I've got a user's iMac that seems to be asking for admin credentials more often than it should be, all it says is that Mac OS requires admin credentials. Is there a way of finding out what application is asking for it?

  • 1
    Can you post a screen shot of the dialog. That one doesn't sound familiar.
    – Allan
    Dec 6 '18 at 12:49
  • Also a good idea to include the version of macOS in your original post. Dec 6 '18 at 14:38
  • 1
    Possible duplicate of ICloud Password prompt
    – mmmmmm
    Jan 31 '19 at 15:29
  • re duplicate the question differs but the answer is I think the same
    – mmmmmm
    Jan 31 '19 at 15:30
  • @Mark the other question is about iCloud, with iCloud specific answers. What makes you thing they apply here as well, and how do they help identifying the application triggering the prompt?
    – nohillside
    Jan 31 '19 at 18:53

I would configure syslog to record those details into a file.

Assuming that you are comfortable with editing text files from the command prompt, use your favorite editor and edit /etc/syslog.conf adding this line:

auth.info;authpriv.*;remoteauth.crit   /var/log/authinfo.log

Then send a hangup signal to syslogd via

pkill -HUP -i -l syslogd


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .