Missing newly created user account on a locked MacSolved

Participant
Discussion
2 weeks ago

I have a Mac enrolled in Hexnode UEM that is in a locked state due to an unknown password for the sole user account. FileVault is enabled, but the recovery key was not escrowed. I used the Create User Account remote action to add a new user account.

The action was marked as successful in the Action History. However, after rebooting the device, the newly created user account didn’t appear on the login screen – only the old user account was present. The new account also doesn’t show up in the Local Accounts section of the Manage tab. Can someone explain why the Create User Account action was successful, but the newly created account is not visible/functional on the device?

Replies (3)

Marked SolutionPending Review
Participant
2 weeks ago
Marked SolutionPending Review

Hi @edmund, did you grant a Secure Token to the new user account during its creation? If not, the issue could be due to the lack of a Secure Token. Without it, the new account might not appear on the login screen after a reboot.

Marked SolutionPending Review
Participant
1 week ago
Marked SolutionPending Review

@finn! I didn’t select the Grant Secure Token option when creating the new account. Is that why it’s not appearing on the device?

Marked SolutionPending Review
Hexnode Expert
4 days ago
Marked SolutionPending Review

Hi @edmund! Finn’s observation is correct.

And, when creating a new user account on a macOS device with FileVault enabled, it is essential to grant a Secure Token using an existing admin account that already has Secure Token privileges. Without this, the newly created account will become inaccessible/invisible on the login screen, which is likely why you’re not seeing the new user account.

Option to grant secure token when creating a new user account

Additionally, it is not recommended to create a user account on a locked device, especially when the FileVault recovery key isn’t escrowed.

I hope this clears up the query. Thanks for reaching out to the Hexnode community!

Regards,
Ben Clarke
Hexnode UEM

Save