Controlling email under parental controls for network accounts

I use OS X server (10.8) to mange kids accounts at home, so they can logon to laptop or desktop and all there stuff is there.
This works perfectly as does the profile server ensuring that they have their parental controls set.
I've just stated to look at creating an email account for the older one and found that whilst there is a great 'People' tab in the Systems Preferences parental controls this doesn't seem to exist in profile manger at all.
Does anyone kniow how to setup 'safe' lists of people for inbound and outbound email using profile manager or directory admin ?
Thanks in advance

Quick Kick wrote:
Thank you.
But does anyone know the default Parental Controls Settings, specifically under the Other tab?
you can find them out yourself. make a new account and enable parental controls on it. then expand "other" and see what's checked and what's not checked.

Similar Messages

Safari can't connect to server on only some applications (lumosity) and only under parental controls

Under parental controls with the "try to limit access to adult sites" selected, some sites (such as lumosity) give me the can't connect to Safari screen,
while others (facebook, twitter) give me a form to fill out screen, rather than the home page.
Other websites work just fine.
When I use my own login, all of the sites work just fine.

Hey Nana1048,
Thanks for the question. I understand you are experiencing connectivity issues with your iPad 2. The following resource may help to resolve your issue:
iOS: Troubleshooting Wi-Fi networks and connections
http://support.apple.com/kb/TS1398
1. Be sure you're in range of your Wi-Fi router (access point).
2. Tap Settings > Wi-Fi and turn Wi-Fi off and on. If your W-Fi setting is dimmed, follow these steps.
3. Confirm that your Wi-Fi router and cable or DSL modem are connected to power, turned on, and connected to the Internet. If not, refer to your network administrator or Internet service provider (ISP) for assistance.
4. Restart your iOS device.
5. Tap Settings > Wi-Fi and locate the Wi-Fi network to which you're connected.
6. Tap and Forget this Network.
7. Try to connect to your desired Wi-Fi network.
          Note: You may need to enter your Wi-Fi password again if your network requires one.
8. Turn your Wi-Fi router off and on. If your ISP also provides cable or phone service, check with them before attempting this step to avoid interruption of service.
9. Update your device to the latest version of software.
10. Update your Wi-Fi router to the latest firmware. For AirPort Base Stations, install updates using the AirPort Utility.
Wi-Fi disconnects or signal strength is less than expected
1. Move closer to the Wi-Fi router (access point).
2. Check for sources of potential interference.
3. Remove any case, stand, or other accessories from your iOS device and see if signal strength improves.
4. Reset network settings by tapping Settings > General > Reset > Reset Network Settings. Note: This will reset all network settings including
          - previously connected Wi-Fi networks and passwords
          - recently used Bluetooth accessories
          - VPN and APN settings
Thanks,
Matt M.

How come when I block one website under parental controls, other websites become blocked?

I am a teacher and have found it necessary to block facebook. I am doing this under Parental Controls. Unfortunately, my students also frequent an Adobe website, I have discovered that by blocking facebook this site and others are not accessible. I then went and removed the block in Parental Controls and the Adobe site was still not accessible. I discovered that ONLY BY clicking on ALLOW UNRESTRICTED ACCESS TO WEBSITES were my students once again able to access the Adobe site.
Here is URL for the Adobe site: https://color.adobe.com/create/color-wheel/

See [[Searches are redirected to another site]] and [[Is my Firefox problem a result of malware]]

Can I enable simple finder for network accounts?

Can I enable simple finder for network accounts?

This was possible (drop dead easy) through MCX. It was one checkbox. If you are supporting older machines, you might still be able to push out MCX settings. My experience with 10.8.x is that MCX is inconsitent at best.
In Profile Manager... Best suggestion is to look at creating a custom profile. For what it is worth, this is the default MCX setting if the Simple Finder option was set on a user. Note the InterfaceLevel = Simple.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
          <key>mcx_application_data</key>
          <dict>
                    <key>.GlobalPreferences</key>
                    <dict>
                              <key>Forced</key>
                              <array>
                                        <dict>
                                                  <key>mcx_preference_settings</key>
                                                  <dict>
                                                            <key>AppleShowAllExtensions</key>
                                                            <false/>
                                                  </dict>
                                        </dict>
                              </array>
                    </dict>
                    <key>com.apple.finder</key>
                    <dict>
                              <key>Forced</key>
                              <array>
                                        <dict>
                                                  <key>mcx_preference_settings</key>
                                                  <dict>
                                                            <key>AppleShowAllExtensions-immutable</key>
                                                            <true/>
                                                            <key>FinderSpawnWindow</key>
                                                            <false/>
                                                            <key>FinderSpawnWindow-immutable</key>
                                                            <true/>
                                                            <key>InterfaceLevel</key>
                                                            <string>Simple</string>
                                                            <key>NewWindowTargetIsHome</key>
                                                            <false/>
                                                            <key>NewWindowTargetIsHome-immutable</key>
                                                            <true/>
                                                            <key>OpenInColumnView</key>
                                                            <false/>
                                                            <key>OpenInColumnView-immutable</key>
                                                            <true/>
                                                            <key>ShowExternalHardDrivesOnDesktop</key>
                                                            <true/>
                                                            <key>ShowExternalHardDrivesOnDesktop-immutable</k ey>
                                                            <true/>
                                                            <key>ShowHardDrivesOnDesktop</key>
                                                            <true/>
                                                            <key>ShowHardDrivesOnDesktop-immutable</key>
                                                            <true/>
                                                            <key>ShowMountedServersOnDesktop</key>
                                                            <true/>
                                                            <key>ShowMountedServersOnDesktop-immutable</key>
                                                            <true/>
                                                            <key>ShowRemovableMediaOnDesktop</key>
                                                            <true/>
                                                            <key>ShowRemovableMediaOnDesktop-immutable</key>
                                                            <true/>
                                                            <key>WarnOnEmptyTrash</key>
                                                            <true/>
                                                            <key>WarnOnEmptyTrash-immutable</key>
                                                            <true/>
                                                  </dict>
                                        </dict>
                              </array>
                    </dict>
          </dict>
</dict>
</plist>

Running OSX10.6.8 two email account thru Roadrunner. Both accounts now indicate email sent but they never arrive. Can get inbound email. this start for one account 5 days ago and yesterday for the second account. any suggestions?

Running OSX10.6.8 two email account thru Roadrunner. Both accounts now indicate email sent but they never arrive. Can get inbound email. this started for one account 5 days ago and yesterday for the second account. any suggestions?

When we returned from a weekend trip, both emails were working. The obvious answer [to me anyway] is that the problem was with Roadrunner, not our minimac. The chances of finding out what the problem was with Roadrunner are slim and none.

Screen Sharing Broken for Network Account Admins Mac OS X Server

Re: OS X 10.8.4, Server.app 2.2.1
After replacing a failed Airport Extreme -- and the resulting changes in server IP address -- Screen sharing is now broken for "Network" account administrators. "Local" adminstrators can screen share successfully.
When logging in as a Local Admin, the System Log contains a single entry:
Authentication: SUCCEEDED :: User Name: localadmin :: Viewer Address: 10.0.1.6 :: Type: DH
When logging as a Network Admin, a similar line appears:
Authentication: SUCCEEDED :: User Name: testnetwork :: Viewer Address: 10.0.1.6 :: Type: DH
followed by screen-fulls of other log messages, eventually ending -- a minute or two later -- with:
screensharingd[77693]: uid 1034 not found
screensharingd[77693]: unable to get width and height of display.
at which point the client sees a "Error: Network connection lost." alert. 1034 is the UID of "testnetwork", as seen in
dscl /LDAPv3/127.0.0.1 -list /Users UniqueID
So apparently, Network users are authenticated, but screensharingd cannot find the user.
changeip -checkhostname returns "success". Just to be sure, I "Updated the Host Name" as suggested by the "Network Configuration Has Changed" alert in Server.app -- problem remains.
How does one debug this? Are there more comprehensive debug logging options available for screensharingd or login window? Anyone else seen this problem?

Linc: thanks for your inquiry.
Here are more steps I've taken to solve this problem:
1) From a Time Machine backup to a test partition, I restored the server from before the failure of the base station and found that the login problems were present then.
2) On yet another test partition, I created from scratch a new OS X Server. Added a local administrator, and a network admistrator and discovered the same problem: network administrators cannot screen share, although in this case, they are simply unauthorized.
Using dscl, things look OK: there is a /Local/Default/Groups/com.apple.access_screensharing that lists only the admin group, and the admin group contains networkAdmin.
Furthermore, I can log in as the networkadmin from the login window, as "Other".
Furthermore, I can ssh into the server using the networkadmin credential.
I used odutil to boost the logging OpenDirectory log level. The logs are very verbose, but to my eyes, it looks like OD recognizes the networkUser, but screensharingd fails to authorize. See logs below.
Can someone confirm that screen sharing from network admin accounts works at all? Is there a way to elevate screensharingd logging to find out more about why it rejects network admins?
TIA
/var/log/opendirectoryd.log
4643.65273.65277, Module: search - ODQueryCreateWithNode request, NodeID: 3D4241C6-FAFF-4816-8F7C-B3E0ED6F56A6, RecordType(s): dsRecTypeStandard:Users, Attribute: dsAttrTypeStandard:RecordName, MatchType: EqualTo, Equality: CaseIgnore, Value(s): networkadmin, Requested Attributes: dsAttributesStandardAll, Max Results: 1
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: search - queuing request to connection - '/LDAPv3/127.0.0.1:ldap:406935A6-9ADB-413A-A82B-7F30F4E9E5A1'
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - adding 'dsAttrTypeStandard:RecordName' for ambiguous name query
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - adding 'dsAttrTypeStandard:RealName' for ambiguous name query
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - query with filter - '(&(&(objectClass=inetOrgPerson)(objectClass=posixAccount)(objectClass=shadowAc count)(objectClass=apple-user)(objectClass=extensibleObject))(|(uid=networkadmin )(cn=networkadmin)))', baseDN - 'cn=users, dc=testserver,dc=local'
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - found result - 'uid=networkadmin,cn=users,dc=testserver,dc=local'
4643.65273.65277, Node: /LDAPv3/127.0.0.1, Module: ldap - ODQueryCreateWithNode completed, delivered 1 result
4643.65273, Node: /Search, Module: search - ODQueryCreateWithNode completed, delivered 1 result
4643.65278 - Client: screensharingd, UID: 0, EUID: 0, GID: 0, EGID: 0
4643.65278 - ODNodeRelease request, NodeID: 184CFA31-1EB8-4384-B9CA-D04A93736CB1
4643.65278, Node: /Search - ODNodeRelease completed
clearing all node authentication connections
/var/log/system.log:
screensharingd[4665]: Authentication: FAILED :: User Name: networkadmin :: Viewer Address: 10.0.1.6 :: Type: DH

Under Parental Controls

Please help. I just purchased a new iMac and I was trying to set up the parental controls. There is a section where you can give access to only certain emails. I added a few but need to delete some and I have looked everywhere for a delete or edit option and I can't get rid of them. There is nothing in the small handbook we were given. I am sure it is something right under my nose, but I can't seem to figure out how to do it. Any help would be greatly appreciated.
Thanks!

I'm a bit confused but I'll give it a try.
When you add an allowed contact and check "add person to my address book", That adds the contact information to your (the administrator) addressbook. That contact may already exist in your addressbook. To edit or modify that information you open your Addressbook application. The two functions are seperate.
You can add allowed email addresses in Parental controls without adding that person to your addressbook or you can select an existing contact in Your addressbook.

Connecting to Http Proxy on Lion under parental controls

Hello.
Ive been looking for a couple of days for a fix for this. The issue im having is running parental controls on an account (any settings enabled/disabled, even with no web access permissions) and using a proxy (http, https, ftp) to connect to the internet. Connected as a standard/administrator user I can connect to the internet fine, but as soon as parental controls are enabled i cannot. I can't even connect to a local address without an error in the browser.
I have tried this on multiple lion computers with the same outcome.
The error im getting is:
Chrome: is no data received, no server data was sent.Error 324
Firefox is the default connection was reset error
And safari dosen't even give an error just a white screen.
And external programs don't seem to work.
The computer is 100% uptodate.

Parental controls use an internal proxy which ignores the proxy set in Network Preference. By making the internal proxy non-executable to the user with parental controls request can be passed to the external proxy.
You can run the following command from Apple Remote Desktop as root (or locally with sudo).
chmod a-x /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/Resources/webfilterctl
Note: This also works in 10.8 which has the same problem.

Local login capability for network accounts?

Hi all,
I'm setting up a local network at an office servicing about 20 different client machines (mostly just MacBooks). The goal of this is to accomplish some basic administrative taks, such as checking the status of/enforcing disk encryption, password strength policies, caching software updates, etc.
Currently everyone is logging onto their machines locally and ideally we could have them merged into network accounts through a box that we have running OS X Server. I've got that set up and working with test accounts, but given that our users sometimes are working off-site or from home, I need a solution that could allow people access to their accounts when the server is unavailable (any time they are not on our local network). Is this possible? Are there any other workarounds that aren't too awkward?
Thanks!

There are three main types of user account.
Local only - defined on the local machines with files being stored on the local machine
Network only - defined on a server with files being stored on a server
Mobile account aka. Portable Home Directories - defined on a server but when user first logs in to a Mac configured for this type of account their account is copied to the Mac along with their home directory, and thereafter password changes are synchronised between the server and Mac
Most often Mobile accounts are used with laptops but this is not compulsory.
You will need to use ProfileManager to manage the Macs and be able to configure a group of Macs to use Mobile Accounts. This is under Mac only - Mobility, and you want to then configure "Create Mobile Account when user logs in to Network Account".
Note: With older OS versions you could set this up with Workgroup Manager and Managed Preferences but Mavericks needs you to do this via ProfileManager. ProfileManager is however backwards compatible with Lion and Mountain Lion versions.

Setting Scratch for Network Accounts

Hello,
We hav a lab of 18 Imacs and 5 Mac pros. We are using OD on an Xserve and we would like to set the Scratch disk for FCP 6.0.3 to use an external firewire drive. The problem is each network account it wants to use the network Home folder. Any help would be much appreciated.
Message was edited by: sjkeith77
Message was edited by: sjkeith77

Nope...gotta set it manually in the program.
Hey, the students have to know this stuff...so they'd better know how to set the scratch disk.
Shane

Mobile Account Preferences visible on Menubar for Network Accounts

On Mobile Accounts (setup with Profile Manager), acting as network account (home folder in server), the mobile account preferences are shown on the menubar. In addion, it says "last home sync" incomplete. Both are wrong according to my understanding.
However it makes sense - and it if the case - if the account is really working as mobile account with local home folder on a e.g. macbook.
Does anyone has the same issue?

I have the same issue. No fix yet.
One of my machines has joined the network and seems to be ok in almost every way...clearly with the exception of this way.
I will post if / when I find a solution.
W

How to limit the number of emails that are shown for each account

Hi, I'm going from iOS 6.1 to my new 5s iOS 7 and I wanted to know if there was a way to limit the number of emails shown for each of my accounts? In iOS 6 there is a setting "show" where you can choose how many you would like to be loaded at a time from 50-1,000 , is there a setting similar to this and I am just not seeing it? Please help me asap. I have only logged in 3 of my 12 email accounts and already have over 13k emails loaded...

You can't limit it to the last 50 messages, but you can limit it to the last 1000 messages in each "folder" (label).
Go to the Gmail website and click on the gear icon to the top-right side.
Click on Settings.
Click on the "Forwarding and IMAP/POP" tab across the top of the Settings area.
Towards the bottom of the IMAP section, change the "Folder Size Limit" setting to "Limit IMAP folders to contain no more than this many messages". By default 1000 is selected, though you can also choose 2000, 5000, or 10000.
Click Save Changes at the bottom.

Firefox vs Safari. Which one is the best for network accounts?

Hi,
I heard some people complaining about Firefox taking too much server cpu? I don't want to make any mistakes since I have a lot of network user accounts.
Does anybody has issues with Firefox?
Thanks

Firefox is better since it doesn't allow students to bypass the proxy.
Example : in Safari, the students can type https://facebook.com rather than http://facebook.com to access the website.
But Firefox proxy configurations have to be locked since student can change them.

Disable Photobooth for network accounts

Hi there,
I have Mac's attached to a windows active directory network.
I am looking to disable some mac software on the windows login account without a mac server. Is this possible???
any help is gratefully appreciated
tim

thanks guys

Accessing third party programs for managed accounts w/parental controls

Hello - I am trying to set up a managed account for a child. I have installed some third party software. When I attempt to allow access under parental controls to this software, while I can see it under the parental control screen (eg, using System Preferences), when this account is actually accessed, the program does not appear.
I've had many problems in the past with parental controls, and would appreciate any sources, tutorials, etc on the matter!

A post in the link FromOZ provided held the answer.
Currently there seems to be an issue with Profile Manager and Admin account etc. According to the other thread so long as you use, user profiles the problem exists. One user in the other thread put forth that they stoped using user profiles and were using device profiles. Which seemed to fix the issue. I can confim removing all user profiles and only using device profile solves the issue.
What I did was create a group just for each user place all there devices into that group and never touch the individual user profile again.
Maybe this will help someone I dont know but maybe. Its a bit of a pain in the rear but now I have dictation fixed. Heres hoping the next verison of Server fixes this.
ps.. This was a perliminary test of just a few things like VPN, WIFI, and a few settings. I dont expect it to change once, I get more indepth.
Message was edited by: thightower added comment

Controlling email under parental controls for network accounts

Similar Messages

Maybe you are looking for