{"id":82639,"date":"2023-05-09T14:06:13","date_gmt":"2023-05-09T18:06:13","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=82639"},"modified":"2023-06-05T13:11:39","modified_gmt":"2023-06-05T17:11:39","slug":"create-a-mac-lock-screen-policy","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy","title":{"rendered":"Create a Mac Lock Screen Policy"},"content":{"rendered":"\n<p>Unattended macOS devices that are active with a user that is still logged in can create opportunities for unauthorized access to information and misuse of accounts. As an IT Admin, you can remotely apply a policy to lock one inactive device or your entire fleet of devices in your organization.<\/p>\n\n\n\n<p>JumpCloud\u2019s Lock Screen Policy automatically locks the screen and turns on the screen saver if a managed device is inactive for a specified period of time. The policy requires the user to enter the device password to unlock the screen. JumpCloud also provides a Lock Screen Policy for Linux and Windows devices.<\/p>\n\n\n\n<p>The Lock Screen Policy can lock an inactive device only after mandatory OS processes have completed. There are other settings the user can specify to activate the screensaver with an interval of time that differs from your policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Considerations<\/strong><\/h2>\n\n\n\n<ul>\n<li>If you\u2019re experiencing delays with the Lock Screen Policy, request that all users to log out and back in to all devices.&nbsp;<\/li>\n\n\n\n<li>When you apply the Lock Screen Policy to devices for the first time, all users are required to log out and back in before the policy takes effect.<\/li>\n\n\n\n<li>When you modify the Timeout value, all users are required to log out and back in before the policy changes take effect.<\/li>\n\n\n\n<li>When you uninstall the Lock Screen Policy, it immediately stops being enforced.<\/li>\n\n\n\n<li>If you uninstall and then reinstall the Lock Screen Policy, it\u2019s immediately enforced. However, the Timeout value in the uninstalled policy is the one JumpCloud uses. To reset the old value to the value in the newly reinstalled policy, all users are required to log out and back in.<\/li>\n\n\n\n<li>Many settings affect screen locking, including the following:\n<ul>\n<li>JumpCloud Lock Screen Policy Timeout<\/li>\n\n\n\n<li>Screen Saver Settings<\/li>\n\n\n\n<li>Power and Sleep Settings<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>The shortest setting is the one that takes effect first.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Creating a Lock Screen Policy for MacOS<\/strong><\/h2>\n\n\n\n<p>When you apply the Lock Screen Policy to a macOS device, the policy applies to all users on a device, regardless of whether JumpCloud manages the user account. You also have the option to enforce the policy only for JumpCloud managed users.<\/p>\n\n\n\n<p>After&nbsp;you apply a Lock Screen Policy to a device, the policy is in effect. However, due to the other ways that a screensaver can be activated for a macOS device, the exact time that the screen locks can vary. A timeout can be set in a macOS device in Apple&#8217;s System Preferences by selecting&nbsp;<strong>Energy Saver<\/strong>&nbsp;and then configuring the&nbsp;<strong>Turn Display Off<\/strong>&nbsp;setting. This setting only turns off the display. Other hardware components remain on and processes continue to run.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>If a video playback is currently in progress in a desktop app, such as QuickTime Player, both the&nbsp;<strong>Turn Display Off&nbsp;<\/strong>setting and the JumpCloud Lock Screen policy are overridden and the display doesn&#8217;t go to sleep.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Although there are other ways to lock a macOS screen, such as Sleep Mode and Lock Screen, these events aren\u2019t triggered by a timeout setting. In these cases, a user can lock a screen immediately by pressing the Touch Bar, selecting a command in Apple Menu, or closing the device.<\/p>\n\n\n\n<p>When a user logs in to a device where you applied a JumpCloud Lock Screen Policy, the screen locks when the shortest screen timeout setting expires. If the&nbsp;<strong>Turn Display Off&nbsp;<\/strong>setting is shorter than the JumpCloud Lock Screen Policy, this setting locks the screen.<\/p>\n\n\n\n<p><strong>To create a macOS Lock Screen Policy<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>In the&nbsp;<strong>All<\/strong>&nbsp;tab, click (<strong>+<\/strong>).<\/li>\n\n\n\n<li>On the New Policy panel, select the&nbsp;<strong>Mac<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>Locate the Lock Screen Policy and click&nbsp;<strong>configure<\/strong>.<\/li>\n\n\n\n<li>(Optional) In the <strong>Policy Name<\/strong> field, enter a new name for the policy or keep the default. Policy names must be unique.<\/li>\n\n\n\n<li>(Optional) In the&nbsp;<strong>Policy Notes<\/strong> field, enter details like when you created the policy, where you tested it, and where you deployed it.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, enter the number in seconds in&nbsp;<strong>Timeout&nbsp;<\/strong>before a screensaver is launched and a password is required.<img decoding=\"async\" width=\"1398\" height=\"994\" class=\"wp-image-83734\" style=\"width: 850px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png 1398w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy-300x213.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy-1024x728.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy-768x546.png 768w\" sizes=\"(max-width: 1398px) 100vw, 1398px\" \/><\/li>\n\n\n\n<li>(Optional) Select the&nbsp;<strong>Device Groups<\/strong>&nbsp;tab and select one or more device groups that will use this policy.&nbsp;For device groups with multiple OS member types, the policy is applied only to the supported OS.<\/li>\n\n\n\n<li>(Optional) Select the&nbsp;<strong>Devices<\/strong>&nbsp;tab and select one or more devices that will use this policy.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Unattended macOS devices that are active with a user that is still logged in can create opportunities for unauthorized access [&hellip;]<\/p>\n","protected":false},"author":202,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852,2862,3082],"support_tag":[],"coauthors":[2836],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Create a Mac Lock Screen Policy - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to automatically lock an Android screen and turns on the screen saver if a managed device is inactive for a specified period of time.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Create a Mac Lock Screen Policy\" \/>\n<meta property=\"og:description\" content=\"Learn how to automatically lock an Android screen and turns on the screen saver if a managed device is inactive for a specified period of time.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-05T17:11:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"denasteward\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy\",\"url\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy\",\"name\":\"Create a Mac Lock Screen Policy - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png\",\"datePublished\":\"2023-05-09T18:06:13+00:00\",\"dateModified\":\"2023-06-05T17:11:39+00:00\",\"description\":\"Learn how to automatically lock an Android screen and turns on the screen saver if a managed device is inactive for a specified period of time.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Create a Mac Lock Screen Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Create a Mac Lock Screen Policy - JumpCloud","description":"Learn how to automatically lock an Android screen and turns on the screen saver if a managed device is inactive for a specified period of time.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy","og_locale":"en_US","og_type":"article","og_title":"Create a Mac Lock Screen Policy","og_description":"Learn how to automatically lock an Android screen and turns on the screen saver if a managed device is inactive for a specified period of time.","og_url":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy","og_site_name":"JumpCloud","article_modified_time":"2023-06-05T17:11:39+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"denasteward"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy","url":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy","name":"Create a Mac Lock Screen Policy - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png","datePublished":"2023-05-09T18:06:13+00:00","dateModified":"2023-06-05T17:11:39+00:00","description":"Learn how to automatically lock an Android screen and turns on the screen saver if a managed device is inactive for a specified period of time.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/Mac_LockScreen_policy.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/create-a-mac-lock-screen-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Create a Mac Lock Screen Policy"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/82639"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/202"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/82639\/revisions"}],"predecessor-version":[{"id":88538,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/82639\/revisions\/88538"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=82639"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=82639"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=82639"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=82639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}