+ Post New Thread
Results 1 to 2 of 2
Mac Thread, WGM restrict access to local HDD in Technical; hi alll i want to prevent a user from accessing, how can i do this via WGM ? I also ...
  1. #1

    Join Date
    Dec 2011
    Thank Post
    Thanked 0 Times in 0 Posts
    Rep Power

    WGM restrict access to local HDD

    hi alll
    i want to prevent a user from accessing, how can i do this via WGM ?

    I also have ARD correctly setup if you want me to send unix commands per computer...

  2. #2
    AntonioRocco's Avatar
    Join Date
    Oct 2008
    South Yorkshire
    Thank Post
    Thanked 114 Times in 95 Posts
    Rep Power

    It depends on what you mean by restricting access?

    You can't deny any user at least read only access to Applications installed on that workstation. If you did the user would not be able to launch any applications stored in /Applications.

    You should be aware that any user logging into any Mac other than the local administrator, or any other user (network or otherwise) that has been made an administrator using a non-obvious, non-gui method, has read only access to the internal drive anyway.

    Or do you mean you want to deny them the view of the internal drive completely? If this is what you want simply apply the Simple Finder MCX in WorkGroup Manager. Ultimately you may find this to restrictive? You could apply a Finder MCX to not display the drive but you'd have to amend the Sidebars property list as well. You may also want to think about disabling the Go to Folder option in the Go menu as well.

    You could use ARD to send a terminal command hiding the drive completely:

    sudo setfile -a V /Volumes/Nameofthedrive

    The above won't work for 10.7. You should be aware that any of these commands will hide the drive for everyone including the local administrator. You'd have to use the Go to Folder option in the Go Menu if you wanted to access the hard drive as the local adminstrator and sometimes there is a need to do this.

    What will work for all systems is:

    sudo chflags hidden /Nameofthedrive

    Which I think will be your best option? You can revert back to the default with:

    sudo chflags nohidden /NameoftheDrive

    You can drag/drop the internal drive into a terminal window to see the full path. Enter the path into the UNIX Section in ARD preceded by the command above. If it was me I would not do this as it's purely cosmetic and as already mentioned, any user other than the local administrator can't do any real damage to the OS or anything else stored on that drive.

    If your question is really about denying access to Applications in the Utilities folder there are (IMO) better ways to do this.


    Antonio Rocco (ACSA)
    Last edited by AntonioRocco; 5th December 2011 at 02:52 PM.

+ Post New Thread

Similar Threads

  1. Restricting Access to an IP Address
    By enjay in forum Network and Classroom Management
    Replies: 1
    Last Post: 22nd October 2008, 11:19 AM
  2. Restricting access to SIMS
    By djones in forum MIS Systems
    Replies: 7
    Last Post: 28th January 2008, 10:52 PM
  3. Replies: 2
    Last Post: 16th January 2008, 05:25 PM
  4. Restrict Access to OWA based on TIME
    By ICTNUT in forum How do you do....it?
    Replies: 4
    Last Post: 3rd June 2007, 07:37 PM
  5. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 05:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts