Skip to main content

Note: This worklet changes the screensaver setting only for the current signed in user. The way this worklet was written creates a folder to save screensaver images to, and clears out that folder each time the worklet is run so you can add in new pictures if needed.

Evaluation:


Exit 1

Remediation:


#!/bin/sh

# Get user logged into console and put into variable "user"

user=`ls -l /dev/console | cut -d " " -f 4`



#Creates a /Library/Backgrounds folder if there is not one already

mkdir -p /Library/Backgrounds



# Removes the previously saved screensavers in the background folder

rm -rf /Library/Backgrounds/*



# This is where the new screensavers are referenced, add/remove as necessary

# Each image lasts for 5 seconds, so for a longer time, copy the image a few times

scp screensaver1.png "/Library/Backgrounds/"

scp screensaver2.png "/Library/Backgrounds/"

scp screensaver3.png "/Library/Backgrounds/"

scp screensaver4.png "/Library/Backgrounds/"

scp screensaver5.png "/Library/Backgrounds/"

scp screensaver6.png "/Library/Backgrounds/"

scp screensaver7.png "/Library/Backgrounds/"

scp screensaver8.png "/Library/Backgrounds/"



#This section sets the preferences to use for screen savers. 

sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES"

sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100

sudo -u $user defaults -currentHost write com.apple.screensaver showClock -string "NO"

#This idle time is counted as seconds, change the 600 (10 minutes) as needed.

sudo -u $user defaults -currentHost write com.apple.screensaver idleTime -int 600

sudo -u $user defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string "/System/Library/Frameworks/ScreenSaver.framework/Resources/iLifeSlideshows.saver" type -int 0

sudo -u $user defaults -currentHost write com.apple.screensaver tokenRemovalAction -int 0



sudo -u $user defaults -currentHost write com.apple.ScreenSaverPhotoChooser LastViewedPhotoPath -string ""

sudo -u $user defaults -currentHost write com.apple.ScreenSaverPhotoChooser SelectedFolderPath -string "/Library/Backgrounds"

sudo -u $user defaults -currentHost write com.apple.ScreenSaverPhotoChooser SelectedSource -int 3

sudo -u $user defaults -currentHost write com.apple.ScreenSaverPhotoChooser ShufflesPhotos -bool false



sudo -u $user defaults -currentHost write com.apple.ScreenSaver.iLifeSlideShows styleKey -string "Classic"



sudo killall -hup cfprefsd

Upload the images you want to use, if you don’t want to use the “screensaver_” naming scheme, be sure to use the correct image names where the new images are referenced.

I had some issues with this worklet on our managed Macs. The best writeup I found about an issue with password-protected screensavers and a recent fix can be seen here: https://blog.kolide.com/screensaver-security-on-macos-10-13-is-broken-a385726e2ae2


Per their suggestions, I took an element of this worklet (Getting current logged-in user) and then applied a very simple screensaver policy using the default squiggly line screensaver:


#!/bin/sh

# Get user logged into console and put into variable user

user=`ls -l /dev/console | cut -d " " -f 4`

#This section sets the preferences to use for screen savers.

#Integers are counted as seconds, change as needed.  600 is 10 minutes

sudo -u $user defaults -currentHost write com.apple.screensaver askForPassword -bool TRUE

sudo -u $user defaults -currentHost write com.apple.screensaver loginWindowIdleTime -int 600

sudo -u $user defaults -currentHost write com.apple.screensaver askForPasswordDelay -int 1

If there is a better way to do this I’m open to it! But, for now, I can confirm this works on a non-AD managed Macbook running 10.14. I do not expect this to change for versions more recent than 10.14.

Thanks for that, my worklet seemed to work fine up until the 10.14 update.

Reply


Terms & ConditionsCookie settings