On Dec 27, 2007, at 5:29 PM, Stranathan, Dan wrote:
Obviously there is more than 1 way to skin a cat, but I wanted to
get your guys opinion on the best way (or best practice) on keeping
Mac users from changing the name of their local hard drive. I want
to make sure all of my Macs have a boot volume named "Macintosh
HD" (The default Apple hard drive name). The trick here is that most
of my users are local admins (don't ask why - its a long story
riddled with politics and intrigue). Other than asking my Mac users
"please don't name your hard drive", what can I do to stop them? I
considered a permission change on the hard drive, but I don't want
to break anything. I have a single master NetRestore image I use for
deployments. Most of my Macs are bound to AD (for user
authentication) and OD (for MCX management). Im sure you guys have
had similar issues. Please chime in if you have an idea.
____________________________________________
It doesn't matter at this stage why users have local Admin privileges,
but that's your first and biggest hurdle. What are you going to do to
to try to prevent (or remedy) users changing the name of their drive,
that won't - seriously and fully - be better dealt with (in your
circumstances) via user education and policy ?
Failing that, warn users that if they rename their drive, their data
will not be backed up, and (because what they did is a violation of
policy) there is zero recourse due to their actions if they lose a
local file after changing their drive name. For example.
This isn't about being a magician, sometimes it's appropriate to
respond to unrealistic expectation(s) with a friendly but necessary
dose of reality.
