Disable automatic login

For Mac OS X 10.9 or above, an additional setting can be configured to control login behavior after FileVault 2 is enabled.

By defaults, after FileVault 2 is enabled, a different login screen will display at machine start up, which only allows FileVault 2 authorized users to login and start up the machine, and then the user account that is authenticated will be login automatically.

For administrator who supporting machines that are operating on Mac OS X 10.9 or above and want to disable this automatic login behavior, please enable this group policy. With this group policy enabled, the normal login screen will appear after start up, instead of automatically login to the authenticated user account.

This group policy can take effect dynamically at the next group policy refresh interval without rebooting the computer.

NOTE: This group policy only work when "Enable FileVault 2" group policy is enabled.

Supported on:

Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Mac\Security\FileVault2
Value NameDisableFDEAutoLogin
Value TypeREG_SZ
Enabled Value
Disabled Value


Administrative Templates (Computers)

Administrative Templates (Users)