System Preferences controls system and user settings on a macOS Computer. System Preferences allows the user to tailor their experience on the computer as well as allowing the System Administrator to configure global security settings. Some of the settings should only be altered by the person responsible for the computer. Rationale: By requiring a password to unlock system-wide System Preferences, the risk of a user changing configurations that affect the entire system is mitigated and requires an admin user to re-authenticate to make changes. Impact: Users will need to enter their password to unlock some additional preference panes that are unlocked by default like Network, Startup and Printers and Scanners. Remediation: Graphical Method: Perform the following steps to verify that an administrator password is required to access system-wide preferences: 1. Open System Settings 2. Select Privacy and Security 3. Select Advanced 4. Set Require an administrator password to access system-wide settings to enabled

[Yes/No]

Remediation: Graphical Method: Perform the following steps to verify that an administrator password is required to access system-wide preferences: 1. Open System Settings 2. Select Privacy and Security 3. Select Advanced 4. Set Require an administrator password to access system-wide settings to enabled