Incorporate an extension attribute to local mac user

[jaa-lbl]

We're trying to automatically create a local admin user and set a password that incorporates an extension attribute to the password so that passwords are never the same on the computers that we scope to. Is this functionality available in Jamf Pro? Or do we need to write our own script to change the password after the user creation policy is applied, which is less secure since part of the password will be in plain text on the script?

[sdagley]

@jaa-lbl You might want to take a look at the following tool for implementing a Windows LAPS like feature for macOS: https://github.com/joshua-d-miller/macOSLAPS/wiki

[jaa-lbl]

That's very interesting! I wonder if there is a way to store the extension attributes we want to use in a plist somewhere and use that information to set the password.

Thanks for sharing!