Mac OS X Managed Client: Forcing users to enter a password when waking from sleep or exiting screen saver

If you want Workgroup Manager on Mac OS X Server v10.4 to force users to authenticate when waking from sleep or exiting the screen saver, follow these steps:

1. In Workgroup Manager, select a record (computer list, group, or user).
2. Select Preferences, then the Details tab.
3. Click the Add button, and add this plist file:
   

   ~/Library/Preferences/ByHost/com.apple.screensaver.<MACAddress>.plist

   
   
4. Edit the com.apple.screensaver entry that was added to the list by (in the edit window) moving this attribute from the "often" domain to the "always" domain:
   

   askForPassword integer 1

   
   Note: You can delete the other attributes, leaving only the askForPassword attribute. Also, the value must be set to 1 for the setting to be enabled, or to 0 for the setting to be disabled.
   
   
5. Click Apply Now to save the change, then Done to dismiss the preference editor.

Now these records (whichever you selected in step 1) will require a password when waking from sleep or exiting the screen saver.