Ability to force a local user account associated to a Macbook to supply a new passcode

[Birdn]

Does System Manager have the ability to force a local account, assigned to a Macbook, to supply a new passcode?

For instance, say the user forgets their local password and needs to create a new one.  If the Macbook is enrolled under the Meraki solution does System Manager have the ability to allow the user to create a new passcode?

At the moment our only option is to have the user return the Macbook to us.  However, we'd be interested in simply enabling a policy or forcing a script to run that would solve our issue.

We're open to any thoughts.  Our focus is the Macbook, but if it works for other Apple devices even better.

Thanks for your feedback.

[Seshu]

Hello @Birdn 

The way to force a local user to setup passcode is to push the profile with Passcode Payload. Unfortunately, if the user forgets the passcode, it is not possible to recover the password to change it to a specific value through the Systems Manager Dashboard payload. The dashboard only pushes the allowed settings to the Macbook. If it needs to be recovered, you have to follow the processes prescribed by Apple as the Macbook needs to be logged in and connected to network to even be able to pull settings from the dashboard. 

https://support.apple.com/guide/mac-help/reset-your-mac-login-password-mh35902/mac

You can however, use filevault option to setup a recovery key and be able to recover the data from the device. 

Please let me know if you have any questions.

Regards,

Meraki Team

[BlakeRichardson]

@Birdn A way around this for any potential future problems would be to use a service such as jumpcloud  where you can create and administer local accounts via a cloud managed dashboard and an agent. It allows you to do things an MDM can't.