Category filter

Require username and password at Mac login window using custom profiles

Administrators usually prefer to have users securely log in from the login screen and prevent unauthorized access to the device. By default, the login window displays all the user accounts configured on the device and the user can choose to login into their account. Using Hexnode’s Custom Configuration feature, you can deploy a configuration profile to require a username and password at the Mac login window. It necessitates users to provide complete credentials i.e., the username and the password to log in to their account.

Disclaimer:

The sample configuration profiles provided below are created using various profile creator applications.

Note:

This configuration profile is supported on macOS 10.7 or later.

Configure device to require both username and password

<?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0"> 
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>SHOWFULLNAME</key>
            <true/>
            <key>PayloadIdentifier</key>
            <string>com.mac.loginwindowpayload</string>
            <key>PayloadType</key>
            <string>com.apple.loginwindow</string>
            <key>PayloadUUID</key>
            <string>fe9ba3c5-0f1a-45c7-b6df-a5f4489695fe</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Login Window</string>
    <key>PayloadIdentifier</key>
    <string>com.mac.profile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>61bd7d63-4a4a-4b67-9112-5ceb16afb4dc</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>PayloadContent</key>

<array>

<dict>

<key>SHOWFULLNAME</key>

<true/>

<key>PayloadIdentifier</key>

<string>com.mac.loginwindowpayload</string>

<key>PayloadType</key>

<string>com.apple.loginwindow</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</array>

<key>PayloadDisplayName</key>

<string>Login Window</string>

<key>PayloadIdentifier</key>

<string>com.mac.profile</string>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</plist>

You can also switch back to list all user account on the login window by changing the value to false for the key SHOWFULLNAME in the configuration profile.

To verify the policy execution, navigate to the Action History tab for the device from the Hexnode console.

Notes:

To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors.
Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across devices.
Ensure that you do not associate conflicting configurations with the devices.
Use wildcards to fetch key values from the portal.
It is recommended to manually validate the configuration profile on a system before executing it in bulk.
Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

Need more help?

Raise a Ticket

Ask Community

Chat With us