So I updated my MacBook Pro to High Sierra this week and today I was looking in /Volumes and found a Preboot folder containing various items that includes a AdminUserRecoveryInfo.plist. In looking at the contents I can't help but wonder if this is a little concerning. I'm not going to post the contents because frankly I don't know how sensitive it might be but I'll just say that it contains the admin accounts on the system along with hashes. Does anyone know anything about this file and can shed some light on it?
Question
AdminUserRecoveryInfo.plist and High Sierra
I found the same file; was the only modified file under the "Volumes" folder early this a.m. (EST zone). Also experienced random oddities, like activated guest user accounts and modified IMAP mail settings. Concerned about privacy/data security.
Any advice would be appreciated. Will provide obfuscated contents of the .plist if requested.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.