Sharing the preference files between Admin and User and/or getting rid of the Admin

Travis86

Registered
Hello.

Yesterday, I got a G5, which is my first real Mac ever. I know a lot about Linux, and I figure all of that pretty much holds with the Mac.

You're supposed to have at least two users, right? One to be be the administrator, and one to be the normal user. That way the normal user can't do anything to the system. When I was installing the Developer tools, I think I was doing it as the Admin, but it still asked me for the password. Does this mean that programs can't do anything to the system without the Admin's express permission? I.e. can I use the Admin for my normal user account and be just as safe?

And, if that is not the case, I don't like switching from one user to the other just to see that I need to change the preferences again. Is there a way to make a hard link (Linux term) between the preference folder/file of the Admin and to the other user(s) so that if I change the size of the dock on one user, I can switch to the other user and the dock will be the new size there.

Also, when I search for Mac help on Google or something, am I supposed to search for "osx" or "os x"?

Thanks.
 
You don't need two accounts on Mac OS X -- in fact, there already ARE two accounts: the root account, and then your admin account. You can add more accounts with less priveleges, if you like.

The account you set up when you boot up for the first time should be the account you use all the time, unless you need another account for another user or another account with lesser priveleges.

The asking for the password is normal -- and you are correct in assuming that you can't do many things without the admin password. I don't think you run the risk of screwing the system up more with the admin account than with any other account. The root user account is the one you need to be careful with, and, in reality, you shouldn't ever have to enable the root user (it's disabled by default).

I was involved in another thread on preference sharing like you describe, and we came to the consensus that it's best to leave user settings specific to that user, and not share them across users. You're just begging for permissions problems if you attempt that.

I would suggest using the admin account in your daily work and not bother setting up a "lesser" account. You'll be prompted for your password for most secure actions, and if you're the only user using the system, then that account should be the only one you'll need.

As for the search engine stuff, it just depends -- I usually prefix my Mac OS X-specific searches with "Mac OS X (search variables here)" and many choices always come up.

Good luck, and congrats on the new G5!
 
Hmmm... Ok. That'll make things a lot easier.

I wasn't really worrying about me destroying the system. I was wonder what a malicious program could do. I guess it would stop the program when it tried to do whatever and ask me (or it) for the password.
 
The admin account in OS X is limited in what it can do and what it has access to. About all an admin account can do that a non-admin account cannot is; write to the /Applications and /Library folders, create or delete a user account, and activate or deactivate the root account. An admin account cannot even read the user folder of another account it has created. 97% of all OS X users run in an admin account full time and 80% do not know that there are other kinds of accounts with different privileges.

Keep the root account disabled unless you are using it at the moment and you are pretty well protected.
 
Travis86 said:
Hmmm... Ok. That'll make things a lot easier.

I wasn't really worrying about me destroying the system. I was wonder what a malicious program could do. I guess it would stop the program when it tried to do whatever and ask me (or it) for the password.

That's why on some installs it asked you for the password. You have the Main Library Account, then your Users accounts. I you want all users to share programs and their settings then the files will be in the main Library account. If you install the program just for the User(s) account, that user will only have access. Hence the two Library accounts (when you first open your hard drive icon).

If you don't want to destroy you system then some simple preventative measures will go a very long way. Here are some of my suggestions:

1) Stay away of any maintenance utility that has been discontinued. You can search this and many boards about that products horrible crashing of Mac OS X.

2) As you already know Mac OS X is BSD based. BSD is a part of Unix and Unix machines (and software) have been developed over the years to run non-stop. So daily, weekly and monthly log files were archived and kept clean by automatic programs called "cron" jobs (you probably already know this). These cron jobs are set to run very early in the morning when most OS X machines are sleeping or turned off. So manually running this cron jobs through Terminal or download some very easy cron jobs applications runners from Versiontracker or MacUpdate. Just search for cron and find a freeware that you like. I've been using MacJanitor for some time now. It's simple and does one thing well.

3) A lot of Mac users have been complaining about Max OS X need to Repair Permissions ( Applications->Utilties->Disk Utility). I on the other hand I see the need to Repair Permissions. At the very least since I started Repairing permissions I have had ONLY 1 crash (because of my personally hacking/cracking) since OS X.1.x. I Repair Permissions about once a week and after major software installs. It was kept my machines running smoothly while others (MacFixIt) seem to have never ending problems. I'm not saying Repair Permissions will fix anything, I'm just saying this Preventative maintenance tool will prevent a lot of future headaches.

4) IMHO the best OS X maintenance tool is Alsoft's DiskWarrior. I believe this hidden gem is hands down the winner of any maintenance tool on ANY software platform. This is only MY opinion. however others believe as I do. I do own TechTool Pro. It has it's strengths and is a good utility. I just prefer my first choice when my Tibook disk gave a couple of worried hours ( I eventually had to replace it but Disk Warrior resurrected the old drive enough I could save the files to a firewire disk and then formatted and replace files with Carbon Copy Cloner ).

These are just some of my tips for a healthy Mac. I am always looking out for better options but for now things have been going very well in OS X land. Your mileage may vary though. Good Luck and welcome to the Mac way of computing.
 
Hey, thanks. I'll see if I can do that.

Also, I was wondering if I should buy an anti-virus program. I don't think I should, but I'm not really sure. Aside from there being next to zero Mac viruses, if a hole did show up, Apple would probably be quick to patch it, so a patch would be available about the same time a virus definition would be available. Is this a good assumption?
 
That's a pretty good assumption. I run my OS X system without anti virus software and I repair my system with only the Apple-supplied tools (Disk Utility on the OS X Install Disk). I've had no crashes with Panther whatsoever, and I only had one under Jaguar, and I run a pretty heavy system with a lot of graphic design applications, over 3,000 fonts managed with Suitcase and a bunch of other nonstandard things (dual monitors, USB hub, background apps like Konfabulator, 3 hard drives running off of a PCI ATA/100 card, etc.).

So far, Mac OS X virii are limited to downloadable applications that must be double-clicked to have any impact on the system, and, even then, the only virii that exist are simply proof-of-concept and carry no harmful payload. Of couse, Mac OS X is vulnerable to BSD virii, but the first time an OS X user gets infected and harmed because of one will be the day that pigs fly, IMHO.

Hell, I have a Windows 2000 machine, too, fully exposed to the internet with absolutely no virus protection nor disk maintenace utilities installed. Hasn't had a problem once -- I sincerely believe most Windows users that get infected with a virus are begging to get infected by downloading every "cool" app, pop-up blocker or internet optimizer they can find. If you're selective and careful with what you download, a home user should never need virus protection. If you're a common Windows user (read: believe and click those banner ads that promise to enlarge your manhood as well as optimize your internet connection AND promise to refinance your home for 0.05%), then virus protection isn't nearly enough.

It all depends on how you use your computer. Do you overlook the idea of a backup? Would reinstalling the system take you a day and a half, or two hours? Do you frequently test beta software, or download and install software you know little to nothing about? Are you gullible, and do you download iffy programs that promise to "optimize" certain portions of your system? Do you frequently read spam, knowingly or unknowingly? Do you give out your primary email address to any old website that requests it? If you answered "yes" to any of these questions, you'll need a firewall, virus protection and a good insurance policy. If not, then the standard OS X install should be secure enough for any home user, but if you want the feeling of protection, then maybe you should look into Virex or some virus protection software.
 
Well, the answer is "no" to all of your questions, so I ought to be okay. And from my Windows experience, I think what you were saying is true.
 
Back
Top