Ensure Login Window Displays as Name and Password Is Enabled

How it is checked

Audit method: Shell command

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow').objectForKey('SHOWFULLNAME').js
EOS

Expected output

true

How it is fixed

Fix method: Guidance or infrastructure patch

Graphical Method: Perform the following steps to ensure the login window display name and password: 1. Open System Settings 2. Select Lock Screen 3. Set 'Login window shows' to Name and Password Terminal Method: Run the following command to enable the login window to display name and password: % /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool true Note: The GUI will not display the updated setting until the current user(s) logs out. Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.loginwindow 2. The key to include is SHOWFULLNAME 3. The key must be set to <true/>

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

tmaegis scan --target macos