Category filter
Require username and password at Mac login window using custom profiles
Administrators usually prefer to have users securely log in from the login screen and prevent unauthorized access to the device. By default, the login window displays all the user accounts configured on the device and the user can choose to login into their account. Using Hexnode’s Custom Configuration feature, you can deploy a configuration profile to require a username and password at the Mac login window. It necessitates users to provide complete credentials i.e., the username and the password to log in to their account.
Configure device to require both username and password
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 |
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>SHOWFULLNAME</key> <true/> <key>PayloadIdentifier</key> <string>com.mac.loginwindowpayload</string> <key>PayloadType</key> <string>com.apple.loginwindow</string> <key>PayloadUUID</key> <string>fe9ba3c5-0f1a-45c7-b6df-a5f4489695fe</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </array> <key>PayloadDisplayName</key> <string>Login Window</string> <key>PayloadIdentifier</key> <string>com.mac.profile</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>61bd7d63-4a4a-4b67-9112-5ceb16afb4dc</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist> |
You can also switch back to list all user account on the login window by changing the value to false for the key SHOWFULLNAME in the configuration profile.
To verify the policy execution, navigate to the Action History tab for the device from the Hexnode console.