← Back to Apple macOS 12 (Monterey) Security Technical Implementation Guide

V-252515

CAT II (Medium)

The macOS system must not allow an unattended or automatic logon to the system.

Rule ID

SV-252515r991591_rule

STIG

Apple macOS 12 (Monterey) Security Technical Implementation Guide

Version

V1R9

CCIs

CCI-000366

Discussion

Failure to restrict system access to authenticated users negatively impacts operating system security.

Check Content

To check if the system is configured to automatically log on, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableAutoLoginClient

If "com.apple.login.mcx.DisableAutoLoginClient" is not set to "1", this is a finding.

Fix Text

This setting is enforced using the "Login Window Policy" configuration profile.