Script to Revoke/Give Admin rights to Standard User in Mac

Administrative privileges are necessary for making system-wide changes like adding/managing users, adding/deleting programs etc. Using the following scripts, you can revoke or grant admin rights to a user through Hexnode.

Disclaimer:

The Sample Scripts provided below are adapted from third-party Open-Source sites.

Jump To

• Revoking admin rights of an account
• Giving admin rights to a standard account

Revoking admin rights of an account

Script to revoke admin rights of an account

Shell

#!/bin/sh USERNAME=$1 sudo dseditgroup -o edit -d "$USERNAME" -t user admin errcode=$? if [ "$errcode" -ne 0 ]; then echo "" echo "Failed” echo "" exit 1 fi echo "Admin rights revoked for user $USERNAME"

1 2 3 4 5 6 7 8 9 10 11 12

#!/bin/sh USERNAME=$1 sudo dseditgroup -o edit -d "$USERNAME" -t user admin errcode=$? if [ "$errcode" -ne 0 ]; then echo "" echo "Failed” echo "" exit 1 fi echo "Admin rights revoked for user $USERNAME"

Giving admin rights to a standard account

Script to give admin rights to standard account

Shell

#!/bin/sh USERNAME=$1 /usr/sbin/dseditgroup -o edit -a "$USERNAME" -t user admin errcode=$? if [ "$errcode" -ne 0 ]; then echo "" echo "Failed with errorcode $errcode" echo "" exit 1 Fi

1 2 3 4 5 6 7 8 9 10 11

#!/bin/sh USERNAME=$1 /usr/sbin/dseditgroup -o edit -a "$USERNAME" -t user admin errcode=$? if [ "$errcode" -ne 0 ]; then echo "" echo "Failed with errorcode $errcode"   echo "" exit 1 Fi

Notes:

• It is recommended to manually validate the script execution on a system before executing the action in bulk.
• Hexnode will not be responsible for any damage/loss to the system on the behavior of the script.