System admin appearing on lock screen after stand by

Hi all


I installed High Sierra in a clean system. After I restored only the user data from time machine for me and my wife.


When my wife is logged on and she left the MacBook Pro unattended for sometime, when she tries to wake it up, instead of her user it comes up with a system administrator profile. She has to ask to switch user to be able to access her user. It only happens to her not my user.


This is not a normal behaviour. As users, that I can at least see, there's she, me and guest which is disabled.


How can I fix it ?


Thanks

MacBook Pro TouchBar and Touch ID, macOS High Sierra (10.13)

Posted on Oct 15, 2017 10:27 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 29, 2017 6:26 AM

It isn't normal. It should pop up to the user that was active when it went to sleep.


Check in Security & Privacy System Preferences to see if she is set to log out after so many minutes.

The setting is in the General tab under Advanced button. You have to unlock the padlock to get to Advanced.


Also, can you determine if the Mac is crashing while sleeping and automatically rebooting?

72 replies

Feb 5, 2018 5:30 PM in response to JTMAUL

I have the same issue. It seems a common thread (at least for those that stated what machine they have) is a MBP with Touch Bar. Another common thread is running High Sierra.


I have set this computer up with FileVault, only 1 admin account which I almost never log into and two standard accounts. It is possible that any of these accounts were at one time setup as an admin, but that would have been back when this computer was running Sierra (10.12). The issue never happened for me prior to 10.13.3. It occurs for me when both standard accounts are logged in and the admin account is not logged in (no check mark).


Also, I can confirm that the "System Administrator" login prompt will appear instead of my own user instantly after choosing lock screen from the menu bar. This occurs even when I am the only logged in user. I can then type the password for my account and it will unlock (even though my user is not an admin). When I type the password for the actual admin account, it is rejected. So for some reason my account is being called a system admin when it is not.


This whole thing does make me concerned that there could be an issue with account login and security like the root bug. High Sierra seems to have made some low level changes that are causing so many issues. Maybe even something related to APFS or changes made in the OS to add it.

Mar 2, 2018 1:44 PM in response to GarythS

Yes, I feel this one simple action is what put this into motion on a friend's Mac that she and her husband share.


After lots of troubleshooting and frustration,

I ended up having to force setup assistant to initiate to recreate her as admin.

That is the only thing that worked.


Someone posted go into recovery mode, then repair via first aid. You must've had something else interfering with the process that was the actual cause and issue that affected yours disappearing. Oh, how I wish that would be a way to resolve though. This would be so easy and time saving. Unfortunately, no in cases definitive to this particular occurrence. But, I'm very glad yours is back, no doubt ~


Only way I found was the force setup assistant method. An engineer told me a bit about it & I tried it. Finally got her back as admin while keeping husband as a standard user. Phew!

Oct 15, 2017 11:50 AM in response to andrelfs

Exact same thing here, except that I didn't restore any backups whatsoever on a brand new 2017 MacBook Pro with touch bar; started on it as new as possible.

Also, all you have to do is lock the screen to see the user as "System Administrator", BUT my TouchID works just fine in it, which seems to indicate that it is in fact my user there, just labeled differently and without my user icon.

Nov 4, 2017 10:07 AM in response to andrelfs

I'm having the same problem, on a MBP 15" Late 2016. Also did a clean install of macOS 10.13, there are 2 users, both with TouchID enabled, and FileVault is enabled for all users. There is no "System Administrator" account showing in System Preferences' Users & Groups on either of our accounts.


It just happened when I went to log in about 30 minutes ago. There was 28 minutes between when my wife finished using the MBP in her account and when I went to use it with my account. Per powerd, it showed "User uploaded fileUser uploaded fileUser uploaded fileUser uploaded fileEntering Sleep state due to 'Maintenance Sleep':TCPKeepAlive=active" when she finished using it, followed by "DarkWake from Normal Sleep [CDNP] due to ARPT/Network:" and "Summary- [System: PrevIdle SRPrevSleep kCPU] Using Batt(Charge: 74)" when I woke it.


When I woke the computer, it was displaying "System Administrator" as the account that was logged in, with a generic avatar. Neither my password nor her password worked to unlock from this screen, and I had to select "Switch User" and then log into my account. I haven't been keeping track of when this has been happening, but it's been numerous times on both 10.12.x and now 10.13.x. Very annoying.

Nov 4, 2017 10:54 AM in response to Mike Stitzer

I should add that running "

dscacheutil -q user | grep -A 3-B 2-e uid:\ 5'[0-9][0-9]'
" shows only the expected user accounts for myself and my wife, while "
dscl . list /Users| grep -v "^_"
" shows the expected user accounts and also the expected daemon, nobody, and root.


Running "

dscl . -list /Users" shows the same list of numerous background accounts (all with the underscore prefix) as detailed as part of a normal 10.12 install here: mac - Has my macOS Sierra system been infected by unknown users? - Super User


So I don't think there's any worry about a hack, but rather a bug in macOS. I don't recall every seeing this on my previous MBP 15" 2009 or my iMac, so I would guess it's a TouchBar/TouchID related bug.

Dec 12, 2017 11:43 PM in response to andrelfs

I have the same problem too.


MBP 15" 2017 with TB

Started right after upgrading to High Sierra.

I have 2 accounts: 1: Mine (administrator), 2: wife's (user), FireVault enabled for both. Guest account is disabled.


To test it we can just lock screen using wife's account (my account doesn't cause it to show up) and see this 'System Administrator' user show up. If I input wife's password into the password field of 'System Administrator' user her account unlocks (this is the linked behavior described above). TouchID doesn't work when this 'System Administrator' account showed up. I can also click 'Change user' and see the standart user screen with both accounts, names and avatars.

Dec 13, 2017 5:20 PM in response to andrelfs

Hey All,


For me the problem looks more promient , the moment I lock my screen I do get "System Administrator" prompt instead of My accountName. I do not need to wait for system to auto lock.

There are two admin accounts in my MAC. Looks like the problem is where two admin accounts are present.

accounts are present. This issue seems started happeing after updating recent high sierra security patch[10.13.2 (17C88)]



User uploaded fileUser uploaded file


Thanks

Feb 2, 2018 5:18 AM in response to andrelfs

As far as I can tell this is an issue with 10.13.X in combination with APFS.

Restarting seems to fix the issue for a small while (which is why all these fixes seem to work for a short while), but when a non admin user keeps applications open/active when locked, and an admin user starts a session, then the problem comes back.


Looking at Activity Monitor, there's a ton of daemons running for the non admin user's session during my admin session. I'm now trying to figure out if one or more of these are the issue, but it is more of a brute force endeavor.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

System admin appearing on lock screen after stand by

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.