You can require the users to type a password when users try to do one of the following actions:
Open the client's user interface.
Stop the client.
Uninstall the client.
As of 14.0.1, you can require Mac users to type a password to uninstall the client.
Import and export the security policy.
You can modify the password protection settings for any child group that does not inherit its settings from a parent.
To password-protect the client
In the console, click Clients.
Under Clients, select the group for which you want to set up password protection.
On the Policies tab, under Location-independent Policies and Settings, click Password Settings.
On the Password Settings tab, check any or all of the check boxes.
In the Password and Confirm password text boxes, type the same password.
The password is limited to 15 characters or less.