How to Review and Audit Mac Administrator Accounts

Step by step

1. 30 sec

   Open System Settings

   Click the Apple menu in the top-left corner of your screen and select System Settings. Navigate to the Users & Groups tab located in the sidebar to view the local directory.

2. 1 min

   Identify administrator accounts

   Scan the list of users displayed in the right-hand pane. Look for the label 'Admin' appearing directly beneath the username to confirm which accounts possess elevated privileges.

   Note: Standard users will not have the 'Admin' designation.
3. 1 min

   Use the Terminal for a complete list

   Open Terminal from your Utilities folder. Enter 'dscl . -read /Groups/admin GroupMembership' and press Return to display every account with membership in the admin group.

   Note: Terminal output provides an unfiltered view that may include hidden system accounts.
4. 1 min

   Remove administrative privileges

   Return to System Settings > Users & Groups. Click the 'i' (info) button next to a user you wish to demote, and toggle off the 'Allow user to administer this computer' switch.

   Note: You must have at least one remaining administrator account on the system.
5. 30 sec

   Authenticate changes

   Enter your administrator password when prompted by the system to authorize the change in privileges. The account will immediately revert to standard status without requiring a reboot.