts you might try replacing 'Domain Users' with 'everyone' - Note: Haven't tested this but that should be a the local group that contains all local users.

Freddie, no, they can get into Users & Groups, select Change Password, then type their old one, new one & confirm it. When they click the Change Password button, it prompts them for the Admin password.

Thanks for the lpadmin idea. I'll try that this afternoon.

Eric

The only other problem I have run into is with Application Restrictions via MCX. I've seen some strange behavior when allowing/denying apps to run. If you have an MCX limiting this, you may want to try disabling this to see if it resolves your issue.

Special thanks to Tony E: For anyone still experiencing this issue, please place this in a .sh script and have it run as a LOGIN Trigger:

#!/bin/sh

sudo dscl localhost -append /Local/Default/Users/$3 _writers_passwd $3

Please contact your account manager if you have any additional questions.

Thanks,

Jason Lieble
JAMF Software
Support Specialist