The Apple Screen Saver Policy allows IT administrators to configure and enforce screen saver settings on managed macOS devices. This helps maintain security, prevent unauthorized access, and ensure a consistent experience across all endpoints.
π§ Overview
This policy controls how and when a screen saver activates on macOS devices, whether a password is required to unlock the screen, and which screen saver module is displayed.
It applies to macOS 10.11 and later.
βοΈ Settings and Options
1. Require Password to Unlock Screen
Description: Enforces password authentication when the screen saver is stopped or the system is unlocked.
Options:
Trueβ Users must enter their password to unlock.Falseβ Screen can be unlocked without a password.
Requirement: macOS 10.13+
2. Require Password Delay
Description: Sets a delay (in seconds) before the password requirement activates after the screen saver starts.
Example:
0β Require password immediately.300β Require password after 5 minutes.
3. Screensaver Path
Description: The full POSIX file path to the
.saverbundle used as the screen saver.Default macOS locations:
/System/Library/Screen Savers/(built-in)/Library/Screen Savers/(custom company-wide modules)
Sample Values:
Example | Description |
| Built-in macOS "Flurry" screen saver |
| Built-in "Message" screen saver |
| Custom Aerial screen saver deployed via MDM |
4. Login Window Screensaver Idle Time
Description: The duration (in seconds) of inactivity at the login window before the screen saver starts.
Example:
600= 10 minutes0= Never activates
5. Screensaver Idle Time
Description: Duration (in seconds) of inactivity before the screen saver starts for logged-in users.
Example:
900= 15 minutes300= 5 minutes
6. Screensaver Module Name
Description: The display name of the screen saver module (without the
.saverextension).Requirement: Must match the module name defined in the
.saverbundle.If not specified: macOS defaults to the Flurry module.
Sample Values:
Example | Description |
| Built-in macOS module |
| Displays a custom message |
| Uses the popular Aerial video screen saver |
π§© Example Configuration
Setting | Sample Value |
Require Password to Unlock | True |
Require Password Delay | 0 |
Screensaver Path |
|
Login Window Screensaver Idle Time | 600 |
Screensaver Idle Time | 900 |
Screensaver Module Name |
|
This configuration enforces the Flurry screen saver after 15 minutes of inactivity and requires a password immediately upon wake.
β Best Practices
Use built-in screen savers (e.g., Flurry, Message) to ensure compatibility with all macOS versions.
For custom screen savers (like Aerial), deploy the
.saverbundle to/Library/Screen Savers/before applying this policy.Set the Require Password option to
Trueto comply with most security frameworks (e.g., SOC 2, ISO 27001).
Last updated: November 2025
βApplies to: macOS 10.11+
