Root user cant be enabled/disabled

Hello, I am an inexperienced OS X user, and I started searching about user priviliges for a while just in case for security. And when I found out about root user, I started tinkering about my Macbooks unusual activites such as not waking up from sleep, sometimes running fans at full speed at idle, uploading at unnecessary speeds even when no activity going on at my computer, may be about a person who had access to my mac back a while ago that activated root user and accessing my mac remotely since back then.
So I tried disabling that root user, but I couldnt disable it from directory utility screen, nor with the terminal command dsenableroot -d. It just says failed to disable root user. `

I need help about this problem. Thank you

MacBook Pro (Retina, 13-inch,Early 2015), OS X El Capitan (10.11)

Posted on Sep 19, 2016 5:01 AM

Reply
18 replies
Sort By: 

Sep 19, 2016 5:10 AM in response to Batuhayabusa

If you couldn't disable it because the menu item to disable it only showed "enable," then the root user isn't enabled.


No it actually says disable root user, and when I click it nothing changes.


Directory utility-Top Pane-Edit-Disable root user

Nothing changed


Then I clicked change root password, I wrote a password clicked enter but then again no verification of change.

I went to terminal, wrote dsenableroot -d it asked for my user password, I entered the password which I use logging in to my mac, it says failed to disable root user.

Reply

Sep 19, 2016 5:37 AM in response to Batuhayabusa

Batuhayabusa wrote:


How can I know if the root user is logged in, or what is the users name ?

And how can I log ıt out then


The root user's name is "root". It is NOT logged in.

Forget about the root user.


In OS X, the root user is disabled by default, and with good reason.

You'd need to take very specific steps to enable it.


Admin users are a completely different thing. You probably are one, since the first account created in a mac is always an admin. There always has to be at least one admin user, but there can be more than one.

Reply

Sep 19, 2016 5:45 AM in response to Luis Sequeira1

So are you certain that there is not a so called 'root user' that can mess with my computer, access all my files right now 😀 ?


Actually I have only one window : S when I open a second one and type who, it returns a 3 lines, the third one reads ttys001. Then where is the 'console' written one


Thank you a lot for the answers by the way.

Reply

Sep 19, 2016 5:46 AM in response to Batuhayabusa

Batuhayabusa wrote:


Thank you for your answer, but as I mentioned above the root user is enabled right now, as I can see from Directory Utility, edit screen. It says clearly 'disable root user'. So the root user is enabled right now.


Ok, so it is enabled. I can only suggest that you disable it, since you being an inexperienced user you have no reason for it to be enabled, as far as I can see. I have never enabled it in any of my macs. It is deemed unnecessary, and a potential security risk, as the root user is by definition the lord and master of the machine. If someone were to get root access it could get all the data or wipe out your drive with a single command.


Just click the padlock to unlock it, enter your password as requested and select Disable Root User.

Reply

Sep 19, 2016 6:01 AM in response to Batuhayabusa

You may try restarting your mac and then immediately try again to disable the root user.

If this does not work: is your mac connected to some network account server (Active Directory or similar), so that people can log in with credentials supplied by a central server? If this a home mac the answer should be "no".

Just in case, look at System Preferences->Users & Groups. If next to "Network Account Server", you see a button labeled "Join" that part is as it should be. If you see something else, let us know.

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Root user cant be enabled/disabled

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.