Hide certain usernames from Mac OS X logon screen window when the login window is displayed as the List of users

How can certain usernames be hidden from the Mac OS X logon screen window when the login window is displayed as a list of users?

We want to keep the list of users view (and not switch to the "Name and password" option and want to simply be able to hide certain usernames from appearing in this list.

How can this be done?

This needs to be done within a macOS High Sierra version 10.13.4 OS.
IT GuyNetwork EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian DayhoffSenior Full Stack DeveloperCommented:
You can't mix the two. You either list everyone or list no one.

You can arbitrarily determine account visibility with OSX server, but this functionality is based on authentication against an active account, which is not relevant at the login screen.
0
serialbandCommented:
You'll have to go to the command line with an admin user.
sudo dscl . create /Users/hiddenuser IsHidden 1
0
IT GuyNetwork EngineerAuthor Commented:
serialband,

What is the exact context for this command for a local Mac user account named msmith?
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

serialbandCommented:
sudo dscl . create /Users/msmith IsHidden 1
0
IT GuyNetwork EngineerAuthor Commented:
serialband,

I have run this command for two separate users on my Mac OS X and it hasn't hidden these users from the main Mac OS X logon screen.

The only thing it has done is hidden these usernames from the list of the Mac OS X Users & Groups (which used to appear under the "Other Users" field (see below).

Is there another command or method that can be used to hide certain usernames from the main Mac OS X logon screen?

Mac-OS-X-users.png
0
serialbandCommented:
Did you also have Filvault enabled?
0
IT GuyNetwork EngineerAuthor Commented:
Yes FireVault is enabled on this Mac.

Is there any way of hiding certain usernames from Mac OS X logon screen window when the login window is displayed as the List of users while the Mac has FireVault enabled?

If so how can this be done?
0
serialbandCommented:
Filevault has its own login screen.  You can't disable it.  The only way to remove a user from Filevault.
0
serialbandCommented:
Toggling the user account to IsHidden basically hides the account from the user.  You can also hide it another way, but they only hide it from the Apple GUI.  You can't hide it from the command line tools or from Filevault.

Again, there's no way to change the Filevault login screen to username and password or hide the account that has been given Filevault decryption access.  That's overlayed on top of the regular authentication login screen and if the password matches(by default) then it passes the password through.

The only way to avoid it is to create a "dummy" standard user account that can decrypt the Filevault disk, but change the login password to not match the Filevault password, so that it won't log in.  You will still have that dummy account on the Filevault login screen.  You can't remove or hide the Filevault user.

You will then use that original password as the filevault password to decrypt the disk.  When the password doesn't match, you will then be brought to the User Authentication login screen.  The user can then be hidden from the screen listing, or you can switch to the Username and Password.  Alternatively, you save the Filevault key and use that as the login, and hide the other users.  I tried that for a few years on a previous computer, but didn't bother to set it up for the new one.  This is the only way to "hide" accounts on the Filevault login screen, don't add them to Filevault.

Here's the command to remove a user from filevault without turning it off, just be sure it's not the last account.
sudo fdesetup remove msmith
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
IT GuyNetwork EngineerAuthor Commented:
If anyone ever discovers a way of doing this please update this posting.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Apple Software

From novice to tech pro — start learning today.