Guest account prompting for EFI Password

[jalbert]

We use EFI passwords on our devices, and have guest account access enabled.

The issue we have just discovered is if you log into the guest account, it reboots and you get the EFI Password screen, which our users don't know.

What is causing this and how can we resolve this?

Thanks

[jalbert]

Apparently FileVault may also affect this, which we also use. Anybody know of a way to have EFI and FileVault enabled at the same time, and allow guest access? We want guest access incase the unit is stolen so a user can join a network and we can track it.

[sshort]

Yeah, FileVault is the bigger issue here I think. If the goal is to have a somewhat "standard" user account that guests can log into, then FileVault needs to be disabled. With FV on, the expected behavior is the Mac reboots to an EFI/Recovery-level type environment that only runs Safari.

So you can have these configurations:

Guest on/FV off/EFI on = standard user account experience in Guest user
Guest on/FV on/EFI off = reboots to Safari-only environment
Guest on/FV on/EFI on = reboots to EFI password, then user is passed to Safari-only environment

[jalbert]

Thanks @sshort, much appreciated.

[rpayne]

Yup, it's because the guest is not FV enabled so you get a prompt to authenticate