Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Prevent users from ejecting CDs (and more) Desktop
Mac OS X Server (10.2) has a little-used ability to control almost all aspects of the computing experience for its users. But since Server and Client are so similar, the same modifications can work even if you don't have the Server software. You just need to modify NetInfo directly.

Here's an example of how to prevent a user from ejecting a CD.

[Editor's note: Risking a productive iBook, I tested the following hint. When I tried it the first time, I tried it on the Admin account, and it had no effect -- either I made a mistake, or the system is smart enough to not limit the Admin's permissions. When I applied the patch to a non-admin account, however, it worked perfectly. The only problem I had was that, after logging in as Admin again, the eject button didn't work (but dragging to the trash did). A second logout and login cleared that problem.

This hint requires working in NetInfo Manager, through which you can really mess up your system if you're not careful. Before you start changing anything in NetInfo (but after you authenticate), you may want to select Management -> Save Backup to create a new backup file ... just in case! This hint is NOT for beginners; you can do serious damage to your system in NetInfo Manager! With that dire warning out of the way, on to the how-to, which is actually quite cool.]

  1. Open NetInfo Manager

  2. Click the lock at the bottom of the window to authenticate

  3. Click on the "users" directory, and then on the short name of the user you wish to change.

  4. In the "Directory" menu, choose "New Property"

  5. Name the property exactly mcx_flags

  6. Paste the lines of XML below into the value of that property.
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
    <key>has_mcx_settings</key>
    <true/>
    <key>simultaneous_login_enabled</key>
    <true/>
    </dict>
    </plist>
  7. In the "Directory" menu, choose "New Property" again.

  8. Name the property exactly mcx_settings

  9. Paste the lines below into the value of that property:
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
    <key>mcx_application_data</key>
    <dict>
    <key>com.apple.finder</key>
    <dict>
    <key>Forced</key>
    <array>
    <dict>
    <key>mcx_preference_settings</key>
    <dict>
    <key>ProhibitBurn</key>
    <false/>
    <key>ProhibitConnectTo</key>
    <false/>
    <key>ProhibitEject</key>
    <true/>
    <key>ProhibitGoToFolder</key>
    <false/>
    <key>ProhibitGoToiDisk</key>
    <false/>
    </dict>
    </dict>
    </array>
    </dict>
    <key>com.apple.loginwindow</key>
    <dict>
    <key>Forced</key>
    <array>
    <dict>
    <key>mcx_preference_settings</key>
    <dict>
    <key>PowerOffDisabledWhileLoggedIn</key>
    <false/>
    </dict>
    </dict>
    </array>
    </dict>
    </dict>
    </dict>
    </plist>
Save, quit, and logout. You can change some of the <false/> keys to <true/> keys to modify other behaviors. To undo these changes, delete the two properties you added, save, quit, and logout/login.
    •    
  • Currently 3.00 / 5
  You rated: 4 / 5 (3 votes cast)
 
[6,989 views]  

Prevent users from ejecting CDs (and more) | 2 comments | Create New Account
Click here to return to the 'Prevent users from ejecting CDs (and more)' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Accounts System Preferences
Authored by: maysaf on Dec 10, '02 04:53:21PM

I wonder if this will be added to the "capabilities" under the System Preferences "accounts" panel. Right now I can limit non-admins from Removing items from the dock, opening System Prefs, Changing passwords- and Burning CDs or Dvds. (along with limiting what applications they can use). It would make sense if I could dissallow eject- I bet this would stop the apple store and compusa from having to replace so many CD trays



[ Reply to This | # ]
Doesn't stop iTunes
Authored by: aaronfreimark on Dec 10, '02 09:33:36PM

iTunes somehow ejects the CD player by another means (which is useful when normal eject methods won't work). The changes in the hint don't stop iTunes from ejecting the CD. Remove iTunes (or unplug the CD) for complete control.



[ Reply to This | # ]