Disable "Restart and show password reset options"

[randyg]

Hi! Looking for a way to disable the "Restart and show password reset options" as mentioned in https://support.apple.com/en-us/HT202860

We have firmware passwords set on our laptops (by policy the firmware password is only known to IT) and when a user clicks that, it gets stuck at the firmware password screen. Reboots go right back to the firmware screen. Unfortunately, with all the work from home, we can't just stop by to fix it. 

[mm2270]

Dear lord, I wish there was a way to disable this. I've had the same unfortunate experience. I had 3 Mac users in India lock their Macs this way, and I'm in the U.S. To say that it was a royal pain in the arse to deal with this is a huge understatement.

What galls me is that there is essentially no getting out of this locked state save for entering the firmware password. I don't know why Apple didn't provide some key command to make the Mac boot back up from its internal boot partition if this should happen. But they didn't. And to my knowledge there's no way to disable that infernal message that cheerfully encourages users to unwittingly brick their Macs.

[Norman89]

A bit more background:

• The Password Policy payload sets maximum number of failed attempts, as well as minimum requirements for length and complexity.
• Prior to the initial enrollment, the two user accounts had passwords that didn't meet the criteria of the policy, and were prompted to be reset on first login after enrollment.
• Because of this issue, I ended up removing the MDM profiles (via the JSS), and resetting the passwords to meet the criteria, then re-enrolling.

Anything else I'm forgetting?

[mm2270]

I'm starting to wonder if there's some bug in the Jamf forum. The last 2 posts seem to be related to a different thread/topic, not the one at the top. Can someone at Jamf check to make sure posts aren't being put into the wrong thread?

[Natalieportman]

Greetings to all. I frequently read your articles and actively take part in this discussion. Visit this website 

Totul Despre McDonald’s Meniu

[Milestonecard]

I understand the frustration with the 'Restart and show password reset options' causing issues for remote users. Unfortunately, Apple doesn’t provide a direct way to disable this option. A possible workaround is ensuring users are aware not to select this option to avoid triggering the firmware password screen.

Alternatively, consider using Apple Configurator or MDM (if available in your environment) to manage firmware passwords and recovery settings remotely. This might help streamline fixes in work-from-home scenarios.

Hope this helps!"

please note that if you have any query you may contact us at Mymilestonecard