Centrify - Securing the Cross Platform Data Center
Showing results for 
Search instead for 
Do you mean 

The Centrify Apple Guys

Creating a local Mac administrator account that is invisible

by Centrify Advisor IV on ‎03-23-2012 04:21 PM - last edited on ‎01-02-2014 11:13 AM by Centrify Master V

***************************************************

Note:

The method for creating invisible accounts has since been updated to work across OS upgrades. Please see this article here for the new method:

 

http://community.centrify.com/t5/The-Centrify-Apple-Guys/How-to-create-a-Hidden-Local-Admin-account-...

 

***************************************************

 

Best practices for integrating with AD suggest that you keep a local administrator account on your Mac. It's possible to create this local administrator account and keep it hidden from users.

 

When you unbundle a new Mac, you'll need to create an admin account anyway. You use this to install Centrify and bind to Active Directory.

 

When you create a local admin account, give it the name ".admin" (with a period in front).

 

It won't show up in the list of users under System Preferences -> Users and Groups

 

Screen Shot 2012-03-23 at 4.02.03 PM.png

 

 

 

When the regular AD user logs in, it won't show up in the Users and Groups display.

 

 

 

 

Screen Shot 2012-03-23 at 4.11.34 PM.png

 

However, when you log in with the hidden admin account, it will show up in Users and Groups. 

 

Screen Shot 2012-03-23 at 4.15.58 PM.png

 

Thanks to Steven H for the tip.

 

 

About the Author