Enable automatic login with automatic screen lock | 16 comments | Create New Account
Click here to return to the 'Enable automatic login with automatic screen lock' hint |
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Enable automatic login with automatic screen lock
Question: will this work if I otherwise set my screensaver to 'Never' turn on? I'd like to restrict login access to the machine (which is in a semi-public space), but once logged in keep the screensaver from coming on.
Open System Preferences Accessibility. Check the box next to 'Enable access for assistive devices'.
- In this example, the script clicks on each menu extra, and looks at the first menu item. If the name of the item is 'Lock Screen', then it clicks it. Note that UI Scripting has to be enabled for this to run (System Preferences-Universal Access-Enable access for assistive devices.).
- Similar to the post on this page about Mac OS X 10.9 (Mavericks), to resolve this issue on Mac OS X 10.8 (and likely on earlier versions of OS X also), you need to ensure that the 'Enable access for assistive devices' option has been enabled in the Accessibility pane of System Preferences.
Enable automatic login with automatic screen lock
Yes, it should -- the 'Never' setting is just how long the computer will wait before activating the screensaver application when you're idle, whereas this just opens it at login. Is my mac too old for catalina.
Enable automatic login with automatic screen lock
How are about this:
/System/Library/CoreServices/Menu Extras/User.menu/Contents/Resources/CGSession -suspend > /dev/null
/System/Library/CoreServices/Menu Extras/User.menu/Contents/Resources/CGSession -suspend > /dev/null
Enable automatic login with automatic screen lock
Um, couldn't this 'security' be bypassed by holding the shift key at startup?
Enable automatic login with automatic screen lock
First rule in security: If someone has physical access to the machine, it isn't secure.
For example, even if the screen was already locked, someone can just come up and pull the power cord and hold command-S when restarting the machine. All security is bypassed.
If you have an open firmware password, the person can simply open the case, pull a RAM stick and restart the machine.
This method is pretty good for locking down a machine in a trusted environment; i.e. one where you don't expect people to deliberately work at compromising your machine, but might mess you up without intending to do so or see something they shouldn't (like a payroll spreadsheet) if your machine wasn't locked at all.
For example, even if the screen was already locked, someone can just come up and pull the power cord and hold command-S when restarting the machine. All security is bypassed.
If you have an open firmware password, the person can simply open the case, pull a RAM stick and restart the machine.
This method is pretty good for locking down a machine in a trusted environment; i.e. one where you don't expect people to deliberately work at compromising your machine, but might mess you up without intending to do so or see something they shouldn't (like a payroll spreadsheet) if your machine wasn't locked at all.
Enable automatic login with automatic screen lock
FYI in case anyone was wondering..
Changing RAM configuration on a machine protected by the Open-Firmware Password disables the password.
---
Rick alias cougar
Changing RAM configuration on a machine protected by the Open-Firmware Password disables the password.
---
Rick alias cougar
Enable automatic login with automatic screen lock
If you use FileVault though, you do have some protection, since the attacker will have to find a way to decrypt the files, which is really hard. The downside is that FileVault is a little buggy? or at least seems that way in the reports I've read.
Enable automatic login with automatic screen lock
safe boot disables automatic login, at least in tiger.8 (goes to login window).
See http://www.macosxhints.com/comment.php?mode=display&format=threaded&order=ASC&pid=63858
for a shell script which you can run at log-in. You can adjust the idle time to less if you want the screen saver to kick in quicker.
for a shell script which you can run at log-in. You can adjust the idle time to less if you want the screen saver to kick in quicker.
Enable automatic login with automatic screen lock
I use OSX-vnc to do this. It has a startup item so it can run in the background of the login screen. I can remotely login using the vnc password, and then login using the computer account. I can also lock the machine using fast user switch/login window. It is not seemless though, I usually get kicked off vnc upon logging in/out, and i must re-login the vnc session.
There is a way to script the keychain menu, but it's not through the Keychain Access application. Instead, you have to go through the UI Server, which controls all of the 'menu extras' menus. Normally, you can find a particular menu extra by it's description ('iChat menu extra', for example.) However, the keychain menu extra does not register a description for itself, so if you want to access it via AppleScript, you have to do a bit more of a 'kludgy' search. In this example, the script clicks on each menu extra, and looks at the first menu item. If the name of the item is 'Lock Screen', then it clicks it. Note that UI Scripting has to be enabled for this to run (System Preferences->Universal Access->Enable access for assistive devices.)
I knew someone else would have worked this out for me. Excellent!
This is really bad security. If an attacker has physical access to your machine, holding down shift while it automatically logs you in will disable the Login Items and then you're wide open.
Of course if they have physical access and half a clue, you're probably screwed at that point anyway.
Of course if they have physical access and half a clue, you're probably screwed at that point anyway.
There is one easy way to stop the screen lock in boot: keep the mouse moving. The screensaver engine will notice the user is still busy and won't activate. So, really, this isn't too much better than without the screensaver if you know this trick.
On the VNC route, user-based server apps (Vine Server, etc) can give you access to your desktop while a login screen is displayed (user switching required) but you'll get odd results from a context that isn't in charge (think audio and video hardware access. Some apps can crash or misbehave). This can give you to the GUI, albeit not 100% compatible, but still a step up from just command line.
Alternatively, I think if you enable Remote Desktop with VNC access enabled, that being system wide, you can actually access the login screen by remote. The downside is of course, you can't hide behind the login screen like you can with a user-bound server app, but has the advantage that its always present, and autologin isn't needed. Also, the built-in server doesn't support all the traffic-reducing features of user apps, but I think this solution will become much more useful in Leopard. Apple is touting Screen Sharing as a real feature. Imagine it combined with back-to-my-mac (personal VPN, requires .Mac)
Killer combination of features.
http://www.apple.com/dotmac/backtomymac.html
On the VNC route, user-based server apps (Vine Server, etc) can give you access to your desktop while a login screen is displayed (user switching required) but you'll get odd results from a context that isn't in charge (think audio and video hardware access. Some apps can crash or misbehave). This can give you to the GUI, albeit not 100% compatible, but still a step up from just command line.
Alternatively, I think if you enable Remote Desktop with VNC access enabled, that being system wide, you can actually access the login screen by remote. The downside is of course, you can't hide behind the login screen like you can with a user-bound server app, but has the advantage that its always present, and autologin isn't needed. Also, the built-in server doesn't support all the traffic-reducing features of user apps, but I think this solution will become much more useful in Leopard. Apple is touting Screen Sharing as a real feature. Imagine it combined with back-to-my-mac (personal VPN, requires .Mac)
Killer combination of features.
http://www.apple.com/dotmac/backtomymac.html
As stated prevously, the login items can be bypassed by holding the Shift key. Because of this I have written a login hook based on Joe Mullin's Two factor authentication script. http://techgoesboom.com/archives/2004/09/29/two_factor_authentication_in_os_x.php
! Note: But it doesnt work with filevault.
Please bear in mind that useing login hooks can render your machine un-usable. To safeguard against such events its recommended to write down the restoration command on a piece of paper. Login hooks are run as root, they can be disabled from single-user mode (press 's' on startup).
This above script is nice under normal circumstances because you dont really notice it and no 'second wait' while user account is still loaded.
! Note: But it doesnt work with filevault.
Please bear in mind that useing login hooks can render your machine un-usable. To safeguard against such events its recommended to write down the restoration command on a piece of paper. Login hooks are run as root, they can be disabled from single-user mode (press 's' on startup).
This above script is nice under normal circumstances because you dont really notice it and no 'second wait' while user account is still loaded.
jason209 - nice script, however under Snow Leopard this causes the system to just display a blue screen after you click the 'Already Logged In User' and enter your password (logging into another account, such as the Guest Account, works fine).
Any ideas how to get this working with Snow Leopard?
Any ideas how to get this working with Snow Leopard?
(Redirected from Universal Access (Mac OS X))
Developer(s) | Apple Computer |
---|---|
Stable release | |
Operating system | Mac OS X |
Type | System Utility |
License | Proprietary |
Website | https://www.apple.com/macosx/ features/universalaccess/ |
Apple Universal Access is a component of the Mac OS Xoperating system that provides computing abilities to people with visual impairment, hearing impairment, or physical disability.
Components[edit]
Universal Access is a preference pane of the System Preferences application. It includes four sub-components, each providing different options and settings.
Seeing[edit]
- Turn On/Off VoiceOver 10.4
- Turn On/Off Screen Zooming 10.2
- Inverse Colors (White on Black, also known as reverse colors), ⌘ Command+⌥ Option+Control+8 10.2
- Set Display to Greyscale (10.2 onwards)
- Enhance Contrast 10.3
- Enable Access for Assistive Devices 10.2
- Enable Text-To-Speech for Universal Access Preferences 10.2
Mac Yosemite Access For Assistive Devices Mac
Hearing[edit]
- Flash the screen when an alert sound occurs 10.2
- Raise/Lower Volume 10.2
Keyboard[edit]
- Sticky Keys (Treat a sequence of modifier keys as a key combo) 10.1
- Slow keys (Delay between key press and key acceptance) 10.1
Mouse[edit]
- Mouse Keys (Use the numeric keypad in place of the mouse) 10.1
- Mouse Pointer Delay 10.1
- Mouse Pointer Max Speed 10.1
- Mouse Pointer enlarging 10.1
Mac Enable Access For Assistive Devices
External links[edit]
Retrieved from 'https://en.wikipedia.org/w/index.php?title=Universal_Access&oldid=966361545'