Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Create 'managed' admin users' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Create 'managed' admin users
Authored by: andyinindy on Mar 26, '04 09:28:36PM

As some of you have pointed out, this hint is far from perfect. I have since found that creating an "Admin, Managed" user in this way breaks fast user switching (not that I would enable it on a faculty machine anyway) and seems to cause some odd login behavior. For example, I now have two "other" entries on the login panel... bizarre!

This hint may work for users who are not command line saavy. On my faculty systems I locked down the entire utilities folder (by moving it to a separate account and creating a symbolic link to it in /Applications) so access to Terminal.app is impossible. I also removed the Managed Admin user from the 'sudoers' file as an added precaution.

I am glad to see that we have a good dicussion going; some of the ideas posted here make much more sense. I can't decide if simply removing the preference pane is a good suggestion... what happens if one of my student helpers needs to open "Network"? He has to copy it down from the server? Hmm. I am leaning toward editing /etc/authorization as soon as I figure out what it is that needs to be changed! Any advice appreciated!

Thanks for the help, everyone.



[ Reply to This | # ]
Create 'managed' admin users
Authored by: kirkmc on Mar 27, '04 03:27:43AM

Re opening preference panes - why not create an uber-admin account, and change the permissions on sensitive pref panes so only this user can open them? That way you won't have to remove them, but you will need the uber-admin account name and password to change the owner before opening them if needed.



[ Reply to This | # ]