Issue with application rights in Open Directory

Ady

Registered
Hi, forum.

I am very new to the world of Macs. I am an IT Technician at a college and we've recently purchased over 60 Macs and I've now been tasked with learning how to administer them.

I will try and explain my issue as best as I can.

I have just set up a brand new iMac and installed Adobe InDesign CS4 as requested. I then joined the machine to our existing Open Directory domain (which contains about another 60 Macs). I've defined the necessary user and machine preferences, but I've also been asked to make sure that one particular user of this system is completely disallowed internet access. As a result, I used the Applications Preferences in Workgroup Manager to specify which apps could and could not be run.

The problem is this: Because of these explicit settings, Adobe CS4 is now disallowed for this user. I want to allow it, but I am unable to browse to the folder that contains the application as it is installed only on the client machine and the mounted drive which connects to that machine from OD only allows me to see the dropbox folders for the local user accounts on that Mac and nothing else. Therefore, I cannot figure out how to "tell" OD that I want an application only installed on that specific machine to be allowed.

I've tried going via the network route, but the same thing applies in that I can't seem to be able to reach the desired folder on the machine in question to set the allow access.

Could somebody please advise on how I go about doing this?

For the record, we are running Snow Leopard 10.5.8 on the server and the client machine in question is on Mac OSX 10.6.4.

Again, I would be extremely grateful if someone could point me in the right direction. Forgive my apparent n00bishness in all things Mac, but my background is Windows and PCs, so I'm a little out of my depth at the moment!

Thanks again.
 
FWIW, Snow Leopard is MacOS X 10.6. MacOS X 10.5.8 is just plain old Leopard. To your question, I have to wonder if what you are asking is even possible. Adobe applications access the Internet upon launch. Therefore, your configuration will disable certain features of the suite in the best case. I think that you might be well-served to contact Adobe technical assistance with your issue.
 
I figured out what to do in the end. I enabled access to the required path via Sharing.

But you're right, Adobe products do access the internet on launch so the setup I.proposed above was not really workable. Restricting applications also caused issues with McAfee even after it had been enabled so I had to rethink my entire approach (I.e. Reverted to the default setting and removed Safari from that user's dock).

Thanks anyway.
 
Back
Top