Recover lost admin rights on OS X 10.10 and 10.11_allow user administer this computer
If you lost your administrator rights on macOS 10.13 High Sierra, macOS 10.12, Mac OS X 10.10 Yosemite or Mac OS X 10.11 El Capitan, you can recover the admin privileges easily by rebooting into Apple’s Setup Assistant tool. This will run before any accounts have been loaded, and will run in “root” mode, allowing you to create accounts on your Mac. Then, you can recover your admin rights via the new administrator account. After that, you can reboot into your recovered admin account and delete the interim administrator account.
Note (Updated February, 3, 2021): The following fix applies to macOS High Sierra 10.13 and earlier. For macOS Mojave 10.14, macOS Big Sur 11 and later, fixing Mac no admin account via the “Command – S” (SUM = Single User Mode) route is not possible anymore. The updated fix therefore is found here: Fixing Mac No Admin Account On macOS Mojave Or Later
Normally, when you set up Mac OS X / macOS for the first time, your initial account will be an administrative one, allowing you to configure the system and install applications. Sometimes rare, errors that occur when upgrading, e.g. from OS x 10.10 Yosemite to OS X 10.11 El Capitan, or restoring from backup, or otherwise when making heavy modifications to the system, could result in your admin account being destroyed so you cannot log in to it or use it for changing system settings.
If it happens then one quick but well-known and convenient trick for recovering administrative status on a system trigger Apple’s Setup Assistant tool. This will run before any accounts have been loaded, and will run in “root” mode, allowing you to create accounts on your Mac.
Even though the Setup Assistant only runs once when you first install Mac OS X / macOS, it remains on your computer and is prevented from running by the presences of a hidden file called ‘.AppleSetupDone‘ in a system folder on your Mac. Therefore, to have the Setup Assistant run again so you can create a fresh admin account, you simply need to remove this file:
At the command prompt, run the following command to make the filesystem writable: mount -uw /
Run the following command to remove the hidden file: rm /var/db/.AppleSetupDone
When completed, enter ‘reboot‘ and the prompt to restart the system, and you will now see the Setup Assistant load when OS X starts up.
Proceed through its various screens, and create your new account. You might consider using a different username than any previous accounts on the system, to ensure there are no conflicts with the present and faulty accounts.
Now you can log into the new admin account, and better manage the prior ones on your system, including deleting and recreating them accordingly.
Notes:
You should be aware that this method can be used to get administrative access to your Mac OS X / macOS system. This means it is a potential security risk. Anyone can reset account passwords or get admin access in this way, and be able to access all files on your computer.
For getting a higher security level, be sure that all sensitive material on your system is password-protected or even better, encrypted. Even if someone gains access to your account, without your keychain password or the password for the encrypted files, they will not be able to access them. Consider to enable Apple’s FileVault and encrypting any external drives you use with your Mac (including Time Machine backups), to secure access to your files.
The next option is to set a firmware password for your Mac, which will prevent booting to alternative boot modes and external disks. To do this, reboot to the OS X installation drive (be it a DVD or the Recovery HD partition in OS X Lion or later), choose your language when prompted, and then choose the ‘Firmware Password‘ option in the Utilities menu. Enter your password in the appropriate fields, and then nobody will be able to reset PRAM, boot to Safe Mode, Single User mode, or to alternative boot drives unless they either disable the password or supply it when prompted.
Easily recover lost admin right on Mac OS X 10.10 Yosemite, Mac OS X 10.11 El Capitan, macOS 10.12 Sierra, and macOS 10.13 High Sierra by reactivating Apple’s Setup Assistant tool. Be aware that this option is also a security risk to your mac.
Hi there,my name is Gee Are, blogger and analyst. Blogging is my Passion! I’m the founder and owner of the two blogs called pabst.socialmedia and miapple.me - Tech.Blog.My work experience as a blogger and analysist (Internet Intelligence, SEO and social media) is the basis of the services of pabst.socialmedia.Find more about me.
I put myself in trouble with my wife’s iMac. Hers is a second hand one. Next to my admin account (Charlie V, my English nickname) I installed originally her account also with admin privileges. Last autumn, she accidentily deleted some software. That was for me the sign to change her into a standard user. Now, almost 9 months later, I need to install new software but I’m not allowed. And who’s the idiot now? ME! Seems I completely forgot my own admin password. I’ve been trying different combinations for over a week. I have tried all keyboard combinations. I could not solve it. Same with firmware password. Apparently the original owner must have added a firmware password? There is no possibility to access myself! Apple doesn’t wanna help me, because I have no official invoice. My iMac was not stolen! Can anybody help me?
Had the same glitch where renaming the user got rid of the admin privileges. This method did not work for me. Had success booting into single-user mode and deleting the user setup and it only took a few minutes.
During the new account creation process, I am prompted to “Please enter the password used to unlock your Mac’s boot volume.” I have no idea what this means, and none of my passwords work.
hello I tried to change the user name on my admin account and i have lost admin privileges to my laptop I have researched to fix the problem and someone said you cannot fix if you have filevault enabled which i do, is there anything i can do? thanks! 🙁
71 Comments
what are the exact steps please. i somehow unchecked admin box and don’t have access anymore as a use, only standard user…
I put myself in trouble with my wife’s iMac. Hers is a second hand one. Next to my admin account (Charlie V, my English nickname) I installed originally her account also with admin privileges. Last autumn, she accidentily deleted some software. That was for me the sign to change her into a standard user. Now, almost 9 months later, I need to install new software but I’m not allowed. And who’s the idiot now? ME! Seems I completely forgot my own admin password. I’ve been trying different combinations for over a week. I have tried all keyboard combinations. I could not solve it. Same with firmware password. Apparently the original owner must have added a firmware password? There is no possibility to access myself! Apple doesn’t wanna help me, because I have no official invoice. My iMac was not stolen! Can anybody help me?
Will this work even if my Firevault is turned on?? I tried 3x but no effects after reboot
Had the same glitch where renaming the user got rid of the admin privileges. This method did not work for me. Had success booting into single-user mode and deleting the user setup and it only took a few minutes.
During the new account creation process, I am prompted to “Please enter the password used to unlock your Mac’s boot volume.” I have no idea what this means, and none of my passwords work.
Thank you,
Hi there!
Will all my data and docs still be on my pc after I reboot it?
Thanks,
Amy
It should, you just create a new admin account. Do not delete any other account!
How do you know when you are at the command prompt to enter the codes?
came across this thread…finally…worked like a charm! Thanks so much! Your my hero!
You’re welcome! 🙂 Thanks for your feedback!
“rebooting into Apple’s Setup Assistant tool. ” How?
hello I tried to change the user name on my admin account and i have lost admin privileges to my laptop I have researched to fix the problem and someone said you cannot fix if you have filevault enabled which i do, is there anything i can do? thanks! 🙁
any solution ?