How can i disable terminal access with opendirectory ?

I'm deploying of a OSX Server over OSX Mountain Lion... And i need to limit the terminal (command line) access.
Any suggestion ??
Thanks in advance,
W

As Linc indicated setting an Open Directory account to have an invalid login shell will prevent the user from using Terminal. They will still be able to launch it but will not be able to do command line instructions nor double-click and run scripts, this effectively makes it unusable. You would do this setting using Workgroup Manager per user, it is possible to bulk apply this setting.
Alternative approaches would be to use MCX (Managed Preferences) to deny a user or group permission to run Terminal, or to do something similar via Profile Manager. (It appears that with Profile Manager rather than explicitly denying a particular application you have to grant access to desired applications and this implicitly means denying everything else, personally I find this approach to be bad and feel Apple should give the choice of both defining allowed applications and/or defining specific disallowed applications.)
I would not advise removing the Terminal application nor changing permissions on it.

Similar Messages

How can I disable the advancedAntiAliasing with fontswf in sdk

Hi,
in asc2.0 we need 'fontswf' script to embed fonts instead of use .as file directly.
but here is a problem
I cannt disable the advancedAntiAliasing with fontswf ?
because I have found an issue when I set advancedAntiAliasing is true, then the textfield (which font is embeded) antiAliasType doesn't work even type is advanced. I need set advancedAntiAliasing is false (in asc1.0 you can set it by .as file)
now i just set the sharpness and thickness to workaround in used asc2.0
but i think that is not great.
so how can I disable the advancedAntiAliasing with fontswf or any other solution?
thanks
hbb

Hello -
That setting is not fully supported. You can explicitly call it like this:
./compc -include-sources ../samples/test/Main.as -output ../samples/test/Main.swf -advanced-anti-aliasing=true/false
So, that is the compiler option that you want to use in order to disable it. The example I show you here uses the command line tool but it is a valid switch via Flash Builder as well

HT5509 How can I disable guided access without a password on my iphone

How can I disable guided access without a password on my iphone? Please help. I can't use Find My Iphone and touch screen.

See: http://support.apple.com/kb/HT5018
The easiest way is to connect the phone to your computer, click on its name, and click the "Configure Accessibility..." button on the Summary screen.

How can I disable remote access connection window ?

When I try to connect (via TCP/IP) with a VI in another PC (in my local network) it appears the remote access connection window.
How can I disable this (programmatically if possible) ?
A big thanks for your answers.
Linus

Randy,
attached the image of the Remote Access Connection Window that appears when I connect to the VI.
It is the Operating System (Windows) classical panel for Remote Access connections using a modem.
Many thanks.
Linus
Attachments:
Remote_Access.jpg ‏22 KB

How can I disable guest access on AFP

I want to securise my access from my Mac to my Ready Nas. In order to access it I need a password wich is good. But if I choose "guest access" I'm able to go through witout the password.
How can I disable the "Guest access" ?
Message was edited by: jfmori

That should be in the NAS setup I'd think.

How can I disable my iphone with a computer using itunes?

How can I disable my iphonewith a computer using itunes?

Welcome to the Apple Community.
You cannot disable your phone using iTunes.
You can only locate, lock or erase your device when it is logged into iCloud and 'Find My Phone' is enabled, additionally the device will need to be switched on and connected to a wifi or cellular network.
Unfortunately, you cannot activate iCloud or 'Find My Phone' remotely.

How can I disable jconsole access?

Hi,
I have a normal JAVA application running an a jdk1.6 VM. For security reasons I don't want allow access to that program by jconsole or any other JMX client. According to the docs I thougt I can disable it with -Dcom.sun.management.jmxremote=false but this does not help. jconsole can access my program even if I use this property. Note that I don't want enable some kind of security I simply want to disable the whole JMX stuff. How can I do that?
Thnak you in advance
Ulli

There are ways to achieve what you are asking for, but you need to be clear that you are not addressing a security problem. JConsole (and any other tool using the Attach API) can only attach to the same user's processes on the same machine. These are the same processes that the user can connect to using a debugger, and therefore do anything to. JConsole makes it easier to do certain things, but does not fundamentally change the security situation.
There is an RFE open to address this <http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6541693> but in the meantime here are two possible things you can do:
(1) Run your application with -XX:+DisableAttachMechanism. Like all -XX options, this one is unsupported, and could go away in a future version. It will also prevent you from running tools like jstack and jinfo on your application, which could be inconvenient.
(2) Unregister all the MBeans from the Platform MBean Server. (This idea is due to Daniel Lutoff.) Then you will still be able to connect with JConsole, but you won't see any information about the application. The code looks like this:
MBeanServer mbs = ManagementFactory.getPlatformMBeanServer();
for (ObjectName name : mbs.queryNames(null, null)) {
if (!name.getDomain().equals("JMImplementation"))
mbs.unregisterMBean(name);
}Regards,
�amonn McManus -- JMX Spec Lead -- http://weblogs.java.net/blog/emcmanus

How can I disable data access on C1-01 ?

I have a C1-01, for emergency use only. Today it displayed an unsolicited "Download Failed", message, and sure enough, my paygo account had been emptied. How can I prevent all data access, ie attempts to update firmware, internet access, etc?
TIA, Richard
Solved!
Go to Solution.

easiest way is to contact your network operator and ask them to disable your data plan and all internet access on your device. there are also a few miscellaneous settings in your phone, so you can try deleting access points if they are displayed in the Settings. i would check the phone Settings menu and the Web browser settings for items that you can turn off / disable.

How can I disable the access to windows 2000(O.S.) from LabView?

I need to disable the access to windows when an application (exe), created by LabView, is running. When the application is running, the user can not acces to windows (for example, execute another application) until he stops the application.
I am using LabView 6.1 and windows 2000
Many Thanks

Hi Francesc,
There are a couple of options for this. One of them could be calling Windows OS activex components and making the Desktop invisible through labVIEW and then bringing it back on after the LabVIEW execution is stopped.
The other option is to modify user settings on the target machine. I have tried this on windows 2000 and it works.
Run "gpedit.msc" from your start menu. In the Group Policy template choose the user configuration that you wish to make the settings for. Expand User Configuration , expand Administrative Templates , and then expand System. Choose 'Custom user interface'
In this panel select 'Enabled' and enter the interface file name, in this case C:\Program Files\National Instruments\Labview 6.1.exe. (or your own filepath\App
lication.exe). Reboot the machine.
This replaces the default windows shell (explorer.exe) with your LabVIEW executable. When the operator logs on, the only thing on his screen is the Labview application. No desktop, no taskbar, no start button.
This can also be done through LabVIEW using register-level programming. But it would be a more complex approach.
Hope this helps.
Regards,
Pravin Borade
Applications Engineer, National Instruments

How can I disable printer access on a managed account (guest/kids)?

Is there a way to disable printer use on a managed user account? I have created a limited user account for my kids to use. The problem is, sometimes they visit these websites that allow them to print their "works of art" and by doing so they use up a lot of my printer toner and paper. I don't want to have to turn off the printer and create a giant printer queue as the printer is a network printer shared among other computers. I rather just disable their printing capabilities. Deleting the printer from their user account also deleted it from my main (admin) account. I'm posting this in hopes someone out there knows how to do what I'm asking for. Thank you.

Scotch_Brawth has the basic steps outlined. A few additions I would make is that CUPS is already running on your system in the background. It is the underlying printing system for OS X. The easiest way to control the users of printers is through the web interface to CUPS. This is what is disabled by default in Mountain Lion. You can enable it by using the Terminal (/Applications/Terminal). Copy and paste the following command into a Terminal wndow and then hit Enter or Return:
cupsctl WebInterface=yes
Now you can use any web browser and go to http://127.0.0.1:631/printers/. Click on the link to the printer you want to control. There will be two drop down menus near the top of the page -- Maintenance and Administaration. Use the Administration menu to select Set Allowed Users. The page that will appear lets you enter a list of users to either allow to use the printer or prevent from using the printer. Make the appropriate choices and click the Set Allowed Users button. You will be prompted to enter your administrator's user name and password.
You only need to enable the web interface once. It will then be available unless you use the Terminal to disable it or until an Apple update turns it off again.

How can I disable SSID broadcast with Time Capsule?

I have always disabled the SSID broadcast with other devices. It is a big help with securing the networks. Can this be done with Time Capsule? If yes, please tell me how.
Thanks.

I have always disabled the SSID broadcast with other devices. It is a big help with securing the networks. Can this be done with Time Capsule? If yes, please tell me how.
You can by turning on hidden network.
Open the airport utility .. click on your TC, and then edit.. go to the wireless TAB. Click on wireless options. Click Create hidden network.
Let me add in modern world.. it is totally useless. A person can see your hidden network using any standard wireless analysis software. It adds no security at all.. and WPA2 Personal with a decent password 10-20 characters mix of upper and lower case plus numbers is still solid.. add more characters if you are paranoid.. but honestly hiding SSID does nothing.
http://www.howtogeek.com/howto/28653/debunking-myths-is-hiding-your-wireless-ssi d-really-more-secure/
If you did not know it is not part of the IEEE wireless standard.. it therefore often leads to problems with clients.
There are many other reasons given in the article above..

How can I disable the assistive touch programmatically ? This is like a bug. Though the Guided access is enabled a user can take screenshot of my application content. How can I solve this ? any idea ....

How can I disable the assistive touch programmatically ? This is like a bug. Though the Guided access is enabled a user can take screenshot of my application content. How can I solve this ? any idea ....

Question: Do you think the response from the support staff is correct? I mean, surely, I can't be the only CF user on a shared box whose other users need to modify the date and time within their applications. Even if they do it at the application level for their domain, surely it wouldn't affect mine, would it? That was what was implied by the support people, but I have a feeling they are way off, or covering for some goof-up on their end. I struggled like hell yesterday trying to get this to work and I did not get very far at all.
I found an interesting tutorial here which does a comparison of time zones and, theoretically, this might do the trick. But if what the guy told me was nonsense then I won't bother with it. For the record, our calendar has been working fine for about a week now.

I recently updated my e-mail address with apple, but now it does not show all the "purchased" music that I purchased under my old e-mail address. How can I re-gain access to those hundreds of purchased songs?

I recently updated my e-mail address with apple, but now it does not show all the "purchased" music that I purchased under my old e-mail address. How can I re-gain access to those hundreds of purchased songs?

You are trying to find a loophole to circumvent a basic rule that prohibits the transfer of purchased content from one Apple ID to another.
Content tied to an Apple ID are bound to that Apple ID forever. You can not merge or trade accounts. Well, not (officially) anyway...

How can I reset my access passcode w/o having ever synced the device before? I don't remember it and now the ipad is "disabled" from too many failed attempts.

How can I reset my access passcode without having ever synced the device before? I don't remember my passcode and now the ipad is "disabled" from too many failed attempts.

You will need to reset the iPad back to factory defaults : iOS: Forgot passcode or device disabled
What iTunes purchases that you can redownload for free from the stores will show in the Purchased tabs in the App Store and iTunes Store apps, and the Purchased tab in the iBookstore in the iBooks app

How can i disable faronics deep freeze with no username/password?

how can I disable deepfreeze with no username or password?

Basically you can't; that's the whole point of the software (or at least a large part of the point), so that unauthorized people can't make changes to the system. As Kappy said, you'll need to contact Faronics for assistance, but I don't remember any sort of "back door" to their software so there may be no solution short of erasing the drive and starting from scratch.
Regards.

How can i disable terminal access with opendirectory ?

Similar Messages

Maybe you are looking for