Remove accounts list at boot/login (w/ FileVault Enabled)

All-
I swear I used to be able to do this back in the Leopard (OS X10.5) days, but for some reason I can't seem to find a way to do this now. What I want to do is disable OS X from displaying a list of accounts when the computer boots up. In other words, I want to force any user of the machine to enter both their login name and password. (Secure requirements for our R&D environment, etc.)
I have tried some suggestions found out on the web, including this here and using tools like Onyx here. Still no luck.
I think it may have something to do with FileVault being enabled (the whole disk encryption feature). None of these 'guaranteed fixes' that seem to work for others work on my machine, running 10.8 Mountain Lion.
Welcome any thoughts.

Just to update after checking out some alternative FDE solutions, I see most of them have taken on board the importance to (and rights of!) admins of being able to remotely reboot the Macs they support.  The vendors (e.g. Sophos) provide admins with the means (typically via CLI) to temporarily bypass the inital preboot authentication.  Not rocket science of course.
Some would say this approach potentially weakens the security, somewhat defeating the very purpose of FDE. OK, so maybe there is a greater risk in some situations, yet admins are still free to use the feature entirely at their own discretion (and are usually best placed to be aware of the actual conditions they work in).  
The important principle to me here is that the paying customers for such software should remain free to choose what they do with the product (short of breaking any licensing rules).
So come on Apple please, let's have solutions that fit real use in the real world!  A PBA bypass feature in FV2 would be such a step.
... rant over (and shameless bump!)

Similar Messages

  • How can I get an Active Direcotry account to show at login screen

    I've just Binded a computer to our Active Directory network, and when I log off, I only see the local account listed at the login screen, and it takes 5-10 seconds before the arrow comes up that lets me choose Other.
    I  want to be able to list the Active Directory account that the user should login with, is there a way to make it stick at the login screen?

    You can add extra empty toolbars if you want to see more of the persona.
    You can create extra toolbars to get extra space via "View > Toolbars > Customize" or "Firefox > Options > Toolbar Layout"
    You have to put something on a toolbar (drag a Space item onto it) before closing the Customize window because empty toolbars are automatically removed.

  • Login window only shows "Other..." account listed

    For some reason when my wife reboot her iBook running 10.3.9 the login window came up and only showed the "Other..." account listed. Her account and mine are both not visible. Nothing was changed before rebooting and we cannot login using Other even if we type our username and password.

    Here again a poster ask for help to solve a problem...he/she solves the problem and he/she post that the problem was fixed...but did not tell the rest of us how the problem was solved!!!!
    georgew
    iMac Flat Panel 1.25GHz 80GB 256MB   Mac OS X (10.3.9)  

  • Is there a way to hide users from the FileVault 2 ''main boot'' login screen?

    After your entire disk is encrypted with FileVault 2, there is a now a ''main'' boot login screen with users displayed--after a full shutdown/restart--as opposed to a ''normal'' login screen when logging users in and out after booting into FileVault 2.
    If that made any sense...there was a way to hide users from the ''normal'' login screen before by running this Terminal command:
    sudo defaults write /Library/Preferences/com.apple.loginwindow \ HiddenUsersList -array-add xxxx
    (xxxx being a short user's name)
    How do I do this now for the login screen that comes up on a full/shutdown restart?

    Not really, but you can move them from the home screen to, say, the 4th, or 10th screens. But you do need to have at least one app in every screen on the phone. My idea was to have several blanks before the screen with her apps, but the phone doesn't allow this.
    Sounds like time for the Iron Fist. ::grin:: Putting your foot down. Funny how those two descriptions don't quite match up. Our 5 year old son loves to use the iPhone, and with consistent training we have minimal trouble when he doesn't want to quit.
    Have a great trip. Joel.

  • How can I stop Preview from opening at startup even though it is not listed in my Login Items?

    When I log into one of my user accounts in my MacBook Pro (Mountain Lion), Preview is always open. The preview window itself is not open but the application name is active in the menu bar in the top left hand corner. The Preview item on the taskbar is also lit. Both of these indicate to me that Preview is running. However, I checked my Login Items repeatedly and Preview is not even listed. I also make sure that when logging out, the "Reopen windows when logging out" is unchecked. But Preview still always opens whenever I log into this particular user account -- it does not do it in any of my other user accounts. How can I fix this?

    Thanks. I got to the bottom of it by checking Login Items. I had Flux, iTunes Helper, and Dropbox. I removed the first two from Login Items, leaving only Dropbox. However, when I rebooted and logged in, Preview was still open and Flux and iTunes Helper were back in the Login Items. To find out which application is the culprit, I looked under Flux's Preferences settings and disabled it from opening at login. I was intending to do it for every application until I find the culprit, but doing so to Flux solved the problem.

  • Data target '0BBP_PO' removed from list of loadable targets; not loadable

    We have implemented the Business Content for Logistics and when we run the InfoPackage (IP) we have this message : Data target '0BBP_PO' removed from list of loadable targets; not loadable. We have Support Package 19 of BI 7.04 . The Data Target 0BBP_PO is not among the Data Targets of the IP, of course and none in the BW but why the IP takes it into account.
    Many Thanks
    Best Regards
    Amadeus

    Hi,
    This should solve your problem
    https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=925304
    Also check this thread
    'ODS' removed from list of loadable targets
    Thanks and regards,
    Srinath.

  • Duplicate accounts listed in System prefs

    Ever since I transferred my admin account from my old Mac to the new machine (MPro 2.66) I've had duplicate accounts listed in the Users tab of the System Prefs. I have two legitimate accounts, my main account and another admin account; the main account is listed again 3 times under "Other Accounts", with the same photo and login info as the original account. They do NOT have folders in the Users folder however, so it's not like they're complete duplicates; they only appear in this panel. It's not affecting anything adversely, just wondering if I can delete them without affecting my account since all the name/login info is identical.
    Thanks,
    JK

    Be careful about deleting those duplicates. You might end up deleting your home directory. Make a backup of your machine just in case. If you are wiling to take some risk then proceed.
    I played around with this and found that if you have more then one account pointing to the same home directory, then deleting any of the duplicate accounts will not impact the home directory.
    However, one of those accounts must be the *Primary Owner* of that home directory and deleting that user will delete the *Home Directory*. Not quite what you want to have happen.
    If you try to delete the Primary account you should get a prompt asking you what to do with the *Home Folder*.
    Choose *"Do not change the home folder"*
    That should preserve it incase you need to get that directory back.
    The first think I would do is see if all the duplicates are using the same *Home Folder*
    Open up Preferences
    Open up Accounts
    Ctrl-Click on one of the Duplicate Accounts and select *Advanced Options*.
    Record the *Home Directory* for each of the accounts.
    If they are the same, then you should be able to delete the duplicates without a problem. Again, if and when prompted, choose *"Do not change the home folder"*.
    If the duplicate *Home Folder* point to a different location, then you just have to figure out which is your primary account and delete the duplicates. Again, I'd play it safe and save those home folders until I knew everything was working and there wasn't anything in those folders that I wanted. Once they are gone they are gone.
    Good luck!

  • Netinfo manager users are listed on my login screen

    Recently I found unknown users showing up my login screen along with my regular accounts.
    I searched around and found them in Netinfo manager: amavisd, clamav and others are listed on my login screen. They have network backgrounds as part of their picture and the black user silhouettes.
    I am also having screen problems that look like radio waves periodically shooting across the screen. In addition, to some fine broken lines that don’t move. Sometimes the screen looks fine, but not always.
    I have no clue what I have done. I reinstalled update 10.4.9 and still no change. I am afraid to tamper with netinfo manager for fear of making things worse. Does anyone know what I’ve done or what to do to fix this?

    The login window is supposed to display users only with UID 500 or greater... sounds like that got florfed somehow.
    Try loggin in to your admin account, opening Terminal, and entering this:
    sudo defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -boolean true
    (that is all one big long line)
    You might need to reboot for it to take effect.

  • Crash, and then no mail accounts listed

    Hello,
    On behalf of my uncle:
    He was composing an email on his old iMac (about 6yrs old) running 10.4.1. Either Mail or the whole OS crashed (he doesn't remember) so he rebooted and launched Mail again.
    Now there are no accounts listed, but it appears that all the emails are still in the Mail folder in the Library.
    How should we recreate his accounts and get his old emails back in their appropriate folders? Well, I know how to create the accounts again, but how to get the emails back in their folders?
    Thanks in advance.
    Message was edited by: David Crandon1
    Message was edited by: David Crandon1

    First, Safe Boot, (holding Shift key down at bootup), & use Disk Utility from there to Repair Permissions, reboot once more.
    Then I'd backup these two Mail folders, by right clicking on them in the Finder, then choose Archive/Compress.
    Users/YourUserName/Library/Mail
    Users/YourUserName/Library/Mail Downloads
    Right click on that Mail folder, choose archive, you'll get everything in the folder, and the folder itself in a file called Mail.zip, move it to a safe place, same for the Mail Downloads folder... only the plist is separate.
    Try dragging this file to the desktop in case we need to put it back later, then logout/in...
    /Users/YourUserName/Library/Preferences/com.apple.mail.plist
    (May or may not require you to setup your account(s) again.)
    Quit Mail, then In your home folder, try moving this +folder & file+ to the Desktop then reboot...
    /Users/YourUserName/Library/Caches/Mail
    Move to the Desktop...
    /Users/YourUserName/Library/Mail/Envelope Index

  • How can i remove from list of usernames, when i l...

    I have some iuser names. How can i remove from list of usernames, when i  log in,, my other user names, so nobody will see my other user name?

    please visit the link below to learn how to delete usernames in the login or sign-in window;
    How to Delete Usernames in the Sign-in Window
    IF YOU FOUND OUR POST USEFUL THEN PLEASE GIVE "KUDOS". IF IT HELPED TO FIX YOUR ISSUE PLEASE MARK IT AS A "SOLUTION" TO HELP OTHERS. THANKS!
    ALTERNATIVE SKYPE DOWNLOAD LINKS | HOW TO RECORD SKYPE VIDEO CALLS | HOW TO HANDLE SUSPICIOS CALLS AND MESSAGES
    SEE MORE TIPS, TRICKS, TUTORIALS AND UPDATES in
    | skypefordummies.blogspot.com | 

  • Account Lists disappearing if language changed

    Dear Mates,
    i created Account lists logged in as Taiwan user with user's language as English. But then when i change User's language to Chinese-Traditional, and login, i cannot see the Account lists. Only the system default lists are visible - no custom lists.
    Please advise.
    Thanks,
    Niraj
    Edited by: user8846605 on Mar 7, 2010 8:14 PM

    Niraj, you will need to create identical lists for each active Language, keep them Public (assuming user language and user role are not overlapping sets), put all the identical lists to the applicable roles, and train users to use the 'list manager'.

  • TS4235 Is Safe-boot broken by FileVault 2?

    OK. So, I would be performing a Safe Boot, if I am unable to get through the normal boot.  Which tells me that I an unable to follow the "Turn Off FileVault 2" steps outlined.  Am I missing something?

    I believe the problem with Safe Boot and FileVault 2 was fixed in Mac OS X 10.7.4.  I am able to perform a Safe Boot to start up in Safe Mode with FileVault enabled on a Mac running Mac OS X 10.7.4. 
    In Mac OS X 10.7 through 10.7.3 it appears that one either (a) could not perform a Safe Boot with FileVault enabled or (b) that no indication of Safe Boot was provided.  I suspect (a) since a "Safe Boot" notification started appearing in the upper-right side of the Login Window when I perform a Safe Boot under Mac OS X 10.7.4.
    I believe the AppleCare Knowledge Base article "OS X Lion: How to perform a Safe Boot if FileVault 2 is enabled" only applies to Mac OS X 10.7-10.7.3.  I've sent feedback indicating that the article should be updated as it appears this problem was corrected in Mac OS X 10.7.4.
    Unfortunately, no indication of this change was provided in the "About the Mac OS X 10.7.4 Update" document. 
    Dr. Smoke
    Author, Troubleshooting Mac OS X

  • Account not in account list.  - Major problems happened to my account

    Intro
    I installed a program that really messed up my main account. I have "fixed" most of it. I will ask my specific question first since most people will not want to read a ton. I will also write what happened since that knowledge may be needed. I have multiple issues which I will post as separate threads in their relevant forum, all with this this header.
    Problem:
    When starting my machine, my main account no longer shows in the list of accounts to log into. "Other" appears and I can use that, enter my username and pword and log in that way. How can I get my account added back to the list?
    Background:
    I installed a FTP server called MySecureShell. It had a setting for the initial ftp dir which was set to /home/$user. I set it to /home/jedherzog (jedherzog is the account shortname that I use). After restarting my machine everything in my account was broken. The dock and desktop were the OSX defaults. None of my apps would run, they returned a permission error. In finder "jedherzog" was in the sidebar like I was logged into that account but if I tried to access it or the desktop I got permission errors. I ran terminal but instead of seeing the prompt jedherzog: I saw -MySecureShell(265) malloc: and a long error message and I could not use it. I ran disk utility and repair permission but it did not help. I created a new account called temp and everything worked fine in it. So I was convinced OSX was fine, it was just the account jedherzog that was messed up. So using terminal I sudo(ed) to root and looked at the /Users/jedherzog dir. The owner was set to 501 not jedherzog. So I changed it back (recursively) to jedherzog. Now, back in the jedherzog account, things look much better. My dock and desktop are restored. My apps run but all act like they are running for their first time. From what I can tell I have access to all of my files (although I got "operation not permitted" messages on a lot files when I changed the owner back to jedherzog). But my terminal still does not work (will post in a different thread). My account is not in the account list at start up). That is all that I have found wrong so far.
    Thank you for your help

    The Apple id that you created do you remember if you created with your region sellected as Canada or US. If so you can change Region directly on your device by clicking on App Store icon, Scroll to bottom and tap your app is, click view acct and change region

  • User Account List

    User Account List
    Is there a way to extract all user accounts from Request Center? Ideally into a spreadsheet that includes their names and user id's as well as whether they are active or inactive. We have a "no longer with the company process" and we need to make sure when someone leaves we make their account inactive. If I can pull a list of accounts they can be compared against a monthly list of users that are no longer with the company.
    We are using RequestCenter 2007.1.2

    We're on 2006.0.6, but as long as the DIR tables haven't changed much, this SQL should extract what you're looking for:
    select p.FirstName, p.LastName, n.LoginName, p.IsInactive
                from DirPerson p,
                     DirContactInfo c,
                     DirNetworkInfo n
               where p.Personid = n.PersonId
                 and c.Personid = n.PersonId
                 and c.ContactTypeId = 1
                 order by lastname, firstname

  • I am trying to setup iCloud account and when I login I see a popup. The Maximum number of free accounts have been activated on this iPhone. Pls, help me fix it. What other accounts? Thanks

    I am trying to setup iCloud account and when I login I see a popup. The Maximum number of free accounts have been activated on this iPhone. Pls, help me fix it. What other accounts? Thanks

    Then you'll have to use another iOS device or Mac running OS X Lion or higher to create a new account for you to use on your phone.  If you don't have one, perhaps a friend would allow you to create and account on their device (note: this will use one of their three maximum accounts).  To do this, they would need to go to Settings>iCloud, tap Delete Account (which will delete the account from their device but not from iCloud), then allow you to sign back in with your ID to create the new account.  Then tap Delete Account to delete the new account from their device, and finally, sign back in with their iCloud ID to restore their iCloud account to their device.  Then you can sign in with your ID on your phone in Settings>iCloud and use the new account.

Maybe you are looking for

  • My iPhone 4s with 5.1.1 Auto-Locked is ghosted at 1 minute and I can't change it.

    My iPhone 4s with 5.1.1 auto-locked is ghosted out and I can't change it.  This just happened and a restore doesn't help at all.  What can I do?

  • Adobe Captivate 5 Not Opening - Loading Screen Freezes

    Hello - I just installed eLearning Suite 2 and cannot open Adobe Captivate on a Windows 7 machine.All other eLearning Suite 2 programs launch and run, but Captivate freezes on the "Loading..." screen at open and will not proceed any further. I have p

  • Timestamp with fractions

    I have problems getting "current_timestamp(6)" with microseconds. (System is NT/Windows2000)) Problem: select to_char(current_timestamp,'yyyy-mm-dd-hh24.mi.ssxff6') from dual; returns: 2003-01-14-14.00.27,976000 Even with changing the format model I

  • WS14000109 N-Step limit, LastApproverName field in container not filled

    Hi, We are running BBPCRM40 SP8, We are using WS14000109 workflow, when the approver reject the shopping cart the message in the task (TS10407972) starts by &LASTAPPROVERNAME& has rejected The problem is that field is not being filled out, I can't ch

  • SALV - Hide rows based on certain condtion

    All, I have searched a lot in this forum this answer, but could not find any nearest one. I am using CL_SALV_TABLE (SALV) for an ALV report. I wanted to hide some rows based on some condition say for example in the ALV one of the column is MATNR say