Thursday, June 16, 2011

Bound Mac Clients Can't Exit Screensaver Using AD Credentials

Bound Macs that have the screen saver set to lock after a certain amount of time and require AD credentials to unlock sometimes are unable to unlock the screen saver.

Fix

Open Terminal
Type: cd /etc
Type: pico authorization
Find the "system.login.screensaver” and look for this text in a string: 
    "The owner or any administrator can unlock the screensaver"

    and change it to:

    "(Use SecurityAgent.) The owner or any administrator can unlock the screensaver."


    For full details refer to Apple KB: http://support.apple.com/kb/TS3287

    2 comments:

    Torsten Be said...

    Any experience with 10.7. using this fix? I had the issue yesterday and have just fixed my authorization file.
    Let's see if it helps.
    BTW, there's a small typo - it should not be "The the". Just one "The"

    Anonymous said...

    It should also work on 10.7 clients.

    I fixed the typo, thanks!