I've been testing 8.6 today and one issue I am seeing is that in one of my deployment configurations for 10.8 in the management tab where you can specify a hidden local admin user, I have the option selected to hide from the OS X login window but it is showing up at the login window on any imaged 10.8 machines. My 10.7 configuration that is configured exactly the same but with a 10.7 image as the base OS does not have this problem. Possible bug?
How can we do this as a script / policy? I seem to be struggling today (rainy weather).
Nevermind, added the following lines to my postboot script:
$ defaults write /Library/Preferences/com.apple.loginwindow HiddenUsersList -array-add username
$ defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES
@brent.buckner Good thread. We're noticing our hidden admin account showing up too. Not sure when it broke, but fixed with both defaults commands. Many thanks.
[EDIT] Well, I tested this, and it didn't work...script is set to 755, run At Reboot and tested with $1 and without $1. No luck, JSS is at 8.62 and image is 10.7.5.
#!/bin/sh $1/usr/bin/defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES $1/usr/bin/defaults write /Library/Preferences/com.apple.loginwindow HiddenUserList -array-add jlennon exit 0
[EDIT#2] Also the commands work fine when invoked manually. So Casper isn't hiding the account, nor is it invoking the above script at first reboot. I guess I'll set up a policy to run at reboot that'll hide <500 accounts for now until this issue is resolved. :)