Skip to main content
Solved

Disable Mavericks Sign in with your Apple ID at login prompt?

  • November 19, 2013
  • 47 replies
  • 138 views

Forum|alt.badge.img+5

Hi everyone,

Has anyone worked out how to disable the "Sign in with your Apple ID" prompt at login?

I currently have the following keys set for the default template for new users:

OSVERS=$(sw_vers -productVersion)
OSBUILD=$(sw_vers -buildVersion)

com.apple.SetupAssistant "DidSeeCloudSetup" -bool true
com.apple.SetupAssistant "LastSeenCloudProductVersion" -string ${OSVERS}
com.apple.SetupAssistant "GestureMovieSeen" -string none
com.apple.SetupAssistant "LastPreLoginTasksPerformedVersion" -string ${OSVERS} com.apple.SetupAssistant "LastPreLoginTasksPerformedBuild" -string ${OSBUILD}

I use a function in my shell to write these keys which is why you don't see the full defaults write and path to file in the above keys that i use.

Are they any other keys that mavericks needs to suppress the Apple ID prompt on first login?

Cheers,

Frank

Best answer by benleroy

Rich Trouton has a write-up on this, we were able to adapt his script to our environment fairly easily.

http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/

47 replies

bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • November 19, 2013

Is iLife 11 installed on these Macs?


Forum|alt.badge.img+4
  • Contributor
  • November 19, 2013

Bentoms,

I work with Frank, so No iLife 11 is not installed on those Macs.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • November 19, 2013

iWork?


Forum|alt.badge.img+18
  • Valued Contributor
  • November 19, 2013

what i did was go through the setup and capture the entire com.apple.SetupAssistant.plist throw it into the homes you don't want to see it. so new machine put it in the template, existing machines each users Library/Preferences
Seems to be working fine.


Forum|alt.badge.img+10
  • New Contributor
  • Answer
  • November 19, 2013

Rich Trouton has a write-up on this, we were able to adapt his script to our environment fairly easily.

http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/


Forum|alt.badge.img+5
  • Author
  • Contributor
  • November 23, 2013

Thanks benleroy that worked.


Forum|alt.badge.img+9
  • Contributor
  • January 22, 2014

I've been trying to get remove icloud / appleid login when I create new users on a Mavericks system.

I've tried to capture the settings in the com.apple.SetupAssistant.plist and to deploy them with FET / FUT in a DMG. Didn't get that to work.

I've also tried to upload the .plist for the settings as a configuration profile but I'm not getting that to work properly either. Also tried with different MCX settings, like changing the version from 10.8 to 10.9.

And I've tried Rich Troutons script from Der Flounder. Still not getting it to work. Do you have any suggestions?


Forum|alt.badge.img+33
  • Hall of Fame
  • January 22, 2014

@makander][/url,

How are you running the script? As written on my blog, the script is designed to be run as root.

In my own shop, I have this included as part of a first boot script:

https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/first_boot/10.9


Forum|alt.badge.img+9
  • Contributor
  • January 22, 2014

Hi Rich!

I ran it at imaging with Casper Image. Tried running it with the script set at 'after' and I also tried with it being set at being run at 'reboot'. When I didn't get that to work I put it in /Library/Application Support/jamf/bin/ and from there ran it with a policy. Casper runs at root if I'm not mistaken.


Forum|alt.badge.img+9
  • Contributor
  • January 23, 2014

Aha! I figured out what I was doing wrong! I had MCX set (it's always MCX's.... I should probably stop using them) for both 10.8 and 10.9 and since I forgot to scope the MCXs to the correct group it probably got both, or none, and then it didn't work!


Forum|alt.badge.img+1
  • New Contributor
  • March 5, 2014

According to the community, this should be working on 10.9:
http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/

we tested working on 10.9


Forum|alt.badge.img+1
  • New Contributor
  • March 5, 2014

According to the community, this should be working on 10.9:
http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/

we tested working on 10.9.1


Forum|alt.badge.img+5
  • New Contributor
  • March 12, 2014

I'm still having a problem with this on 10.9.1.
We're trying to go fully modular this year, and so I've created a virgin OS image using AutoDMG and created my local admin user using the "CreateUserPkg" utility. (I did create the package to place the home folder in /var, to keep it hidden from nosy students).

I've copied the script referenced above (http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/) and created a workflow in DeployStudio which has 3 steps:

  1. erase & image
  2. disable icloud script
  3. install user via package

Full Disclosure: I also tried to put a "touch" in the script to create the .AppleSetupDone file, but (for whatever reason) the touch fails, so I converted the dmg to a sparsebundle, added the .AppleSetupDone file and then converted back to a dmg.

Anyways, after imaging, I log in as my local admin and the iCloud window appears.

I held down the power button and put the computer into target disk mode. I verified that the plist is in the user template (English.lproj) and that the 3 keys exist in the file. I also determined that the Home folder doesn't yet exist (checked in /Users & in /var).

I boot back to the computer and log in again. This time it boots right to the desktop. Also, all subsequent accounts created after this don't get the iCloud prompt (just the first user). Just for kicks, I also tried re-booting after imaging, but before logging in, but that didn't change anything.

So, any idea what I'm doing wrong? Does the first user not use the template (or use a different template)? Any help would be appreciated.


stevewood
Forum|alt.badge.img+38
  • Hall of Fame
  • March 12, 2014

Try switching the order in which you create your first user and you disable iCloud. So, switch #2 and #3 in your DS workflow. See if that works.

You are creating the admin user before the User Template files have been updated, so the iCloud "skip" will not have been ready for copying to the first user's home folder.


Forum|alt.badge.img+5
  • New Contributor
  • March 12, 2014

I'll give it a try, but currently I have the script running first (to update the user template) before creating the user.

I don't see how changing the workflow to create the user before running the script will help. Especially since the home folder isn't in /Users…

I'm willing to try it however, so I'll let you know how it goes.


Forum|alt.badge.img+5
  • New Contributor
  • March 12, 2014

I'll give it a try, but currently I have the script running first (to update the user template) before creating the user.

I don't see how changing the workflow to create the user before running the script will help. Especially since the home folder isn't in /Users…

I'm willing to try it however, so I'll let you know how it goes.


Forum|alt.badge.img+5
  • New Contributor
  • March 12, 2014

I'll give it a try, but currently I have the script running first (to update the user template) before creating the user.

I don't see how changing the workflow to create the user before running the script will help. Especially since the home folder isn't in /Users…

I'm willing to try it however, so I'll let you know how it goes.


stevewood
Forum|alt.badge.img+38
  • Hall of Fame
  • March 12, 2014

Ugh, I must have been asleep when I read that originally. You have it correct: run the iCloud script first, then create the user. Sorry.

What you can try is copying the User Template into the hidden account home folder location. I cannot recall of CreateUserPkg creates the home folder files or if it copies from the Template folder. So to make sure you are getting the home folder from the Template, you could add something like this:

rm -rf /var/admin/*
    cp -R /System/Library/User Template/English.lproj/* /var/admin/
    chown -R admin:staff /var/admin

That will insure you are using the Template files and not something else.


Forum|alt.badge.img+5
  • New Contributor
  • March 12, 2014

Ok, I'll try that.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • March 12, 2014

We set ours via user level MCX.

Where is asks for "OSVers" as per @rtrouton's script.. We set it to 10.7.9, 10.8.9 & 10.9.9 & scope the MCX to smart groups based on OS version.

Seems to work. (Pretty sure that's what we do).


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • March 14, 2014

Dismiss my reply above, below is what we're doing:

Hi All,

Just checked how we've overcome this.

We modify the plist as per @rtrouton's post, but change the OS version to 10.9.9.

The package up the plist & deploy @ imaging using FEU/FUT's.

That way even the adobe install account has the setting when 1st logging in.


Forum|alt.badge.img+6
  • Contributor
  • March 20, 2014

@bentoms I am attempting the packaged method now. Question, how do you apply this for existing machines that might upgrade to Mavericks via Self Service? I tried the scripted method, and applied the plist updates just prior to the self service upgrade, but haven't had success with existing accounts. I am going to try the packaged version and see if i have better luck.

Thanks for the info.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • March 29, 2014

I didn't notice there was more replies to this post! :)

I found the fix in the end was creating a MCX key in the JSS as we set it locally at build time, but also enforce it via MCX as local accounts (out support admin account as an example) wasn't using this key only mobile accounts where.

Domain: ~/Library/Preferences/com.apple.SetupAssistant
Key: LastSeenCloudProductVersion
Value: 10.9.2

You can make the value 10.9.9 as suggested but I haven't tested it to see if there is any negative effect.


Forum|alt.badge.img+8
  • Valued Contributor
  • May 20, 2014

I did a machine profile with DidSeeCloudSetup -bool TRUE
GestureMovieSeen string none
LastSeenCloudProductVersion string 10.9.3

Worked fine for updating from 10.9.2 to 10.9.3
I did try 10.9.9 as value - this did not work in my setup.


themacdweeb
Forum|alt.badge.img+7
  • Contributor
  • June 23, 2014

to add another wrinkle:

we use rich's script as well. and it works really well for any user i create with either CreateUserPkg or via the CLI in the shell. there's just one user account for which it doesn't work:

the root user.

and please: no arguments against using the root user please, i've heard them all and we still use it here. so, i continue to experiment with finagling the root user code but, essentially it's identical to the +500 UID code, minus the path:

# variable
RootPrefs="/private/var/root/Library/Preferences"

defaults write "${RootPrefs}"/com.apple.loginwindow -dict ”
defaults write "${RootPrefs}"/loginwindow -dict ”
defaults write "${RootPrefs}"/com.apple.SetupAssistant DidSeeCloudSetup -bool TRUE
defaults write "${RootPrefs}"/com.apple.SetupAssistant GestureMovieSeen none
defaults write "${RootPrefs}"/com.apple.SetupAssistant LastSeenCloudProductVersion "${sw_vers}"

much obliged if anyone's seen this issue on the root user account. i can't get the dang thing to work. meh.

cheers n' beers,