How to log out and back in as admin?

I've been using Macs of all flavours for many years, but have never felt the need to set up my Admin account without automatic login. However, I am now thinking it would probably be a good idea to do so and keep things more secure. I'm the only user of my work computer, and for the most part my home computers as well, although as time passes I'm becoming more concerned about someone simply pushing the power button and having access to all of the files on my computer and hard drives, except the ones in encrypted folders. I have in the past looked at the idea of logging out and then back in with my admin password, but I've always been somewhat concerned that it might not work that easily and I would be locked out. I realize all of this is would likely fall under the heading of "Computers 101", but since I have never felt the need to do this it now seems more of an issue that it probably should. Therefore I have a few questions as follows:


1. If I were to simply log out of my admin account when shutting down, would I then log in by simply inserting my full name and admin password upon startup?


2. I have also read that setting up a Standard User account and using it would perhaps be a better way of handling this "situation". Is that indeed the case, and

what's the advantage of that procedure over simply using my admin account to log out and back in with my admin password?


As I mentioned, for long time users this would certainly be a no-brainer I'm sure, but having never ventured into this territory I need to be sure I'm doing everything correctly from the start. I have also entertained the idea of setting this up on one of my bootable clones, but even in that case I would want as much information as possible before starting, since I wouldn't want to lose access to it completely if done incorrectly. Any advice would be greatly appreciated.


Thank you,

Gary

Mac Pro, OS X Mavericks (10.9.5), 3-1TB HDs, 2-2TB HDs, NEC PA271W

Posted on Sep 15, 2015 12:41 PM

Reply
5 replies

Sep 16, 2015 10:14 AM in response to Garnick

System Preferences -> Users & Groups

User uploaded file

Unlock the padlock in the lower left corner

Click "Login Options"

Change to automatic login to "Off", unless you still want that on, then pick the user to automatically login to.


Change the display login window to either a list of users you select from on the login window, or require they know and enter their username. In both cases with automatic logins off, they will need to enter the correct password. The username entered can be the long Mac name or the short Unix name for the user.


You do NOT need to logoff before shutting down. You will be logged off automatically during shutdown. The reboot login window will be whatever you specify in the Login Options above.


If you wish to become the Admin when you are logged in as a Standard user, you can use "Fast User Switching" and keep the current user logged in and switch back and forth using the Fast User switching menu bar item (if you do not have much RAM on your system, this may be slow and painful, but at least try it to see what you prefer).


Or you can logout of the standard user, and you will get the login screen, where you can select the admin account. No need to shutdown in between switching users.


Logging out or Fast User switching works whether you have Automatic login enable, or you make the user enter their username and password at the boot time login screen.


1. If I were to simply log out of my admin account when shutting down, would I then log in by simply inserting my full name and admin password upon startup?

Yes, but you do not need to actually logout when shutting down. You will automatically be logged out when you shutdown. It is best to save any work you have in open apps before shutting down or logging out.


2. I have also read that setting up a Standard User account and using it would perhaps be a better way of handling this "situation". Is that indeed the case, and

what's the advantage of that procedure over simply using my admin account to log out and back in with my admin password?

Yes in the absolute sense, but for the most part if you are careful about what you do while logged in as admin it is not all that dangerous


A Standard user does not have any admin rights. So you will need to switch to the Admin account or when prompted enter the admin account name and password before you can do things like install software into privileged locations.


Mostly this is just an extra step, and it is most useful when it is really another user (child, spouse, etc... that is sharing the Mac). When you wear both hats, you can still do stupid things, by saying "Why Yes, I do want to install that Adware package, it sounds like such a good idea", and you proceed to switch to your Admin account. Just a little more work, but since you are in reality the admin, you can switch to the privileged account.

Sep 16, 2015 8:20 AM in response to BobHarris

Hello Bob,


Thank you very much for this. Most of what you have covered her I was aware of, but wanted to make sure I was interpreting all of it correctly. As I mentioned, I think I will probably do this on a bootable clone first and make sure I have everything working properly before I commit to my Mac HD. I have 4 bootable clones in all, one on an external HD, so I'll probably use that one for my first attempt. Just to be clear, if I do have a problem and cannot reboot on the external drive, I assume I can still boot with the Command key to the Startup Manager and choose another drive. Is that correct? I need to cover all possible outcomes before I start, at least all I can think of.


Thanks again Bob,

Gary

Sep 16, 2015 8:35 AM in response to Garnick

Press the alt (a.k.a option) key at boot to select a startup disk.

You can also boot to recovery mode (cmd+r at startup) to select the startup disk, there are many ways to get out of many messes you can imagine 🙂.


Standard users are a little safer if you use auto login. An admin account retains admin privileges when you login for 5 minutes IIRC. That means they can tweak system settings during that grace period.


If you want real protection of your data use FileVault to encrypt the disk, otherwise rebooting in target disk mode exposes the data (file permissions are a weak form of protection).


It's probably simplest for you to create a new admin account & then use that to remove the admin rights on your current account. It should be surprisingly trivial to do 🙂

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to log out and back in as admin?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.