Re: Administrator question
On Jan 16, 2012, at 8:59 PM, Dan wrote: Parental Controls can only be activated on a normal user account. If you don't provide the admin id and password, and the user is too stoopid to boot into single-user mode, or from an external, or then they won't be updating anything. OTOH,,, why the need for the restrictions? ...I've never been fond of strapping any user down. Nothing good ever comes from it, IMO. Too often, I've had to deal with the carnage of upset parents, when they discovered that their children had the gall to first learn how to read english, then to use *gasp* Google, and then hack their way around the parental controls, nanny products, etc etc etc. There's just no substitutes for building trust and sharing ice cream sandwiches. - Dan. Put a firmware password in place and you don't have to worry about the user altering the boot disk. You may not choose to use them but there can be legitimate uses for parental controls. My daughter loves pbskids.org. I am not worried about this but would like her to avoid stumbling on other, less appropriate sites. Parental controls can help with this. It is not always a matter of trust and ice cream sandwiches. Jim -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist
Re: Administrator question
G'day Bill There always has to be a full administrator user present on System X What I did with my daughters iMac (10.7.2) was to password block the admin user, and create a non-password user for the two grandkids. If a software update is required, it's a simple matter logging into the admin account, update the software, and swap back to the kids account. Also, you can generally update from the kids account by supplying the admin user name and password when asked. I have also installed a separate Skype account on the kids user account, blocked except for those users already on the Contacts list. Safari is fully 'locked down' (no cookies except from navigated sites, and no pop ups), with Google as my only browser, and 'Safesearch' set on 'strict'. I also have Applications limited in the user profile in 'System Prefrerences' to Safari, games, and Pages, as well as a few other apps such as 'Comic life'. Works well. Regards Santa On 17/01/2012, at 2:29 PM, Bill Spencer wrote: On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote: In general, there be only normal and super(root). The latter can do anything, of course. But if you're just looking to limit file access, then you can do things with group IDs or even with access control lists... The hope is to be able to keep parental controls in place but allow software-update-type actions. Bill -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist
Re: Administrator question
At 5:16 PM -0500 1/16/2012, William Spencer wrote: Is there a way to create different administrators with different levels of access? I have a feeling not but would like to know for sure. In general, there be only normal and super(root). The latter can do anything, of course. But if you're just looking to limit file access, then you can do things with group IDs or even with access control lists... - Dan. -- - Psychoceramic Emeritus; South Jersey, USA, Earth. -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist
Re: Administrator question
On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote: In general, there be only normal and super(root). The latter can do anything, of course. But if you're just looking to limit file access, then you can do things with group IDs or even with access control lists... The hope is to be able to keep parental controls in place but allow software-update-type actions. Bill -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist
Re: Administrator question
Parental controls can only be applied to a standard account. Using a standard account will not allow you to run software update without an administrative username and password. Jim On Jan 16, 2012, at 7:29 PM, Bill Spencer wspen...@jhu.edu wrote: On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote: In general, there be only normal and super(root). The latter can do anything, of course. But if you're just looking to limit file access, then you can do things with group IDs or even with access control lists... The hope is to be able to keep parental controls in place but allow software-update-type actions. Bill -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist
Re: Administrator question
At 7:29 PM -0800 1/16/2012, Bill Spencer wrote: On Monday, January 16, 2012 6:26:00 PM UTC-5, Dan wrote: In general, there be only normal and super(root). The latter can do anything, of course. But if you're just looking to limit file access, then you can do things with group IDs or even with access control lists... The hope is to be able to keep parental controls in place but allow software-update-type actions. Parental Controls can only be activated on a normal user account. If you don't provide the admin id and password, and the user is too stoopid to boot into single-user mode, or from an external, or then they won't be updating anything. OTOH,,, why the need for the restrictions? ...I've never been fond of strapping any user down. Nothing good ever comes from it, IMO. Too often, I've had to deal with the carnage of upset parents, when they discovered that their children had the gall to first learn how to read english, then to use *gasp* Google, and then hack their way around the parental controls, nanny products, etc etc etc. There's just no substitutes for building trust and sharing ice cream sandwiches. - Dan. -- - Psychoceramic Emeritus; South Jersey, USA, Earth. -- You received this message because you are a member of the iMac Group, a group for those using Apple iMacs and eMacs. The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette guide is at http://www.lowendmac.com/lists/netiquette.shtml To post to this group, send email to imaclist@googlegroups.com To leave this group, send email to imaclist+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/imaclist
