× Welcome to the Centrify Community! We are rolling out product name changes — click here to learn more.

How to lock down the Mac screen saver start time through group policies

How to lock down the Mac screen saver start time through group policies

By Centrify Advisor II on ‎05-03-2017 07:54 AM

Organizations may need to configure the screen saver start time for security or compliance. This article will show you how to use Active Directory group policies to prevent users from changing the screen saver start time. 

 

screensavertimelocked.png

 

Step 1. On a Mac, create a custom profile with Apple Configurator 2

1. Launch Apple Configurator 2. You can also create this with Profile Manager.

2. Go to File > New Profile.

3. Enter a profile name in the Name field.

profile-name.png

 

4. Then go to Passcode on the left column and set a time for Maximum Auto-Lock.

profile-lock-time.png

5. Go to File > Save

 

Step 2. Upload the profile to SYSVOL

1. Go to \\<domain>\SYSVOL\<domain> and create a mobileconfig folder if it does not exist.

2. Upload the profile to the mobileconfig folder.

3. In the Group Policy for your Macs, enable Computer Configuration > Policies > Centrify Settings > Mac OS X Settings > Custom Settings > Install MobileConfig Profiles.

Installmobileconfig.png

4. Click on the Add button, enter the name of your profile, then click OK.

5. Click OK.

 

The policy will apply at the next group policy interval, or you can launch Terminal ont he Mac and run adgpupdate to apply immediately.

Comments
By Centrify Advisor II
on ‎05-09-2017 11:45 AM

An alternative group policy setting is to block access to the Desktop & Screen Saver preference pane altogether.

 

restrict screensaver.png

 

Instructions in this article.

 

Showing results for 
Search instead for 
Do you mean 
Labels

Community Control Panel