Stop your kid installing apps and changing Mac settings

Why it happens

An administrator account can install software and change almost any setting, and on many family Macs every account is an admin. A Standard account needs an admin's name and password for most of those changes. It can still install some apps, so store limits in Screen Time and Ask to Buy close that gap.

How to fix it

1. If your child uses your account, give them their own first. In Users & Groups, click Add User… and choose Standard.

   macOS 26 Tahoe Users & Groups›Add User

   macOS 27 Golden Gate Users & Groups›Add User…

2. Sign in to your own administrator account, open the Apple menu, choose System Settings and click Users & Groups.

3. Click the ⓘ next to your child's account and turn off Allow this user to administer this computer. Type your admin password when asked.

   Users & Groups›ⓘ›Allow this user to administer this computer

4. Ask your child to log out and back in, or restart if your Mac asks, so the change takes hold. Their account now shows Standard under the name.

5. Limit downloads too. Open Screen Time, then Content & Privacy, switch it on and use Store Restrictions to choose the app age ratings you allow.

   Screen Time›Content & Privacy›Store Restrictions

6. Turn on Lock Screen Time Settings and set a passcode only you know, so the limits stay put.

   Screen Time›Lock Screen Time Settings

The admin switch in Users & Groups is the same on macOS 26 and 27. On macOS 27, limits for a child in your Family Sharing group move to Family in System Settings: click your child's name, then Apps & Websites. That needs every family device on version 27.

Still not fixed?

1. If your child is under 18 and in your Family Sharing group, turn on Ask to Buy for them in Family settings under their name. Then every download, free or paid, needs your OK.

   Family

2. Still finding new apps? Your child may know your admin password. Change your login password and don't type it while they're watching.

3. Your Mac needs at least one administrator. If your child's account is the only admin, set up an admin account for yourself first, then remove theirs.

4. If the switch is greyed out, the Mac may be managed by a school or company, so ask whoever set it up.

5. If the account still acts like an admin after a restart, or the change won't stay, contact Apple Support.