{"id":81054,"date":"2023-06-05T13:09:43","date_gmt":"2023-06-05T17:09:43","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=81054"},"modified":"2024-01-30T12:58:14","modified_gmt":"2024-01-30T17:58:14","slug":"re-enable-a-disabled-mac-user-account","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account","title":{"rendered":"Re-Enable a Disabled Mac User Account"},"content":{"rendered":"\n<p>When you remove access to a Mac from a user in JumpCloud, JumpCloud will disable, rather than delete that user. This preserves all user account information and files, but in Mac, disabled users no longer appear at either the login screen or in Users &amp; Groups Settings.<\/p>\n\n\n\n<p><strong>Considerations<\/strong><\/p>\n\n\n\n<ul>\n<li>You must&nbsp;have a local admin or root account to execute the following commands.<\/li>\n\n\n\n<li>You must be root for the below commands to function properly.<\/li>\n\n\n\n<li>For any user that also had FileVault enabled, they will need to also be re-added to FileVault. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/create-a-mac-filevault-2-policy\">Create a Mac FileVault 2&nbsp;Policy<\/a>.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>To learn how to re-enable a disabled user on Windows systems, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/re-enable-disabled-users-in-windows\">Re-enable Disabled Users in Windows<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Verifying User Status<\/strong><\/h2>\n\n\n\n<p>To list non-system user accounts (active or disabled), run the following command:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p># dscl . -list \/Users | grep -Ev &#8220;^_|com\\..*|root|nobody|daemon|\\\/&#8221;<\/p>\n<\/div><\/div>\n\n\n\n<p>To read macOS&#8217;s AuthenticationAuthority status for a user, you&nbsp;need to&nbsp;switch to root to properly re-enable the user.&nbsp;<\/p>\n\n\n\n<p>To switch to root shell in macOS Terminal, run the following command: <kbd>sudo -i<\/kbd><br><img decoding=\"async\" width=\"512\" height=\"77\" class=\"wp-image-81058\" style=\"width: 700px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac-300x45.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/p>\n\n\n\n<p>To determine if a specific user is disabled, run the following command. A null or empty result indicates the user isn&#8217;t disabled:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p><kbd># dscl . -read \/Users\/USERNAME AuthenticationAuthority | grep DisabledUser<\/kbd><\/p>\n<\/div><\/div>\n\n\n\n<p>The following is an example of output for a disabled user:<br><img decoding=\"async\" width=\"512\" height=\"107\" class=\"wp-image-81090\" style=\"width: 700px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserOutput.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserOutput.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserOutput-300x63.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Re-Enabling Disabled Users<\/strong><\/h2>\n\n\n\n<p>Replace&nbsp;USERNAME&nbsp;with the actual username in the following commands.<\/p>\n\n\n\n<p>To re-enable the user account, run the following command:&nbsp;<\/p>\n\n\n\n<ul>\n<li>If running as root from the JumpCloud Command Runner role, use:<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>dscl . -read \/Users\/USERNAME AuthenticationAuthority | sed &#8216;s\/AuthenticationAuthority: \/\/;s\/DisabledUser\/\/g;s\/[; ]*$\/\/&#8217; | xargs dscl . -create \/Users\/USERNAME AuthenticationAuthority<\/p>\n<\/div><\/div>\n\n\n\n<ul>\n<li>If running the command locally on the device, use:<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>sudo dscl . -read \/Users\/USERNAME AuthenticationAuthority | sed &#8216;s\/AuthenticationAuthority: \/\/;s\/DisabledUser\/\/g;s\/[; ]*$\/\/&#8217; | xargs sudo dscl . -create \/Users\/USERNAME AuthenticationAuthority<\/p>\n<\/div><\/div>\n\n\n\n<p><img decoding=\"async\" width=\"512\" height=\"67\" class=\"wp-image-81099\" style=\"width: 700px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesReenableUser.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesReenableUser.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesReenableUser-300x39.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/p>\n\n\n\n<p>To change the shell from \/bin\/disable to \/bin\/bash, run the following command:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>chsh -s \u200b\/bin\/bash USERNAME<\/p>\n<\/div><\/div>\n\n\n\n<p><img decoding=\"async\" width=\"990\" height=\"108\" class=\"wp-image-81165\" style=\"width: 700px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesChangeShell.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesChangeShell.png 990w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesChangeShell-300x33.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesChangeShell-768x84.png 768w\" sizes=\"(max-width: 990px) 100vw, 990px\" \/><\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>You can use <kbd>chsh<\/kbd> to set a different default shell rather than bash. It needs only to not be set to <kbd>\/usr\/bin\/false<\/kbd>. After the command executes, the disabled user should reappear in both the login screen and Users &amp; Groups Settings. You may need to close and re-open System Settings if the user doesn&#8217;t immediately appear.<\/li>\n<\/ul>\n\n\n\n<ul>\n<li>The password for the user you&#8217;ve re-enabled will be the last password before the account was disabled. If you need to reset the user&#8217;s password, use System Settings as the local admin to change the password.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><img decoding=\"async\" width=\"512\" height=\"375\" class=\"wp-image-81146\" style=\"width: 700px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserLogin.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserLogin.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserLogin-300x220.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><br><img decoding=\"async\" width=\"512\" height=\"384\" class=\"wp-image-81145\" style=\"width: 700px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserLoginPassword.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserLoginPassword.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/DevicesDisabledUserLoginPassword-300x225.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When you remove access to a Mac from a user in JumpCloud, JumpCloud will disable, rather than delete that user. [&hellip;]<\/p>\n","protected":false},"author":202,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852],"support_tag":[],"coauthors":[2836,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Re-Enable a Disabled Mac User Account - JumpCloud<\/title>\n<meta name=\"description\" content=\"JumpCloud disables the local user account when access is revoked to a device. Learn the process to re-enable a disabled local user on macOS.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Re-Enable a Disabled Mac User Account\" \/>\n<meta property=\"og:description\" content=\"JumpCloud disables the local user account when access is revoked to a device. Learn the process to re-enable a disabled local user on macOS.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-30T17:58:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"denasteward, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account\",\"url\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account\",\"name\":\"Re-Enable a Disabled Mac User Account - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png\",\"datePublished\":\"2023-06-05T17:09:43+00:00\",\"dateModified\":\"2024-01-30T17:58:14+00:00\",\"description\":\"JumpCloud disables the local user account when access is revoked to a device. Learn the process to re-enable a disabled local user on macOS.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Re-Enable a Disabled Mac User Account\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Re-Enable a Disabled Mac User Account - JumpCloud","description":"JumpCloud disables the local user account when access is revoked to a device. Learn the process to re-enable a disabled local user on macOS.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account","og_locale":"en_US","og_type":"article","og_title":"Re-Enable a Disabled Mac User Account","og_description":"JumpCloud disables the local user account when access is revoked to a device. Learn the process to re-enable a disabled local user on macOS.","og_url":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account","og_site_name":"JumpCloud","article_modified_time":"2024-01-30T17:58:14+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"denasteward, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account","url":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account","name":"Re-Enable a Disabled Mac User Account - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png","datePublished":"2023-06-05T17:09:43+00:00","dateModified":"2024-01-30T17:58:14+00:00","description":"JumpCloud disables the local user account when access is revoked to a device. Learn the process to re-enable a disabled local user on macOS.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/DevicesVerifyUserStatusMac.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/re-enable-a-disabled-mac-user-account#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Re-Enable a Disabled Mac User Account"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/81054"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/202"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/81054\/revisions"}],"predecessor-version":[{"id":104518,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/81054\/revisions\/104518"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=81054"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=81054"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=81054"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=81054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}