UCF STIG Viewer Logo

The macOS system must not allow an unattended or automatic logon to the system.


Overview

Finding ID Version Rule ID IA Controls Severity
V-214894 AOSX-13-000925 SV-214894r609363_rule Medium
Description
When automatic logons are enabled, the default user account is automatically logged on at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer to log on. Disabling automatic logons mitigates this risk.
STIG Date
Apple OS X 10.13 Security Technical Implementation Guide 2021-11-19

Details

Check Text ( C-16094r397254_chk )
To check if the system is configured to automatically log on, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableAutoLoginClient

If "com.apple.login.mcx.DisableAutoLoginClient" is not set to "1", this is a finding.
Fix Text (F-16092r397255_fix)
This setting is enforced using the "Login Window Policy" configuration profile.