Ask Different (Apple)
Q&A for power users of Apple hardware and software
Latest Questions
78
votes
6
answers
557416
views
I don't have administrator account on my mac
On my mac I have 2 accounts and the both are normal account. So in this moment I don't have a Administrator account, only one that was in the past a administrator, but now is not. How I can have again a Administrator account?
On my mac I have 2 accounts and the both are normal account. So in this moment I don't have a Administrator account, only one that was in the past a administrator, but now is not.
How I can have again a Administrator account?
João Touças
(781 rep)
Dec 31, 2014, 02:18 PM
• Last activity: Jul 4, 2025, 12:06 AM
3
votes
2
answers
2413
views
How to remove unremovable network drive login item?
When I reboot my MacBook Pro (11.3 now, but it's been happening for years) the reboot pauses for about a minute, after which it tells me there was a problem connecting to a certain defunct network drive. It doesn't exist and never will. [
The usual advice is to locate the offending entry in Login Items and remove it. I wish I could. Below you'll see a screenshot of my Login Items, with what I presume to be the offender. It cannot be selected (the checkbox is disabled) so it cannot be removed.
You can also see I'm an Admin and the padlock is unlocked. Holding shift during login didn't help at all. How can I get rid of this?
The usual advice is to locate the offending entry in Login Items and remove it. I wish I could. Below you'll see a screenshot of my Login Items, with what I presume to be the offender. It cannot be selected (the checkbox is disabled) so it cannot be removed.
You can also see I'm an Admin and the padlock is unlocked. Holding shift during login didn't help at all. How can I get rid of this?
Nik M
(71 rep)
May 27, 2021, 10:20 AM
• Last activity: Jun 9, 2025, 03:03 PM
3
votes
3
answers
1034
views
Terminal Help - Reverting a Standard Mac user account back to an admin account?
I've been doing a Jamf now roll out, but have mucked up the user account by using this terminal command: ``` sudo dseditgroup -o edit -d UserName -t user admin ``` Which basically made the admin account switch to a standard user account. I now need to revert back the standard user account to admin,...
I've been doing a Jamf now roll out, but have mucked up the user account by using this terminal command:
sudo dseditgroup -o edit -d UserName -t user admin
Ginger B
(31 rep)
Sep 13, 2022, 03:48 PM
• Last activity: Jun 6, 2025, 07:01 AM
2
votes
1
answers
200
views
Admin authentication not working on Big Sur
Anything that I am trying to do that requires admin user access is failing. Whether it be moving an app to the trash or making a change to settings (app settings or system settings) it isn't working. The normal window pops up that has me enter my password but when I hit `return` or select the `OK` b...
Anything that I am trying to do that requires admin user access is failing. Whether it be moving an app to the trash or making a change to settings (app settings or system settings) it isn't working. The normal window pops up that has me enter my password but when I hit
return or select the OK box on the auth window everything just greys out and nothing happens. If I'm deleting an app another box pops up showing progress but it just hangs. There appears to be no way to close the Enter your password to allow this. windows so I have several hanging on my desktop.
Has anyone seen this yet/know why its happening?
Adam Lyons
(21 rep)
Dec 1, 2020, 03:41 PM
• Last activity: Apr 15, 2025, 05:11 PM
5
votes
3
answers
35741
views
I've lost administrator access and /var/db/.AppleSetupDone is read only
I have lost administrator access after trying to change my username in system preferences and restarting. I have followed the directions by rebooting in Single user mode, ⌘ S and typing the following commands: /sbin/fsck -fy /sbin/mount -uw / rm /var/db/.applesetupdone It then asks if I want to over...
I have lost administrator access after trying to change my username in system preferences and restarting.
I have followed the directions by rebooting in Single user mode, ⌘S and typing the following commands:
/sbin/fsck -fy
/sbin/mount -uw /
rm /var/db/.applesetupdone
It then asks if I want to override
rm /var/db/.applesetupdone and if I then type "YES" it says that it is a read only file and nothing happens.
I have also tried typing rm /var/db/.applesetupdone in terminal and again it asks me if I want to override, and again answering YES I get the reply Permission denied:
override r-------- root/wheel for /var/db/.applesetupdone? YES
rm: /var/db/.applesetupdone: Permission denied
I am using MacOS High Sierra Version 10.13.4
**How do I remove applesetupdone or get administrator privileges back?**
RDT84
(61 rep)
Apr 5, 2018, 05:53 AM
• Last activity: Mar 6, 2025, 01:33 PM
2
votes
1
answers
851
views
How can I give a standard macOS account admin-like privileges while restricting system reset and specific app access on the latest macOS?
I’m using the latest macOS (Sonoma, as of December 2024), and I’ve set up a standard account for myself while a trusted friend holds the admin account credentials. I want my standard account to have the ability to: - Install macOS updates (e.g., security patches, new macOS versions). - Update apps d...
I’m using the latest macOS (Sonoma, as of December 2024), and I’ve set up a standard account for myself while a trusted friend holds the admin account credentials.
I want my standard account to have the ability to:
- Install macOS updates (e.g., security patches, new macOS versions).
- Update apps downloaded from the Mac App Store and external sources.
- Manage DNS settings, profiles, and perform general system tasks.
However, I also need to restrict the following capabilities:
- Factory resetting or erasing the Mac.
- Access to specific apps (e.g., Apple Configurator or System Preferences).
I’ve considered:
- Using sudo to grant specific permissions to the standard account.
- Locking sensitive settings and apps with profiles or Screen Time.
- Automatic updates for macOS and apps.
What’s the best way to configure the standard account to have admin-like privileges for updates and general system management, but still prevent it from resetting the Mac or accessing restricted apps?
user573095
Dec 15, 2024, 02:12 AM
• Last activity: Dec 15, 2024, 06:48 PM
0
votes
0
answers
259
views
How can I accept xcode license without admin access?
I'm on a machine with zero admin access and zero possibility of obtaining said access. Is there a way for me to accept the license agreement without knowing the admin password?
I'm on a machine with zero admin access and zero possibility of obtaining said access. Is there a way for me to accept the license agreement without knowing the admin password?
Miles Muehlbach
(63 rep)
Dec 3, 2024, 02:31 AM
2
votes
2
answers
1077
views
Suddenly lost my admin status
I have a Macbook Pro M1 running Sequoia 15.1.1. I only have one user installed on my Mac, and this user suddenly seems to have lost its admin status. Looking in system prefs shows that the user is now *"standard"*. I have no clue how this could have happened. I did not try to rename my user, or anyt...
I have a Macbook Pro M1 running Sequoia 15.1.1.
I only have one user installed on my Mac, and this user suddenly seems to have lost its admin status. Looking in system prefs shows that the user is now *"standard"*. I have no clue how this could have happened. I did not try to rename my user, or anything like that.
I presume this would work:
1. Erase the Macbook completely
2. Reinstall the system
3. Create a new admin user and log in
4. Reimport the old user from Time Machine backup with Migration Assistant
5. Give back the privileges using the newly created admin
6. Keep both admin accounts for safe measure
Is there a way to create a new admin from my current state or a shortcut to getting my user re-added to the admin group membership?
Marty Schellman
(61 rep)
Nov 29, 2024, 08:26 AM
• Last activity: Dec 1, 2024, 11:27 AM
13
votes
1
answers
38116
views
Using Command Line how to make the user an Administrator
As soon I bind a Mac to the AD Domain, I usually log into the Mac with the user account. Of course, under System Preference, User & Groups, the user account is marked as: Managed, Mobile My second step, is to make the user an Administrator account because I want to allow him/her to install/remove st...
As soon I bind a Mac to the AD Domain, I usually log into the Mac with the user account.
Of course, under System Preference, User & Groups, the user account is marked as: Managed, Mobile
My second step, is to make the user an Administrator account because I want to allow him/her to install/remove stuff from her/his Mac.
So, with the GUI, System Preferences > Users & Groups > I select the user name and I check mark the option: enable Allow user to administer this computer and I restart the machine and everything works fine. The user now is an Admin for that machine.
Question, how do I perform the above process with the command line in Terminal? Not the bind process, but to make the user Admin for that specific machine.
Fabio
(1268 rep)
Jan 12, 2017, 10:59 PM
• Last activity: Nov 25, 2024, 11:25 PM
0
votes
0
answers
57
views
Lock macOS Recovery mode for admins
I have an M1 MacBook Pro with an Admin user and a normal user, they share an Apple ID. I want macOS' Recovery Mode to be accessible only with an Admin password, it used to be the case but changed somehow. I don't want FileVault or a Firmware Password, the normal user to be able to boot and use the c...
I have an M1 MacBook Pro with an Admin user and a normal user, they share an Apple ID.
I want macOS' Recovery Mode to be accessible only with an Admin password, it used to be the case but changed somehow. I don't want FileVault or a Firmware Password, the normal user to be able to boot and use the computer, just not to abuse Recovery Mode.
username3882364823
(1 rep)
Aug 5, 2024, 09:07 PM
• Last activity: Aug 5, 2024, 09:07 PM
1
votes
3
answers
50580
views
Lost access to admin user account in my mac book pro
I changed **Account name** property on my mac book pro in **System Preferences**-> **User & Groups**-> ** ** **Advanced Options**. I attached a picture of then the window (Not my account window, now i cannot access Advanced options). After changing the property, My admin account changed to Standard...
I changed **Account name** property on my mac book pro in **System Preferences**-> **User & Groups**-> **** **Advanced Options**. I attached a picture of then the window (Not my account window, now i cannot access Advanced options). After changing the property, My admin account changed to Standard account. Even thought i can log in using my login, i cannot do any admin tasks since it says my password is wrong. It was the only admin account i had. So how can i regain my admin priviledges. I highly appreciate your help.
ps: My mac book pro running on High Sierra.
Arunwij
(113 rep)
Jun 19, 2018, 03:13 PM
• Last activity: May 22, 2024, 03:41 PM
4
votes
3
answers
7435
views
Renew DHCP from the command line without admin password
Can I run command `sudo ipconfig set en0 DHCP` as a standard user whithout request for my password?
Can I run command
sudo ipconfig set en0 DHCP as a standard user whithout request for my password?
Jyotish Singh
(141 rep)
Aug 10, 2017, 09:05 AM
• Last activity: Apr 10, 2024, 09:28 AM
2
votes
0
answers
116
views
Why am I not asked for application permission on an Apple Watch?
I want to be able to approve application requests from an Apple Watch (AW) by double-pressing the side button. The setting is titled `"Use AW to unlock your applications and your Mac"`. Despite having this setting enabled, I'm never prompted on my AW to permit the application whatever it requested....
I want to be able to approve application requests from an Apple Watch (AW) by double-pressing the side button. The setting is titled
"Use AW to unlock your applications and your Mac". Despite having this setting enabled, I'm never prompted on my AW to permit the application whatever it requested. (Unlocking the Mac works though.)
The setting is in Settings > Touch ID & Password, under section Apple Watch with a subtitle "Use AW to unlock your applications and your Mac". There, I have the particular AW's switch set to ON. And I've already tried setting it OFF and back ON.
- macOS 14.3 (23D56)
- watchOS 10.3.1 (21S651) [AW model A2684]
---
Related question: https://apple.stackexchange.com/questions/392243/is-it-possible-to-disable-macos-requesting-permissions-via-apple-watch-but-stil
VanillaDonuts
(141 rep)
Feb 24, 2024, 12:23 PM
• Last activity: Mar 6, 2024, 03:39 PM
31
votes
4
answers
115448
views
Run sudo From Non-Admin Account
Okay, so I'm gearing up to get a new machine so I'm looking at how I can organise things better. Now, currently I use an admin account as my main login account, but I know that that's probably not best practice, so I'd like to switch to a separate admin and non-admin account on my machine. However,...
Okay, so I'm gearing up to get a new machine so I'm looking at how I can organise things better. Now, currently I use an admin account as my main login account, but I know that that's probably not best practice, so I'd like to switch to a separate admin and non-admin account on my machine.
However, I'm a developer, and I do a lot of work in the terminal, so sometimes I do need to run commands via
sudo, but of course that won't work the way I would normally run it (sudo foo, type current account's password). What I'd like to know is, knowing the details for an admin account on my machine, is it possible to run commands via sudo (or similar) from a non-admin account, without having to login to a different account each time? For example, could I trigger the enter admin password dialogue somehow?
Haravikk
(1857 rep)
Apr 3, 2014, 01:43 PM
• Last activity: Feb 17, 2024, 08:14 PM
0
votes
1
answers
2522
views
How can I force another user to sign out?
I'm the Admin user on my Mac mini but sometimes other family members use the Mac mini too with their own user/profile. Sometimes they forget to logout though. I don't know their logins so I can't switch user and then logout for them. And even if I did know their logins, that seems like more steps th...
I'm the Admin user on my Mac mini but sometimes other family members use the Mac mini too with their own user/profile. Sometimes they forget to logout though.
I don't know their logins so I can't switch user and then logout for them. And even if I did know their logins, that seems like more steps than it should be. With me being the admin, surely there's something I can click to force them to logout without my having to switch users.
RedCaio
(485 rep)
Jan 7, 2024, 07:49 AM
• Last activity: Jan 7, 2024, 10:30 AM
1
votes
0
answers
167
views
Enable normal user accounts to always force a system shutdown
I have a system with normal user accounts and an account with "administrator" privileges. Whenever that admin account is logged in, normal users can not shut down the system any more. I need to enable this, with the understanding that this can cause an admin session to be unexpectedly terminated. Ho...
I have a system with normal user accounts and an account with "administrator" privileges. Whenever that admin account is logged in, normal users can not shut down the system any more. I need to enable this, with the understanding that this can cause an admin session to be unexpectedly terminated.
How can I give normal users the power to force a shutdown (through the GUI) independent of whoever else is logged in at the time?
The target environment is macOS Ventura, 13.x.
jstarek
(3716 rep)
Dec 9, 2023, 08:59 PM
2
votes
1
answers
881
views
How to use touch ID instead of user password?
My Macbook keyboard has a touch ID button in the top right corner. When performing tasks that require elevated privileges (such as installing new apps) I'm asked to input my user password. I'd like to use touch ID instead. My user is an administrator. Is it possible?
My Macbook keyboard has a touch ID button in the top right corner. When performing tasks that require elevated privileges (such as installing new apps) I'm asked to input my user password. I'd like to use touch ID instead. My user is an administrator.
Is it possible?
htor
(133 rep)
Dec 6, 2023, 02:56 PM
• Last activity: Dec 6, 2023, 03:08 PM
0
votes
0
answers
417
views
How do I override or reset a Mac without an admin password?
A while ago, my remote job had mass layoffs and let ex-employees keep our computers. IT claimed they reset the computers remotely, but it didn't seem to work. My issue is that since I don't have access to the admin account, I can't download or update apps. I've been trying to figure out a way to ove...
A while ago, my remote job had mass layoffs and let ex-employees keep our computers. IT claimed they reset the computers remotely, but it didn't seem to work. My issue is that since I don't have access to the admin account, I can't download or update apps.
I've been trying to figure out a way to override or factory reset my Mac, but it seems like everything requires I have the admin password. I've tried booting with Cmd+R but nothing happens. Any help is appreciated!
Jen
(1 rep)
Nov 26, 2023, 04:00 AM
• Last activity: Nov 26, 2023, 04:20 AM
2
votes
1
answers
584
views
How to update Firefox with MDM and no admin
I am trying to update Firefox on my school computer but I need an Admin password to do this. My MacBook is a 13” M2 Pro that has the weird school app store called “Self Service” which only lets you reinstall and not update. Does any have an idea how I should update Firefox?
I am trying to update Firefox on my school computer but I need an Admin password to do this.
My MacBook is a 13” M2 Pro that has the weird school app store called “Self Service” which only lets you reinstall and not update.
Does any have an idea how I should update Firefox?
Matthew Desmond
(21 rep)
Apr 4, 2023, 11:41 PM
• Last activity: Oct 19, 2023, 03:24 AM
1
votes
1
answers
1588
views
MacOS: How can I unlock a system plist file to edit? [trying to get rid of a stray Netskope VPN entry]
I'm trying to get rid of a stray Netskope Client (NSClient1) VPN entry that wouldn't go away. I found its traces only in /Library/Preferences/com.apple.networkextension.plist - this is the system's plist not my users. I'm the only user on the system and have admin privileges. However the file is loc...
I'm trying to get rid of a stray Netskope Client (NSClient1) VPN entry that wouldn't go away. I found its traces only in /Library/Preferences/com.apple.networkextension.plist - this is the system's plist not my users. I'm the only user on the system and have admin privileges.
However the file is locked and despite being an admin, I can't edit it. Can someone please help me figure out how do I edit this file (or remove the stray VPN entry)?
Steps taken so far: (all result in operation not permitted or I don't have permissions to change)
- tried to change permissions (via finder's get info option as well as
chmod through the terminal)
- tried to copy the file to the desktop,
edit it and then replace
- contacted Apple support (and they said it's
not their problem - quite literally)
- contacted Netskope (VPN support)
and tried to run their uninstaller but that didn't work either
[the VPN entry doesn't get listed when I run sudo networksetup -listallnetworkservices]
I'm using macOS Sonoma 14.0
zaam
(141 rep)
Oct 3, 2023, 01:39 AM
• Last activity: Oct 3, 2023, 01:39 PM
Showing page 1 of 20 total questions