System Settings & User Accounts

Chapter 2 toured the surface everyone looks at every day. This chapter moves to configuration: the app where a Mac's own behavior gets changed, and the account model that decides who's allowed to change it. Both have a direct Windows 11 counterpart already covered on this site — Windows 11 Fundamentals 5's own Settings app tour, and Windows 11 Fundamentals 4's admin-vs-standard account model — and both are worth contrasting honestly rather than assuming a one-to-one match.

System Settings: macOS's Settings App

System Settings is macOS's single configuration app — renamed from System Preferences in macOS Ventura (2022) and reorganized into a sidebar-driven layout that deliberately echoes iOS's own Settings app. Everything from displays and networking to privacy permissions and software updates lives here, organized into named panes down the left side.

Standard vs. Administrator Accounts

macOS draws the same fundamental line Windows 11 Fundamentals 4 draws between admin and standard accounts, tied to the same least-privilege principle Database Security 3 established: every Mac needs at least one Administrator account, created during setup, and any additional accounts can be created as Standard. An admin account can install software system-wide, change protected System Settings panes, and manage other users' accounts; a standard account cannot do any of that without an administrator's own credentials.

Authentication Prompts: macOS's Own UAC Equivalent

Whenever a standard account (or even an admin account touching a more sensitive setting) attempts something that needs elevated privilege — installing an app from outside the Mac App Store, changing certain protected System Settings panes, modifying another user's account — macOS interrupts with an authentication dialog requiring an administrator's username and password, or Touch ID on Macs with the fingerprint sensor built into the keyboard or Touch Bar. Functionally, this is exactly the role Windows 11 Fundamentals 4's UAC consent prompt plays: a deliberate, hard-to-miss interruption before a privileged action proceeds.

Touch ID itself deserves its own hardware note: fingerprint data is never stored as a raw image, and never leaves a dedicated, isolated hardware region — the Secure Enclave (built into Apple Silicon chips, or the T2 chip on older Intel Macs). This is a direct structural parallel to Windows 11 Fundamentals 4's own TPM-bound Windows Hello PINs: two different vendors, two different chip names, the same underlying idea of keeping biometric/credential material inside dedicated hardware rather than in ordinary storage or memory.

Apple ID: Tying a Mac to an Account

Signing into System Settings > Apple ID connects a Mac to iCloud — Drive, Photos, Keychain password sync, Find My, and Messages/FaceTime continuity with other Apple devices — the same kind of cloud-identity decision Windows 11 Fundamentals 2 covered at OOBE with the local-account-vs-Microsoft-account choice. Signing in with a Microsoft account unlocks OneDrive sync, the Microsoft Store, and Find My Device; signing in with an Apple ID unlocks the directly analogous set of Apple services.

Windows 11 vs. macOS: Settings & Accounts, Side by Side

Where This Course Is Headed

The Unix underneath in real hands-on depth — zsh and the BSD toolset — Homebrew, the application model (app bundles, code signing, Gatekeeper), APFS, the built-in security stack, Time Machine and Recovery, networking and sharing, everyday troubleshooting tools, and a capstone setting up and securing a complete new Mac end to end.

Hands-On Exercises