As of Catalina, if you forget the password to any account with the SecureToken enabled, no other users can reset that account password unless you know the current password. Those users will be the only ones who can grant the token to other users or revoke it and this has to be done at the command line with sysadminctl, you will also need to know the password to any account that you intend to modify.
Mac change password of other user upgrade#
If a Mac was upgraded to Catalina, the user who ran the upgrade will get the SecureToken set on their account even if somebody else has it too. However, the SecureToken capability has been around since High Sierra and was set any time that Migration Assistant was used or if FileVault was ever enabled. No, root doesn't even have this token enabled.
Mac change password of other user mac os#
Not all Macs will have the SecureToken enabled on all accounts, this is usually the case where the Mac originally came with some version of Mac OS prior to Catalina. If you read the info in my above screenshot, you’ll note that it warns that the password for the user’s login keychain won’t be reset. The password will then be reset, but there’s a big caveat here. If the account was created at the GUI level or at the command line using "sysadminctl", and was created as an admin account, then it most definitely has a Secure Token set. Type in the new password for the account twice, enter a hint for it if you want to, and click Change Password. The reason for this is because the account that you want to reset the password for has a Secure Token set. The really horrible thing about this new Apple "security measure" is that it allows malware authors to create accounts on your computer that you can't delete unless you know the procedure I outlined in the above. You will have to reset the password for every account on the system or it won't let you proceed.
You'll have to reboot the Mac in recovery mode, open a terminal, the issue the command "resetpassword".
0 kommentar(er)
