Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

anush2209

macrumors newbie
Original poster
Aug 18, 2016
2
0
I have one admin account on my macbook air and want to change my account to normal. My account is managed by my company. The problem is that before I can just do it from my account but in El Capitan the box is grayed out even when the system preferences is not locked.
 

Shirasaki

macrumors P6
May 16, 2015
16,263
11,764
By default each OS must have at least one admin account. I don't know the policy of your company but if company does not have an admin account on your machine then it is impossible to change your account to normal.
 

KALLT

macrumors 603
Sep 23, 2008
5,380
3,415
You cannot demote yourself anymore in System Preferences while logged in, even when another administrator account is present. You can remove your administrator access with a Terminal command, but you will not be able to undo this from within the system if no other administrator account is present. The command is this:
Code:
sudo dscl . -delete /Groups/admin GroupMembership your_user_name


The sudo utility will not be available to you anymore, the moment you enter the first command. To restore administrator access, you can promote the account again in System Preferences, or you can use the following command:
Code:
sudo dscl . -append /Groups/admin GroupMembership your_user_name
 
  • Like
Reactions: 997440

chabig

macrumors G4
Sep 6, 2002
11,449
9,321
You cannot demote yourself anymore in System Preferences while logged in, even when another administrator account is present.
That's interesting. But wouldn't you just log into the new administrator account to demote the other administrator while it's not logged in?
 

KALLT

macrumors 603
Sep 23, 2008
5,380
3,415
That's interesting. But wouldn't you just log into the new administrator account to demote the other administrator while it's not logged in?

Yes, that is the regular way to do it. But it used to be possible, up to Mavericks at least, to demote yourself at any time, provided another administrator account is present. It is a bit annoying though if you just want to use the administrator account as-is without the bloat that is added to an account once you log in for the first time (the system creates all sorts of things for you then, keychains, caches and such).
 

Shirasaki

macrumors P6
May 16, 2015
16,263
11,764
Yes, that is the regular way to do it. But it used to be possible, up to Mavericks at least, to demote yourself at any time, provided another administrator account is present. It is a bit annoying though if you just want to use the administrator account as-is without the bloat that is added to an account once you log in for the first time (the system creates all sorts of things for you then, keychains, caches and such).
Windows always allow a user to demote themselves when logged in. But promoting again requires another admin account to do so. A bit better than current Mac OS X .
 

KALLT

macrumors 603
Sep 23, 2008
5,380
3,415
Windows always allow a user to demote themselves when logged in. But promoting again requires another admin account to do so. A bit better than current Mac OS X .

Just the checkbox in System Preferences no longer works. You can make this change with Directory Utility also (in /System/Library/CoreServices) which provides the equivalent functionality of the dscl utility. I have no idea why they changed it. I do not generally like this kind of window dressing, when the functionality is definitely there.
 

pommie82

macrumors 6502
Jan 4, 2011
299
30
uk
I always have two account running all the time just in case their is a problem with my system and if I need to delete the account then I can and use the other account with no problems same apps and everything on both accounts


Much quicker way to have another account then to reformat your machine and does save a lot of time too
 

KALLT

macrumors 603
Sep 23, 2008
5,380
3,415
I always have two account running all the time just in case their is a problem with my system and if I need to delete the account then I can and use the other account with no problems same apps and everything on both accounts


Much quicker way to have another account then to reformat your machine and does save a lot of time too

To be frank, I cannot imagine a situation in which that would help. If there is a problem with an account, and there are not that many things that can go wrong with accounts, then you can always create a new account or repair it. If there is a problem with the system however, then having two accounts is not going to help in any way. Reformatting the device is only necessary if the file-system or partitioning scheme is corrupted. System corruption can almost always be repaired from recovery or a bootable flash drive with OS X on it. You should always have a backup of the complete system in place. You don’t have to make it more complicated. ;-)
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.