TMAegis
More rules for macos

TMA-MACOS-2.11.4

Ensure Login Window Displays as Name and Password Is Enabled

HighLevel 1Automatedmacos

Description

The login window prompts a user for his/her credentials, verifies their authorization level, and then allows or denies the user access to the system.

How it is checked

Audit method: Shell command

shell
/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow').objectForKey('SHOWFULLNAME').js
EOS
Expected output
true

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.loginwindow SHOWFULLNAME = <true/>. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool true. GUI: System Settings > Lock Screen > Set 'Login window shows' to Name and Password.

Properties

Operating systems
macos-26
Tags
macossystem-settings
Reference
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.11.4 Ensure Login Window Displays as Name and Password Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target macos