MacBook Pro does not lock when screen is closed

Question

MacBook Pro does not lock when screen is closed

This topic has been discussed several times. The one Issue I have been experiencing and have reported repeatedly to apple as a security gap is the fact the setting "Require password after screen saver begins or display is turned off " becomes READ ONLY. (This setting has been configured by a profile).

Essentially, by activating In-tune security tools and manage a MacBook Pro to enhance security, the laptop will not LOCK!!! As the MacBook Pro will go to sleep then turn on without a password!!!!

Apple and Microsoft need to map that setting to another configuration parameter and enable the user to input the manual configuration, and have the system enforce the lower limit.

This is NOT acceptable. I have been trying to get a response from Apple for a while, and I have no option to remove corporate management.

[Edited by Moderator]

MacBook Pro (M1, 2020)

Posted on Jul 23, 2025 02:11 PM

Reply

Answer 1

Top-ranking reply

neuroanatomist

Level 9

52,791 points

Jul 23, 2025 03:17 PM in response to marcrestron132

Former Apple advocate wrote:

This setting has been configured by a profile.

Your issue isn’t with Apple, it’s with whoever set up your enterprise profile. Apple provides enterprise tools that enable device management, the enterprise decides the security policies.

Reply

Answer 2

Jul 23, 2025 03:32 PM in response to marcrestron132

I do NOT agree that this is Apple's problem.

if you want your User to be able to change that setting, your Admins must provide a profile that leaves that setting changeable by the user. It appears the managed profiles provided by your administrators do not explicitly allow you to change that setting.

Whether one particular Microsoft tool allow that or not is not something Apple is likely to change.

Reply

Answer 3

Jul 23, 2025 04:48 PM in response to marcrestron132

I am not defending anyone for any reason.

For each managed parameter, MDM profiles do one of MANY different actions:

START certain settings to initial values, and allow those settings to be changed, or

FORCE a particular setting and do not allow them to be changed, or

ignore settings -- no oversight of that particular setting.

I have always found that Apple provided a rich set of items that could be managed. It has always been up to the organization to set those settings they care about, and leave the rest for the User.

If your organization can not or will not provide the accommodation you are seeking (user ability to set lock-screen parameters to any value) that is NOT a defect in the software Apple Provides.

Reply

Answer 4

Jul 23, 2025 11:39 PM in response to marcrestron132

There are hosts of blocking and locking features. See what suits you.

Maximum minutes after screen lock before password is required: Enter the length of time devices must be inactive before a password is required to unlock it. When the value is blank or set to Not configured, Intune doesn't change or update this setting.

This may help --> macOS device settings to allow or restrict features using Intune

Reply

Answer 5

Jul 23, 2025 11:42 PM in response to marcrestron132

Write to this community: Category: Microsoft Intune

Reply

Answer 6

Jul 23, 2025 03:48 PM in response to marcrestron132

Former Apple advocate wrote:

MacOS changes this setting to READ ONLY.

So you believe that users should be free to modify enterprise-side security policies. Sorry, I don’t think you’re going to get much traction what that request, but good luck.

Reply

Answer 7

Davban

Level 1

12 points

Jul 23, 2025 03:53 PM in response to marcrestron132

try settings the screen saver minutes to the least amount of time

Reply

Answer 8

Jul 23, 2025 03:20 PM in response to Grant Bennet-Alder

That is not a cool answer!

Companies use either Jamf or In-tune to manage and secure corporate resources. The question has been and continue to be, the implementation and mapping between macOS and security settings. MacOS changes this setting to READ ONLY.

The integration between Microsoft and Apple MacOS is flawed in this case, as it leaves ALL the devices managed and secured via centralized tools vulnerable, as they don't lock UNLESS the user locks them.

From a customer perspective, I would ask you to look at this point from the pain and the risk users have instead of being dismissive of the point being raised.

In all cases, thank you for taking the time to respond.

Reply

Answer 9

Jul 23, 2025 04:15 PM in response to Grant Bennet-Alder

This is not about pointing the blame on someone. I hope you understand that. I believe we are past the period we talk about Apple vs MS vs Google.

All what I am asking for, is to look into why this is happening. I am not saying Apple is bad, I am using an Apple product (Hello!).

I am questioning why would an enterprise setting change the field and configuration available for users and make the laptop un lockable. I am pointing out a vulnerability not asking for admission of guilt.

Can we change the discussion to: Why is this happening? instead of don't use MS evil tools... For crying out loud Apple brought the MS office team to WWDC and promoted their largest partner.. .enough with the sensitivity already.

The issue as I believe it, is the wrong mapping for a parameter from in-tune to the wrong setting in the user profile. The logic that the pw will be only set if the machine stays on for 15 mins unattended (or 5 mins or whatever time) is not sound. I have to lock my machine manually before it goes to sleep to make sure it is locked. I think we can agree this is not safe.

For using in-tune or whatever corporate enterprise security tools, that is done to secure machines and data. This is a discussion I do not want to have nor I want to engage to. That is a done deal.

As much as I appreciate your engagement and taking the time to respond. Thank you for that, I don't appreciate the defensive attitude nor the tangential discussions.

I am raising an issue I need help on, if you can help and have positive input, I appreciate it, else kindly refrain from projecting your biases and anger.

Reply

Answer 10

Jul 23, 2025 11:39 PM in response to marcrestron132

Remotely lock devices with Microsoft Intune

/intune/intune-service/remote-actions/device-remote-lock

Supported platforms Remote lock is supported for the following platforms: Android Android Enterprise kiosk devices Android Enterprise work profile devices Android Enterprise fully managed devices Android Enterprise corporate-owned with work profile devices Android Open Source Project (AOSP) devices iOS macOS Remote lock isn't supported for:.

Reply

Answer 11

Jul 23, 2025 02:30 PM in response to marcrestron132

<< activating In-tune security tools. >>

You need to take your issues up with whomever decided that you needed:

In-tune security tools

Reply

Answer 12

Jul 23, 2025 07:37 PM in response to Davban

Thank you. If you look at the embedded picture, I did. 2 mins.

So it becomes 2+15 = 17 mins

If the MacBook Pro goes to sleep, or the screen sleeps, it will not lock.

Reply

Answer 13

Jul 28, 2025 09:56 PM in response to SravanKrA

Thank you for your recommendation. The team looked into that. After applying the policy, the response from the MBP was. It seems this setting is not supported in Sequoia V15.5.

Reply