What's the basic non-admin authenticated user group in Mojave?

Question

Level 1

5 points

What's the basic non-admin authenticated user group in Mojave?

I've been using macOS in Active Directory or as an admin for so long I don't remember which is it. Furthermore, I've added groups of my own that sync through MDM among other methods before the first login, so even if I were to reinstall macOS just to find out, there's a chance I'd still miss it if I forget not to sgn in locally and check first. It's sort of a lot of work to check for a name.

Is it "staff" maybe? "everyone" on Active Directory and Profile Manager literally means everyone, which might include non-authenticated accounts. "owner" sounds like it might be another name for "admin" or "wheel". What I can't see is a simple "user(s)". I'm checking using dscl . list /groups, BTW, it's basically the same as using Server.app (which I also have) or Directory Utility.

There's an described "Authenticated Users" that seemed like the perfect candidate until I saw its real name: "authedusers". It doesn't seem right, I don't know why but it doesn't.

Posted on Feb 22, 2024 12:16 PM

Reply

Answer 1

senseivita Author

Level 1

5 points

Feb 23, 2024 1:57 AM in response to BDAqua

Yeah, (1) that was not really the question, and (2) wouldn't you agree if this was a peripheral problem it would be system-wide and not just in this site?

Plus, read the room, maybe? While sure, I'm asking for help, I'm also talking about AD, the CLI and MDM. I'm pretty sure anybody setting up directory services must know by then a thing or two about basic troubleshooting.

The site has issues, it's obviously script-related. This would be the first time it has issues also. It might be a result of Apple not bothering to keep all its resources under a single domain, thus making requests to third party domains, a privacy/security/branding no-no, which a decent firewall would block. I'm just speculating, of course but the fact is that the result is the same, it looks sloppy and shouldn't be something an issue a user has to face let alone from a company that babysits you with all these safety locks, letting you get only software and media from its vetted channels of delivery and recommendation bc it's what's best for "for you"/"your security"/"your privacy".

But enough about that, the good news is that I found my answer just now, it's staff, I overlooked gid, distracted by the word groups, the secondary groups. I should've caught that earlier, my bad. Anyway, though you kinda sidestepped my question, in a way you still gave me the answer by prompting me to come back to answer and revisiting my own question with a different mindset.

Thank you, have a great weekend, it's here already. 😄

Reply

Answer 2

senseivita Author

Level 1

5 points

Feb 22, 2024 1:17 PM in response to senseivita

I realized I could just create a new test user and see.

Still with Directory Utility behind I created a new test user Standard account, "test", in System Preferences. I saw the list behind move right away after creating it, but I didn't catch what was added. Maybe since there were no standard users, the user group was never created, I thought. After what it seemed like an eternity I found the new account:

Linux sort of does the same thing so I guess that's fair.

I don't know the dscl command to show user info unfortunately, but I know id.

[Thu22@13:18:36][v@vmbp:~] $〉id test
uid=504(test) gid=20(staff) groups=20(staff),12(everyone),61(localaccounts),702(com.apple.sharepoint.group.2),701(com.apple.sharepoint.group.1),704(com.apple.sharepoint.group.4),703(com.apple.sharepoint.group.3),100(_lpoperator)

So again staff seems like the better option but localaccounts also seems plausible.

Could you confirm which is it, please?

Thanks.

───

BTW, what's going on with the navigation in this place, I can't scroll towards the bottom of the page so I have to narrow the window really thin in order to show the Post and Cancel buttons, nor I can click on the empty side of scroll bar to get there. It's stuck at the top. It's all a mess. Apple's quality control, the attention to detail… that premium feeling, is really a thing that died in the Sierras, isn't it. Wait for the Apple Discussions Pro Max Ultra.

Reply