Category filter

Configuration profile to remove the Restart button from the login screen of Mac

Having a Restart button on the login screen makes it easier for users to restart their macOS devices without logging in. But what if the IT administrator wants to remove the Restart button from the login screen of all their macOS devices for security or administrative reasons? Hexnode offers an efficient solution to this with the Deploy Custom Configuration feature that remotely deploys a custom configuration profile to multiple enrolled macOS devices to remove the Restart button from their login screens.

Disclaimer:

The configuration profile provided below is adapted from a third-party open-source site.

<?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> 
<plist version="1.0"> 
<dict> 
      <key>PayloadContent</key> 
      <array> 
             <dict> 
                   <key>PayloadContent</key> 
                   <dict> 
                         <key>com.apple.loginwindow</key> 
                         <dict> 
                               <key>Forced</key> 
                               <array> 
                                      <dict> 
                                            <key>mcx_preference_settings</key> 
                                            <dict> 
                                                   <key>RestartDisabled</key> 
                                                   <true/> 
                                            </dict> 
                                      </dict> 
                               </array> 
                         </dict> 
                   </dict> 
                   <key>PayloadEnabled</key> 
                   <true/> 
                   <key>PayloadIdentifier</key> 
                   <string>MCXToProfile.1ad0bc7c-83fc-4aa1-9837-rf5ce06e422a.alacarte.customsettings.d1ce508c-e2bd-43c0-879b-08fa130a5e6e</string> 
                   <key>PayloadType</key> 
                   <string>com.apple.ManagedClient.preferences</string> 
                   <key>PayloadUUID</key> 
                   <string>e2cw501c-e3bd-23c0-479b-15fw430a7e6e</string> 
                   <key>PayloadVersion</key> 
                   <integer>1</integer> 
             </dict> 
      </array> 
      <key>PayloadDescription</key> 
      <string>Included custom settings: 
com.apple.loginwindow 

Git revision: 5aefeaf7eb</string> 
      <key>PayloadDisplayName</key> 
      <string>MCXToProfile: com.apple.loginwindow</string> 
      <key>PayloadIdentifier</key> 
      <string>RestartRemovedFromLoginwindow</string> 
      <key>PayloadOrganization</key> 
      <string></string> 
      <key>PayloadRemovalDisallowed</key> 
      <true/> 
      <key>PayloadScope</key> 
      <string>System</string> 
      <key>PayloadType</key> 
      <string>Configuration</string> 
      <key>PayloadUUID</key> 
      <string>2as0bc7c-83fc-3aa1-9837-ef5ce06e442w</string> 
      <key>PayloadVersion</key> 
      <integer>1</integer> 
</dict> 
</plist>

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>PayloadContent</key>

<array>

<dict>

<key>PayloadContent</key>

<dict>

<key>com.apple.loginwindow</key>

<dict>

<key>Forced</key>

<array>

<dict>

<key>mcx_preference_settings</key>

<dict>

<key>RestartDisabled</key>

<true/>

</dict>

</array>

</dict>

<key>PayloadEnabled</key>

<true/>

<key>PayloadIdentifier</key>

<string>MCXToProfile.1ad0bc7c-83fc-4aa1-9837-rf5ce06e422a.alacarte.customsettings.d1ce508c-e2bd-43c0-879b-08fa130a5e6e</string>

<key>PayloadType</key>

<string>com.apple.ManagedClient.preferences</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</array>

<key>PayloadDescription</key>

<string>Included custom settings:

com.apple.loginwindow

Git revision: 5aefeaf7eb</string>

<key>PayloadDisplayName</key>

<string>MCXToProfile: com.apple.loginwindow</string>

<key>PayloadIdentifier</key>

<string>RestartRemovedFromLoginwindow</string>

<key>PayloadOrganization</key>

<key>PayloadRemovalDisallowed</key>

<true/>

<key>PayloadScope</key>

<string>System</string>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</plist>

What happens at the device end?

Once the policy and custom configuration are associated, the Restart button is prevented from appearing in the login screen of the macOS device.

Restart button removed from the login screen

Notes:

To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors.
Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across devices.
Ensure that you do not associate conflicting configurations with the devices.
Use wildcards to fetch key values from the portal.
It is recommended to manually validate the configuration profile on a system before executing it in bulk.
Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

Need more help?

Raise a Ticket

Ask Community

Chat With us

Configuration profile to remove the Restart button from the login screen of Mac

Remove Restart button from login screen

What happens at the device end?