Enable Ethernet Port For Pro Control?

[RT60]

Hi All,

Have an HD3 Accel system running on a G5, 867 mHz machine, OS 10.4.9, don't know if these details matter, etc.

BUT... I have a "user" and "admin" account on this Mac. (Too many users doing "bad" things - like running software update, installing stuff, etc.) Also, have a ProControl that is seldom used. Last night, a user plugged in the Pro Control but was unable to enable the ethernet port because the Mac asked for an admin password. I missed the phone call for help, now I'm getting flack and I don't want it to happen again.

So, tried it this morning - Launched Tools (7.3cs1), went to the Peripherals Window, clicked on "enable port", it asked for a password, which I entered, and it all worked fine.

Wanting to prevent this from reoccurring, I tried to recreate the situation - disabled the port, deleted all digi plist files, including DAE, Authorization prefs, digi databases, zapped the pram, unplugged everything, logged out, shut down, re-start, clicked all over dodge. NOTHING I did could make the Mac ask for authorization again.

Does anybody know why the Mac asked for authorization this one time and not ever again?

Thanks,

J

[Craig F]

it has to do w/ UNIX level permissions same as upping the DAE Buffer memory the first time

so do what I do, blame Mr. Jobs

[RT60]

Thanks Craig - I guess what I don't understand is why it happened given that nothing changed - no OS updates, no software installs, haven't even changed the desktop picture. I can accept it being something I cannot change, but only on a superficial level. Don't make me bust out terminal on this piece!

Bah!

J

[gomi]

reseting the protools prefs can do this.


what you can do is make your second user account an admin as well

but you set up some permissions on key files

/System/Library/CoreServices/DiskImageMounter.app
/System/Library/CoreServices/Software Update.app
/Applications/Utilities/Installer.app

Basically make your first admin the owner of these files, and then set the everyone and group perms to no access.


Then your second admin account can still have full functionality, but they can't run the Software Update, installer, or
open any DMG files.




(yes i work in a school, i know all the tricks for blocking the kids )

[RT60]

Gomi,

I too am in a school! We have 21 systems, and perhaps I am being extreme, but I am actually trying to keep *faculty* and students from monkeying with the systems too much. I hadn't thought of your approach (though i have locked the com.apple.desktop.plist) but your method is way, way better. I suppose that to take your approach in Users/Student/Library/Preferences, I would have to log in as root, or use sudo in terminal.

Have you done anything special to prevent damage to the plug-ins folder, or drag'n'dropping of demos, cracks, etc, that would not come in via "installer"?

Thank you for helping me see the big picture, seriously, you just opened my mind!

J

[gomi]

Yah, We have over 80 new intel iMac all running Protools, and 12 Mac pro's all running HD.. it's a lot to managed.

I actually use a system called Radmind to manage all the computers here.
Every night the systems poll the server, the server scans the systems and any files that do not
belong are deleted.

http://rsug.itd.umich.edu/software/radmind/

it's not for the faint of heart, but it's amazingly powerful.

Basically, you set the systems up the way you want it, and they stay that way.
If a student somehow manages to delete the entire protools folder, ohwell, it will magically
reappear the next day, or right away if you force it to check..

you can email me if you want to pick my brain, I am the mac tech here

gord @ vfs . com

[gomi]

One more thing, are you running OS X server?

You can add the machines to managed lists based on the hardware address, and then you can tell it what they
can and cannot do based on preferences on the server.

Something to look into.