Login Window
com.apple.loginwindow
The payload that configures Login Window behavior.
Configuration Keys (37)
| Key | Type | Title |
|---|---|---|
PFC_SegmentedControl_0required | string | — |
AdminHostInfoThe admin host info. If present in the payload, the system displays its value in the Login Window as additional computer information. Before macOS 10.10, this string could only contain host name, system version, or IP address. After macOS 10.10, setting this key to any value allows the user to click the time area of the menu bar to toggle through various computer information values. Default: "HostName" Range: HostName, SystemVersion, IPAddress | string | Show additional information in the menu bar |
LoginwindowTextThe text to display in the Login Window. | string | Banner |
SHOWFULLNAMEIf 'true', the system shows the name and password dialog. If 'false', the system displays a list of users. Default: false | boolean | Display login window as |
HideLocalUsersIf 'true', the system shows only network and system users when showing a user list. Default: false | boolean | Show local users |
HideMobileAccountsIf 'true', the system hides mobile account users in a user list. In some cases, mobile users show up as network users. Default: false | boolean | Show mobile accounts |
IncludeNetworkUserIf 'true', the system shows network users when showing a user list. Default: false | boolean | Show network users |
HideAdminUsersIf 'true', the system hides administrator users when showing a user list. Default: false | boolean | Show Mac computer's administrator accounts |
SHOWOTHERUSERS_MANAGEDIf 'true', the system displays "Other..." when it shows a list of users. Default: false | boolean | Show "Other" |
SleepDisabledIf 'true', the system disables the Sleep button. Default: false | boolean | Show the Sleep button |
RestartDisabledIf 'true', the system disables the Restart item. Default: false | boolean | Show the Restart button |
ShutDownDisabledIf 'true', the system disables the Shut Down button. Default: false | boolean | Show the Shut Down button |
RestartDisabledWhileLoggedInIf 'true', the system disables the Restart menu item when the user is logged in. Default: false | boolean | Disable the Restart menu item while logged in |
ShutDownDisabledWhileLoggedInIf 'true', the system disables the Shut Down menu item when the user is logged in. Default: false | boolean | Disable the Shut Down menu item while logged in |
PowerOffDisabledWhileLoggedInIf 'true', the system disables the Power Off menu item when the user is logged in. Default: false | boolean | Disable the Power Off menu item while logged in |
LogOutDisabledWhileLoggedInIf 'true', the system disables the Log Out menu item when the user is logged in. Available in macOS 10.13 and later. Default: false | boolean | Disable the Log Out menu item while logged in |
DisableScreenLockImmediateIf 'true', the system disables the immediate Screen Lock functions. Available in macOS 10.13 and later. Default: false | boolean | Disable the immediate Screen Lock function |
com.apple.login.mcx.DisableAutoLoginClientA loginwindow password will be required to login. Default: true | boolean | Disable automatic login if FileVault is disabled |
AutologinUsernameThe user short name for an existing user to set up auto login. | string | — |
AutologinPasswordAn optional user password to set up auto login. This must match the 'AutologinUsername' user's current password. | string | — |
DisableFDEAutoLoginIf 'true', the system disables the automatic login option when using FileVault. Default: false | boolean | Disable automatic login if FileVault is enabled |
DisableConsoleAccessIf 'true', the system disregards the '>console' special user name, which provides a command line UI. Default: false | boolean | Enable >console login |
EnableExternalAccountsAllows external accounts to log in. Default: true | boolean | Enable external accounts |
AdminMayDisableMCXAllows Mac administrators on the computer to refresh or disable the management features. Default: true | boolean | Mac computer administrators may refresh content or disable management |
TALLogoutSavesStateReopens windows that were open at time of logout Default: true | boolean | Reopen windows when logging back in |
UseComputerNameForComputerRecordNameForces the name of the Mac to be set as the computer record name. Default: true | boolean | Set Mac computer name to computer record name |
AllowListThe list of user GUIDs or group GUIDs of users that the system allows to log in. An asterisk ('*') string specifies all users or groups. This only applies to network accounts and mobile accounts. | array | Allowed Users or Groups |
DenyListThe list of user GUIDs or group GUIDs of users that the system disallows to log in. This list takes priority over the list in the 'AllowList' key. This only applies to network accounts and mobile accounts. | array | Denied Users or Groups |
LocalUserLoginEnabledPermit only local users to log in. Network users won't be allowed to log in. | boolean | Local-only users may log in |
LocalUsersHaveWorkgroupsLocal users are forced to use any available workgroup settings. | boolean | Local-only users use available workgroup settings |
FlattenUserWorkgroupsIf users are part of a nested workgroup, only the settings of the user's workgroup are enforced. | boolean | Ignore workgroup nesting |
CombineUserWorkgroupsIf users are part of a nested workgroup, all nested workgroup settings are enforced. | boolean | Combine available workgroup settings |
AlwaysShowWorkgroupDialogIf the workgroup has a specific dialog, that dialog is shown when users log in. | boolean | Always show workgroup dialog during log in |
ChangePasswordDisabledEnable or disable the "Change Password…" button in the Users & Groups preference pane. | boolean | Allow user to change password |
RetriesUntilHintNumber of tries until password hint is shown (0 = disable password hints). | integer | Show password hints after failed attempts |
showInputMenuIf 'true', the system shows the Input Menu in the Login Window. Default: false | boolean | Show input menu in login window |
HiddenUsersListHides users defined in the list from the login window under the Other button | array | Hidden Users List |
AllowListItemrequiredA user or group GUID. | string | User or Group GUID |
DenyListItemrequiredA user or group GUID. | string | User or Group GUID |
username | string | Username |