G'day Bill There always has to be a full administrator user present on System X
What I did with my daughters iMac (10.7.2) was to password block the admin user, and create a non-password user for the two grandkids. If a software update is required, it's a simple matter logging into the admin account, update the software, and swap back to the kids account. Also, you can generally update from the kids account by supplying the admin user name and password when asked. I have also installed a separate Skype account on the kids user account, blocked except for those users already on the Contacts list. Safari is fully 'locked down' (no cookies except from navigated sites, and no pop ups), with Google as my only browser, and 'Safesearch' set on 'strict'. I also have Applications limited in the user profile in 'System Prefrerences' to Safari, games, and Pages, as well as a few other apps such as 'Comic life'. Works well. Regards Santa On 17/01/2012, at 2:29 PM, Bill Spencer wrote: On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote: In general, there be only normal and super(root). The latter can do anything, of course. But if you're just looking to limit file access, then you can do things with group IDs or even with access control lists... The hope is to be able to keep parental controls in place but allow software-update-type actions. Bill -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist