قالب وردپرس درنا توس
Home / Mac / How to create a hidden admin account in MacOS

How to create a hidden admin account in MacOS



  istock-901609212datasecurity.jpg

Photo: Sarayut Tanerus, Getty Images / iStockphoto

Being in IT, it is natural to be concerned about the state of our network and the devices on them, but also the expressive "weakest link in the chain" ̵

1; the end-user's account and access. Unfortunately, it is not yet an effective stop measure to address all of an organization's security issues.

The best bet is still to save on different types of security so that the weaknesses of one are captured and successful by the next in line. Concepts such as security through obscurity or hiding things rarely work well to swing a particular threatening actor, but that is not to say that when used in conjunction with other policies, it will not add security to your environment.

SE: Information Security Policy Download (Tech Pro Research)

Create a hidden administrative account in MacOS

This is the essence of this prospectus, creating a hidden administrative account in MacOS. It is not intended to discourage individuals who wish to access or attempt to compromise the local admin account on their Macs. When used in conjunction with other security routines, such as asserting the operating system, using firmware passwords, and implementing profile management policies, end users are further limited to what they can do, and available opportunities for informal users to access administrative level accounts are significantly reduced.

Note : For the process to work, the hidden account to be created cannot exist before.

First, log on to the computer with an admin level account. Launch Terminal and type the following command, authenticate when prompted:

  sudo standard type /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES 

Go to Settings settings and groups and create administration account as you normally would. Right-click the newly created user account and select Advanced Options … from the pop-up menu ( Figure A ).

  201905-figure-b.jpg

Figure A: Advanced options.

From the advanced menu we will change two pieces of information: UserID and Home Directory. For UserID, enter a number below 500. Remember that this number must be unique to each user. Under Home Directory, enter a new path to save the user's home directory that is not located in the regular location "/ Users". When both have been changed, click OK to save ( Figure B ).

  201905-figure-c.jpg "data-original =" https://tr1.cbsistatic.com/ hub / i / r / 2019/02/10 / 43291dce-c302-4e9b-a76a-604b3d2fff57 / resize / 770x / 60c3b3fd2070e963a5f29aaa82f432c4 / 201905-figure-c.jpg

The account has been created. However, we need to make a new change to the system by clicking on Login Options and ticking the radio button next to Name and Password under the View Login window as section ( Figure C ).

  201905-figure -d.jpg "data-original =" https://tr4.cbsistatic.com/hub/i/r/2019/02/10/883f1a3d-a72b-41e9-bda6-4f4c76c03ce6/resize/ 770x / 578526552153366b47ad47c494c24120 / 201905- figure-d.jpg

To confirm that the new account is hidden, close System Preferences and return to the Preferences Users & Groups after starting it again. The account should now be hidden from view and from the login window.

See also


Source link