Disabling Automatic FileVault Login

Jamf Connect Documentation
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

To prevent the macOS login process from skipping Jamf Connect when FileVault is enabled, you can disable automatic login on computers.

The following diagram shows how these settings ensure the Jamf Connect login window is not bypassed during login:

You can disable Apple's automatic login feature on computers by doing one of the following:

  • Enable the Require Network Authentication (DenyLocal) setting. This setting forces network authentication to occur on computers with Jamf Connect login window already enabled, which prevents the Jamf Connect login window password from being bypassed by FileVault.

  • Upload the following PLIST file using the Custom Settings payload in your MDM solution. Make sure you specify the following preference domain: com.apple.loginwindow

    <?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0">  
  <dict>  
    <key>DisableFDEAutoLogin</key>  
    <true/>  
  </dict> 
</plist>