[10.4] prevent regular users from modifying wireless settings

finger · #1 July 6th, 2008, 07:12 AM

Hi,

I'm trying to setup a guest account on my iMac G5 (10.4) and the only problem left ist the airport icon on the right side of the top bar. It seems that every user is able to reassociate the iMac to a different wireless network. Is there a way to configure the airport settings globally?

I know that the icon can be removed but that's not what I'm looking for since it's easy to make the thing reappear again.

Thanks,

finger

ElDiabloConCaca · #2 July 6th, 2008, 12:54 PM

Under Leopard, in the System Preferences under "Security," there's an option for "Require password to unlock each System Preferences pane." I believe it's the same (or similar) under Tiger.

Enabling this option along with removing the AirPort icon from the menubar should prevent any normal user from modifying the wireless settings without knowledge of the admin password.

finger · #3 July 6th, 2008, 03:41 PM

No effect.

Thanks anyway.

DeltaMac · #4 July 6th, 2008, 04:02 PM

Do you want the guest account to NOT use wireless at all?
What is your goal with this?

finger · #5 July 6th, 2008, 04:20 PM

Quote:

Originally Posted by DeltaMac

Do you want the guest account to NOT use wireless at all?

Did I say that?

I would like to configure the wireless interface globally which means the following: the admin creates the configuration (SSID, WPA-PSK, IP address..) and all the other users may use but not modify it.

That's how OSX deals with wired network interfaces AFAIK.

Satcomer · #6 July 7th, 2008, 05:53 AM

Do all the users have Admin accounts on the machine? I ask because YOU as the Admin should only give the users STANDARD accounts. Then as Admin go into each account and set up the wireless. When done click on the lock in the left bottom corner to lock it. you have to do this on each account you want to have access to wireless. Then when a STANDARD user logs into their account the have to have an Admin password to open the lock you the Admin put on the Network setup. Easy!

Now is you want more control then you will need to have a server with the accounts on that.

finger · #7 July 7th, 2008, 06:03 AM

Quote:

Originally Posted by Satcomer

Do all the users have Admin accounts on the machine?

Only the user `admin' is able to administer the machine. User `guest' is a regular user.

finger · #8 July 7th, 2008, 06:09 AM

Oops, I answered too early.

Quote:

Originally Posted by Satcomer

Do all the users have Admin accounts on the machine? I ask because YOU as the Admin should only give the users STANDARD accounts. Then as Admin go into each account and set up the wireless. When done click on the lock in the left bottom corner to lock it. you have to do this on each account you want to have access to wireless. Then when a STANDARD user logs into their account the have to have an Admin password to open the lock you the Admin put on the Network setup. Easy!

Hmm.. I can't see any locks when clicking on the wireless button.. (see attachment)