Creating Hidden SSH Accounts Using the jamf binary

Updated: 26 July 2022
Product: Jamf Pro

It is possible to create an SSH account that you can use to manage a client and keep it from appearing on the login window, Accounts pane in System Preferences, and fast user switching. The Terminal application is required to create a hidden SSH account using the jamf binary.

Jamf Pro 10.27.0 or Later

  1. Open Terminal.
  2. Execute the following command, modifying it for your environment:
    /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password p@55w0rd -home </var/netadmin> -hiddenUser -admin -secureSSH

Jamf Pro 10.26.1 or Earlier

  1. Open Terminal.

  2. Execute the following command to enable hiding of administrative accounts:
    defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES
  3. Execute the following command, modifying it for your environment:
    /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password p@55w0rd -home </var/netadmin> -hiddenUser -admin -secureSSH