Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Cant unlock Preference Panes Yosemite

Hello everyone,

I recently made a clean install of Yosemite, and after using it some time I noticed that my firewall was off. To turn it on in system preferences, my password is prompted for authorization (the small lock in on the bottom left). After filling in my password, the pane uses the layout for clickable buttons and editable fields, but after a split second, the lock turns back on and everything is locked again. I also noticed this in the other security and privacy tabs. For example a setting under general is locked in 'Apps from App Store only'. I tried to unlock other preferences, and that did work: I can unlock account settings. I don't know how to fix this. Anybody got any ideas? I hope somebody can help me, that pane is a pretty important one.

Kind regards,

Peeterus


Here is the console output for when I click the lock icon and enter my password:


09-11-14 14:08:50,543 com.apple.preference.security.remoteservice[247]: ### AuthorizationCreate returned -1 stack (

0 Security 0x0000000105270916 Security + 26902

1 libdispatch.dylib 0x00007fff91ee7323 _dispatch_call_block_and_release + 12

2 libdispatch.dylib 0x00007fff91ee2c13 _dispatch_client_callout + 8

3 libdispatch.dylib 0x00007fff91eeecbf _dispatch_main_queue_callback_4CF + 861

4 CoreFoundation 0x00007fff88e28c59 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 9

5 CoreFoundation 0x00007fff88de52ef __CFRunLoopRun + 2159

6 CoreFoundation 0x00007fff88de4838 CFRunLoopRunSpecific + 296

7 HIToolbox 0x00007fff83ebc43f RunCurrentEventLoopInMode + 235

8 HIToolbox 0x00007fff83ebc1ba ReceiveNextEventCommon + 431

9 HIToolbox 0x00007fff83ebbffb _BlockUntilNextEventMatchingListInModeWithFilter + 71

10 AppKit 0x00007fff90ea9821 _DPSNextEvent + 964

11 AppKit 0x00007fff90ea8fd0 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 194

12 ViewBridge 0x00007fff8390ce0e -[NSViewServiceApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 70

13 AppKit 0x00007fff90e9cf73 -[NSApplication run] + 594

14 AppKit 0x00007fff90e88424 NSApplicationMain + 1832

15 libxpc.dylib 0x00007fff89d3bef2 _xpc_objc_main + 793

16 libxpc.dylib 0x00007fff89d3da9d _parse_sysctl_once + 0

17 ViewBridge 0x00007fff8395b165 xpc_connection_handler + 0

18 ViewBridge 0x00007fff8390fff7 NSViewServiceApplicationMain + 1892

19 PreferencePanes 0x00007fff8db7b15d PreferencePaneMain + 168

20 com.apple.preference.security.remoteservice 0x00000001014d4c92 main + 37

21 libdyld.dylib 0x00007fff8669e5c9 start + 1

22 ??? 0x0000000000000001 0x0 + 1

)

OS X Yosemite (10.10)

Posted on Nov 9, 2014 5:22 AM

Reply
10 replies

Nov 9, 2014 3:00 PM in response to Peeterus

Please read this whole message before doing anything.

This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.

Step 1

The purpose of this step is to determine whether the problem is localized to your user account.

Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”

While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.

Test while logged in as Guest. Same problem?

After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.

*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.

Step 2

The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.

Please take this step regardless of the results of Step 1.

Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.

Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Ask for further instructions.

Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.

The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

Test while in safe mode. Same problem?

After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Nov 10, 2014 9:06 AM in response to Linc Davis

I did every step given above, without any positive result. Both on the guest account as in safe mode, the same error occurs. I have never used Find my Mac or FileVault, so that can't be the problem. The OS I'm using is a clean install of Yosemite. On top of that: I need to be able to unlock the preference panel to be able to use FileVault. Anyway, that the problem persists in all circumstances, does that mean the problem lies in my installation? Or might this be a bug of Yosemite, waiting to be fixed by apple?

Nov 10, 2014 12:37 PM in response to Peeterus

Before buying a second-hand computer, you should have run Apple Diagnostics or the Apple Hardware Test, whichever is applicable.

The first thing to do after buying the computer is to erase the internal drive and install a clean copy of OS X. You—not the original owner—must do that. Changes made by Apple over the years have made this seemingly straightforward task very complex.

How you go about it depends on the model, and on whether you already own another Mac. If you're not sure of the model, enter the serial number on this page. Then find the model on this page to see what OS version was originally installed.

It's unsafe, and may be unlawful, to use a computer with software installed by a previous owner.

1. If you don't own another Mac

a. If the machine shipped with OS X 10.4 or 10.5, you need a boxed and shrink-wrapped retail Snow Leopard (OS X 10.6) installation disc from the Apple Store or a reputable reseller—not from eBay or anything of the kind. If the machine is very old and has less than 1 GB of memory, you'll need to add more in order to install 10.6. Preferably, install as much memory as it can take, according to the technical specifications.

b. If the machine shipped with OS X 10.6, you need the installation media that came with it: gray installation discs, or a USB flash drive for a MacBook Air. You should have received the media from the original owner, but if you didn't, order replacements from Apple. A retail disc, or the gray discs from another model, will not work.

To start up from an optical disc or a flash drive, insert it, then restart the computer and hold down the C key at the startup chime. Release the key when you see the gray Apple logo on the screen.

c. If the machine shipped with OS X 10.7 or later, you don't need media. It should start up in Internet Recovery mode when you hold down the key combination option-command-R at the startup chime. Release the keys when you see a spinning globe.

d. Some 2010-2011 models shipped with OS X 10.6 and received a firmware update after 10.7 was released, enabling them to use Internet Recovery. If you have one of those models, you can't reinstall 10.6 even from the original media, and Internet Recovery will not work either without the original owner's Apple ID. In that case, contact Apple Support, or take the machine to an Apple Store or another authorized service provider to have the OS installed.

2. If you do own another Mac

If you already own another Mac that was upgraded in the App Store to the version of OS X that you want to install, and if the new Mac is compatible with it, then you can install it. Use Recovery Disk Assistant to prepare a USB device, then start up the new Mac from it by holding down the C key at the startup chime. Alternatively, if you have a Time Machine backup of OS X 10.7.3 or later on an external hard drive (not a Time Capsule or other network device), you can start from that by holding down the option key and selecting it from the row of icons that appears. Note that if your other Mac was never upgraded in the App Store, you can't use this method.

3. Partition and install OS X

a. If you see a lock screen when trying to start up from installation media or in Recovery mode, then a firmware password was set by the previous owner, or the machine was remotely locked via iCloud. You'll either have to contact the owner or take the machine to an Apple Store or another service provider to be unlocked. You may be asked for proof of ownership.

b. Launch Disk Utility and select the icon of the internal drive—not any of the volume icons nested beneath it. In the Partition tab, select the default options: a GUID partition table with one data volume in Mac OS Extended (Journaled) format. This operation will permanently remove all existing data on the drive.

c. An unusual problem may arise if all the following conditions apply:

OS X 10.7 or later was installed by the previous owner

The startup volume was encrypted with FileVault

You're booted in Recovery mode (that is, not from a 10.6 installation disc)

In that case, you won't be able to unlock the volume or partition the drive without the FileVault password. Ask for guidance or see this discussion.

d. After partitioning, quit Disk Utility and run the OS X Installer. If you're installing a version of OS X acquired from the App Store, you will need the Apple ID and password that you used. When the installation is done, the system will automatically restart into the Setup Assistant, which will prompt you to transfer the data from another Mac, its backups, or from a Windows computer. If you have any data to transfer, this is usually the best time to do it.

e. Run Software Update and install all available system updates from Apple. To upgrade to a major version of OS X newer than 10.6, get it from the Mac App Store. Note that you can't keep an upgraded version that was installed by the original owner. He or she can't legally transfer it to you, and without the Apple ID you won't be able to update it in Software Update or reinstall, if that becomes necessary. The same goes for any App Store products that the previous owner installed—you have to repurchase them.

4. Other issues

a. If the original owner "accepted" the bundled iLife applications (iPhoto, iMovie, and Garage Band) in the App Store so that he or she could update them, then they're irrevocably linked to that Apple ID and you won't be able to download them without buying them. Reportedly, Mac App Store Customer Service has sometimes issued redemption codes for these apps to second owners who asked.

b. If the previous owner didn't deauthorize the computer in the iTunes Store under his Apple ID, you wont be able to authorize it immediately under your ID. In that case, you'll either have to wait up to 90 days or contact iTunes Support.

c. When trying to create a new iCloud account, you might get a failure message: "Account limit reached." Apple imposes a lifetime limit of three iCloud account setups per device. Erasing the device does not reset the limit. You can still use an iCloud account that was created on another device, but you won't be able to create a new one. Contact iCloud Support for more information. The setup limit doesn't apply to Apple ID accounts used for other services, such as the iTunes and Mac App Stores, or iMessage. You can create as many of those accounts as you like.

Nov 12, 2014 3:10 AM in response to Linc Davis

Re-installing my OS seems like a bit of a hassle, since I just finished moving all my files to this computer. I did that by hand to make sure I copied no junk, only my own files. I redownloaded apps I had, so no junk transfer from my old computer there either. About the preferences problem: I found a fix online. More people seemed to have this problem on Lion, Mountain Lion, Mavericks and Yosemite. I tried deleting some plist files, that didn't work, but I also found another solution that did work: This was the fix: enable root user, and in preference panes, unlock using "root" and the root password. This is a bit of a workaround of course, but it works. I won't need the firewall preferences that often so this is fine for me. This suggests that my account is not fully authorized. Might this be because I deleted the initial user account after making my own account? I am administrator though, since I am the only account on this machine apart from the guest account, which is disabled btw.

Nov 19, 2014 5:59 PM in response to Peeterus

I just ran into this for a Mac I'm setting up for a friend of mine. I'm guessing that you don't have a login password on your account? In Yosemite you can't unlock the Security and Privacy pane of the settings app if your account has no password (at least in 10.10.1, I haven't tested it in an earlier release). You can still unlock the Users and Groups pane, however. You can test this by going to Security and Privacy and setting a login password in the General tab. Then you can unlock the rest of the pane, make any changes you like, and lock it again. If you then remove your login password you'll no longer be able to unlock the pane. Since Users and Groups works either way I'm assuming that this was intentional to prevent other people from changing your privacy settings if you're away from your password-less machine. Since they can do nearly anything else I'm not sure if there's any point, though.

Feb 21, 2015 1:10 AM in response to HitScan

I thoroughly appreciated the elegant simplicity of your answer. I don't know how people put up with the endless lists of code and commands and other assorted flavors of ... uhh answers....but can you imagine the poor sulking souls that just spent hours, reinstalled their OS, a-n-d did a backup for the entire hard drive?...then read your solution. It reminds me of an old biblical injunction that states how God sometimes uses the simplest things to confound the wise or "Hot Slices of humble pie being served fresh daily at Peet's." Nice work.

Mar 4, 2015 8:48 AM in response to Peeterus

There are 2 work arounds for this issue


1 Set a password for account then security/privacy tabs will unlock like normal

2 Without password set you can click to unlock then when authentication box appears use return to ok it and immediately click on any security/privacy tab you literally have a split second to do this but it works


This issue has been apparent in:


10.10

10.10.1

10.10.2

Cant unlock Preference Panes Yosemite

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.