Add Local Admin Policy Doesn't Add Account to lpadmin Group

New Contributor

I have a policy that adds a local admin account to a 10.15.6 computer. The account gets created successfully but the account is not added to lpadmin group. As such, using the credentials doesn't allow a printer to be added. running dscl . -read /Groups/lpadmin GroupMembership only lists the local admin account that was added on the device, not the one created by the policy. Ideas?


Esteemed Contributor II

@idonna Was the local admin account created by a Local Accounts payload in a policy, or via a script? If via a script, did you use the sysadminctl tool?