dscacheutil -q user
[QUOTE]
name: _appowner

password: *

uid: 87

gid: 87

dir: /var/empty

shell: /usr/bin/false

gecos: Application Owner


name: _dovenull

password: *

uid: 227

gid: 227

dir: /var/empty

shell: /usr/bin/false

gecos: Dovecot Authentication


name: _netstatistics

password: *

uid: 228

gid: 228

dir: /var/empty

shell: /usr/bin/false

gecos: Network Statistics Daemon


name: _softwareupdate

password: *

uid: 200

gid: 200

dir: /var/db/softwareupdate

shell: /usr/bin/false

gecos: Software Update Service


name: _ard

password: *

uid: 67

gid: 67

dir: /var/empty

shell: /usr/bin/false

gecos: Apple Remote Desktop


name: _captiveagent

password: *

uid: 258

gid: 258

dir: /var/empty

shell: /usr/bin/false

gecos: captiveagent


name: _launchservicesd

password: *

uid: 239

gid: 239

dir: /var/empty

shell: /usr/bin/false

gecos: _launchservicesd


name: _xserverdocs

password: *

uid: 251

gid: 251

dir: /var/empty

shell: /usr/bin/false

gecos: macOS Server Documents Service


name: _krbfast

password: *

uid: 246

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos FAST Account


name: _astris

password: *

uid: 245

gid: 245

dir: /var/db/astris

shell: /usr/bin/false

gecos: Astris Services


name: _tokend

password: *

uid: 91

gid: 91

dir: /var/empty

shell: /usr/bin/false

gecos: Token Daemon


name: _securityagent

password: *

uid: 92

gid: 92

dir: /var/db/securityagent

shell: /usr/bin/false

gecos: SecurityAgent


name: _warmd

password: *

uid: 224

gid: 224

dir: /var/empty

shell: /usr/bin/false

gecos: Warm Daemon


name: _coreaudiod

password: *

uid: 202

gid: 202

dir: /var/empty

shell: /usr/bin/false

gecos: Core Audio Daemon


name: _applepay

password: *

uid: 260

gid: 260

dir: /var/db/applepay

shell: /usr/bin/false

gecos: applepay Account


name: _krb_krbtgt

password: *

uid: 230

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Ticket Granting Ticket


name: _analyticsd

password: *

uid: 263

gid: 263

dir: /var/db/analyticsd

shell: /usr/bin/false

gecos: Analytics Daemon


name: _assetcache

password: *

uid: 235

gid: 235

dir: /var/empty

shell: /usr/bin/false

gecos: Asset Cache Service


name: _trustevaluationagent

password: *

uid: 208

gid: 208

dir: /var/empty

shell: /usr/bin/false

gecos: Trust Evaluation Agent


name: _ondemand

password: *

uid: 249

gid: 249

dir: /var/db/ondemand

shell: /usr/bin/false

gecos: On Demand Resource Daemon


name: _mdnsresponder

password: *

uid: 65

gid: 65

dir: /var/empty

shell: /usr/bin/false

gecos: mDNSResponder


name: _svn

password: *

uid: 73

gid: 73

dir: /var/empty

shell: /usr/bin/false

gecos: SVN Server


name: _windowserver

password: *

uid: 88

gid: 88

dir: /var/empty

shell: /usr/bin/false

gecos: WindowServer


name: _postgres

password: *

uid: 216

gid: 216

dir: /var/empty

shell: /usr/bin/false

gecos: PostgreSQL Server


name: _mcxalr

password: *

uid: 54

gid: 54

dir: /var/empty

shell: /usr/bin/false

gecos: MCX AppLaunch


name: _uucp

password: *

uid: 4

gid: 4

dir: /var/spool/uucp

shell: /usr/sbin/uucico

gecos: Unix to Unix Copy Protocol


name: _geod

password: *

uid: 56

gid: 56

dir: /var/db/geod

shell: /usr/bin/false

gecos: Geo Services Daemon


name: _coremediaiod

password: *

uid: 236

gid: 236

dir: /var/empty

shell: /usr/bin/false

gecos: Core Media IO Daemon


name: _cmiodalassistants

password: *

uid: 262

gid: 262

dir: /var/db/cmiodalassistants

shell: /usr/bin/false

gecos: CoreMedia IO Assistants User


name: _ces

password: *

uid: 32

gid: 32

dir: /var/empty

shell: /usr/bin/false

gecos: Certificate Enrollment Service


name: _eppc

password: *

uid: 71

gid: 71

dir: /var/empty

shell: /usr/bin/false

gecos: Apple Events User


name: nobody

password: *

uid: -2

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Unprivileged User


name: _calendar

password: *

uid: 93

gid: 93

dir: /var/empty

shell: /usr/bin/false

gecos: Calendar


name: _installer

password: *

uid: 96

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Installer


name: _ctkd

password: *

uid: 259

gid: 259

dir: /var/empty

shell: /usr/bin/false

gecos: ctkd Account


name: _atsserver

password: *

uid: 97

gid: 97

dir: /var/empty

shell: /usr/bin/false

gecos: ATS Server


name: _datadetectors

password: *

uid: 257

gid: 257

dir: /var/db/datadetectors

shell: /usr/bin/false

gecos: DataDetectors


name: _mysql

password: *

uid: 74

gid: 74

dir: /var/empty

shell: /usr/bin/false

gecos: MySQL Server


name: _dovecot

password: *

uid: 214

gid: 6

dir: /var/empty

shell: /usr/bin/false

gecos: Dovecot Administrator


name: _krbtgt

password: *

uid: 217

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos Ticket Granting Ticket


name: _amavisd

password: *

uid: 83

gid: 83

dir: /var/virusmails

shell: /usr/bin/false

gecos: AMaViS Daemon


name: _fpsd

password: *

uid: 265

gid: 265

dir: /var/db/fpsd

shell: /usr/bin/false

gecos: FPS Daemon


name: _timed

password: *

uid: 266

gid: 266

dir: /var/db/timed

shell: /usr/bin/false

gecos: Time Sync Daemon


name: _installassistant

password: *

uid: 25

gid: 25

dir: /var/empty

shell: /usr/bin/false

gecos: Install Assistant


name: _clamav

password: *

uid: 82

gid: 82

dir: /var/virusmails

shell: /usr/bin/false

gecos: ClamAV Daemon


name: _dpaudio

password: *

uid: 215

gid: 215

dir: /var/empty

shell: /usr/bin/false

gecos: DP Audio


name: _unknown

password: *

uid: 99

gid: 99

dir: /var/empty

shell: /usr/bin/false

gecos: Unknown User


name: _appstore

password: *

uid: 33

gid: 33

dir: /var/empty

shell: /usr/bin/false

gecos: Mac App Store Service


name: _xcsbuildagent

password: *

uid: 237

gid: 237

dir: /var/empty

shell: /usr/bin/false

gecos: _xcsbuildagent


name: _www

password: *

uid: 70

gid: 70

dir: /Library/WebServer

shell: /usr/bin/false

gecos: World Wide Web Server


name: _nsurlstoraged

password: *

uid: 243

gid: 243

dir: /var/db/nsurlstoraged

shell: /usr/bin/false

gecos: NSURLStorage Daemon


name: _mbsetupuser

password: *

uid: 248

gid: 248

dir: /var/setup

shell: /bin/bash

gecos: Setup User


name: _cvmsroot

password: *

uid: 212

gid: 212

dir: /var/empty

shell: /usr/bin/false

gecos: CVMS Root


name: _usbmuxd

password: *

uid: 213

gid: 213

dir: /var/db/lockdown

shell: /usr/bin/false

gecos: iPhone OS Device Helper


name: _ftp

password: *

uid: 98

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: FTP Daemon


name: _spotlight

password: *

uid: 89

gid: 89

dir: /var/empty

shell: /usr/bin/false

gecos: Spotlight


name: _lda

password: *

uid: 211

gid: 211

dir: /var/empty

shell: /usr/bin/false

gecos: Local Delivery Agent


name: _sshd

password: *

uid: 75

gid: 75

dir: /var/empty

shell: /usr/bin/false

gecos: sshd Privilege separation


name: _displaypolicyd

password: *

uid: 244

gid: 244

dir: /var/empty

shell: /usr/bin/false

gecos: Display Policy Daemon


name: _lp

password: *

uid: 26

gid: 26

dir: /var/spool/cups

shell: /usr/bin/false

gecos: Printing Services


name: _netbios

password: *

uid: 222

gid: 222

dir: /var/empty

shell: /usr/bin/false

gecos: NetBIOS


name: _krb_kerberos

password: *

uid: 233

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos


name: _jabber

password: *

uid: 84

gid: 84

dir: /var/empty

shell: /usr/bin/false

gecos: Jabber XMPP Server


name: _mailman

password: *

uid: 78

gid: 78

dir: /var/empty

shell: /usr/bin/false

gecos: Mailman List Server


name: _update_sharing

password: *

uid: 95

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Update Sharing


name: _networkd

password: *

uid: 24

gid: 24

dir: /var/networkd

shell: /usr/bin/false

gecos: Network Services


name: _mobileasset

password: *

uid: 253

gid: 253

dir: /var/ma

shell: /usr/bin/false

gecos: MobileAsset User


name: _webauthserver

password: *

uid: 221

gid: 221

dir: /var/empty

shell: /usr/bin/false

gecos: Web Auth Server


name: _krb_anonymous

password: *

uid: 234

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Anonymous


name: tor

password: ********

uid: 501

gid: 20

dir: /Users/tor

shell: /bin/bash

gecos: TOR


name: _devicemgr

password: *

uid: 220

gid: 220

dir: /var/empty

shell: /usr/bin/false

gecos: Device Management Server


name: _iconservices

password: *

uid: 240

gid: 240

dir: /var/empty

shell: /usr/bin/false

gecos: IconServices


name: _kadmin_changepw

password: *

uid: 219

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos Change Password Service


name: _kadmin_admin

password: *

uid: 218

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos Admin Service


name: _devdocs

password: *

uid: 59

gid: 59

dir: /var/empty

shell: /usr/bin/false

gecos: Developer Documentation


name: _serialnumberd

password: *

uid: 58

gid: 58

dir: /var/empty

shell: /usr/bin/false

gecos: Serial Number Daemon


name: _sandbox

password: *

uid: 60

gid: 60

dir: /var/empty

shell: /usr/bin/false

gecos: Seatbelt


name: _appleevents

password: *

uid: 55

gid: 55

dir: /var/empty

shell: /usr/bin/false

gecos: AppleEvents Daemon


name: root

password: *

uid: 0

gid: 0

dir: /var/root

shell: /bin/sh

gecos: System Administrator


name: _nsurlsessiond

password: *

uid: 242

gid: 242

dir: /var/db/nsurlsessiond

shell: /usr/bin/false

gecos: NSURLSession Daemon


name: _teamsserver

password: *

uid: 94

gid: 94

dir: /var/teamsserver

shell: /usr/bin/false

gecos: TeamsServer


name: daemon

password: *

uid: 1

gid: 1

dir: /var/root

shell: /usr/bin/false

gecos: System Services


name: _wwwproxy

password: *

uid: 252

gid: 252

dir: /var/empty

shell: /usr/bin/false

gecos: WWW Proxy


name: _timezone

password: *

uid: 210

gid: 210

dir: /var/empty

shell: /usr/bin/false

gecos: AutoTimeZoneDaemon


name: _xcscredserver

password: *

uid: 238

gid: 238

dir: /var/empty

shell: /usr/bin/false

gecos: _xcscredserver


name: _avbdeviced

password: *

uid: 229

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Ethernet AVB Device Daemon


name: _scsd

password: *

uid: 31

gid: 31

dir: /var/empty

shell: /usr/bin/false

gecos: Service Configuration Service


name: _postfix

password: *

uid: 27

gid: 27

dir: /var/spool/postfix

shell: /usr/bin/false

gecos: Postfix Mail Server


name: _hidd

password: *

uid: 261

gid: 261

dir: /var/db/hidd

shell: /usr/bin/false

gecos: HID Service User


name: _krb_kadmin

password: *

uid: 231

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Admin Service


name: _taskgated

password: *

uid: 13

gid: 13

dir: /var/empty

shell: /usr/bin/false

gecos: Task Gate Daemon


name: _gamecontrollerd

password: *

uid: 247

gid: 247

dir: /var/empty

shell: /usr/bin/false

gecos: Game Controller Daemon


name: _findmydevice

password: *

uid: 254

gid: 254

dir: /var/db/findmydevice

shell: /usr/bin/false

gecos: Find My Device Daemon


name: _screensaver

password: *

uid: 203

gid: 203

dir: /var/empty

shell: /usr/bin/false

gecos: Screensaver


name: _cvs

password: *

uid: 72

gid: 72

dir: /var/empty

shell: /usr/bin/false

gecos: CVS Server


name: _cyrus

password: *

uid: 77

gid: 6

dir: /var/imap

shell: /usr/bin/false

gecos: Cyrus Administrator


name: _distnote

password: *

uid: 241

gid: 241

dir: /var/empty

shell: /usr/bin/false

gecos: DistNote


name: _qtss

password: *

uid: 76

gid: 76

dir: /var/empty

shell: /usr/bin/false

gecos: QuickTime Streaming Server


name: _locationd

password: *

uid: 205

gid: 205

dir: /var/db/locationd

shell: /usr/bin/false

gecos: Location Daemon


name: _appserver

password: *

uid: 79

gid: 79

dir: /var/empty

shell: /usr/bin/false

gecos: Application Server


name: _krb_changepw

password: *

uid: 232

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Change Password Service


name: nobody

password: *

uid: -2

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Unprivileged User


name: root

password: *

uid: 0

gid: 0

dir: /var/root

shell: /bin/sh

gecos: System Administrator


name: daemon

password: *

uid: 1

gid: 1

dir: /var/root

shell: /usr/bin/false

gecos: System Services


name: _uucp

password: *

uid: 4

gid: 4

dir: /var/spool/uucp

shell: /usr/sbin/uucico

gecos: Unix to Unix Copy Protocol


name: _taskgated

password: *

uid: 13

gid: 13

dir: /var/empty

shell: /usr/bin/false

gecos: Task Gate Daemon


name: _networkd

password: *

uid: 24

gid: 24

dir: /var/networkd

shell: /usr/bin/false

gecos: Network Services


name: _installassistant

password: *

uid: 25

gid: 25

dir: /var/empty

shell: /usr/bin/false

gecos: Install Assistant


name: _lp

password: *

uid: 26

gid: 26

dir: /var/spool/cups

shell: /usr/bin/false

gecos: Printing Services


name: _postfix

password: *

uid: 27

gid: 27

dir: /var/spool/postfix

shell: /usr/bin/false

gecos: Postfix Mail Server


name: _scsd

password: *

uid: 31

gid: 31

dir: /var/empty

shell: /usr/bin/false

gecos: Service Configuration Service


name: _ces

password: *

uid: 32

gid: 32

dir: /var/empty

shell: /usr/bin/false

gecos: Certificate Enrollment Service


name: _appstore

password: *

uid: 33

gid: 33

dir: /var/empty

shell: /usr/bin/false

gecos: Mac App Store Service


name: _mcxalr

password: *

uid: 54

gid: 54

dir: /var/empty

shell: /usr/bin/false

gecos: MCX AppLaunch


name: _appleevents

password: *

uid: 55

gid: 55

dir: /var/empty

shell: /usr/bin/false

gecos: AppleEvents Daemon


name: _geod

password: *

uid: 56

gid: 56

dir: /var/db/geod

shell: /usr/bin/false

gecos: Geo Services Daemon


name: _serialnumberd

password: *

uid: 58

gid: 58

dir: /var/empty

shell: /usr/bin/false

gecos: Serial Number Daemon


name: _devdocs

password: *

uid: 59

gid: 59

dir: /var/empty

shell: /usr/bin/false

gecos: Developer Documentation


name: _sandbox

password: *

uid: 60

gid: 60

dir: /var/empty

shell: /usr/bin/false

gecos: Seatbelt


name: _mdnsresponder

password: *

uid: 65

gid: 65

dir: /var/empty

shell: /usr/bin/false

gecos: mDNSResponder


name: _ard

password: *

uid: 67

gid: 67

dir: /var/empty

shell: /usr/bin/false

gecos: Apple Remote Desktop


name: _www

password: *

uid: 70

gid: 70

dir: /Library/WebServer

shell: /usr/bin/false

gecos: World Wide Web Server


name: _eppc

password: *

uid: 71

gid: 71

dir: /var/empty

shell: /usr/bin/false

gecos: Apple Events User


name: _cvs

password: *

uid: 72

gid: 72

dir: /var/empty

shell: /usr/bin/false

gecos: CVS Server


name: _svn

password: *

uid: 73

gid: 73

dir: /var/empty

shell: /usr/bin/false

gecos: SVN Server


name: _mysql

password: *

uid: 74

gid: 74

dir: /var/empty

shell: /usr/bin/false

gecos: MySQL Server


name: _sshd

password: *

uid: 75

gid: 75

dir: /var/empty

shell: /usr/bin/false

gecos: sshd Privilege separation


name: _qtss

password: *

uid: 76

gid: 76

dir: /var/empty

shell: /usr/bin/false

gecos: QuickTime Streaming Server


name: _cyrus

password: *

uid: 77

gid: 6

dir: /var/imap

shell: /usr/bin/false

gecos: Cyrus Administrator


name: _mailman

password: *

uid: 78

gid: 78

dir: /var/empty

shell: /usr/bin/false

gecos: Mailman List Server


name: _appserver

password: *

uid: 79

gid: 79

dir: /var/empty

shell: /usr/bin/false

gecos: Application Server


name: _clamav

password: *

uid: 82

gid: 82

dir: /var/virusmails

shell: /usr/bin/false

gecos: ClamAV Daemon


name: _amavisd

password: *

uid: 83

gid: 83

dir: /var/virusmails

shell: /usr/bin/false

gecos: AMaViS Daemon


name: _jabber

password: *

uid: 84

gid: 84

dir: /var/empty

shell: /usr/bin/false

gecos: Jabber XMPP Server


name: _appowner

password: *

uid: 87

gid: 87

dir: /var/empty

shell: /usr/bin/false

gecos: Application Owner


name: _windowserver

password: *

uid: 88

gid: 88

dir: /var/empty

shell: /usr/bin/false

gecos: WindowServer


name: _spotlight

password: *

uid: 89

gid: 89

dir: /var/empty

shell: /usr/bin/false

gecos: Spotlight


name: _tokend

password: *

uid: 91

gid: 91

dir: /var/empty

shell: /usr/bin/false

gecos: Token Daemon


name: _securityagent

password: *

uid: 92

gid: 92

dir: /var/db/securityagent

shell: /usr/bin/false

gecos: SecurityAgent


name: _calendar

password: *

uid: 93

gid: 93

dir: /var/empty

shell: /usr/bin/false

gecos: Calendar


name: _teamsserver

password: *

uid: 94

gid: 94

dir: /var/teamsserver

shell: /usr/bin/false

gecos: TeamsServer


name: _update_sharing

password: *

uid: 95

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Update Sharing


name: _installer

password: *

uid: 96

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Installer


name: _atsserver

password: *

uid: 97

gid: 97

dir: /var/empty

shell: /usr/bin/false

gecos: ATS Server


name: _ftp

password: *

uid: 98

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: FTP Daemon


name: _unknown

password: *

uid: 99

gid: 99

dir: /var/empty

shell: /usr/bin/false

gecos: Unknown User


name: _softwareupdate

password: *

uid: 200

gid: 200

dir: /var/db/softwareupdate

shell: /usr/bin/false

gecos: Software Update Service


name: _coreaudiod

password: *

uid: 202

gid: 202

dir: /var/empty

shell: /usr/bin/false

gecos: Core Audio Daemon


name: _screensaver

password: *

uid: 203

gid: 203

dir: /var/empty

shell: /usr/bin/false

gecos: Screensaver


name: _locationd

password: *

uid: 205

gid: 205

dir: /var/db/locationd

shell: /usr/bin/false

gecos: Location Daemon


name: _trustevaluationagent

password: *

uid: 208

gid: 208

dir: /var/empty

shell: /usr/bin/false

gecos: Trust Evaluation Agent


name: _timezone

password: *

uid: 210

gid: 210

dir: /var/empty

shell: /usr/bin/false

gecos: AutoTimeZoneDaemon


name: _lda

password: *

uid: 211

gid: 211

dir: /var/empty

shell: /usr/bin/false

gecos: Local Delivery Agent


name: _cvmsroot

password: *

uid: 212

gid: 212

dir: /var/empty

shell: /usr/bin/false

gecos: CVMS Root


name: _usbmuxd

password: *

uid: 213

gid: 213

dir: /var/db/lockdown

shell: /usr/bin/false

gecos: iPhone OS Device Helper


name: _dovecot

password: *

uid: 214

gid: 6

dir: /var/empty

shell: /usr/bin/false

gecos: Dovecot Administrator


name: _dpaudio

password: *

uid: 215

gid: 215

dir: /var/empty

shell: /usr/bin/false

gecos: DP Audio


name: _postgres

password: *

uid: 216

gid: 216

dir: /var/empty

shell: /usr/bin/false

gecos: PostgreSQL Server


name: _krbtgt

password: *

uid: 217

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos Ticket Granting Ticket


name: _kadmin_admin

password: *

uid: 218

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos Admin Service


name: _kadmin_changepw

password: *

uid: 219

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos Change Password Service


name: _devicemgr

password: *

uid: 220

gid: 220

dir: /var/empty

shell: /usr/bin/false

gecos: Device Management Server


name: _webauthserver

password: *

uid: 221

gid: 221

dir: /var/empty

shell: /usr/bin/false

gecos: Web Auth Server


name: _netbios

password: *

uid: 222

gid: 222

dir: /var/empty

shell: /usr/bin/false

gecos: NetBIOS


name: _warmd

password: *

uid: 224

gid: 224

dir: /var/empty

shell: /usr/bin/false

gecos: Warm Daemon


name: _dovenull

password: *

uid: 227

gid: 227

dir: /var/empty

shell: /usr/bin/false

gecos: Dovecot Authentication


name: _netstatistics

password: *

uid: 228

gid: 228

dir: /var/empty

shell: /usr/bin/false

gecos: Network Statistics Daemon


name: _avbdeviced

password: *

uid: 229

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Ethernet AVB Device Daemon


name: _krb_krbtgt

password: *

uid: 230

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Ticket Granting Ticket


name: _krb_kadmin

password: *

uid: 231

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Admin Service


name: _krb_changepw

password: *

uid: 232

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Change Password Service


name: _krb_kerberos

password: *

uid: 233

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos


name: _krb_anonymous

password: *

uid: 234

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Open Directory Kerberos Anonymous


name: _assetcache

password: *

uid: 235

gid: 235

dir: /var/empty

shell: /usr/bin/false

gecos: Asset Cache Service


name: _coremediaiod

password: *

uid: 236

gid: 236

dir: /var/empty

shell: /usr/bin/false

gecos: Core Media IO Daemon


name: _launchservicesd

password: *

uid: 239

gid: 239

dir: /var/empty

shell: /usr/bin/false

gecos: _launchservicesd


name: _iconservices

password: *

uid: 240

gid: 240

dir: /var/empty

shell: /usr/bin/false

gecos: IconServices


name: _distnote

password: *

uid: 241

gid: 241

dir: /var/empty

shell: /usr/bin/false

gecos: DistNote


name: _nsurlsessiond

password: *

uid: 242

gid: 242

dir: /var/db/nsurlsessiond

shell: /usr/bin/false

gecos: NSURLSession Daemon


name: _nsurlstoraged

password: *

uid: 243

gid: 243

dir: /var/db/nsurlstoraged

shell: /usr/bin/false

gecos: NSURLStorage Daemon


name: _displaypolicyd

password: *

uid: 244

gid: 244

dir: /var/empty

shell: /usr/bin/false

gecos: Display Policy Daemon


name: _astris

password: *

uid: 245

gid: 245

dir: /var/db/astris

shell: /usr/bin/false

gecos: Astris Services


name: _krbfast

password: *

uid: 246

gid: -2

dir: /var/empty

shell: /usr/bin/false

gecos: Kerberos FAST Account


name: _gamecontrollerd

password: *

uid: 247

gid: 247

dir: /var/empty

shell: /usr/bin/false

gecos: Game Controller Daemon


name: _mbsetupuser

password: *

uid: 248

gid: 248

dir: /var/setup

shell: /bin/bash

gecos: Setup User


name: _ondemand

password: *

uid: 249

gid: 249

dir: /var/db/ondemand

shell: /usr/bin/false

gecos: On Demand Resource Daemon


name: _xserverdocs

password: *

uid: 251

gid: 251

dir: /var/empty

shell: /usr/bin/false

gecos: macOS Server Documents Service


name: _wwwproxy

password: *

uid: 252

gid: 252

dir: /var/empty

shell: /usr/bin/false

gecos: WWW Proxy


name: _mobileasset

password: *

uid: 253

gid: 253

dir: /var/ma

shell: /usr/bin/false

gecos: MobileAsset User


name: _findmydevice

password: *

uid: 254

gid: 254

dir: /var/db/findmydevice

shell: /usr/bin/false

gecos: Find My Device Daemon


name: _datadetectors

password: *

uid: 257

gid: 257

dir: /var/db/datadetectors

shell: /usr/bin/false

gecos: DataDetectors


name: _captiveagent

password: *

uid: 258

gid: 258

dir: /var/empty

shell: /usr/bin/false

gecos: captiveagent


name: _ctkd

password: *

uid: 259

gid: 259

dir: /var/empty

shell: /usr/bin/false

gecos: ctkd Account


name: _applepay

password: *

uid: 260

gid: 260

dir: /var/db/applepay

shell: /usr/bin/false

gecos: applepay Account


name: _hidd

password: *

uid: 261

gid: 261

dir: /var/db/hidd

shell: /usr/bin/false

gecos: HID Service User


name: _cmiodalassistants

password: *

uid: 262

gid: 262

dir: /var/db/cmiodalassistants

shell: /usr/bin/false

gecos: CoreMedia IO Assistants User


name: _analyticsd

password: *

uid: 263

gid: 263

dir: /var/db/analyticsd

shell: /usr/bin/false

gecos: Analytics Daemon


name: _fpsd

password: *

uid: 265

gid: 265

dir: /var/db/fpsd

shell: /usr/bin/false

gecos: FPS Daemon


name: _timed

password: *

uid: 266

gid: 266

dir: /var/db/timed

shell: /usr/bin/false

gecos: Time Sync Daemon

[/QUOTE]

dscacheutil -q user |

[QUOTE]
>     paste -d " "  - - - - - - - - |

>     sed 's/^name: //;s/ [^[:space:]]*: /:/g'

_appowner:*:87:87:/var/empty:/usr/bin/false:Application Owner

_dovenull:*:227:227:/var/empty:/usr/bin/false:Dovecot Authentication

_netstatistics:*:228:228:/var/empty:/usr/bin/false:Network Statistics Daemon

_softwareupdate:*:200:200:/var/db/softwareupdate:/usr/bin/false:Software Update Service

_ard:*:67:67:/var/empty:/usr/bin/false:Apple Remote Desktop

_captiveagent:*:258:258:/var/empty:/usr/bin/false:captiveagent

_launchservicesd:*:239:239:/var/empty:/usr/bin/false:_launchservicesd

_xserverdocs:*:251:251:/var/empty:/usr/bin/false:macOS Server Documents Service

_krbfast:*:246:-2:/var/empty:/usr/bin/false:Kerberos FAST Account

_astris:*:245:245:/var/db/astris:/usr/bin/false:Astris Services

_tokend:*:91:91:/var/empty:/usr/bin/false:Token Daemon

_securityagent:*:92:92:/var/db/securityagent:/usr/bin/false:SecurityAgent

_warmd:*:224:224:/var/empty:/usr/bin/false:Warm Daemon

_coreaudiod:*:202:202:/var/empty:/usr/bin/false:Core Audio Daemon

_applepay:*:260:260:/var/db/applepay:/usr/bin/false:applepay Account

_krb_krbtgt:*:230:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Ticket Granting Ticket

_analyticsd:*:263:263:/var/db/analyticsd:/usr/bin/false:Analytics Daemon

_assetcache:*:235:235:/var/empty:/usr/bin/false:Asset Cache Service

_trustevaluationagent:*:208:208:/var/empty:/usr/bin/false:Trust Evaluation Agent

_ondemand:*:249:249:/var/db/ondemand:/usr/bin/false:On Demand Resource Daemon

_mdnsresponder:*:65:65:/var/empty:/usr/bin/false:mDNSResponder

_svn:*:73:73:/var/empty:/usr/bin/false:SVN Server

_windowserver:*:88:88:/var/empty:/usr/bin/false:WindowServer

_postgres:*:216:216:/var/empty:/usr/bin/false:PostgreSQL Server

_mcxalr:*:54:54:/var/empty:/usr/bin/false:MCX AppLaunch

_uucp:*:4:4:/var/spool/uucp:/usr/sbin/uucico:Unix to Unix Copy Protocol

_geod:*:56:56:/var/db/geod:/usr/bin/false:Geo Services Daemon

_coremediaiod:*:236:236:/var/empty:/usr/bin/false:Core Media IO Daemon

_cmiodalassistants:*:262:262:/var/db/cmiodalassistants:/usr/bin/false:CoreMedia IO Assistants User

_ces:*:32:32:/var/empty:/usr/bin/false:Certificate Enrollment Service

_eppc:*:71:71:/var/empty:/usr/bin/false:Apple Events User

nobody:*:-2:-2:/var/empty:/usr/bin/false:Unprivileged User

_calendar:*:93:93:/var/empty:/usr/bin/false:Calendar

_installer:*:96:-2:/var/empty:/usr/bin/false:Installer

_ctkd:*:259:259:/var/empty:/usr/bin/false:ctkd Account

_atsserver:*:97:97:/var/empty:/usr/bin/false:ATS Server

_datadetectors:*:257:257:/var/db/datadetectors:/usr/bin/false:DataDetectors

_mysql:*:74:74:/var/empty:/usr/bin/false:MySQL Server

_dovecot:*:214:6:/var/empty:/usr/bin/false:Dovecot Administrator

_krbtgt:*:217:-2:/var/empty:/usr/bin/false:Kerberos Ticket Granting Ticket

_amavisd:*:83:83:/var/virusmails:/usr/bin/false:AMaViS Daemon

_fpsd:*:265:265:/var/db/fpsd:/usr/bin/false:FPS Daemon

_timed:*:266:266:/var/db/timed:/usr/bin/false:Time Sync Daemon

_installassistant:*:25:25:/var/empty:/usr/bin/false:Install Assistant

_clamav:*:82:82:/var/virusmails:/usr/bin/false:ClamAV Daemon

_dpaudio:*:215:215:/var/empty:/usr/bin/false:DP Audio

_unknown:*:99:99:/var/empty:/usr/bin/false:Unknown User

_appstore:*:33:33:/var/empty:/usr/bin/false:Mac App Store Service

_xcsbuildagent:*:237:237:/var/empty:/usr/bin/false:_xcsbuildagent

_www:*:70:70:/Library/WebServer:/usr/bin/false:World Wide Web Server

_nsurlstoraged:*:243:243:/var/db/nsurlstoraged:/usr/bin/false:NSURLStorage Daemon

_mbsetupuser:*:248:248:/var/setup:/bin/bash:Setup User

_cvmsroot:*:212:212:/var/empty:/usr/bin/false:CVMS Root

_usbmuxd:*:213:213:/var/db/lockdown:/usr/bin/false:iPhone OS Device Helper

_ftp:*:98:-2:/var/empty:/usr/bin/false:FTP Daemon

_spotlight:*:89:89:/var/empty:/usr/bin/false:Spotlight

_lda:*:211:211:/var/empty:/usr/bin/false:Local Delivery Agent

_sshd:*:75:75:/var/empty:/usr/bin/false:sshd Privilege separation

_displaypolicyd:*:244:244:/var/empty:/usr/bin/false:Display Policy Daemon

_lp:*:26:26:/var/spool/cups:/usr/bin/false:Printing Services

_netbios:*:222:222:/var/empty:/usr/bin/false:NetBIOS

_krb_kerberos:*:233:-2:/var/empty:/usr/bin/false:Open Directory Kerberos

_jabber:*:84:84:/var/empty:/usr/bin/false:Jabber XMPP Server

_mailman:*:78:78:/var/empty:/usr/bin/false:Mailman List Server

_update_sharing:*:95:-2:/var/empty:/usr/bin/false:Update Sharing

_networkd:*:24:24:/var/networkd:/usr/bin/false:Network Services

_mobileasset:*:253:253:/var/ma:/usr/bin/false:MobileAsset User

_webauthserver:*:221:221:/var/empty:/usr/bin/false:Web Auth Server

_krb_anonymous:*:234:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Anonymous

tor:********:501:20:/Users/tor:/bin/bash:TOR

_devicemgr:*:220:220:/var/empty:/usr/bin/false:Device Management Server

_iconservices:*:240:240:/var/empty:/usr/bin/false:IconServices

_kadmin_changepw:*:219:-2:/var/empty:/usr/bin/false:Kerberos Change Password Service

_kadmin_admin:*:218:-2:/var/empty:/usr/bin/false:Kerberos Admin Service

_devdocs:*:59:59:/var/empty:/usr/bin/false:Developer Documentation

_serialnumberd:*:58:58:/var/empty:/usr/bin/false:Serial Number Daemon

_sandbox:*:60:60:/var/empty:/usr/bin/false:Seatbelt

_appleevents:*:55:55:/var/empty:/usr/bin/false:AppleEvents Daemon

root:*:0:0:/var/root:/bin/sh:System Administrator

_nsurlsessiond:*:242:242:/var/db/nsurlsessiond:/usr/bin/false:NSURLSession Daemon

_teamsserver:*:94:94:/var/teamsserver:/usr/bin/false:TeamsServer

daemon:*:1:1:/var/root:/usr/bin/false:System Services

_wwwproxy:*:252:252:/var/empty:/usr/bin/false:WWW Proxy

_timezone:*:210:210:/var/empty:/usr/bin/false:AutoTimeZoneDaemon

_xcscredserver:*:238:238:/var/empty:/usr/bin/false:_xcscredserver

_avbdeviced:*:229:-2:/var/empty:/usr/bin/false:Ethernet AVB Device Daemon

_scsd:*:31:31:/var/empty:/usr/bin/false:Service Configuration Service

_postfix:*:27:27:/var/spool/postfix:/usr/bin/false:Postfix Mail Server

_hidd:*:261:261:/var/db/hidd:/usr/bin/false:HID Service User

_krb_kadmin:*:231:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Admin Service

_taskgated:*:13:13:/var/empty:/usr/bin/false:Task Gate Daemon

_gamecontrollerd:*:247:247:/var/empty:/usr/bin/false:Game Controller Daemon

_findmydevice:*:254:254:/var/db/findmydevice:/usr/bin/false:Find My Device Daemon

_screensaver:*:203:203:/var/empty:/usr/bin/false:Screensaver

_cvs:*:72:72:/var/empty:/usr/bin/false:CVS Server

_cyrus:*:77:6:/var/imap:/usr/bin/false:Cyrus Administrator

_distnote:*:241:241:/var/empty:/usr/bin/false:DistNote

_qtss:*:76:76:/var/empty:/usr/bin/false:QuickTime Streaming Server

_locationd:*:205:205:/var/db/locationd:/usr/bin/false:Location Daemon

_appserver:*:79:79:/var/empty:/usr/bin/false:Application Server

_krb_changepw:*:232:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Change Password Service

nobody:*:-2:-2:/var/empty:/usr/bin/false:Unprivileged User

root:*:0:0:/var/root:/bin/sh:System Administrator

daemon:*:1:1:/var/root:/usr/bin/false:System Services

_uucp:*:4:4:/var/spool/uucp:/usr/sbin/uucico:Unix to Unix Copy Protocol

_taskgated:*:13:13:/var/empty:/usr/bin/false:Task Gate Daemon

_networkd:*:24:24:/var/networkd:/usr/bin/false:Network Services

_installassistant:*:25:25:/var/empty:/usr/bin/false:Install Assistant

_lp:*:26:26:/var/spool/cups:/usr/bin/false:Printing Services

_postfix:*:27:27:/var/spool/postfix:/usr/bin/false:Postfix Mail Server

_scsd:*:31:31:/var/empty:/usr/bin/false:Service Configuration Service

_ces:*:32:32:/var/empty:/usr/bin/false:Certificate Enrollment Service

_appstore:*:33:33:/var/empty:/usr/bin/false:Mac App Store Service

_mcxalr:*:54:54:/var/empty:/usr/bin/false:MCX AppLaunch

_appleevents:*:55:55:/var/empty:/usr/bin/false:AppleEvents Daemon

_geod:*:56:56:/var/db/geod:/usr/bin/false:Geo Services Daemon

_serialnumberd:*:58:58:/var/empty:/usr/bin/false:Serial Number Daemon

_devdocs:*:59:59:/var/empty:/usr/bin/false:Developer Documentation

_sandbox:*:60:60:/var/empty:/usr/bin/false:Seatbelt

_mdnsresponder:*:65:65:/var/empty:/usr/bin/false:mDNSResponder

_ard:*:67:67:/var/empty:/usr/bin/false:Apple Remote Desktop

_www:*:70:70:/Library/WebServer:/usr/bin/false:World Wide Web Server

_eppc:*:71:71:/var/empty:/usr/bin/false:Apple Events User

_cvs:*:72:72:/var/empty:/usr/bin/false:CVS Server

_svn:*:73:73:/var/empty:/usr/bin/false:SVN Server

_mysql:*:74:74:/var/empty:/usr/bin/false:MySQL Server

_sshd:*:75:75:/var/empty:/usr/bin/false:sshd Privilege separation

_qtss:*:76:76:/var/empty:/usr/bin/false:QuickTime Streaming Server

_cyrus:*:77:6:/var/imap:/usr/bin/false:Cyrus Administrator

_mailman:*:78:78:/var/empty:/usr/bin/false:Mailman List Server

_appserver:*:79:79:/var/empty:/usr/bin/false:Application Server

_clamav:*:82:82:/var/virusmails:/usr/bin/false:ClamAV Daemon

_amavisd:*:83:83:/var/virusmails:/usr/bin/false:AMaViS Daemon

_jabber:*:84:84:/var/empty:/usr/bin/false:Jabber XMPP Server

_appowner:*:87:87:/var/empty:/usr/bin/false:Application Owner

_windowserver:*:88:88:/var/empty:/usr/bin/false:WindowServer

_spotlight:*:89:89:/var/empty:/usr/bin/false:Spotlight

_tokend:*:91:91:/var/empty:/usr/bin/false:Token Daemon

_securityagent:*:92:92:/var/db/securityagent:/usr/bin/false:SecurityAgent

_calendar:*:93:93:/var/empty:/usr/bin/false:Calendar

_teamsserver:*:94:94:/var/teamsserver:/usr/bin/false:TeamsServer

_update_sharing:*:95:-2:/var/empty:/usr/bin/false:Update Sharing

_installer:*:96:-2:/var/empty:/usr/bin/false:Installer

_atsserver:*:97:97:/var/empty:/usr/bin/false:ATS Server

_ftp:*:98:-2:/var/empty:/usr/bin/false:FTP Daemon

_unknown:*:99:99:/var/empty:/usr/bin/false:Unknown User

_softwareupdate:*:200:200:/var/db/softwareupdate:/usr/bin/false:Software Update Service

_coreaudiod:*:202:202:/var/empty:/usr/bin/false:Core Audio Daemon

_screensaver:*:203:203:/var/empty:/usr/bin/false:Screensaver

_locationd:*:205:205:/var/db/locationd:/usr/bin/false:Location Daemon

_trustevaluationagent:*:208:208:/var/empty:/usr/bin/false:Trust Evaluation Agent

_timezone:*:210:210:/var/empty:/usr/bin/false:AutoTimeZoneDaemon

_lda:*:211:211:/var/empty:/usr/bin/false:Local Delivery Agent

_cvmsroot:*:212:212:/var/empty:/usr/bin/false:CVMS Root

_usbmuxd:*:213:213:/var/db/lockdown:/usr/bin/false:iPhone OS Device Helper

_dovecot:*:214:6:/var/empty:/usr/bin/false:Dovecot Administrator

_dpaudio:*:215:215:/var/empty:/usr/bin/false:DP Audio

_postgres:*:216:216:/var/empty:/usr/bin/false:PostgreSQL Server

_krbtgt:*:217:-2:/var/empty:/usr/bin/false:Kerberos Ticket Granting Ticket

_kadmin_admin:*:218:-2:/var/empty:/usr/bin/false:Kerberos Admin Service

_kadmin_changepw:*:219:-2:/var/empty:/usr/bin/false:Kerberos Change Password Service

_devicemgr:*:220:220:/var/empty:/usr/bin/false:Device Management Server

_webauthserver:*:221:221:/var/empty:/usr/bin/false:Web Auth Server

_netbios:*:222:222:/var/empty:/usr/bin/false:NetBIOS

_warmd:*:224:224:/var/empty:/usr/bin/false:Warm Daemon

_dovenull:*:227:227:/var/empty:/usr/bin/false:Dovecot Authentication

_netstatistics:*:228:228:/var/empty:/usr/bin/false:Network Statistics Daemon

_avbdeviced:*:229:-2:/var/empty:/usr/bin/false:Ethernet AVB Device Daemon

_krb_krbtgt:*:230:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Ticket Granting Ticket

_krb_kadmin:*:231:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Admin Service

_krb_changepw:*:232:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Change Password Service

_krb_kerberos:*:233:-2:/var/empty:/usr/bin/false:Open Directory Kerberos

_krb_anonymous:*:234:-2:/var/empty:/usr/bin/false:Open Directory Kerberos Anonymous

_assetcache:*:235:235:/var/empty:/usr/bin/false:Asset Cache Service

_coremediaiod:*:236:236:/var/empty:/usr/bin/false:Core Media IO Daemon

_launchservicesd:*:239:239:/var/empty:/usr/bin/false:_launchservicesd

_iconservices:*:240:240:/var/empty:/usr/bin/false:IconServices

_distnote:*:241:241:/var/empty:/usr/bin/false:DistNote

_nsurlsessiond:*:242:242:/var/db/nsurlsessiond:/usr/bin/false:NSURLSession Daemon

_nsurlstoraged:*:243:243:/var/db/nsurlstoraged:/usr/bin/false:NSURLStorage Daemon

_displaypolicyd:*:244:244:/var/empty:/usr/bin/false:Display Policy Daemon

_astris:*:245:245:/var/db/astris:/usr/bin/false:Astris Services

_krbfast:*:246:-2:/var/empty:/usr/bin/false:Kerberos FAST Account

_gamecontrollerd:*:247:247:/var/empty:/usr/bin/false:Game Controller Daemon

_mbsetupuser:*:248:248:/var/setup:/bin/bash:Setup User

_ondemand:*:249:249:/var/db/ondemand:/usr/bin/false:On Demand Resource Daemon

_xserverdocs:*:251:251:/var/empty:/usr/bin/false:macOS Server Documents Service

_wwwproxy:*:252:252:/var/empty:/usr/bin/false:WWW Proxy

_mobileasset:*:253:253:/var/ma:/usr/bin/false:MobileAsset User

_findmydevice:*:254:254:/var/db/findmydevice:/usr/bin/false:Find My Device Daemon

_datadetectors:*:257:257:/var/db/datadetectors:/usr/bin/false:DataDetectors

_captiveagent:*:258:258:/var/empty:/usr/bin/false:captiveagent

_ctkd:*:259:259:/var/empty:/usr/bin/false:ctkd Account

_applepay:*:260:260:/var/db/applepay:/usr/bin/false:applepay Account

_hidd:*:261:261:/var/db/hidd:/usr/bin/false:HID Service User

_cmiodalassistants:*:262:262:/var/db/cmiodalassistants:/usr/bin/false:CoreMedia IO Assistants User

_analyticsd:*:263:263:/var/db/analyticsd:/usr/bin/false:Analytics Daemon

_fpsd:*:265:265:/var/db/fpsd:/usr/bin/false:FPS Daemon

_timed:*:266:266:/var/db/timed:/usr/bin/false:Time Sync Daemon
[/QUOTE]