Starting August 15, 2019, we’re rolling out a new local admin account to 10.14 Macs, “UM-Support”. This account is designed to be primarily used:
During pre-delivery phases, for verifying the build or restoring user data.
Logging in as UM-Support will enable FileVault when appropriate, based on the policy domain in Izzy.
Situations where AD “M-1” accounts are not working or not getting admin rights - often in a remote support session
The password for the UM-Support account is visible in Izzy under the “Support Account Details” action on each system’s Izzy page.
Once viewed, the password will be rotated in a few hours.
Additionally, a second account, “UM FileVault Mgmt” will show up on FileVault-managed systems. This account is only local to the Mac. It is used to add new users to the FileVault-enabled users. The password is only stored on the Mac.
Please advise users not to delete either of these accounts. If they do the account(s) will be restored at next login.