Securing the Screensaver

On my old blog, I detailed a method I developed under 10.2 to enforce a particular screen saver for all users and to prevent the average user from changing it. This allowed us to enforce a password protected screensaver that activated after a certain idle interval.

A recent post on macosxhints takes this method and builds on it. But the poster runs into an issue with Tiger's combined Desktop Pictures and Screen Saver Preference Pane – when he restricts access to the Screen Saver, he also loses access to the Desktop preferences. We can fix that issue.

If you want to secure the Screen Saver preferences, but still allow access to the Desktop prefs, you can do this (beware line breaks; each command beginning with 'sudo' should be all one line):

cd /System/Library/PreferencePanes
sudo chown root:admin DesktopScreenEffectsPref.prefPane
sudo chmod 750 DesktopScreenEffectsPref.prefPane

This prevents non-admin users from accessing either Desktop or ScreenEffects prefs. (and visually removes it from the System Preferences app for non-admins.)

Now to restore access to Desktop prefs (again, beware line breaks):

cd /System/Library/PreferencePanes/
cd DesktopScreenEffectsPref.prefPane/Contents/Resources/
sudo cp -R DesktopPictures.prefPane /Library/PreferencePanes/

This copies the Desktop prefs pane to /Library/Preferences. It will now show up in System Preferences under the "Other" category.

This works because the combined Desktop/Screen Saver prefs pane actually contains seperate fully-functional preference panes inside its bundle: one for Desktop and one for Screen Saver.

Securing the Screensaver

2 thoughts on “Securing the Screensaver

  1. Steven Allred says:

    Greg,

    Under “Now to restore access to Desktop prefs”, the line “cd /System/Library/PreferencePanes/Contents/Resources” I believe should actually be “cd /System/Library/PreferencePanes/DesktopScreenEffectsPref.prefPane/Contents/Resources/” let me know if I am correct or not.

    -SA

  2. You’re right, Steven. I changed the post. I had to break the cd into two lines because of the way WordPress mangles long lines, but the result is the same.

Comments are closed.