Administering the Management Account

You can use a policy or Casper Remote to administer the management account.

Using a policy to administer the management account allows you to do the following:

  • Change the account password—This option changes the management account's password, as well as the account's login keychain password and FileVault 2 password. It is recommended that you use this option if the management account's login keychain password matches the account password stored in the JSS.

  • Reset the account password—This option only changes the management account's password. This option does not change the management account's login keychain password or FileVault 2 password.
    Note: If the management account's login keychain password does not match the account password stored in the JSS, you must use the Reset Account Password option when administering the management account using a policy or the policy will fail.

  • Enable the user for FileVault 2

  • Disable the user for FileVault 2

Using Casper Remote to administer the management account allows you to reset the management account's password.

Requirements

To enable the management account for FileVault 2, the computer must have macOS 10.9 or later and have an existing, valid individual recovery key that matches the recovery key stored in the JSS.

To disable the management account for FileVault 2, the computer must have macOS 10.9 or later.

Administering the Management Account Using a Policy

You can change or reset the management account password using a policy. You can also enable or disable the management account for FileVault 2.

  1. Log in to the JSS with a web browser.

  2. Click the Computers tab at the top of the page.

  3. Click Policies.

  4. Click New images/download/thumbnails/15181914/New_icon.png .

  5. Use the General payload to configure basic settings for the policy, including the trigger and execution frequency.
    For an overview of the settings in the General payload, see General Payload.

  6. Select the Management Account payload and select an action using the options on the pane.

  7. Use the Restart Options payload to configure settings for restarting computers.

  8. For more information, see Restart Options Payload.

  9. Click the Scope tab and configure the scope of the policy.
    For more information, see Scope.

  10. (Optional) Click the Self Service tab and make the policy available in Self Service.
    For more information, see Self Service Policies.

  11. (Optional) Click the User Interaction tab and configure messaging and deferral options.
    For more information, see User Interaction.

  12. Click Save.

The policy runs on computers in the scope the next time they check in with the JSS and meet the criteria in the General payload.

Resetting the Management Account Password Using Casper Remote

  1. Open Casper Remote and authenticate to the JSS.

  2. Click Site images/download/thumbnails/15181914/Site.png and select a site.
    This determines which items are available in Casper Remote.
    Note: This button is only displayed if you have a site configured in the JSS and are logged in with a JSS user account that has full access or access to multiple sites.

  3. In the list of computers, select the checkbox for each computer on which you want to administer local accounts.
    images/download/attachments/14453895/Computers_tab0.png

  4. Click the Accounts tab.

    images/download/attachments/14453944/Accounts_tab.png

  5. Do one of the following:

    • To randomly generate new passwords, select Randomly Generated Passwords and enter the number of characters required.

    • To specify a new password, select Change To and enter the new password.

  6. Click the Restart tab and configure settings for restarting computers.

    images/download/attachments/14453904/Restart_tab.png
  7. Do one of the following:

    • To immediately perform the tasks on the specified computers, click Go.

    • To schedule the tasks to take place at a specific day and time, click Schedule and choose a day and time. Then click Schedule again.

Related Information

For related information, see the following sections in this guide:

  • About Policies
    Learn the basics about policies.

  • Managing Policies
    Find out how to create a policy, view the plan and status of a policy, and view and flush policy logs.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.