macOS temporary admin role reverted on device but still shows Administrator in HexnodeSolved

For macOS local account role changes, Hexnode assigns the timed role change task to the operating system. Once the duration expires, macOS handles the role reversion on the device, and the updated local account status is then reported back to Hexnode.

If the role has already reverted on the Mac but the Hexnode portal still shows the account as Administrator, the displayed status may be stale. You can refresh the local account inventory manually:

1. Go to the Manage tab.

2. Choose the affected macOS device.

3. Click Actions > Policies and Accounts.

4. Select Sync Local Accounts.

This should update the local account role shown in Hexnode.Also make sure the Hexnode UEM Helper is allowed to run in the background on the Mac:

Apple menu > System Settings > General > Login Items

Confirm that Hexnode UEM Helper is toggled on. If the helper process is not running properly, local account status updates may not be reported immediately.

Regards,
Mary Romero

Running Sync Local Accounts updated the status correctly. So does this mean we have to manually sync every time a temporary admin role expires?

Manual syncing should not be required every time. In most cases, Hexnode updates the local account status automatically after macOS completes the role change.

However, there can be cases where the role is correctly reverted on the device, but the operating system does not immediately report the updated status back to the Hexnode agent. This can happen occasionally, for example if the device is under heavy load or the helper process is not running as expected.

In that situation, Sync Local Accounts is the recommended way to refresh the status shown in the portal. It does not reapply the role change; it only updates Hexnode with the current local account state from the Mac.

Regards,
Mary Romero