What I dont know is if you can set Parental Control on that account.

For a better experience, please enable JavaScript in your browser before proceeding.

Software For All Users Install Opera As

Im baffled - isnt this a HUGE security vulnerability For example, as a standard user, I am able to download and install Opera as long as I drag the app file to the users desktop (instead of the Applications folder).

How can I prevent this I tried restricting permissions on Installer.app, but that didnt work.

And as most applications dont need to access critical system files, it is not a security risk anyway, as accessing system folders requires a password.

Therefore applications like Photoshop cant be installed as standard user.

I even had to enter a password to open Firefox, even though it was allowed.

Hmm.

Then, people can freely use the computer anyway they choose depending upon your settings, and can install anything they are able to.

Whenever the computer is restarted it will automatically go back to the original state your settings.

Link.

Using parental controls and limited application access seems like it would prevent too many authorized programs from running.

I have streaming media that can only be viewed on these machines, and if someone can install a program that allows them to capture it and take it with them, it defeats so many of our other security measures.

If I can run an unauthorized browser I can upload information I have access to locally to the cloud.

However, the default is that they are able to start apps within their home folder.

If you want to lock down the system, use Parental controls and only allow running a limited set of applications.

In that case, a user could download the executable but the system would not let it run.

For finer grain computer management use MCX either standalone or connected to an Open Directory system.

Software For All Users Software In That

Obviously, youll also need to disable USB ports and the optical drive so people cant bring software in that way.

I didnt know about MCX, but it seems that would involve a broader restructuring of the systems.

But Ill keep it in mind as a backup plan.

Im going to play around with the Parental Controls and see if that will suffice.

Im worried that theyll prevent authorized things like plugins and java apps, but perhaps theyll work for me.

I really expected them to be overly-restrictive, but I think they may just do the trick.

Anything you do while logged on that account will be deleted upon restartlogoff.

Mac Os X Install Software For All Users