change admin?

Thanks. Because FileVault is off and the Mac doesn't have Activation Lock, you can reset the password of the administrator account.

1. Start up from macOS Recovery: Hold down Command-R as you restart the Mac. Release the keys when the Apple logo and a progress bar appear.
2. When the macOS Utilities window appears, don't select any options shown. Instead, go to the menu bar at the top of the screen, click Utilities, then select Terminal.
3. Type "resetpassword" without the quotes and hit Enter (Return).
4. Follow the onscreen instructions to reset the password of the administrator account.

To prevent someone else from abusing this in the future, you can:

• Turn on FileVault (recommended): This scrambles the data on the internal drive so that a login password is required in order to access it. It also requires the recovery key (or your Apple ID) in order to reset the password from macOS Recovery.
• Set a firmware password (optional): This prevents the Mac from starting up from macOS Recovery, or from a different startup disk. If someone attempts to do this, they'll have to enter the firmware password when prompted. Beware that if you forget the firmware password, only Apple can reset it, and you'll need proof of purchase.

Hi Håvard,

I have a few questions that can help me determine what steps to provide:

• What year and model is the Mac in question?
• What version of macOS is it running?
• Is FileVault enabled on the Mac? (If you're able to log in, check System Preferences -> Security and Privacy -> FileVault).

That's odd.. maybe the employee account was always standard and the Mac was missing an admin account?

Nonetheless, here's how to re-run Setup Assistant, which will allow you to create an additional admin account:

1. Restart the Mac while holding down Command-S. Release the keys when white lines of text appear on a black screen. If the login screen appears immediately, log in to continue. (FileVault is on in that case.)
2. Wait for the text to stop moving, and press Enter (Return).
3. Type these commands carefully, in order, as shown. Press Enter (Return) after each command:
   1. mount -uw /
   2. rm /var/db/.AppleSetupDone
   3. launchctl reboot
4. The Mac should immediately restart. If you're prompted to log in, do so to continue.
5. Setup Assistant should appear. When prompted, choose not to migrate any data.
6. You should now be able to create an additional admin account. Give it a new name and password.
7. Complete the rest of the setup assistant.
8. If desired, you can use the new administrator account to make the other user account an administrator.