Posted on 11-10-2023 04:32 AM
Hello All,
I am looking for a solution to display end user's account after restarting the mac, we have total three local accounts including user's account, I want to make the end user's account at display login screen so when user will restart the mac user will put his password only to login. Others two accounts will be hidden in login screen, any way is there in JAMF? User's account is having 503 UID others two are UID 501 and 502
Posted on 11-10-2023 12:33 PM
You can set the 'IsHidden' flag for each user. I use the following to set the Apple Remote Desktop user to hidden (the username is passed to the script as a parameter variable $4):
dscl . create /Users/$4 IsHidden 1
You can also hide the 'Other...' button from the login window:
defaults write /Library/Preferences/com.apple.loginwindow SHOWOTHERUSERS_MANAGED -bool false
Posted on 11-10-2023 12:44 PM
Do you want me to run the command in a policy as trigger startup or create .sh file and add in CP with login payload to execute as login/out hook?
Posted on 11-10-2023 12:49 PM
In my use case, I'm running a policy (typically once/computer is frequent enough) to create a user and then configure Apple Remote Desktop for that user. If your devices are deployed 1:1, I would think that hiding the other users (local admin users?) 501 & 502 could be done once when the device is set up.
Posted on 11-10-2023 12:52 PM
But this command doesnt work. If i run and restart the mac it still popup in login screen
Posted on 11-10-2023 02:03 PM
By "login screen", do you mean the FileVault login screen? Are these accounts enabled for unlocking the disk?
Posted on 11-10-2023 09:09 PM
Yes FV login screen, those accounts are one is PreStage account defined in configuration and another one is management account getting created at the time of enrollment. And user put his ID to create his account to log into the mac to use it. I just want to make a display to login screen for user's account only not others two. Can I do it from a config profile with login payload or I need to use command line yet the command line doesnt work.