Instructions for demoting non-approved admin users.

[Efren]

As per our discussion today, here are the instructions to scan a computer for non-approved admin accounts and demote those users to standard ones.

The instructions can be found here.

[msanchez]

If you are doing this School Wise I would Add this script as an Extension Attribute

It will detect and see if root is enabled or not :) (unless you have root turned on..then I guess its worthless)

#!/bin/bash

rootCheck=`dscl . read /Users/root | grep AuthenticationAuthority 2>&1 > /dev/null ; echo $?`


if [ "${rootCheck}" == 1 ]; then

    echo "<result>Disabled</result>"

else

    echo "<result>Enabled</result>"

fi

[Efren]

Great idea Michael!

Thanks.