Thread-topic: Prevent users from renaming their hard drive?
User-agent: Microsoft-Entourage/11.3.3.061214
On 12/27/07 5:29 PM, "Stranathan, Dan" <email@hidden> wrote:
> Obviously there is more than 1 way to skin a cat, but I wanted to get
> your guys opinion on the best way (or best practice) on keeping Mac
> users from changing the name of their local hard drive. I want to make
> sure all of my Macs have a boot volume named "Macintosh HD" (The
> default Apple hard drive name). The trick here is that most of my
> users are local admins (don't ask why - its a long story riddled with
> politics and intrigue). Other than asking my Mac users "please don't
> name your hard drive", what can I do to stop them? I considered a
> permission change on the hard drive, but I don't want to break
> anything. I have a single master NetRestore image I use for
> deployments. Most of my Macs are bound to AD (for user authentication)
> and OD (for MCX management). Im sure you guys have had similar issues.
> Please chime in if you have an idea.
> _______________________________________________
Are you looking for ways to lock down admin users (sorry - I can't offer
help here) or for thousands of reasons to share with your boss(es) why this
is a setup with serious reasons for concern?
Seriously - a local user with admin privs and an axe to grind runs sudo
tcpdump or whatever other tool for days on end and dumps all the results to
a text file.
Meanwhile you're trying to figure out how to prevent this while neglecting
testing of your latest backup strategy.
If politics are involved - become a politician.
Of course, I'm assuming that you have reasons...
So then tell your boss(es) your spending time trying to prevent users form
renaming their HD's, possibly doing harm to valuable data in the meantime,
while neglecting paying attention to backups or other tasks that will keep
your network running in the meantime to concern yourself with the behavior
of any of the users on your network.
I've read enough of your posts to know that you know all this, so I'm
confused at what you're asking.
Jeff
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
This email sent to email@hidden
