Setup guide

UNCLASSIFIED

A user with this capability enabled will be able to configure security-related

items within the System Preferences panel such as the timing for the screen

saver and the timing for the machine to automatically go to sleep. This is an

unfortunate side effect; this capability must be enabled to allow the user to

change his password. Removing the ability of a user to change his own

password is considered a security risk.

Chapter 6 -

Future Guidance

10. Check the box for This user can only use these applications.

11. Four categories appear under the Application column: Applications,

Utilities, Applications (Mac OS 9), and Others. Expand these categories to

list their contents. Uncheck the Allow box for any programs listed in Table 3.

Access to any applications not appearing in this guide should be determined

by site policy. The Applications (Mac OS 9) and Others options should

be empty and require no action.

Table 3 : Programs to Restrict for Managed User

Applications Utilities

Chess AirPort Admin Utility

FAXstf AirPort Setup Assistant

iChat IM Plugin Converter

iDVD Audio MIDI Setup

Internet Connect Bluetooth File Exchange

Internet Explorer Bluetooth Serial Utility

iSync Bluetooth Setup Assistant

iTunes Console

MSN Messenger Directory Access

QuickTime Player EarthLink TotalAccess

Uninstall TotalAccess

iDiskUtility

Installer

NetInfo Manager

Network Utility

ODBC Administrator

Software Restore

Terminal

X11

UNCLASSIFIED