---
title: "macOS scanning requirements | Lansweeper Platform"
slug: "macos-scanning-requirements"
description: "Review the requirements to scan macOS computers with Lansweeper Network Discovery over SSH, including Remote Login, an SSH credential, and Spotlight."
tags: ["Lansweeper Platform", "Discovery and scanning", "Network Discovery"]
updated: 2026-09-30T09:11:28Z
published: 2026-09-30T09:11:28Z
canonical: "docs.lansweeper.com/macos-scanning-requirements"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lansweeper.com/llms.txt
> Use this file to discover all available pages before exploring further.

# macOS scanning requirements

Network Discovery scans macOS computers over SSH. Enabling SSH lets the sensor run the `system_profiler` command, which reads hardware, operating system, and software data from the machine.

To scan a Mac, you need a user account with SSH access and Spotlight enabled for software inventory.

              Can't reach a Mac over the network?

              

For remote or off-network Macs that a sensor can't scan over SSH, use [IT Agent Discovery](/docs/what-is-it-agent-discovery) instead. The agent runs on the endpoint and sends its inventory back to your site.

## Requirements

Every Mac you scan must meet these requirements:

- **SSH**: Remote Login (SSH) must be enabled on the Mac. Network Discovery connects over TCP 22.
- **Credential**: An [SSH discovery credential](/docs/create-discovery-credentials) for a user account with SSH access to the Mac. The account must have logged in locally at least once, or have sudo privileges.
- **Spotlight**: Spotlight must be enabled. The `system_profiler` command Network Discovery uses to read installed software doesn't return results without it.

              Report the correct last logged-on user

              

To report the correct last logged-on user, the account must also be an administrator on the Mac. Network Discovery runs the `last` command without elevation, and macOS only returns the account's own sessions to non-admin users. Without admin rights, the last logged-on user may be missing or show the scanning account.

## Enable Remote Login on macOS

1. Open **System Settings** on the Mac. On macOS 12 and earlier, open **System Preferences**.
2. Go to **General** > **Sharing**.
3. Turn on **Remote Login**.
4. Set **Allow access for** to **Only these users**, then add the account Network Discovery will use to scan the Mac.
5. Verify that Spotlight is enabled so software data can be collected.

## Next steps

- [Create discovery credentials](/docs/create-discovery-credentials) for the Macs you want to scan.
- [Create a discovery action](/docs/create-a-network-discovery-action) to define what to scan, when, and with which credentials.

The Lansweeper Platform capability that discovers IP-connected devices on your network, including IT, OT, and IoT devices, and keeps their data up to date in your site. Network Discovery is made up of the hub, the IT sensor, the OT sensor, and the traffic sensor. The IT Agent and Cloud Discovery are separate discovery methods.

A Network Discovery component that runs discovery for a specific asset type or capability. The sensor types are the IT sensor, OT sensor, and traffic sensor.