This chapter covers the macOS System Preferences and Settings application, a critical component for managing macOS client configurations. For the CompTIA A+ Core 2 (220-1102) exam, understanding how to navigate, configure, and troubleshoot via System Preferences is essential, as it directly maps to Objective 1.6 (Compare and contrast common Operating System settings and interfaces). Expect approximately 5-8% of exam questions to involve macOS settings, often requiring you to identify the correct preference pane for a given task or interpret a configuration scenario. This chapter provides the depth needed to master this area.
Jump to a section
Think of macOS System Preferences as the main control room for a large office building. Each panel (icon) is a dedicated console that manages a specific subsystem: the lighting console (Displays), the HVAC console (Energy Saver), the network switchboard (Network), the security desk (Security & Privacy), and so on. When you open System Preferences, you are entering the central command center. Each console has its own set of knobs, switches, and readouts (settings). Changing a slider on the Displays console immediately adjusts the brightness of every monitor in the building. The Network console allows you to configure how the building connects to the outside world—Ethernet, Wi-Fi, VPN—and shows real-time status (IP address, signal strength). The Security & Privacy console manages who can enter which areas, with granular permissions for apps (like keycard access). The Users & Groups console lets you add or remove employees (user accounts) and assign them to different roles (standard, administrator). The Date & Time console ensures all clocks in the building are synchronized, often via NTP (like a master clock receiver). All consoles feed into a central database (the preference files in ~/Library/Preferences/ and /Library/Preferences/), so changes persist across reboots. If you need to reset a console to factory defaults, you delete its preference file. The Terminal can also be used to send direct commands to these consoles via the 'defaults' command, bypassing the graphical interface.
What is System Preferences?
System Preferences (often called System Settings in macOS Ventura and later) is the primary graphical interface for configuring macOS. It is a centralized application that organizes settings into panes, each responsible for a specific subsystem. The application is located in /Applications/System Preferences.app (or /System/Applications/System Settings.app in newer versions). It reads and writes preference files, typically plist (property list) files stored in ~/Library/Preferences/ (user-specific) and /Library/Preferences/ (system-wide). These plist files are XML or binary format and can be directly edited using the 'defaults' command or property list editors.
How It Works Internally
When you open System Preferences, the app reads the contents of /System/Library/PreferencePanes/ and ~/Library/PreferencePanes/ to enumerate available panes. Each preference pane is a bundle (a directory with a .prefPane extension) containing executable code, resources, and a plist that defines its metadata. The main window displays icons for each pane. When you click an icon, the corresponding preference pane is loaded into the same process or a separate helper process. Changes you make are immediately written to the relevant plist file using the CFPreferences API. For example, changing the desktop background writes to com.apple.desktop.plist. The system daemons (e.g., cfprefsd) monitor these files and apply changes to the running system.
Key Components, Values, Defaults, and Timers
Desktop & Screen Saver: Allows setting wallpaper and screen saver. Default screen saver timeout is 5 minutes (configurable via Security & Privacy > General > Require password after sleep or screen saver begins).
Dock & Menu Bar: Controls Dock size, magnification, position (left, bottom, right), and auto-hide. Default Dock size is 32-128 pixels. Auto-hide is off by default.
Mission Control: Manages Spaces (virtual desktops) and keyboard shortcuts. Default number of spaces is 4.
Security & Privacy: Includes General (password requirements, allow apps from anywhere), FileVault (full-disk encryption), Firewall (application-based firewall), and Privacy (location services, accessibility, etc.). FileVault uses AES-XTS encryption with a recovery key. Firewall defaults to off.
Network: Configures interfaces (Wi-Fi, Ethernet, Bluetooth PAN, VPN, Thunderbolt Bridge). Shows IP address, subnet mask, router, DNS, and status. Default DHCP lease time is 24 hours (configurable on server).
Bluetooth: Manages pairing and device connections. Default discoverable mode lasts 5 minutes.
Sound: Output and input devices, volume, and alert sounds. Default alert volume is 50%.
Keyboard: Modifier keys, keyboard shortcuts, input sources (e.g., US, UK), dictation. Default key repeat rate is 2 (fast), delay until repeat is 15 (short).
Trackpad: Point & Click, Scroll & Zoom, More Gestures. Default tap to click is off.
Mouse: Tracking speed, scrolling speed, double-click speed. Default tracking speed is 3 (of 5).
Displays: Resolution (default best for display), brightness, color profile (default is Color LCD), arrangement (for multiple monitors).
Printers & Scanners: Lists printers, default printer (last used), and scanner options.
Users & Groups: Create, delete, modify user accounts. Account types: Administrator, Standard, Managed with Parental Controls, Sharing Only, and Group. Default guest account is enabled but cannot log in remotely.
Date & Time: Set date and time manually or automatically via NTP. Default time server is time.apple.com.
Time Machine: Backup configuration. Default backup frequency is every hour.
Accessibility: Vision, Hearing, Motor, and General settings. Includes VoiceOver, Zoom, Display accommodations.
Sharing: Enables services like Screen Sharing, File Sharing, Printer Sharing, Remote Login (SSH), Remote Management (ARD), Bluetooth Sharing. Default all services are off.
Software Update: Checks for macOS updates. Default check is weekly (configurable).
Energy Saver (older macOS) or Battery (macOS Ventura+): Sleep settings, display sleep, power nap. Defaults: Computer sleep after 10 min on battery, 30 min on power adapter; Display sleep after 5 min on battery, 10 min on power adapter.
iCloud: Sign in with Apple ID, manage iCloud Drive, Photos, Keychain, Find My Mac, etc.
Internet Accounts: Add accounts like Google, Exchange, Yahoo, etc.
Profiles: MDM and configuration profiles installed (e.g., from a work or school).
Configuration and Verification Commands
defaults command: Read and write preference values. Example: defaults read com.apple.dock autohide returns 0 or 1. To set: defaults write com.apple.dock autohide -bool true; killall Dock.
plutil: Validate and convert plist files. plutil -lint ~/Library/Preferences/com.apple.finder.plist checks syntax.
system_profiler: Reports hardware and software configuration. system_profiler SPSoftwareDataType gives macOS version and kernel.
networksetup: Configure network settings from command line. networksetup -listallnetworkservices lists interfaces. networksetup -setairportpower en0 on enables Wi-Fi.
pmset: Manage power settings. pmset -g displays current settings. pmset -c sleep 30 sets computer sleep to 30 minutes when on charger.
scutil: Query and configure system configuration parameters. scutil --dns shows DNS configuration.
sysctl: Modify kernel parameters. sysctl -a | grep hibernate shows hibernate settings.
Interaction with Related Technologies
System Preferences interacts with launchd (for daemons), the kernel (via sysctl), the file system (via plist files), and network services (via configd). For example, changing the network settings triggers configd to update the system configuration, which then updates the routing table. Security & Privacy preferences modify the SQLite database at /var/db/SystemPolicy.sqlite. FileVault settings interact with the CoreStorage or APFS volume manager. Time Machine preferences schedule backups using launchd. Understanding these interactions helps in troubleshooting: if a setting doesn't take effect, you might need to restart the associated daemon (e.g., sudo killall -HUP mDNSResponder for DNS changes).
Open System Preferences
Click the Apple menu and select 'System Preferences' (or 'System Settings' in macOS Ventura+). Alternatively, click the System Preferences icon in the Dock (if present) or use Spotlight (Cmd+Space) and type 'System Preferences'. The application launches and scans the preference panes directories. It reads the plist metadata for each pane to display icons and names. The main window appears with a grid of icons. In macOS Ventura+, the interface is redesigned as a sidebar-driven layout, but the underlying mechanism remains the same.
Navigate to a Specific Pane
Click on the icon for the desired setting, e.g., 'Network'. This triggers the loading of the Network.prefPane bundle. The bundle's executable code runs, querying the current system configuration via the System Configuration framework (configd). It displays the current state, such as active interfaces, IP addresses, and DNS servers. The pane may show a status indicator (green dot for connected, red for disconnected). Changes made in this pane are written to /Library/Preferences/SystemConfiguration/preferences.plist.
Modify a Setting
For example, in the 'Desktop & Screen Saver' pane, select a new wallpaper image. This action writes the new image path to the user's plist: ~/Library/Preferences/com.apple.desktop.plist. The Dock (for mission control) or the WindowServer (for desktop) reads this plist and updates the display. No daemon restart is typically needed; the change is applied immediately. Some changes, like modifying the Dock, require the Dock to be relaunched (automatically or manually via 'killall Dock').
Verify the Change
After modifying, you can verify the change by observing the system behavior. For network changes, use 'Network Utility' or Terminal commands like 'ifconfig' or 'networksetup -getinfo Wi-Fi'. For preference changes, use 'defaults read' to check the plist value. For example, after changing the Dock auto-hide setting, run 'defaults read com.apple.dock autohide' to confirm it returns 1 (true). The system should reflect the new behavior immediately (e.g., Dock hides when not in use).
Reset a Preference Pane
If a pane becomes corrupted or you want to revert to defaults, you can delete its plist file. For example, to reset Dock preferences, quit System Preferences, then in Terminal: 'rm ~/Library/Preferences/com.apple.dock.plist'. Then relaunch System Preferences and the Dock. The system will recreate the plist with default values. For system-wide panes, you may need to delete from /Library/Preferences/ (requires sudo). After deletion, restart the affected service or log out/in. This is a common troubleshooting step for misconfigured settings.
Enterprise Deployment of macOS Preferences
In a corporate environment, managing macOS settings across hundreds of Macs is typically done via Mobile Device Management (MDM) or Configuration Profiles, not by manually editing System Preferences on each machine. For example, an IT administrator might deploy a configuration profile that enforces FileVault encryption, sets a strong password policy, and disables iCloud backup. This profile is pushed via an MDM server (like Jamf Pro, Microsoft Intune, or VMware Workspace ONE) and appears under System Preferences > Profiles. The profile overrides local settings and cannot be removed by the user without an admin password.
Common Scenario: Network Configuration
A common task is configuring a Mac to use a static IP address for a server or a specific network. In System Preferences > Network, select the interface (e.g., Ethernet), change Configure IPv4 to Manually, and enter the IP, subnet mask, and router. This writes to the system configuration plist. In a data center, this is often done via a script using 'networksetup -setmanual Ethernet 192.168.1.10 255.255.255.0 192.168.1.1'. Misconfiguration can lead to network connectivity issues, such as IP conflicts or incorrect DNS, causing users to be unable to access resources.
Performance and Scale Considerations
System Preferences itself is lightweight, but when managing many preference panes, the cumulative plist file size can grow. Corrupted plist files are a common source of issues, leading to panes crashing or settings not applying. In large deployments, administrators should use Apple's 'defaults' command in scripts to ensure consistency. For example, a script to disable guest login: 'sudo defaults write /Library/Preferences/com.apple.loginwindow GuestEnabled -bool false'. This is faster and more reliable than navigating the GUI on each machine.
Troubleshooting Misconfiguration
When a setting doesn't take effect, common causes include: the plist file is locked (permissions issue), the preference pane is disabled (via a configuration profile), or the change requires a logout/reboot. For example, changing the computer name in Sharing preferences requires the change to propagate via Bonjour, which may take a few seconds. If the name doesn't update, you can force renewal by toggling the service off and on. Another issue is that some settings are cached; clearing the cache (e.g., 'sudo killall -HUP mDNSResponder' for DNS) can resolve staleness.
What the 220-1102 Exam Tests on macOS System Preferences
The CompTIA A+ Core 2 exam (220-1102) covers macOS System Preferences under Objective 1.6: 'Compare and contrast common Operating System settings and interfaces.' Specifically, you need to know:
The location and method to access System Preferences (Apple menu > System Preferences, or Spotlight).
The function of major preference panes: Network, Security & Privacy, Users & Groups, Displays, Energy Saver/Battery, Time Machine, Sharing, Date & Time, Software Update, and Accessibility.
How to configure network settings (DHCP vs. static, DNS, proxy).
How to manage user accounts (Administrator, Standard, Guest).
How to enable FileVault and the Firewall.
How to set up Time Machine backups.
How to configure display settings (resolution, multiple monitors).
How to use the 'defaults' command and 'system_profiler'.
Common Wrong Answers and Why Candidates Choose Them
Wrong: 'System Preferences is only accessible from the Dock.' Many candidates think the only way is via the Dock, but it's also in the Apple menu and Spotlight. The exam expects you to know multiple access methods.
Wrong: 'FileVault encrypts only the user's home folder.' In reality, FileVault encrypts the entire startup disk (system partition). Candidates confuse it with FileVault 1 (which encrypted only the home folder) but current macOS uses FileVault 2 (full disk).
Wrong: 'The Firewall is enabled by default.' The macOS application firewall is off by default. Candidates might assume it's on like Windows Firewall, but it's not.
Wrong: 'Energy Saver settings affect only the display.' Energy Saver controls both computer sleep and display sleep separately. Candidates often think it's only display.
Specific Numbers, Values, and Terms
Default screen saver timeout: 5 minutes (set in Security & Privacy > General).
FileVault encryption: AES-XTS 128-bit (or 256-bit with FileVault 2).
Default DHCP lease time: 24 hours (on typical home routers).
Time Machine backup frequency: every hour (default).
Guest account: enabled by default, but cannot log in remotely.
Default firewall state: off.
NTP server: time.apple.com (default).
Edge Cases and Exceptions
If the 'Allow apps from anywhere' option is missing in Security & Privacy, it's because Gatekeeper is enforcing stricter settings. You can enable it via Terminal: 'sudo spctl --master-disable'.
When using a configuration profile, some panes may be locked or hidden. The exam may present a scenario where a user cannot change a setting due to an MDM profile.
The 'Sharing only' account type can only access shared resources, not log in locally.
How to Eliminate Wrong Answers
If a question asks about enabling a firewall, remember that macOS firewall is off by default; you must manually enable it in Security & Privacy > Firewall.
For user accounts: Administrator can install software and change settings; Standard cannot. 'Guest' is for temporary access and doesn't require a password.
For Time Machine: it requires an external drive or network volume. The backup is incremental.
For Network: if DHCP is not obtaining an IP, check the interface status (green/red) and try renewing DHCP lease.
System Preferences is located in /Applications/System Preferences.app (or System Settings.app in Ventura+).
Access it via Apple menu, Dock, or Spotlight.
Each pane is a .prefPane bundle (Monterey and earlier) or a SwiftUI panel (Ventura+).
Changes are stored in plist files under ~/Library/Preferences/ (user) or /Library/Preferences/ (system).
Use 'defaults read' and 'defaults write' to manipulate preferences from the command line.
FileVault encrypts the entire startup disk using AES-XTS (128 or 256-bit).
macOS Firewall is off by default; enable in Security & Privacy > Firewall.
Time Machine backs up hourly (default) to an external drive or network volume.
Guest account is enabled by default but cannot log in remotely.
To reset a pane, delete its plist file and restart the associated process or logout.
Configuration profiles (MDM) can override local settings and lock panes.
Energy Saver (or Battery) controls separate sleep timers for computer and display.
These come up on the exam all the time. Here's how to tell them apart.
System Preferences (macOS Monterey and earlier)
Grid of icons layout.
Apple menu > System Preferences.
Search bar at top right.
Preference panes are .prefPane bundles.
More traditional macOS interface.
System Settings (macOS Ventura and later)
Sidebar with categories list.
Apple menu > System Settings.
Search bar at top of sidebar.
Panels are now SwiftUI-based (not .prefPane).
Modern iOS-like design.
Mistake
System Preferences and System Settings are the same application on all macOS versions.
Correct
In macOS Ventura (13) and later, the application is renamed to 'System Settings' with a redesigned interface (sidebar). Older versions (macOS Monterey and earlier) use 'System Preferences' with a grid of icons. The exam may test both names.
Mistake
FileVault encrypts only the home folder.
Correct
FileVault 2 (current) encrypts the entire startup disk, including system files and apps. FileVault 1 (old) encrypted only the home folder, but it is no longer used.
Mistake
The macOS Firewall is enabled by default.
Correct
The application firewall in macOS is off by default. You must manually enable it in Security & Privacy > Firewall. It is not on by default like Windows Firewall.
Mistake
You can only access System Preferences from the Dock.
Correct
System Preferences can be accessed from the Apple menu, Spotlight (Cmd+Space), or the Dock. The exam expects you to know multiple methods.
Mistake
Resetting a preference pane requires reinstalling macOS.
Correct
You can reset a preference pane by deleting its plist file (e.g., 'rm ~/Library/Preferences/com.apple.dock.plist'). The system recreates it with defaults. No reinstallation needed.
Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.
You can open System Preferences by clicking the Apple menu in the top-left corner and selecting 'System Preferences' (or 'System Settings' in macOS Ventura+). Alternatively, click the System Preferences icon in the Dock if present, or use Spotlight (Cmd+Space) and type 'System Preferences' or 'System Settings'. The application is located in /Applications/.
System Preferences is the name used in macOS Monterey (12) and earlier, featuring a grid of icons. Starting with macOS Ventura (13), the application was redesigned and renamed to System Settings, adopting a sidebar layout similar to iOS. Functionally, they serve the same purpose but have different user interfaces.
Go to System Preferences > Security & Privacy > FileVault. Click the lock icon and enter your admin password. Click 'Turn On FileVault'. You will be asked to create a recovery key or use your iCloud account to unlock the disk if you forget your password. FileVault encrypts the entire startup disk.
Open System Preferences > Network. Select the network interface (e.g., Wi-Fi or Ethernet). Click 'Advanced', then go to the TCP/IP tab. Change 'Configure IPv4' from 'Using DHCP' to 'Manually'. Enter the IP address, subnet mask, and router. Click OK, then Apply. You can also use the Terminal command 'networksetup -setmanual'.
Open Terminal and run 'defaults delete com.apple.dock; killall Dock'. This deletes the Dock plist file and restarts the Dock, which recreates the plist with default values. Alternatively, you can manually delete ~/Library/Preferences/com.apple.dock.plist and then restart the Dock via Activity Monitor or Terminal.
Settings may be locked because you are not logged in as an administrator (you need admin privileges). Alternatively, a configuration profile (MDM) may have restricted changes—look under System Preferences > Profiles to see if any profiles are installed. Some settings may also be grayed out if the system is managed by an organization.
Go to System Preferences > Security & Privacy > Firewall. Click the lock icon to make changes (enter admin password). Click 'Turn On Firewall'. You can also click 'Firewall Options' to configure which apps are allowed or blocked. The firewall is off by default.
You've just covered macOS System Preferences and Settings — now see how well it sticks with free 220-1102 practice questions. Full explanations included, no account needed.
Done with this chapter?