macos local user changed to admin in hexnode keeps reverting to standardSolved

Participant
Discussion
2 months ago Apr 18, 2026

We manage macOS devices in hexnode and some users sign in with their Google workspace account using the work account login flow. After the user is created on the Mac, I use the Hexnode action from the portal to change the local user role to Administrator. 

The action shows as successful and the user appears as admin at first. However, on some Macs, the same user shows up as a standard user again after a day or two. It is not happening consistently across all devices—one test Mac kept the admin role, while another reverted back to standard. 

There are no scripts or policies that we intentionally configured to downgrade the user. Has anyone seen this with Google Workspace-linked macOS accounts or Hexnode local account management? 

Replies (3)

Marked SolutionPending Review
Participant
2 months ago Apr 19, 2026
Marked SolutionPending Review

We ran into a very similar issue, and when we talked with support, it turned out to be a bug with older agent versions causing the role to revert!

Before jumping to the agent update, you should check a few scenarios first, since this can also happen if the local account state on the Mac is being refreshed after the role change:

  1. Confirm whether the affected account is a local macOS account linked to an IdP account, rather than a manually created local-only account.
  2. Review whether any macOS policy or account management setting is configured to migrate or synchronize local accounts as network accounts.
  3. Check the device action history to confirm whether the admin role change completed successfully and whether any later sync or account-management action occurred.

If those all look good, make sure the Hexnode agent on the Mac is updated to the latest version.

Marked SolutionPending Review
Hexnode Expert
2 months ago Apr 19, 2026
Marked SolutionPending Review

Hi @aurora,

@jayceon is exactly right! A known issue in earlier agent builds could cause the local user role on macOS to revert from Administrator to Standard after being changed from the portal. This was fully addressed in Hexnode agent version 29.0.5.

Here are the recommended steps to resolve it:

  1. Update the Hexnode agent on the affected macOS devices to version 29.0.5 or later.
  2. Allow the device to sync with Hexnode after the update.
  3. Run the Hexnode action to change the local user role to Administrator again.
  4. Verify the user role locally on the Mac and in the Hexnode Local Accounts view.

If the user still reverts to Standard after the agent is updated, let us know and we can check for any specific macOS policies managing your local account migrations!

Best regards,
Eden Pierce
Hexnode UEM

Marked SolutionPending Review
Participant
2 months ago Apr 20, 2026
Marked SolutionPending Review

That was exactly it. I checked the affected devices and they were on an older agent version, so I updated to 29.0.5 and the accounts have stopped reverting to standard. Thanks for the help!

Save