Instructions for demoting non-approved admin users.

Efren
New Contributor

As per our discussion today, here are the instructions to scan a computer for non-approved admin accounts and demote those users to standard ones.

The instructions can be found here.

2 REPLIES 2

msanchez
New Contributor III

If you are doing this School Wise I would Add this script as an Extension Attribute

It will detect and see if root is enabled or not πŸ™‚ (unless you have root turned on..then I guess its worthless)

#!/bin/bash

rootCheck=`dscl . read /Users/root | grep AuthenticationAuthority 2>&1 > /dev/null ; echo $?`


if [ "${rootCheck}" == 1 ]; then

    echo "<result>Disabled</result>"

else

    echo "<result>Enabled</result>"

fi

Efren
New Contributor

Great idea Michael!

Thanks.