How to Recover an Unresponsive macOS Workstation
In case a macOS workstation ever becomes unresponsive due to conflicting policy configurations, the following steps allow a user to recover the workstation without having to restore or rebuild the system.
Applies to all macOS versions on which the KEXT is supported.
-
Turn off the macOS system.
-
Hold down the ⌘+s keys and power the system back on. Keep holding those keys down until it shows that it is booting in single-user mode.
-
Follow the prompts to mount the root device as read-write. It will instruct you to enter the following:
Copy/sbin/fsck -fy
/sbin/mount -uw / -
Rename the kernel extension so that you can get back to a functioning macOS:
Copycd /Library/Extensions
mv ThycoticACS.kext ThycoticACS.kext.orgexit -
The system will restart.
-
Disable and/or delete policies that are causing the issue.
-
Update client items before renaming the kernel extension and having it start automatically. You can force client item updates by performing the following in Terminal.app:
Copysudo /usr/local/delinea/agent/updateClientItems.sh
-
Restore the kernel extension in Terminal.app:
Copycd /Library/Extensions
sudo mv ThycoticACS.kext.org ThycoticACS.kextexit