The payload that configures Login Window behavior.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
SHOWFULLNAME SHOWFULLNAME If `true`, the system shows the name and password dialog. If `false`, the system displays a list of users. | boolean | optional | false | ✓Yes | macOS (10.7+) |
HideLocalUsers HideLocalUsers If `true`, the system shows only network and system users when showing a user list. | boolean | optional | false | ✓Yes | macOS (10.7+) |
IncludeNetworkUser IncludeNetworkUser If `true`, the system shows network users when showing a user list. | boolean | optional | false | ✓Yes | macOS (10.7+) |
HideAdminUsers HideAdminUsers If `true`, the system hides administrator users when showing a user list. | boolean | optional | false | ✓Yes | macOS (10.7+) |
SHOWOTHERUSERS_MANAGED SHOWOTHERUSERS_MANAGED If `true`, the system displays "Other..." when it shows a list of users. | boolean | optional | false | ✓Yes | macOS (10.7+) |
AdminHostInfo AdminHostInfo The admin host info. If present in the payload, the system displays its value in the Login Window as additional computer information. Before macOS 10.10, this string could only contain host name, system version, or IP address. After macOS 10.10, setting this key to any value allows the user to click the time area of the menu bar to toggle through various computer information values. | string | optional | — | ✓Yes | macOS (10.7+) |
AllowList AllowList The list of user GUIDs or group GUIDs of users that the system allows to log in. An asterisk (`*`) string specifies all users or groups. This only applies to network accounts and mobile accounts. 1 subkey | array | optional | — | ✓Yes | macOS (10.7+) |
└─ AllowListItem AllowListItem A user or group GUID. | string | required | — | ✓Yes | macOS (10.7+) |
DenyList DenyList The list of user GUIDs or group GUIDs of users that the system disallows to log in. This list takes priority over the list in the `AllowList` key. This only applies to network accounts and mobile accounts. 1 subkey | array | optional | — | ✓Yes | macOS (10.7+) |
└─ DenyListItem DenyListItem A user or group GUID. | string | required | — | ✓Yes | macOS (10.7+) |
HideMobileAccounts HideMobileAccounts If `true`, the system hides mobile account users in a user list. In some cases, mobile users show up as network users. | boolean | optional | false | ✓Yes | macOS (10.7+) |
ShutDownDisabled ShutDownDisabled If `true`, the system disables the Shut Down button. | boolean | optional | false | ✓Yes | macOS (10.7+) |
RestartDisabled RestartDisabled If `true`, the system disables the Restart item. | boolean | optional | false | ✓Yes | macOS (10.7+) |
SleepDisabled SleepDisabled If `true`, the system disables the Sleep button. | boolean | optional | false | ✓Yes | macOS (10.7+) |
DisableConsoleAccess DisableConsoleAccess If `true`, the system disregards the `>console` special user name, which provides a command line UI. | boolean | optional | false | ✓Yes | macOS (10.7+) |
LoginwindowText LoginwindowText The text to display in the Login Window. | string | optional | — | ✓Yes | macOS (10.7+) |
ShutDownDisabledWhileLoggedIn ShutDownDisabledWhileLoggedIn If `true`, the system disables the Shut Down menu item when the user is logged in. | boolean | optional | false | ✓Yes | macOS (10.7+) |
RestartDisabledWhileLoggedIn RestartDisabledWhileLoggedIn If `true`, the system disables the Restart menu item when the user is logged in. | boolean | optional | false | ✓Yes | macOS (10.7+) |
PowerOffDisabledWhileLoggedIn PowerOffDisabledWhileLoggedIn If `true`, the system disables the Power Off menu item when the user is logged in. | boolean | optional | false | ✓Yes | macOS (10.7+) |
LogOutDisabledWhileLoggedIn LogOutDisabledWhileLoggedIn If `true`, the system disables the Log Out menu item when the user is logged in. Available in macOS 10.13 and later. | boolean | optional | false | ✓Yes | macOS (10.13+) |
DisableScreenLockImmediate DisableScreenLockImmediate If `true`, the system disables the immediate Screen Lock functions. Available in macOS 10.13 and later. | boolean | optional | false | ✓Yes | macOS (10.13+) |
showInputMenu showInputMenu If `true`, the system shows the Input Menu in the Login Window. | boolean | optional | false | ✓Yes | macOS (10.8+) |
DisableFDEAutoLogin DisableFDEAutoLogin If `true`, the system disables the automatic login option when using FileVault. | boolean | optional | false | ✓Yes | macOS (10.9+) |
AutologinUsername AutologinUsername The user short name for an existing user to set up auto login. | string | optional | — | ✗No | macOS (14.0+) |
AutologinPassword AutologinPassword An optional user password to set up auto login. This must match the `AutologinUsername` user's current password. | string | optional | — | ✗No | macOS (14.0+) |
