How to Recover an Unresponsive macOS Workstation

In case a macOS workstation ever becomes unresponsive due to conflicting policy configurations, the following steps allow a user to recover the workstation without having to restore or rebuild the system.

Applies to all macOS versions on which the KEXT is supported.

Turn off the macOS system.
Hold down the ⌘+s keys and power the system back on. Keep holding those keys down until it shows that it is booting in single-user mode.
Follow the prompts to mount the root device as read-write. It will instruct you to enter the following:
Copy
```
/sbin/fsck -fy
/sbin/mount -uw /
```
Rename the kernel extension so that you can get back to a functioning macOS:
Copy
```
cd /Library/Extensions
mv ThycoticACS.kext ThycoticACS.kext.orgexit
```
The system will restart.
Disable and/or delete policies that are causing the issue.
Update client items before renaming the kernel extension and having it start automatically. You can force client item updates by performing the following in Terminal.app:
Copy
```
sudo /usr/local/delinea/agent/updateClientItems.sh
```

Restore the kernel extension in Terminal.app:

Copy

cd /Library/Extensions
sudo mv ThycoticACS.kext.org ThycoticACS.kextexit