{
	"id": "fcff16b2-2f47-4f5a-8e79-b7d099af5c74",
	"created_at": "2026-04-06T00:19:02.758213Z",
	"updated_at": "2026-04-10T03:20:48.088151Z",
	"deleted_at": null,
	"sha1_hash": "e6bdea722d0dfce56dea35c9b86b6736d8adedbd",
	"title": "LoginWindowScripts | Apple Developer Documentation",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 50188,
	"plain_text": "LoginWindowScripts | Apple Developer Documentation\r\nArchived: 2026-04-05 13:09:54 UTC\r\nDevice Management\r\nLoginWindowScripts\r\nDevice Management Profile\r\nThe payload that configures scripts to run at login and logout.\r\nmacOS 10.7+\r\nobject LoginWindowScripts\r\nProperties\r\nAn array of one or more dictionaries of scripts to run at user login time.\r\nAn array of one or more dictionaries of scripts to run at user logout time.\r\nIf true , the system doesn’t execute the login scripts during login.\r\nIf true , the system doesn’t execute the logout scripts during logout.\r\nDiscussion\r\nSpecify com.apple.mcxloginscripts as the payload type.\r\nThe MCX login and logout managed-scripts payload contains information about executable scripts that can run at\r\nuser login and logout. To use this payload, set EnableMCXLoginScripts to true in\r\n/var/root/Library/Preferences/com.apple.loginwindow.plist ; otherwise, the system ignores this payload.\r\nLoginwindow uses the LoginHook and LogoutHook string keys in /var/root/Library/Preferences/com.apple\r\n.loginwindow.plist to indicate a path to the executable script files, which run during user login and logout. The\r\nsystem passes the current user name as an argument to the file.\r\nProfile availability\r\nDevice channel macOS\r\nUser channel NA\r\nhttps://developer.apple.com/documentation/devicemanagement/loginwindowscripts\r\nPage 1 of 3\n\nAllow manual install macOS\nRequires supervision NA\nRequires user-approved MDM NA\nAllowed in user enrollment NA\nAllow multiple payloads NA\nProfile example\n?xml version=\"1.0\" encoding=\"UTF-8\"?\u003e\n\nPayloadContentloginscriptsfiledata ExampleDfilenameping.shskipLoginHookskipLogoutHookPayloadIdentifiercom.example.myloginwindowscriptspayloadPayloadTypecom.apple.mcxloginscriptsPayloadUUID2bcd5563-f44d-4f74-b706-050a628c0cafPayloadVersion1 https://developer.apple.com/documentation/devicemanagement/loginwindowscripts\nPage 2 of 3\n\n\u003c/dict\u003e\r\n \u003c/array\u003e\r\n \u003ckey\u003ePayloadDisplayName\u003c/key\u003e\r\n \u003cstring\u003eLogin Window Scripts\u003c/string\u003e\r\n \u003ckey\u003ePayloadIdentifier\u003c/key\u003e\r\n \u003cstring\u003ecom.example.myprofile\u003c/string\u003e\r\n \u003ckey\u003ePayloadType\u003c/key\u003e\r\n \u003cstring\u003eConfiguration\u003c/string\u003e\r\n \u003ckey\u003ePayloadUUID\u003c/key\u003e\r\n \u003cstring\u003e5cbf617d-16a5-4564-ba2c-728fd7f7d732\u003c/string\u003e\r\n \u003ckey\u003ePayloadVersion\u003c/key\u003e\r\n \u003cinteger\u003e1\u003c/integer\u003e\r\n\u003c/dict\u003e\r\n\u003c/plist\u003e\r\nCurrent page is LoginWindowScripts\r\nSource: https://developer.apple.com/documentation/devicemanagement/loginwindowscripts\r\nhttps://developer.apple.com/documentation/devicemanagement/loginwindowscripts\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://developer.apple.com/documentation/devicemanagement/loginwindowscripts"
	],
	"report_names": [
		"loginwindowscripts"
	],
	"threat_actors": [],
	"ts_created_at": 1775434742,
	"ts_updated_at": 1775791248,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/e6bdea722d0dfce56dea35c9b86b6736d8adedbd.pdf",
		"text": "https://archive.orkl.eu/e6bdea722d0dfce56dea35c9b86b6736d8adedbd.txt",
		"img": "https://archive.orkl.eu/e6bdea722d0dfce56dea35c9b86b6736d8adedbd.jpg"
	}
}