How can I create a bootable macOS drive without admin privilege?

[alexmartinpc]

Hi, I am a Windows user but sometimes I work on MacBooks or Apple PCs. Okay, so this week I received a MacBook Pro 13" late 2011 (with mac OS X Lion installed), meaning it won't recognize APFS bootable drives.

Now, wow, I am going to pretend to be shocked... for the 145th time in a row, the user does not remember the password of the local account, no Apple ID linked. Fine, just fine. However, the MBP was set to auto-log in, so I can access the files and stuff, which is saved, but don't know the password so I can't modify any advanced setting. Also, I am not able to install anything without the password.

My idea was to install a fresh copy of High Sierra, I have an APFS USB with it, but:
1. I do not have a mac at home to create it with extended journaled, which is what the MBP recognizes, instead of APFS
2. I can't upgrade the OS X Lion because it asks for the password
3. I can't install a flash package that upgrades the firmware of the MBP so it can read APFS, asks for the password
4. I can't create a High Sierra bootable drive with extended journaled with the MBP because it *$%#* asks for the password (why would you ask for a password to create a bootable drive...)

So... I am pretty locked out. Any ideas of what to do?

 

[rpmurray]

You may want to try How to reset password for Mac OS X 10.7 Lion.

 

[alexmartinpc]

You may want to try How to reset password for Mac OS X 10.7 Lion.

That did the trick, thank you!
Someone explain to me now what is the purpose of a macOS user password if you can literally change it in 1 min with 3 clicks?

 

[NYCValkyrie]

That did the trick, thank you!
Someone explain to me now what is the purpose of a macOS user password if you can literally change it in 1 min with 3 clicks?

Well, seeing as how Lion is OSX 10 and we are now on MacOS 13, the issue has been addressed https://support.apple.com/guide/mac-help/reset-your-mac-login-password-mh35902/mac

 

[rpmurray]

Well, seeing as how Lion is OSX 10 ...

Nitpick, Lion is actually OS X 10.7

 

[KALLT]

Someone explain to me now what is the purpose of a macOS user password if you can literally change it in 1 min with 3 clicks?

That reset only works when FileVault is not enabled (or a recovery key is available) and no firmware password is hindering you from accessing Recovery.

The user password typically also protects the user keychain (which contains keys, passwords and other sensitive data). A user password reset does not reset the keychain.

 

[chabig]

Someone explain to me now what is the purpose of a macOS user password if you can literally change it in 1 min with 3 clicks?

Security has improved in the 12 years since Lion was released.

 

[alexmartinpc]

You may want to try How to reset password for Mac OS X 10.7 Lion.

Okay, even though I am very disappointed it was that easy to change or modify the forgotten password of a local user in macOS 10.7 Lion, I was happy because I could access all the data in the drive and save it in just a few minutes, to later install the latest macOS compatible.

So... because of the disappointment of Lion OS security, I talked about this in a family reunion recently, and long story short, my cousin has a MacBook Air 7,2 Early 2015 "i5 1.6GHz" with the exact same problem: she has a local user, no AppleID linked, password protected, and she does not remember the password. Hence, she can't access her info. I am not sure what macOS it has, she showed it to me and I can tell it was after El Capitan and before Mojave, both included... I am pretty sure it was El Capitan but I can't tell for sure.

Anyways, I could only start a guest session and do there things, nothing more. I can't access the main and only local account because it's password protected.
I have a USB Catalina Installer drive, but to boot from it, the Air asks for the password. Why? No idea, makes no sense, but it asks for it. I was trying to install a fresh copy of Catalina, that way she loses her info but at least can use her Air normally. Can't be done, so I am/she is locked out.
I even removed the M.2 SSD internal drive to try to boot from the CatInstaller drive and install macOS in another empty drive, but the password was still requested. Even accessing the recovery menu requested the password. I cleared NVRAM, same sad story. I am out of ideas.

I have thought about going to an Apple store with the box of the Air (so they can see I have not stolen it and check the serial number of the box and the MacBook) and ask them if they can somehow unlock the local user or remove the password to first save all the info, and then to be able to install in the internal SSD the newest compatible macOS version.

BUT, may be I ask first here to see if there's something else I can do.

I was really pissed off about how useless was to have a password protected user in macOS Lion, and now I'm pissed off because of the opposite, how is the MacBook Air still asking for the password of a removed SSD user to boot from a USB Catalina installer to install it in a new drive. Both ways completely mind blowing, Apple is just another breed.

 

[rpmurray]

If the Mac had a T2 then you'd be hosed, but the 2015 wouldn't have one so there's hope. Any Macs from 2017 on will be almost impossible to crack if they have a password set.

This almost sounds like someone has set the firmware password, if you can't use the same reset process as you did with Lion. A firmware password will keep you from being able to boot off any other drive without the password. I read about a way to reset the firmware password in DFU mode but haven't been able to recall the article. I'll surf a bit and update here if I find it.

 

[alexmartinpc]

If the Mac had a T2 then you'd be hosed, but the 2015 wouldn't have one so there's hope. Any Macs from 2017 on will be almost impossible to crack if they have a password set.

This almost sounds like someone has set the firmware password, if you can't use the same reset process as you did with Lion. A firmware password will keep you from being able to boot off any other drive without the password. I read about a way to reset the firmware password in DFU mode but haven't been able to recall the article. I'll surf a bit and update here if I find it.

If somehow there's this FW password and I can't do anything to the MacBook, not even erase and reset and start fresh... will an Apple store help me unlock my MacBook (presenting even the original box with the same SN as the MacBook)???

Sadly it was a present so I can't show the ticket (tossed it years ago) or the purchase info in my card movements.

A thing that bugs me is that if I enter the password three or a thousand times wrong, it doesn't ask me if I want to reset it, neither there's a password hint shown... nothing, just the password slot and nothing else. I think it should be totally mandatory to request a password hint, because if not, there's little to no help to unlock it in case you forget it. That does not happen to me, but it happens to a lot of people, including my cousin. Knowing that, Apple should have a plan B for these cases, knowing you can create a local account without your AppleID linked.

 

[Fishrrman]

OP:
"I have a USB Catalina Installer drive, but to boot from it, the Air asks for the password. Why? No idea, makes no sense, but it asks for it. I was trying to install a fresh copy of Catalina, that way she loses her info but at least can use her Air normally. Can't be done, so I am/she is locked out.
I even removed the M.2 SSD internal drive to try to boot from the CatInstaller drive and install macOS in another empty drive, but the password was still requested. Even accessing the recovery menu requested the password. I cleared NVRAM, same sad story. I am out of ideas."

Is this a user account password?
or
Is it a FIRMWARE password?

The firmware password is much more restrictive.

Try to boot, until you see the screen that is asking you for a password.
Take a phone picture of it and post it here, so we can see what you're seeing.

 

[alexmartinpc]

OP:
"I have a USB Catalina Installer drive, but to boot from it, the Air asks for the password. Why? No idea, makes no sense, but it asks for it. I was trying to install a fresh copy of Catalina, that way she loses her info but at least can use her Air normally. Can't be done, so I am/she is locked out.
I even removed the M.2 SSD internal drive to try to boot from the CatInstaller drive and install macOS in another empty drive, but the password was still requested. Even accessing the recovery menu requested the password. I cleared NVRAM, same sad story. I am out of ideas."

Is this a user account password?
or
Is it a FIRMWARE password?

The firmware password is much more restrictive.

Try to boot, until you see the screen that is asking you for a password.
Take a phone picture of it and post it here, so we can see what you're seeing.

I don't have access anymore to the MacBook since it's at my cousin's. I remember I could enter the password wrong as many times as pleased, there was no prompt to help me remember the password. The user was local, no Apple ID linked. I couldn't boot from a Cat Installer drive (first time I see this in a MacBook, so may be it's a stronger than usual password, I don't know if something called Vault was used, I don't know what my cousin did neither she remembers). Even physically removing the internal SSD wouldn't stop from requesting a password to boot from a drive or boot into recovery. AFAIK, completely locked out from every perspective. Kinda smells like a FW password. First time I know about FW password, and I don't know why in heavens my cousin enabled that hellish feature. She's a regular normal user and she barely understand any advanced settings like recovery mode.

Is my last and only resort a visit to an Apple Store?

Since my cousin doesn't have anything other than the MacBook and its box (both share same SN), no ticket, no payment since it was a gift (from a person she is not in touch anymore)... will Apple be able to provide help unlocking it? Will she lose the data?

 

[rpmurray]

Bleep. I found the article on the Mr. Macintosh website, but I had it backwards. You can clear the firmware password on a Mac WITH T2 (but it will delete all the data on the drive). Apparently you can't do this on Macs without the T2.

If you need to remove the Firmware password from a T2 Mac, all you need to do is Restore BridgeOS with a 2nd Mac and Apple Configurator 2.

Of course if FileVault or Find My Mac was enabled then you're still screwed.

 

[alexmartinpc]

Bleep. I found the article on the Mr. Macintosh website, but I had it backwards. You can clear the firmware password on a Mac WITH T2 (but it will delete all the data on the drive). Apparently you can't do this on Macs without the T2.

Of course if FileVault or Find My Mac was enabled then you're still screwed.

So only resort is to go to an Apple Store?

Jesus I hope they don't put much trouble... also, will it be free to unlock it?
I guess they have some hack tools to unlock a password protected MacBook, even if that means erasing its content, and it takes about 5 min to do, right?

Why she enabled such a painfully absurd password method, I don't know, neither she does. Probably did it unconsciously...

 

[chrfr]

So only resort is to go to an Apple Store?

Jesus I hope they don't put much trouble... also, will it be free to unlock it?
I guess they have some hack tools to unlock a password protected MacBook, even if that means erasing its content, and it takes about 5 min to do, right?

Why she enabled such a painfully absurd password method, I don't know, neither she does. Probably did it unconsciously...

Apple will be able to clear the firmware password, but they'll require a proof of purchase, and a box doesn't count for that– you'll need a sales receipt.

 

[alexmartinpc]

Apple will be able to clear the firmware password, but they'll require a proof of purchase, and a box doesn't count for that– you'll need a sales receipt.

But I am sure Apple knows and expects that there are people that don't save the ticket after 8 years of use. I normally toss the ticket (the proof of purchase) once the warranty expires...

It's already good luck that she still has the box, sharing the same serial number. If we want to think of scenarios of "what if", then a ticket can be a fake, a purchase proof fake, I might have robbed the ticket from another person including the MacBook, I can fake my ID, I might have robbed it too, etc...

What is pissing me off is that I can't even erase all the data and install freshly a new copy of the latest macOS. A firmware password that locks you out this sadly absurd way should have mandatory an AppleID linked or another way of recovery. This is just bad and sad however I look at it. People forgets passwords, happens all the time, will happen all the time.

 

[strongy]

But I am sure Apple knows and expects that there are people that don't save the ticket after 8 years of use. I normally toss the ticket (the proof of purchase) once the warranty expires...

It's already good luck that she still has the box, sharing the same serial number. If we want to think of scenarios of "what if", then a ticket can be a fake, a purchase proof fake, I might have robbed the ticket from another person including the MacBook, I can fake my ID, I might have robbed it too, etc...

What is pissing me off is that I can't even erase all the data and install freshly a new copy of the latest macOS. A firmware password that locks you out this sadly absurd way should have mandatory an AppleID linked or another way of recovery. This is just bad and sad however I look at it. People forgets passwords, happens all the time, will happen all the time.

So you deleted the Email they sent you as well, i've got apple reciepts going back years because of this

 

[Fishrrman]

OP wrote:
"But I am sure Apple knows and expects that there are people that don't save the ticket after 8 years of use. I normally toss the ticket (the proof of purchase) once the warranty expires..."

NOPE.
It doesn't work that way.
No "proof of purchase" = no firmware reset.
END OF STORY.

If your cousin created a firmware password, then forgot it, and has no proof of purchase -- Apple won't help. I'm not sure if having the original box will matter. One can steal a Mac, box and all.

There MIGHT be some 3rd-party places that can help, by doing surgery on the MacBook. It probably won't be cheap.

Failing that, it's probably time to put the old one in the closet, and go shopping for a new one.

And this time DO NOT set a firmware password she won't remember in the future!

 

[alexmartinpc]

So you deleted the Email they sent you as well, i've got apple reciepts going back years because of this

It was my cousin, not me, and she told me it was a present from a person she is not in touch anymore. So...

 

[alexmartinpc]

OP wrote:
"But I am sure Apple knows and expects that there are people that don't save the ticket after 8 years of use. I normally toss the ticket (the proof of purchase) once the warranty expires..."

NOPE.
It doesn't work that way.
No "proof of purchase" = no firmware reset.
END OF STORY.

If your cousin created a firmware password, then forgot it, and has no proof of purchase -- Apple won't help. I'm not sure if having the original box will matter. One can steal a Mac, box and all.

There MIGHT be some 3rd-party places that can help, by doing surgery on the MacBook. It probably won't be cheap.

Failing that, it's probably time to put the old one in the closet, and go shopping for a new one.

And this time DO NOT set a firmware password she won't remember in the future!

Having the box in which the MacBook was bought is a pretty solid proof of ownership, which is what matters. No one steals a box of a product, one steal a MacBook in a library, train, etc... and you don't travel with the box. So, it's a pretty solid proof, even though I know Apple can claim as proof whatever BS they think. I might as well steal a ticket, and suddenly Apple blind folds its judgement?

In these scenarios of an "old" laptop, you HAVE to be flexible.

The only reason to ask for a proof of purchase is because they don't want to help robbers, right?
Or is there other reason?

Also, if you buy a MacBook second hand, done thousands of times daily with all kind of Apple products... you never get the ticket or the bill. So it's a senseless policy. The proof of purchase makes sense when you want to use your 24 month warranty, it makes sense to show you purchased the item not more than 24 months ago.
Also... buy a new one? Are you joking? What kind of wild senseless capitalism/consumerism is that?
I have a perfectly capable MacBook equipped with powerful hardware, I have respect first for the ecosystem, and then for my economy and good use of items. I am not an e-waster brainless citizen, I use things until they break or make no more sense to use.

I am talking in first person but really I am "representing" my cousin, because she trusted me to fix this. So remember it is not my MacBook.

 

[Fishrrman]

"Having the box in which the MacBook was bought is a pretty solid proof of ownership, which is what matters. No one steals a box of a product, one steal a MacBook in a library, train, etc... and you don't travel with the box. So, it's a pretty solid proof, even though I know Apple can claim as proof whatever BS they think. I might as well steal a ticket, and suddenly Apple blind folds its judgement?
In these scenarios of an "old" laptop, you HAVE to be flexible."

Please post a followup to let us know how you/she made out at the Apple Store genius bar...

 

[theorist9]

Your cousin could alternately try calling Apple Support. You can check online to find the number for your country. Even though it's out of warranty, they might be willing to help.

 

[alexmartinpc]

Your cousin could alternately try calling Apple Support. You can check online to find the number for your country. Even thought it's out of warranty, they might be willing to help.

Thanks, before making an appointment with the closest Apple Store I will try that!