Find local accounts that do no have a password

[cglaske]

Morning everyone,

Does anyone know of a way to create an extension attribute to find local accounts that currently do not have a password set, or know of a script that can find that info?

Thanks!

[tlarkin]

Not sure if this is a definitive answer or not, but if you run this dscl command against the Guest account you get no auth type back

dscl . read /Users/guest AuthenticationAuthority
AuthenticationAuthority: ;basic; ;DisabledUser;

Where as if you run it past an actual user you will get some shadowhash and salt info back.