Title
#macos
u

Utsav Shah

07/27/2021, 1:56 PM
hi all, https://blog.kolide.com/checking-macos-screenlock-remotely-62ab056274f0 is an excellent blog post on retrieving whether screenlock is enabled and the grace period, but is there a way to actually retrieve the screen saver timeout? AFAICT, the screenlock is only enabled if either the display turns off (timeout is easy to find from plist tables) or if the screensaver turns on, and we want the (screensaver time + grace period) to see the total time for when a password is required after a workstation goes idle.
2:00 PM
aha
/Users/$currentUser/Library/Preferences/ByHost/com.apple.screensaver idleTime
s

seph

07/27/2021, 3:02 PM
That blog article has suggested SQL to return whether it’s enabled, and the grace_period.
3:02 PM
I can’t remember if that plist is still valid, Offhand, I would not recomment it
3:04 PM
Oh, I see. You’re asking about the difference between timeout and grace period.
3:05 PM
Yeah, I think the plist you cite is still correct.
u

Utsav Shah

07/27/2021, 3:16 PM
thanks. all of these different plist locations has been driving me crazy
3:16 PM
/Library/Preferences/com.apple.PowerManagement.plist
for system wide display time settings, the
ByHost
ones for screensaver idle time, and fortunately the
screenlock
table gets us values for screenlock enabled and the grace period!