From: nospam on
In article <1jd6uaz.tywuw11ka70u1N%kmorgan(a)spamcop.net>, Kathy Morgan
<kmorgan(a)spamcop.net> wrote:

> > doesn't matter. the worst that can happen is it will trash the guest
> > account, which is cleaned up anyway when the guest logs out.
>
> That's what's really beautiful abut the guest account and the reason I
> want a second guest account, but I don't see a way to create it.

why do you need a second guest account? it's going to be reset on
logout so it will be clean for the next guest.
From: nospam on
In article <1jd6ucg.10msab9b4cevzN%kmorgan(a)spamcop.net>, Kathy Morgan
<kmorgan(a)spamcop.net> wrote:

> Now we're right back where I started with this. The built-in guest
> account is perfect for the adult users. What I really want is to be
> able to duplicate it and restrict Internet access for a child guest
> account.

ok, that would need more than just the basic guest account. you could
have a separate protected child account and manually reset things
yourself every night or whatever is appropriate.
From: JF Mezei on
You can download the Server Admin Tools (free). The Workground Manager
is able to connect to your computer (local) and then you need to select
the local directory (as opposed to some ldap remote server)

You can see the "Guest" account in the list, and there is a function to
copy an account. HOWEVER, workgroup manager shows no special setting for
this account with regards to the cleanup which happens at logout.

I am not sure how exactly this is done. Perhaps there is some hardcoding
of the process in the OS itself when it sees the account "Guest".

Yoiu'd have to find out how the OS decides this is a "guest" account.
If it clues in by the UID (201), then you could create guest2 with the
same UID (201) and it might get the same logout processing.

http://www.macosxhints.com/article.php?story=20080205095429448 gives
you some idea on how to customize the account.

Also, beware that while the /Users/Guest files are reset to default at
logout, it doesn't prevent the user from saving files in other people's
writable directories (drop boxes).


In workgroup manager, once you select a username on the left, you get
the acocunt info. But at the top you can also click "preferences" which
allows you to customize the account's access to applications.
From: Tom Stiller on
In article <0105a6e0$0$12386$c3e8da3(a)news.astraweb.com>,
JF Mezei <jfmezei.spamnot(a)vaxination.ca> wrote:

> You can download the Server Admin Tools (free). The Workground Manager
> is able to connect to your computer (local) and then you need to select
> the local directory (as opposed to some ldap remote server)
>
> You can see the "Guest" account in the list, and there is a function to
> copy an account. HOWEVER, workgroup manager shows no special setting for
> this account with regards to the cleanup which happens at logout.
>
> I am not sure how exactly this is done. Perhaps there is some hardcoding
> of the process in the OS itself when it sees the account "Guest".
>
> Yoiu'd have to find out how the OS decides this is a "guest" account.
> If it clues in by the UID (201), then you could create guest2 with the
> same UID (201) and it might get the same logout processing.

You cannot (by definition) have two accounts with the same UID. The UID
is how unix identifies the user, his files, access right, etc. The best
you could hope for is an alias to the single guest user.

There might be some chance that there is a range of UIDs that receive
the same treatment as the guest account.

>
> http://www.macosxhints.com/article.php?story=20080205095429448 gives
> you some idea on how to customize the account.
>
> Also, beware that while the /Users/Guest files are reset to default at
> logout, it doesn't prevent the user from saving files in other people's
> writable directories (drop boxes).
>
>
> In workgroup manager, once you select a username on the left, you get
> the acocunt info. But at the top you can also click "preferences" which
> allows you to customize the account's access to applications.

--
Tom Stiller

PGP fingerprint = 5108 DDB2 9761 EDE5 E7E3 7BDA 71ED 6496 99C0 C7CF
From: Kathy Morgan on
Tom Stiller <tom_stiller(a)yahoo.com> wrote:

> In article <0105a6e0$0$12386$c3e8da3(a)news.astraweb.com>,
> JF Mezei <jfmezei.spamnot(a)vaxination.ca> wrote:
>
> > You can download the Server Admin Tools (free). The Workground Manager
> > is able to connect to your computer (local) and then you need to select
> > the local directory (as opposed to some ldap remote server)
> >
> > You can see the "Guest" account in the list, and there is a function to
> > copy an account. HOWEVER, workgroup manager shows no special setting for
> > this account with regards to the cleanup which happens at logout.

That sounds very promising.

> > I am not sure how exactly this is done. Perhaps there is some hardcoding
> > of the process in the OS itself when it sees the account "Guest".
> >
> > Yoiu'd have to find out how the OS decides this is a "guest" account.
> > If it clues in by the UID (201), then you could create guest2 with the
> > same UID (201) and it might get the same logout processing.
>
> You cannot (by definition) have two accounts with the same UID. The UID
> is how unix identifies the user, his files, access right, etc. The best
> you could hope for is an alias to the single guest user.
>
> There might be some chance that there is a range of UIDs that receive
> the same treatment as the guest account.

Oh, I hope so! I'm downloading the Server Admin Tools now; I'll see
what they can do for me.

> > Also, beware that while the /Users/Guest files are reset to default at
> > logout, it doesn't prevent the user from saving files in other people's
> > writable directories (drop boxes).

That's not a problem; there will only be three accounts on the machine:
the administrator account and the two guest accounts--I'm the
administrator and won't have a drop box.

--
Thanks!
Kathy
First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14
Prev: iPad
Next: Credit card jam, was: Black Screen of Death