Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Limit non-admin users' account features System
This is new to Jaguar (10.2), and I'm not sure if it's been posted yet. If you create a new, non-admin user in Accounts, you can control what types of things they can do on the machine using the Capabilities button in the Accounts preference pane.

These options include locking the dock (so icons can't be added or removed), allowing only certain Applications to run, disallowing password changing, disabling CD/DVD burning, and opening all system preferences.

This will be useful for public settings, schools, and homes with young kids who may tend to break things or get lost by losing stuff in the dock.
    •    
  • Currently 0.00 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (0 votes cast)
 
[3,389 views]  

Limit non-admin users' account features | 1 comments | Create New Account
Click here to return to the 'Limit non-admin users' account features' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Capabilities does not prevent apps from launching
Authored by: leebennett on Nov 24, '02 03:47:16PM

If you look more carefully at the Capabilities window, the text after the checkbox reads, "Show these applications in 'My Applications' folder:" It does not say anything about only allowing these applications to run. Turns out, you can still launch applications that are not in the My Applications folder. For example, I downloaded a self-decompressing zip archive (.EXE file) which OS X, naturally, didn't know what to do with. When I tried to open it, I got a box asking what app I wanted to use. Most were greyed out apparently because OS X decided that those apps were absolutely not capable of opening the file. But MS Word was available, even though I've not turned on Word in the capabilities window. Word launched and the expected garbage of the .EXE file showed up, but I could simply close that window and open a new one.

I've been told that apps _can_ be prevented from launching, but the capabilities window is not the place to do it.



[ Reply to This | # ]