Apple ID macOS user password reset settings

[jha]

How can you tell if "allow apple id to reset password" was enabled on a user account and potentially disable it?

 

[0128672]

How can you tell if "allow apple id to reset password" was enabled on a user account and potentially disable it?

It used to show as an option under Settings > Users & Groups when a user was highlighted as "Allow user to reset password using Apple ID", but it's not there in Monterey. I created a test account and it doesn't show there either. I've researched but can't find where/how/if that options exists now.

 

[jha]

Thanks really interested in figuring this out - could be a potential security issue for some.

 

[0128672]

Thanks really interested in figuring this out - could be a potential security issue for some.

There are multiple password reset options, so maybe Apple decided that one was not as secure as the other methods. Just a guess.

 

[NoBoMac]

Dirty way to check is to logout, go to login screen, enter three times an incorrect password: you will now get the "recovery" options and if Apple ID is one of them, will show there.

As to why not showing, guess, might also be impacted by FileVault? Maybe cannot do resets via Apple ID if FileVault is on. For example, automatic login is disable with FileVault.

When manual login is required, the “Automatic login” menu is dimmed or doesn't show the account name. For example:

• If FileVault is turned on, manual login is required for all accounts. You can turn FileVault off.
• If an account uses an iCloud password to log in, manual login is required for that account. You might also see the message “A user with an encrypted home folder can't log in automatically.” When changing the account password, you can choose not to use the iCloud password.

 

[jha]

Dirty way to check is to logout, go to login screen, enter three times an incorrect password: you will now get the "recovery" options and if Apple ID is one of them, will show there.

As to why not showing, guess, might also be impacted by FileVault? Maybe cannot do resets via Apple ID if FileVault is on. For example, automatic login is disable with FileVault.

Doesn't seem to be a lot of concrete information about this