MacOS – Resetting printing password

The Mac was probably encrypted with FileVault 2.

You don't normally have to enter a password to start up in single user mode, but if FileVault 2 is enabled, you do. If FileVault 2 is enabled, you can't use the Reset Password application to reset the password of an account either.

If FileVault is enabled, I don't think there is any way to erase and reinstall OS X without knowing the password or the encryption key. When I enabled FileVault on a VM and started up from the recovery partition, the erase tab was missing from Disk Utility, and I couldn't create another partition from Disk Utility. When I tried selecting Reinstall OS X, the list of volumes did not include the Macintosh HD volume.

If the previous owner enabled the option to store the recovery key with Apple, you might be able to retrieve the recovery key by contacting Apple support:

Typing in the wrong login password three times prompts you if you have the ability to retreive your key from Apple. Click the triangle-button next to the prompt that appears to reveal a Recovery Key text field (which replaces the password text field) and AppleCare contact information, along with your computer's Serial Number and a Record Number. You need to provide these pieces of information in order for AppleCare to retrieve your recovery key.

If you can't get the recovery key from Apple and you can't contact the previous owner, your only option might be to replace the hard drive.

(I also copied and pasted instructions for three ways to reset the password of an account below. None of them can be used if FileVault 2 is enabled and you don't know the password though.)

Using Reset Password.app on the recovery partition

1. Hold command-R on startup.
2. Select Utilities > Terminal.
3. Run resetpassword, which opens the Reset Password application.
4. Select the volume and account and reset the password.

Using dscl in single user mode

1. Hold command-S on startup.
2. Run mount -uw /.
3. Run launchctl load /System/Library/LaunchDaemons/com.apple.opendirectoryd.plist in 10.7 or later or launchctl load /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist in 10.6 or earlier.
4. Run dscl . passwd /Users/username newpassword, where username is the username and newpassword is the new password.
5. Run reboot.

Creating a new admin account

1. Hold command-S on startup.
2. Run mount -uw /.
3. Run rm /var/db/.AppleSetupDone.
4. Run reboot.
5. Go through the steps of creating a new account.
6. Reset the password of the old account from the Users & Groups preference pane.

The simple answer is no.

Best practices on multi-user Macs dictate Standard accounts for all users, with a separate administrator account setup for maintenance work (software installs and/or updates, etc.) The philosophy is that with great power comes great responsibility, and an innocent mistake can cause havoc.

Daily use of Macs (and PCs for that matter) do not require the elevated privileges granted to a administrator account. At home, for example, I've created two admin accounts: one for emergencies, and my own account. Three other accounts: for my spouse and 2 kids, are Standard. When my kids are old enough to have their own Macs, they'll have only standard accounts, too, with a separate admin account for maintenance & whatnot. When they make enough money to purchase their own Mac, then they can decide how secure to make them.