Can someone possibly point me to a query check if accounts on a machine have passwords enabled? Windows, Mac and/or Linux. Thanks!

How do you mean, if a password is set for a user?

yes, ie, the password is not empty.

I was able to hunt this down for MacOS: https://gist.github.com/theopolis/99718fc1e07e814268d6bd0aa5bacd0a

Thanks! The second query in that gist does not work for me (shows a

constraint failure

error,) but the first one works.

I had the same experience.

There is a new

password_policy

table on macOS, perhaps that's helpful too

Here’s a “Password requires 10 or more characters” query that uses the

password_policy

table: https://fleetdm.com/queries/password-requires-10-or-more-characters-mac-os You can use this query as a Fleet policy. Works for macOS.

It looks like

password_policy

table needs the mac to be enrolled into an MDM?

Hmm, I’m not sure. @Guillaume or @sharvil do you know?

hey @Avik Sengupta,

password_policy

table doesn’t necessarily mean MDM..one can set local policies on the mac without MDM, and the table will report it