Login Window

The admin host info. If present in the payload, the system displays its value in the Login Window as additional computer information. Before macOS 10.10, this string could only contain host name, system version, or IP address. After macOS 10.10, setting this key to any value allows the user to click the time area of the menu bar to toggle through various computer information values.

Default: "HostName"

Range: HostName, SystemVersion, IPAddress

The text to display in the Login Window.

If 'true', the system shows the name and password dialog. If 'false', the system displays a list of users.

Default: false

If 'true', the system shows only network and system users when showing a user list.

Default: false

If 'true', the system hides mobile account users in a user list. In some cases, mobile users show up as network users.

Default: false

If 'true', the system shows network users when showing a user list.

Default: false

If 'true', the system hides administrator users when showing a user list.

Default: false

If 'true', the system displays "Other..." when it shows a list of users.

Default: false

If 'true', the system disables the Sleep button.

Default: false

If 'true', the system disables the Restart item.

Default: false

If 'true', the system disables the Shut Down button.

Default: false

If 'true', the system disables the Restart menu item when the user is logged in.

Default: false

If 'true', the system disables the Shut Down menu item when the user is logged in.

Default: false

If 'true', the system disables the Power Off menu item when the user is logged in.

Default: false

If 'true', the system disables the Log Out menu item when the user is logged in.

Default: false

If 'true', the system disables the immediate Screen Lock functions.

Default: false

A loginwindow password will be required to login.

Default: true

The user short name for an existing user to set up auto login.

An optional user password to set up auto login. This must match the 'AutologinUsername' user's current password.

If 'true', the system disables the automatic login option when using FileVault.

Default: false

If 'true', the system disregards the '>console' special user name, which provides a command line UI.

Default: false

Allows external accounts to log in.

Default: true

If 'true', a local administrator user can bypass or disable managed preferences (MCX settings) for their login session. The device presents the user with this option at login only when the user is a local administrator, and other users are not logged in.

Default: false

Reopens windows that were open at time of logout

Default: true

Forces the name of the Mac to be set as the computer record name.

Default: true

The list of user GUIDs or group GUIDs of users that the system allows to log in. An asterisk ('*') string specifies all users or groups. This only applies to network accounts and mobile accounts.

A user or group GUID.

The list of user GUIDs or group GUIDs of users that the system disallows to log in. This list takes priority over the list in the 'AllowList' key. This only applies to network accounts and mobile accounts.

A user or group GUID.

Permit only local users to log in. Network users won't be allowed to log in.

Local users are forced to use any available workgroup settings.

If users are part of a nested workgroup, only the settings of the user's workgroup are enforced.

If users are part of a nested workgroup, all nested workgroup settings are enforced.

If the workgroup has a specific dialog, that dialog is shown when users log in.

Enable or disable the "Change Password…" button in the Users & Groups preference pane.

If specified, allows a certain number of retries until the device shows a password hint. The device shows no hints if set to a value of 0.

Default: 0

If 'true', the system shows the Input Menu in the Login Window.

Default: false

Hides users defined in the list from the login window under the Other button

If 'true', the system allows the user to select WiFi networks at login or unlock.

Default: false

If 'true', the system allows use of the captive WiFi portal at login or unlock.

Default: false