ihateapple.net

Main Forum Index

Forum Home

Post Reply

Email Forum Admins

Log In

Search Forums

Read Messages

Send a Message

Edit Your Settings

Forum Rules

Help


Sorry, didn't explain that too well after several beers.....
By:  Progressivebreaks (Grumpy Bear; 16860)
Posted on: 03-08-2019 23:52.
Client: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15
IP: Logged 
Message views: 7 (Score: 0)  



I mean if you create two separate profiles within the same plist/domain.
For example, filevault being enabled, and "require password immediately after sleep or screen saver begins" are both under the security & privacy pane, but under separate tabs.

You should be able to have two separate config profiles: One with just the filevault settings, and one with the screensaver password option checked.
If you had two profiles manually created, you could specify just these settings.
But in ivanti, creating a new profile means that all settings for each tab (under security & privacy) gets registered as a specified preference, even if you haven't checked or unchecked any of the boxes.
Does that make sense? I don't actually know if JAMF behaves this way or not.

Perhaps best practice would be not to have multiple profiles covering options within the same domain/plist.
It's just that a) this is technically possible, and b) it might be desirable. e.g you might want machines that have the "require password immediately after sleep or screen saver begins" option enforced, but not encrypted by filevault.

Does that make sense?



________________________________________________