Disallow user from changing ARD settings

[TWoods450]

Does anyone know if there is a way I can enable remote management but disallow the user from disabling it again? We have a problem with users disabling remote management on their system which disallows us to provide remote support. The big problem is that all users in our enviroment have admin rights on their systems so we can’t just lock them out of sys prefs. I was hoping there was a way to enable it and grey out the option from being modified.

[jamierps]

One thing you can try is simply remove that PreferencePane. Go to /System/Library/PreferencePanes and you will see the “SharingPref.Pane”. You can remove it completely or simply hide it some place they can not find it. Of course if they need to adjust other settings in the Sharing pane this might not be a popular fix 😉

(somewhat more hazardous option) If you need to have the rest of the options in the Sharing pane available, perhaps try grabbing a copy of Xcode, then open the Sharing Preference pane “contents” folder and try editing some of the NIB files to remove the options you don’t want present. Just make sure you have a good copy of the Sharing Pref pane some place before trying this.

Jamie

[TWoods450]

[QUOTE][u]Quote by: jamierps[/u][p]One thing you can try is simply remove that PreferencePane. Go to /System/Library/PreferencePanes and you will see the “SharingPref.Pane”. You can remove it completely or simply hide it some place they can not find it. Of course if they need to adjust other settings in the Sharing pane this might not be a popular fix 😉

(somewhat more hazardous option) If you need to have the rest of the options in the Sharing pane available, perhaps try grabbing a copy of Xcode, then open the Sharing Preference pane “contents” folder and try editing some of the NIB files to remove the options you don’t want present. Just make sure you have a good copy of the Sharing Pref pane some place before trying this.

Jamie
[/p][/QUOTE]

yeah killing the whole pane was my idea then do my config needed via terminal. But we have some pretty tech savy users who would just copy the pane from another system. I was messing with the NIBs in Xcode for a bit but found an even easier way. Leopard Server Tools let us lock the entire pane. pissed the user off but his manager was on our side.

[tlarkin]

Do these users have admin rights? I typically set ARD access to a single, hidden local admin account that I can use for local administration on every machine.

I have scripts that kick start the ARD client after imaging and enable my hidden user account.

[Author]

Posts