Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
u
Utsav Shah
07/27/2021, 1:56 PMhi all, https://blog.kolide.com/checking-macos-screenlock-remotely-62ab056274f0 is an excellent blog post on retrieving whether screenlock is enabled and the grace period, but is there a way to actually retrieve the screen saver timeout? AFAICT, the screenlock is only enabled if either the display turns off (timeout is easy to find from plist tables) or if the screensaver turns on, and we want the (screensaver time + grace period) to see the total time for when a password is required after a workstation goes idle.
aha
/Users/$currentUser/Library/Preferences/ByHost/com.apple.screensaver idleTimes
seph
07/27/2021, 3:02 PMThat blog article has suggested SQL to return whether it’s enabled, and the grace_period.
I can’t remember if that plist is still valid, Offhand, I would not recomment it
Oh, I see. You’re asking about the difference between timeout and grace period.
Yeah, I think the plist you cite is still correct.
u
Utsav Shah
07/27/2021, 3:16 PMthanks. all of these different plist locations has been driving me crazy
/Library/Preferences/com.apple.PowerManagement.plistByHostscreenlock