Login Window

com.apple.loginwindow

The payload that configures Login Window behavior.

macOS

macOS 10.7+combined

Configuration Keys (37)

Key	Type	Title	Description	Default	Range
`PFC_SegmentedControl_0`required	string	—	—	—	—
`AdminHostInfo`	string	Show additional information in the menu bar	The admin host info. If present in the payload, the system displays its value in the Login Window as additional computer information. Before macOS 10.10, this string could only contain host name, system version, or IP address. After macOS 10.10, setting this key to any value allows the user to click the time area of the menu bar to toggle through various computer information values.	"HostName"
`LoginwindowText`	string	Banner	The text to display in the Login Window.	—	—
`SHOWFULLNAME`	boolean	Display login window as	If 'true', the system shows the name and password dialog. If 'false', the system displays a list of users.	false	—
`HideLocalUsers`	boolean	Show local users	If 'true', the system shows only network and system users when showing a user list.	false	—
`HideMobileAccounts`	boolean	Show mobile accounts	If 'true', the system hides mobile account users in a user list. In some cases, mobile users show up as network users.	false	—
`IncludeNetworkUser`	boolean	Show network users	If 'true', the system shows network users when showing a user list.	false	—
`HideAdminUsers`	boolean	Show Mac computer's administrator accounts	If 'true', the system hides administrator users when showing a user list.	false	—
`SHOWOTHERUSERS_MANAGED`	boolean	Show "Other"	If 'true', the system displays "Other..." when it shows a list of users.	false	—
`SleepDisabled`	boolean	Show the Sleep button	If 'true', the system disables the Sleep button.	false	—
`RestartDisabled`	boolean	Show the Restart button	If 'true', the system disables the Restart item.	false	—
`ShutDownDisabled`	boolean	Show the Shut Down button	If 'true', the system disables the Shut Down button.	false	—
`RestartDisabledWhileLoggedIn`	boolean	Disable the Restart menu item while logged in	If 'true', the system disables the Restart menu item when the user is logged in.	false	—
`ShutDownDisabledWhileLoggedIn`	boolean	Disable the Shut Down menu item while logged in	If 'true', the system disables the Shut Down menu item when the user is logged in.	false	—
`PowerOffDisabledWhileLoggedIn`	boolean	Disable the Power Off menu item while logged in	If 'true', the system disables the Power Off menu item when the user is logged in.	false	—
`LogOutDisabledWhileLoggedIn`	boolean	Disable the Log Out menu item while logged in	If 'true', the system disables the Log Out menu item when the user is logged in. Available in macOS 10.13 and later.	false	—
`DisableScreenLockImmediate`	boolean	Disable the immediate Screen Lock function	If 'true', the system disables the immediate Screen Lock functions. Available in macOS 10.13 and later.	false	—
`com.apple.login.mcx.DisableAutoLoginClient`	boolean	Disable automatic login if FileVault is disabled	A loginwindow password will be required to login.	true	—
`AutologinUsername`	string	—	The user short name for an existing user to set up auto login.	—	—
`AutologinPassword`	string	—	An optional user password to set up auto login. This must match the 'AutologinUsername' user's current password.	—	—
`DisableFDEAutoLogin`	boolean	Disable automatic login if FileVault is enabled	If 'true', the system disables the automatic login option when using FileVault.	false	—
`DisableConsoleAccess`	boolean	Enable >console login	If 'true', the system disregards the '>console' special user name, which provides a command line UI.	false	—
`EnableExternalAccounts`	boolean	Enable external accounts	Allows external accounts to log in.	true	—
`AdminMayDisableMCX`	boolean	Mac computer administrators may refresh content or disable management	Allows Mac administrators on the computer to refresh or disable the management features.	true	—
`TALLogoutSavesState`	boolean	Reopen windows when logging back in	Reopens windows that were open at time of logout	true	—
`UseComputerNameForComputerRecordName`	boolean	Set Mac computer name to computer record name	Forces the name of the Mac to be set as the computer record name.	true	—
`AllowList`	array	Allowed Users or Groups	The list of user GUIDs or group GUIDs of users that the system allows to log in. An asterisk ('*') string specifies all users or groups. This only applies to network accounts and mobile accounts.	—	—
`DenyList`	array	Denied Users or Groups	The list of user GUIDs or group GUIDs of users that the system disallows to log in. This list takes priority over the list in the 'AllowList' key. This only applies to network accounts and mobile accounts.	—	—
`LocalUserLoginEnabled`	boolean	Local-only users may log in	Permit only local users to log in. Network users won't be allowed to log in.	—	—
`LocalUsersHaveWorkgroups`	boolean	Local-only users use available workgroup settings	Local users are forced to use any available workgroup settings.	—	—
`FlattenUserWorkgroups`	boolean	Ignore workgroup nesting	If users are part of a nested workgroup, only the settings of the user's workgroup are enforced.	—	—
`CombineUserWorkgroups`	boolean	Combine available workgroup settings	If users are part of a nested workgroup, all nested workgroup settings are enforced.	—	—
`AlwaysShowWorkgroupDialog`	boolean	Always show workgroup dialog during log in	If the workgroup has a specific dialog, that dialog is shown when users log in.	—	—
`ChangePasswordDisabled`	boolean	Allow user to change password	Enable or disable the "Change Password…" button in the Users & Groups preference pane.	—	—
`RetriesUntilHint`	integer	Show password hints after failed attempts	Number of tries until password hint is shown (0 = disable password hints).	—	—
`showInputMenu`	boolean	Show input menu in login window	If 'true', the system shows the Input Menu in the Login Window.	false	—
`HiddenUsersList`	array	Hidden Users List	Hides users defined in the list from the login window under the Other button	—	—
`AllowListItem`required	string	User or Group GUID	A user or group GUID.	—	—
`DenyListItem`required	string	User or Group GUID	A user or group GUID.	—	—
`username`	string	Username	—	—	—