How to Review and Audit Mac Administrator Accounts

Secure your system by auditing local administrator accounts. Learn how to verify, identify, and manage macOS admin privileges using System Settings.

1. Open System Settings. Click the Apple menu in the top-left corner of your screen and select System Settings. Navigate to the Users & Groups tab located in the sidebar to view the local directory.
2. Identify administrator accounts. Scan the list of users displayed in the right-hand pane. Look for the label 'Admin' appearing directly beneath the username to confirm which accounts possess elevated privileges.
3. Use the Terminal for a complete list. Open Terminal from your Utilities folder. Enter 'dscl . -read /Groups/admin GroupMembership' and press Return to display every account with membership in the admin group.
4. Remove administrative privileges. Return to System Settings > Users & Groups. Click the 'i' (info) button next to a user you wish to demote, and toggle off the 'Allow user to administer this computer' switch.
5. Authenticate changes. Enter your administrator password when prompted by the system to authorize the change in privileges. The account will immediately revert to standard status without requiring a reboot.