Overview
The Apple Login Item Policy allows organizations to control which applications are automatically launched when a user logs in to their Mac device. This helps improve security, streamline user experience, and ensure compliance with company policies.
Policy Configuration Fields
Below are the fields available when configuring the Apple Login Item Policy, along with their descriptions and requirements:
1. Requirements
Description: Minimum supported operating system version.
Example: macOS 10.13+
2. Settings
Automatically Launched Items
Description: (Required) An array of login item dictionaries specifying which apps or scripts should launch at login.
Sub-fields for Each Login Item:
Path
Description: (Required) The full path to the application or script to be launched at login.
Example:/Applications/1Password.appRequirement: Must be a valid path to a
.appbundle or executable.
Hide
Description: If set to
true, the app will launch at login but remain hidden from the Users & Groups login items list. If set tofalse, the app will be visible in the login items list.Requirement: Available on macOS 10.13+.
Scenarios
Field/Config | Scenario Description | Steps | Expected Result |
App Path | Add a login item with a valid app path | Set App Path to the correct .app bundle path (e.g., /Applications/Slack.app), assign policy | App launches from specified path at login |
Hide (true) | App launches hidden | Set Hide to true, assign policy, log in to device | App launches at login but is hidden from Users & Groups login items list |
Hide (false) | App launches visible | Set Hide to false, assign policy, log in to device | App launches at login and is visible in Users & Groups login items list |
Remove | Remove a login item | Remove the entry from policy, assign updated policy | App is removed from login items on device |
If you have questions about configuring or enforcing the Apple Login Item Policy, please contact your IT administrator or visit our Help Center.