How to disable admin password reset?

Question

Level 1

5 points

How to disable admin password reset?

Hi All

There are many suggestions previlent on the web for resetting an admin password with or without a CD, but it strikes me as odd that someone as truely paranoid as myself can't find an easy way to disable the ability to reset an admin password. I encrypt my hard drive and backups, I have gone into directory utility and I do not have a root user enabled, but I really don't want anyone to ever be able to reset my admin password and access my data. There's no magic lines of code that can be typed in Terminal? Or another solution I have yet to uncover?

Thanks!

Posted on Jan 29, 2012 4:23 PM

Reply

Answer 1

macjack

Level 10

111,242 points

Jan 29, 2012 4:30 PM in response to Kit Cowan

Once someone has physical access to your Mac anything is possible.

But you can set a Firmware Password.

Boot holding Command+R, go to Utilities menu > Firmware Passwords.

Reply

Answer 2

Kappy

Level 10

362,007 points

Jan 29, 2012 4:27 PM in response to Kit Cowan

If you use an encrypted drive and/ or FileVault, then it would be pretty difficult for someone to change your admin password unless they new the password to decrypt your drive. Encrypting the drive is precisely the reason why you don't need to disable the ability to reset an admin password. No one can reboot the computer unless they know the Master password to decrupt the drive.

Reply

Answer 3

Király

Level 6

10,025 points

Jan 29, 2012 4:28 PM in response to Kit Cowan

If your data is encrypted with FileVault 2, it cannot be accessed by any other users, even if they reset the admin password. They need to know the password *you* set. Not to worry. 🙂

Reply

Answer 4

Kit Cowan Author

Level 1

5 points

Jan 29, 2012 4:47 PM in response to Kit Cowan

WOW. Thanks everyone. Seems I'm all set — was able to return the same answers via google — encrypted hard drive is the way to go!

Reply