Hello,
The systems I manage have only 1 local account for admin purposes. The rest are cached (mobile managed) AD network accounts. These systems are sometimes laptops. These users are never admins. So, when they travel, they cannot modify the network prefpane to suite where they are without providing them the admin password (which is against our security policy). However, our security admins do not have a problem with end users making changes to their network settings, so long as they do not have to run as admin OR be supplied an admin password.
They need to change network setting from time to time as they connect via coffee shops or hotels that may have specific connection settings required. Usually wirelessly, but not always.
My question is, is there any way to make the network prefpane editable to standard users without supplying them an admin password while keeping the other prefpane security intact. Ideally any solution might live through security and OS updates.
And, are there any serious risks to allowing this if it is possible?
Thanks