Managed Local Administrator Accounts

missedited

In our environment, we typically leave the PreStage Admin. Some of our programs seem to call to that profile to run. We haven't had an issue before with leaving both on there. I will say from personal experience, I've had a LAPS password expire and not issue another proper password for the primary admin and had to rely on the PreStage admin instead. Though, it really comes down to your security team if they only want one admin per machine.

How did you delete the Prestage admin account? To verify if the account is still visible on the device, run the following command: dscl . list /Users | grep “hu”. 

I delete the admin account with a policy and the local accounts payload. the account does not exist on the machine anymore but jam pro thinks, that the managed local admin account is still there.

Do you still have the Account settings in the Prestage enrollment enabled

if yes, try disabling it and check the status.

We can’t disable prestage admin because we need them with skip account creation because we are using jamf connect 

Did you end up finding a solution for this? I'm also running into the same issue trying to delete the PreStage admin account

Hi @Jay_007,

Unfortunately, I haven't received any clear statements from Jamf support. I don't delete the prestage anymore.