Creating Hidden SSH Accounts Using the jamf binary

Updated: 01 July 2021
Product: Jamf Pro

It is possible to create an SSH account that you can use to manage a client and keep it from appearing on the login window, Accounts pane in System Preferences, and fast user switching. The Terminal application is required to create a hidden SSH account using the jamf binary.

Jamf Pro 10.27.0 or Later

  1. Open Terminal.
  2. Execute the following command, modifying it for your environment:
    /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password p@55w0rd -home </var/netadmin> -hiddenUser -admin -secureSSH

Jamf Pro 10.26.1 or Earlier

  1. Open Terminal.

  2. Execute the following command to enable hiding of administrative accounts:
    defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES
  3. Execute the following command, modifying it for your environment:
    /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password p@55w0rd -home </var/netadmin> -hiddenUser -admin -secureSSH
    Note:

    If you are using Jamf Pro, you can also execute the commands above using Jamf Remote or a policy in the Jamf Pro server. Using Jamf Remote, click the Advanced tab and enter the command in the Run Command field. Using a policy in the Jamf Pro server, choose to create a policy manually. Click the Advanced tab and type the command in the Run Command field.