---
id: os_loginwindow_adminhostinfo_undefined
title: Prevent AdminHostInfo from Being Available at LoginWindow
discussion: |
  The system _MUST_ be configured to not display sensitive information at the LoginWindow. The key AdminHostInfo when configured will allow the HostName, IP Address, and operating system version and build to be displayed.
references:
  nist:
    cce:
      macos_15:
        - CCE-94221-9
      macos_14:
        - CCE-93018-0
    800-53r5:
      - AC-11(1)
    800-171r3:
      - 03.01.10
  disa:
    cci:
      - CCI-000060
    srg:
      - SRG-OS-000031-GPOS-00012
    disa_stig:
      macos_15:
        - APPL-15-000009
      macos_14:
        - APPL-14-000009
platforms:
  macOS:
    '15.0':
      benchmarks:
        - name: disa_stig
          severity: medium
    enforcement_info:
      check:
        shell: |-
          /usr/bin/osascript -l JavaScript << EOS
          $.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow')\
          .objectIsForcedForKey('AdminHostInfo')
          EOS
        result:
          string: 'false'
tags:
  - 800-53r5_moderate
  - 800-53r5_high
  - 800-171
  - cnssi-1253_low
  - cnssi-1253_high
  - cnssi-1253_moderate
