I'd have to test it to see if repair permissions reverts changed permissions on applications/utilities back to normal, as I have not repaired permissions for many versions of Mac OS X now.
What issues did you have with Parental Controls?
I know that with Leopard (and maybe earlier versions), that Parental Controls would prevent our internet proxy server login window from appearing, so we couldn't access the internet with Parental Controls turned on. To get around this I has to disable the internal Mac OS X Apache firewall that is turned on along with Parental Controls. This seems to be fixed with Snow Leopard, maybe your Parental Controls issues have been fixed in newer Mac OS X versions?
We are not allowed to use a separate Mac OS X server on our intranet, so OS X Server workgroup manager is not an option for us.
I think it might be possible to lock down things like desktop/background images by locking or restricting write access to plist files, but not sure if that would be changed by repair permissions as well.
I'd like to see a list of standard Mac OS X plist files, and what they control. I have to get in with a plist editing/viewing utility and see exactly what each plist file relates to.
Simon
Canberra
AUSTRALIA
-----Original Message-----
From: Nick McSpadden [mailto:email@hidden]
Subject: Re: Limiting User Access
----- "Simon Wheaton" <email@hidden> wrote:
> Could you prevent access to certain apps by changing their access
> permissions in Get Info?
> Maybe make the apps you want to restrict access to read/write by
> administrator, but no access for everyone else?
That's certainly possible, but that also means that Apple apps will have their permissions reverted when doing a "Repair Permissions."
Also, limiting application access is the easy one. Limiting things like changing the Dock, background/desktop image, changing the user password... the Parental Controls are designed to prevent that, but we've run into a number of situations in which Managed accounts encounter odd behavior when interacting with certain applications and other situations. How can we lock those down without resorting to Parental Controls? As far as I know, the only other option is through an MCX from OS X Server's Workgroup Manager.
--
Nick McSpadden
-----------------------------------------------------------------------
CIT is the ACT Large Training Provider of the Year and has achieved Training Excellence – Gold. Training Excellence - Gold is the highest ranking against the national Australian Quality Training Framework excellence criteria and CIT is one of the first training providers to achieve this level of recognition.
Subscribe to CIT Industry Connection - CIT's free, bi monthly publication:
http://www.cit.act.edu.au/industry_business/industry_connection/
-----------------------------------------------------------------------
This email, and any attachments, may be confidential and also privileged. If you are not the intended recipient, please notify the sender and delete all copies of this transmission along with any attachments immediately. You should not copy or use it for any purpose, nor disclose its contents to any other person.
-----------------------------------------------------------------------
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Remote-desktop mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
