I've been testing settings in WGM to give a user with a managed
account and a networked home area, permission to install
applications on his desktop. If I add the account to be able to
administer the directory domain it appears he can sudo to root
privileges on any machine in the domain. Even if I use the settings
in Privileges to limit access to his computer.
What I want is to allow him to be able to install new software on
his desktop, but still have a network home area and managed account.
Apple has it hardcoded in Tiger to not let any user open the Software
Update utility by default. You can change that, but the file escapes
me at this moment.
Josh
P.S. Probably a better question for the client management list.
