[OT] Deep Freeze Mac OS X clarification
[OT] Deep Freeze Mac OS X clarification
- Subject: [OT] Deep Freeze Mac OS X clarification
- From: "Brent Smithurst" <email@hidden>
- Date: Fri, 26 Mar 2004 12:40:02 -0800
- Thread-topic: [OT] Deep Freeze Mac OS X clarification
Hello Dan, Michael, Pablo, and others,
I apologize for posting this on the AppleScript Users list. However, the original question and responses about Deep Freeze were CC'd to this list so I would like to post my clarification here as well.
I'd like to take this opportunity to explain what Deep Freeze Mac OS X
does and doesn't do. Some of what has been written here about Deep
Freeze is inaccurate and oversimplified, so I would like to clarify
things. We offer a different approach than DriveShield; Deep Freeze
combines flexible non-restrictive and restrictive protection into a
single solution.
Deep Freeze Mac OS X is intended to restore a standard user's home
directory to a default configuration at a specified event. This feature
is non-restrictive which means that the user is free to make whatever
changes they want, but all changes will be gone after Deep Freeze Mac
OS X restores the directory.
Deep Freeze Mac OS X can be configured to restore the user's home
directory either at login, at restart, after a selected time interval,
or on selected days of the week. This means, for example, that a
student with an iBook could use the iBook for a week without fear of
losing any work. After the week is over, the home directory can be
restored and ready for the next student to use.
We also offer restrictive protection. Custom configurations can be used
to set the read, write, and execute privileges on any number of items
including files, folders, applications, and even individual System
Preference panes. This is quite different than what is offered in the
Accounts pane of System Preferences.
All users can be assigned different configurations. So, Student1 could
be set to have the home directory restored at login and be prevented
from executing Internet Explorer and Safari, while Student2 could be
set to have the home directory restored at the first login every Sunday
and be allowed full access to all applications.
Deep Freeze Mac OS X supports network users authenticated with Active
Directory or Open Directory. The Panther beta also includes support for
Panther Server's new Mobile accounts.
Deep Freeze Mac OS X is designed to work in combination with OS X's
inherent security features. A standard user is prevented from modifying
areas outside of their home directory by default. That is why we only
protect the standard user's home directory.
Deep Freeze was designed to be installed or configured only by the root
user as a security precaution. Because root must be used directly,
there is no chance of a user exploiting any security vulnerability
inherent in granting temporary sudo permission and there is no chance
of a user discovering a back door to the Deep Freeze Controller (unless
the root account was compromised, in which case you'd have bigger
problems than worrying about whether Deep Freeze was about to be
disabled). Most of our users need to access the Deep Freeze Controller
very rarely and I haven't heard any complaints about the need to do so
as root.
At this time, Deep Freeze Mac OS X is what it is. A lot of lab
administrators want exactly what we offer. We are presently working on
improving and cleaning up the interface, and we will continue to
support and improve the program in the future.
Please feel free to email me directly if you have any specific
questions about Deep Freeze.
Best regards,
Brent Smithurst
Deep Freeze Mac OS X Specialist
Faronics Corporation
Toll Free: 1-800-943-6422 Ext. 4462
Fax: 1-800-943-6488
mailto:email@hidden
Website: www.faronics.com
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.