KACE Product Support

Don't know if this will help or not. I've found that using online shell scripts work a lot better when working with the macs. I found this on the 'net but can't remember its source and give credit to that person. Maybe it will help?

#!/bin/sh
# HARDCODED VALUES ARE SET HERE
startTime="900"
password="1"
passwordDelay="Immediately"
# CHECK TO SEE IF A VALUE WAS PASSED IN PARAMETER AND, IF SO, ASSIGN
if [ "$4" != "" ] && [ "$startTime" == "" ];then
startTime=$4
fi
if [ "$5" != "" ] && [ "$password" == "" ];then
password=$5
fi
if [ "$6" != "" ] && [ "$passwordDelay" == "" ];then
passwordDelay=$6
fi
##########
# Get the Universally Unique Identifier (UUID)
#
# Check if hardware is PPC or early Intel
if [[ `ioreg -rd1 -c IOPlatformExpertDevice | grep -i "UUID" | cut -c27-50` == "00000000-0000-1000-8000-" ]]; then
LEOUUID=`ioreg -rd1 -c IOPlatformExpertDevice | grep -i "UUID" | cut -c51-62 | awk {'print tolower()'}`
# Check if hardware is new Intel
elif [[ `ioreg -rd1 -c IOPlatformExpertDevice | grep -i "UUID" | cut -c27-50` != "00000000-0000-1000-8000-" ]]; then
LEOUUID=`ioreg -rd1 -c IOPlatformExpertDevice | grep -i "UUID" | cut -c27-62`
fi
#
loggedInUser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'`
loggedInUserHome=`dscl . -read /Users/$loggedInUser | grep NFSHomeDirectory: | cut -c 19- | head -n 1`
# Sets time of screen saver to come on.
/usr/bin/defaults write "$loggedInUserHome"/Library/Preferences/ByHost/com.apple.screensaver."$LEOUUID" idleTime -int "$startTime"
#
# Sets screen saver to require password (not always needed)
/usr/bin/defaults write "$loggedInUserHome"/Library/Preferences/ByHost/com.apple.screensaver."$LEOUUID" askForPassword -int "$password"
#
# Sets screen saver to require password (not always needed)
/usr/bin/defaults write "$loggedInUserHome"/Library/Preferences/ByHost/com.apple.screensaver."$LEOUUID" "Require Password" -bool TRUE
#
#Correctng Permissions for /Users/loggedInUser/Library/Preferences/ByHost/com.apple.screensaver.UUID
chmod 777 "$loggedInUserHome"/Library/Preferences/ByHost/com.apple.screensaver."$LEOUUID".plist
#
# Sets screen saver to require password
/usr/bin/defaults write "$loggedInUserHome"/Library/Preferences/com.apple.screensaver askForPassword -int "$password"
#
# Sets screen saver password delay
/usr/bin/defaults write "$loggedInUserHome"/Library/Preferences/com.apple.screensaver askForPasswordDelay -int "$passwordDelay"
#
# Correct Permissions for /Library/Preferences/com.apple.screensaver
chmod 777 "$loggedInUserHome"/Library/Preferences/com.apple.screensaver.plist
#
echo "Set Screen Saver for user:" "$loggedInUser"". With home folder located:" "$loggedInUserHome".

Ok, doing some more testing this afternoon:

I have created a new script with the following:

Run as online shell script
Run as all logged in users

osascript -e 'tell application "finder" to display dialog "Programming in AppleScript is fun."'

osascript -e 'tell application "System Events" to set require password to wake of security preferences to false' 

So with this script, I can get it to launch the Dialog box, but won't change the require password. Note that I'm trying this now on any Mac, whether it worked before or not, and it does not work.

I have been watching the Console screen as the script runs, and I have the following that I think is relevant:

12-09-20 1:15:37.955 PM com.apple.launchd: System: This API can only be used by a process running within an Aqua session.

12-09-20 1:15:37.955 PM osascript: spawn_via_launchd() failed, errno=5 label=[0x0-0x7a07a0].com.apple.systemevents path=/System/Library/CoreServices/System Events.app/Contents/MacOS/System Events flags=0

any thoughts? 

localUsers=$( dscl . list /Users UniqueID | awk '$2 >= 501 {print $1}' | grep -v admin )

hwUUID=$(/usr/sbin/system_profiler SPHardwareDataType 2>/dev/null | grep "Hardware UUID" 2>/dev/null | cut -c22-57 2>/dev/null)

echo "$localUsers" | while read userName; do

    sudo -u $userName defaults write /Users/$userName/Library/Preferences/com.apple.screensaver  askForPassword -int 1 2>/dev/null 

    sudo -u $userName defaults write /Users/$userName/Library/Preferences/com.apple.screensaver  askForPasswordDelay -float 5 2>/dev/null 

    sudo -u $userName defaults write /Users/$userName/Library/Preferences/ByHost/com.apple.screensaver.$hwUUID.plist idleTime -int 300 2>/dev/null

    sudo -u $userName defaults write /Users/$userName/Library/Preferences/ByHost/com.apple.screensaver idleTime -int 300 2>/dev/null

killall cfprefsd

done

Without the sudo -u $userName part at the beginning of each line, the files were getting updated but System Preferences wouldn't reflect the change until after you restarted. When sudoing as the local user, it is reflected in System Prefs immediately, and more importantly, it is enforced immediately.

Edit: had to fix the formatting in my code above.

For an offline script, just take the same code above, add #!/bin/sh to the top, save it as "macscreensaver.sh" and make it a dependency. In the tasks, set Verify to always fail, and Remediation to:

Launch “$(KACE_DEPENDENCY_DIR)\macscreensaver.sh” with params “”

One thing to make sure of is that you are using the right kind of whitespace characters for your platform. I had a lot of problems getting this script to work as an offline KScript, because I had originally composed it in the web browser on my PC. When I copied and pasted the text into a .sh file and tried to run it on my Mac directly, I got syntax errors due to the different kind of CRLF characters at the end of each line.

New Edit 11/16/2016:

So Apple decided to make things easier for people in macOS 10.12 Sierra -- you no longer need the $hwUUID part to mess with ByHost preferences. Since I want this script to work on both Sierra and earlier versions, I just added the line to the bottom above done.

I also added 'killall cfprefsd' just to be sure that it will pickup the new versions of the files and not the cached ones.

try taking the dot from in front of ./usr out

launch "/usr/bin\osascript" with params "-e 'tell application  to set require password to wake of security preferences to true'"

When you ran it on your machine did it require sudo?

How do you have the script configured?  Is it an online script or offline?  If online, what user option are you running this under?

Also, it looks like you have a pretty old version of the agent if it still has SMMP.  I don't think that has anything to do with the problem, just thought i would mention it.

So moving on to another potential fix. KAce techsupport called me yesterday and sent me some of their ideas over night. Some aren't relevant, because as Steve said above, the sandbox thing looks to be the problem. Dell has also confirmed this as they've mentioned a new security feature in OS X 10.7+ that includes the .lockfile... so one suggestion was to try the following shell command:

could you please also try the shell command below:

do shell script "/System/Library/CoreServices/'Menu Extras'/User.menu/Contents/Resources/CGSession -suspend"

I can't seem to get this to run

I have the line in the script as follows:

/System/Library/CoreServices/'Menu Extras'/User.menu/Contents/Resources/CGSession -suspend

and get the output:

Running: /var/kace/SMMP/scripts/186/script.sh  2>&1

17:18: syntax error: Expected expression, property or key form, etc. but found unknown token. (-2741)

Activity Log

2012-09-25 16:36:24: Alert not enabled, moving to next phase....
2012-09-25 16:36:38: Sending script script.sh to client....
2012-09-25 16:36:51: Script sent
2012-09-25 16:36:51: Executing script.... 

2012-09-25 16:37:18: Error 256 received while executing script