Under Home directory, enter new path to store the user’s home directory that is not located in the usual location “/Users”. Bear in mind that this number must be unique for each user. Right-click on the newly created user account and select Advanced Options…from the context menu ( Figure A).įrom the advanced menu, we will modify two bits of information: UserID and Home directory. Go to the Users & Groups preferences pane and create the admin account as you normally would. Sudo defaults write /Library/Preferences/ Hide500Users -bool YES Launch Terminal and enter the following command, authenticating when prompted to do so: Note: For the process to work, the hidden account to be created cannot previously exist.įirst, log in to the computer with an admin-level account. When used alongside other security best practices, such as hardening the OS, applying firmware passwords, and implementing Profile Manager policies, end-users are further limited in what they can do and the avenues available for casual users to gain access to administrative-level accounts is significantly reduced.
It’s not intended to single-handedly thwart anyone looking to gain access to or attempt to compromise the local admin account on your Macs. That’s the essence of this pro tip–creating a hidden administrative account in macOS. SEE: Information security policy template download (Tech Pro Research) Create a hidden administrative account in macOS Concepts like security through obscurity, or hiding things seldom work well to sway a determined threat actor, but it’s not to say that when used in conjunction with other policies it won’t add to the security posture of your environment. The best bet is still to layer on different types of security so that the weaknesses of one are caught and successfully mitigated by the next one in line. ICloud Usage Policy (TechRepublic Premium) Why I’m buying Apple’s new M1-powered iPad Air How to share your screen in Google Meet for macOS
Unfortunately, there is yet to be an effective stop-gap measure to solve all of an organization’s security woes. Keep local administrative accounts from being a malicious user's target by creating an invisible account.īeing in IT it’s natural to be concerned with the state of our network and the devices on them, but also the proverbial “weakest link in the chain” –the end-user’s account and access. How to create a hidden admin account in macOS
0 kommentar(er)
