Mac- How do you lock down for students

[round2it]

Can anyone help me get my head round locking down macs for student use

 

i do not want the students to be able to run things in core services or utilities

 

we have workgroup manager running

have groups for staff and students

 

i don't want to white list everything in wgm i just want to stop them fiddling with the settings

 

How do you guys do it

[round2it]

would using wgm to deny access to utilities and the coreservices folders work?

[dayzd]

would using wgm to deny access to utilities and the coreservices folders work?

Yeah, if you put those locations into the Applications tab under 'Disallow applications within these folders'.

 

I've never explicitly banned apps in the CoreServices folder though, as I would imagine you get some OS usability problems if you do. You're probably better off finding ways of making sure they can't access it in the first place. I assume pupil accounts are non-administrator? In which case they shouldn't be able to get into it anyway.

[round2it]

yes pupils accounts are non admin

its the core services i was mainly worried about like directory admin ect