Thanks for your reply Sathyan.
I can't remember accepting any options during the install so I re-installed from the jar file I downloaded. And there aren't any options, at least not when installing according to this page:
http://docs.sun.com/app/docs/doc/820-4330/abrat?a=view
Following is the last bit of the console output during the install, so it seems this is just done automagically. Is there any way of turning this off, that is, force the admin console to request login ?
INSTALL LOG EXCERPT:
create.domain:
[exec] Using port 4848 for Admin.
[exec] Using port 8080 for HTTP Instance.
[exec] Using port 7676 for JMS.
[exec] Using port 3700 for IIOP.
[exec] Using port 8181 for HTTP_SSL.
[exec] Using default port 3820 for IIOP_SSL.
[exec] Using default port 3920 for IIOP_MUTUALAUTH.
[exec] Using default port 8686 for JMX_ADMIN.
[exec] Domain being created with profile:developer, as specified by variable AS_ADMIN_PROFILE in configuration file.
[exec] ------ Using Profile [developer] to create the domain ------
[exec] XML processing for profile: Base document [/Users/hordur/Desktop/glassfish/lib/install/templates/default-domain.xml.template]. Profile name [developer]. Processing property [domain.xml.style-sheets].
[exec] The file in given locale [is_IS] at: [/Users/hordur/Desktop/glassfish/lib/install/templates/locales/is_IS/index.html] could not be found. Using default (en_US) index.html instead.
[exec] Security Store uses: JKS
[exec] Domain domain1 created.
[b][exec] Login information relevant to admin user name [admin] for this domain [domain1] stored at [/Users/hordur/.asadminpass] successfully.
[exec] Make sure that this file remains protected. Information stored in this file will be used by asadmin commands to manage this domain.[/b]
[delete] Deleting: /Users/hordur/Desktop/glassfish/passfile
[Message sent by forum member 'hordurth' (hordurth)]
http://forums.java.net/jive/thread.jspa?messageID=361483