SOLVED Deploying createLocalAdmin script to MacOS

[JustinV]

Hello, I was following this article https://www.prajwaldesai.com/create-a-local-admin-account-on-macos-using-intune/

And was able to successfully deploy the script, but I am not sure what to do from here. When I reboot my test Mac running Sequoia, it only allows me to login with my current account for which I do not have the password. It does not allow me to switch to the newly created localAdmin account. I was hoping to create a temp local admin, login with that, and change the password for my previous user account. But I do not see a way to login with the new temp admin account. Am I missing something, or is there some other script I can deploy to change the login screen from the setting that has user icons "List of Users" to a login box "Username and Password"?

 

[Prajwal Desai]

You should be able to log in with that admin account from the login screen. What options do you see on the log in screen?

 

[santoshku]

Hello, I was following this article https://www.prajwaldesai.com/create-a-local-admin-account-on-macos-using-intune/

And was able to successfully deploy the script, but I am not sure what to do from here. When I reboot my test Mac running Sequoia, it only allows me to login with my current account for which I do not have the password. It does not allow me to switch to the newly created localAdmin account. I was hoping to create a temp local admin, login with that, and change the password for my previous user account. But I do not see a way to login with the new temp admin account. Am I missing something, or is there some other script I can deploy to change the login screen from the setting that has user icons "List of Users" to a login box "Username and Password"?

Just log off from your signed in account and you should see the option to login with the new local admin account you've created. It is very simple.

 

[JustinV]

Just log off from your signed in account and you should see the option to login with the new local admin account you've created. It is very simple.

Yep I think that was it. Once the script runs, it works as expected. I realized this morning that my test macbook was encrypted and had filevault enabled, and so this behavior is different if that is the case. With filevault enabled, the second user never appears at the login screen, and the syadmin must use the bitlocker key stored in InTune, boot into recovery, and use that key to unlock the device and then can change the passwords. Without file vault enabled, the user is there as an option after rebooting. We're All set thanks!

 

[JustinV]

You should be able to log in with that admin account from the login screen. What options do you see on the log in screen?

For some reason it took a while and a reboot for the new user to appear, so it worked as expected when I tried on their device. Also big thanks for the site and all of the awesome documents, really helped me out more than a few times!!