macOS Overview, Configuration, and Basic Support

macOS in the IT Support Workplace

macOS is Apple's Unix-based desktop operating system, found in many business, creative, and education environments. Because CompTIA A+ Core 2 covers multiple operating systems, an IT support technician must be comfortable navigating macOS alongside Windows and Linux. macOS shares Unix roots with Linux, which means many Terminal commands behave similarly, but the graphical interface and built-in tools have their own names and locations.

System Settings Tour

In macOS Ventura and later, the central control panel is called System Settings (previously System Preferences in older versions). You reach it from the Apple menu in the top-left corner of the screen. Key areas for IT support include:

• Users & Groups – Create, modify, and delete user accounts. You can designate accounts as Administrator or Standard. Standard accounts cannot install software or change system-wide settings without administrator credentials, which limits accidental or malicious changes.
• Sharing – Enable services such as File Sharing, Screen Sharing, and Remote Login (SSH). For security, enable only the services the user actually needs.
• Privacy & Security – Controls app permissions (camera, microphone, location), manages Gatekeeper (which restricts apps to those from the App Store or identified developers), and provides access to FileVault settings.
• Software Update – Confirms that macOS and Apple software updates are current. Enabling automatic updates helps patch vulnerabilities promptly.
• General > About – Shows the macOS version, serial number, and hardware overview; useful when verifying system compatibility.

User Account Management

To add a new standard user, open System Settings > Users & Groups and click the Add Account button (you may need to authenticate with an administrator password). Set the account type to Standard, provide a full name, account name, and password. Avoid giving everyday users administrator rights unless the role requires it — this is a core principle of least privilege.

For remote administration, macOS supports SSH through System Settings > Sharing > Remote Login. Restrict SSH access to specific users or groups rather than leaving it open to all.

FileVault: Full-Disk Encryption

FileVault encrypts the entire startup volume using XTS-AES-128 encryption with a 256-bit key. When enabled, a user must log in before the drive contents are accessible, protecting data if the machine is lost or stolen. To enable FileVault, go to System Settings > Privacy & Security > FileVault and click Turn On. macOS will offer a recovery key — store this key securely, because without it, encrypted data is unrecoverable if the password is lost. In a managed environment, the recovery key is often escrowed to an MDM (Mobile Device Management) server.

Important: Enabling FileVault on a machine with a failing drive may make data recovery impossible. Always run Disk Utility First Aid and confirm a current backup exists before enabling encryption.

Time Machine Backup

Time Machine is macOS's built-in backup solution. It creates incremental backups to an external drive or network-attached storage, keeping hourly snapshots for the past 24 hours, daily snapshots for the past month, and weekly snapshots for earlier periods. To configure Time Machine, go to System Settings > General > Time Machine and select a backup disk. Ensure the destination drive has adequate free space — Apple recommends a backup disk at least twice the size of the data being backed up.

Before performing any disk maintenance or OS changes, verify that a recent Time Machine backup completed successfully. This is the macOS equivalent of the "back up before you wrench" rule in any trade.

Disk Utility and First Aid

Disk Utility (found in Applications > Utilities) provides a graphical interface for managing storage devices. The First Aid feature checks a volume for file-system errors and repairs them when possible. To run First Aid, select the volume in the sidebar and click First Aid > Run. You cannot repair the startup volume while it is actively booted; to check the startup disk you would boot from macOS Recovery (hold Command-R on Intel Macs, or hold the power button on Apple Silicon) and launch Disk Utility from there.

Disk Utility also handles partitioning, formatting, creating disk images, and erasing drives — tasks that come up during OS reinstallation or device decommissioning.

Terminal and Basic Commands

macOS Terminal (Applications > Utilities > Terminal) gives access to a bash or zsh shell. Many commands overlap with Linux:

| Task | macOS / Linux Command | Notes |

|---|---|---|

| List directory | `ls` | Add `-la` for detailed listing |

| Copy file | `cp source dest` | |

| Move / rename | `mv source dest` | |

| Elevate privileges | `sudo command` | Requires administrator password |

| Running processes | `top` | Press `q` to quit |

| List disks | `diskutil list` | macOS-specific; shows all disks and partitions |

The `diskutil list` command is the macOS equivalent of `lsblk` on Linux or `diskpart list disk` on Windows. Use it to identify disk identifiers (e.g., `/dev/disk0`) before running any disk operations in Terminal.

Safety and Best Practices

• Back up first. Before any disk repair, encryption change, or OS modification, confirm a verified backup exists.
• Least privilege. Log in as Standard, not Administrator, for routine work.
• Secure credentials. FileVault recovery keys and administrator passwords must be stored in a password manager or secure escrow — never written on a sticky note attached to the machine.
• Gatekeeper. Do not disable Gatekeeper system-wide to install unknown software; evaluate software through proper procurement channels.
• Physical safety. macOS machines are often laptops. Follow standard ESD (electrostatic discharge) precautions when opening any Apple hardware, and observe lockout/tagout principles if the device is connected to external power during internal servicing.