Maybe I misunderstood... It's build 17B1002 that is affected, yes? If so, why would I want to install a security update that opens a great big hole on my systems? Currently, none of us running 17B48 in my office (there are four of us out of 120 deployed machines running High Sierra) seem to be affected by this issue ... or at least we're unable to replicate it.
The best thing would be for Apple to publish it as a standalone download from a posting on their support site. I don't see one out there yet, but hopefully they will do that soon.
FWIW, it looks like the the receipt for the update is
For those looking for reporting around it being installed, you can use that receipt for a smart group. Probably need to give machines time to check in for inventory to get a real idea, though.
Agree, since installing the second release of the Security Update 2017-001, which results in 10.13.1 build 17B1003, our local admin account can not create standard or admin accounts via System Preferences >> Users & Groups.
Also fails when logging in with a mobile (AD) Admin account and trying the same steps to create an account.
Both types of accounts can be successfully added using Casper Remote (9.101.0).
@donmontalvo How come I can never see the build number in my "About This Mac" windows?
@rich.thomas I can't create an admin user through the System Preferences either, but I was able to login with an LDAP account that's in the admin group and it made the account an admin. So it appears to be just something with the GUI.
What are people installing to get 17B1003? I've re-downloaded 2017-001 for 10.13.1 and it still installs 17B1002. The other 2017-001 update only works for 10.13.0 it appears.
The receipt for the second update is
com.apple.pkg.update.os.10.13.1Supplemental.17B1003. I'm not sure if there is a separate update for 10.13 (meaning, if the update installer is unique to 10.13 with a unique receipt name) as I haven't seen a 10.13.0 machine with any comparable receipt listed so far. If someone has a 10.13.0 machine that has gotten a security update and wants to share the receipt name I'm sure that'd help folks out.