Password Change Blocked By Policy

Hey folks -


Last year, I allowed the company I work for to "take over" my Mac Pro 7,1, so I could use it to work. Part of that process was the installation of a password policy that I frankly don't agree with. But that's fine: corporate policy. Recently, I've removed that machine from corporate duty, and uninstalled all of the corporate software (including JAMF), as well as the Profiles. That seems to have gone well except that the password policy is still in effect.


I read online that if I nuked the policies stored by:


pwpolicy clearaccountpolicies


that would fix it. I tried that, and it looks like there are, in fact, no policies:


# pwpolicy -v getaccountpolicies
Getting global account policies
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict/>
</plist>


However, that apparently wasn't enough. I still can't go back to the original installation password policy. Is there a way to set this so it's "dumb" and let's me use any ol' password I want?


Thanks!


Mac Pro

Posted on Jan 7, 2022 7:58 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 8, 2022 1:57 AM

As previous posting suggested, contact the Company IT Department to communicate with the MDM Company and verify the Serial Number of this computer as been properly UnEnrolled from their Service.

3 replies

Jan 8, 2022 8:08 AM in response to lllaass


lllaass wrote:

If it were as easy to change policy/profile as you're trying to do than the policy/profile would not be effective.


Sure it would. The installed corporate Profiles would prevent that from being changed. And they were hard locked until I deleted a specific Profile. Like pulling a thread and the whole thing unraveled: the minute I deleted that one Profile, the entire system became unmanaged by the company. Which was what I was after.


It turns out that the man page for pwpolicy had an example simple policy included, so I cut that into a .plist file, deleted one of the included fields, and installed that one. That did the trick.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Password Change Blocked By Policy

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.