An internet connection and successful check-ins to Jamf Pro on the locked out computer
In Jamf Pro, click Computers in the sidebar.
Click Policies in the sidebar.
Click New .
In the General payload, configure the following:
Select Recurring Check-In for the policy trigger.
Choose "Once per computer" from the Execution Frequency pop-up menu.
In the Files and Processes payload, enter the following in the Execute Command field:
authchanger -reset
In the Scope tab, add the locked out computer as a target for the policy.
Click Save .
The policy runs on the locked out computer the next time it checks in with Jamf Pro. The Jamf Connect login window is disabled and the native macOS login window displays the next time the computer is restarted.