Skip to main content

Is there a way to allow a FV approved user to unlock the disk but NOT automatically log them in using their AD Credentials?



the reason I ask is because i have some of our MBP configured so that the login credentials supplied at login page are used to initiate the wireless connection and THEN sign them in with their AD credentials , however FV just logs them in and therefore they are not connected to the wireless and then have to initiate the connection or else they have to then log out and sign in to connect the wireless then the AD logon.



how can i get the users to unlock the disk but NOT log them into the OS ?

Create a Script with this command:



sudo defaults write /Library/Preferences/com.apple.loginwindow DisableFDEAutoLogin -bool YES


Then have a Policy that runs that script once per computer.

follow and save for later

Fixed it for us!

anyone figure out how to do this via a config profile?

Create Use a custom configuration profile.



com.apple.loginwindow.plist



<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

    <key>DisableFDEAutoLogin</key>

    <true/>

</dict>

</plist>
Terms & ConditionsCookie settings