Locking account photographs

I teach in a Mac lab. The students frequently insert their own pictures as the account picture. This causes consternation with another teacher who does not believe it looks professional. I would like to lock the account photos. However, even when the lock is closed in the Accounts pane of the system preferences, the pictures can still be changed. Is there any way to lock these photos? (Same issue with the desktop images, finder preferences & backgrounds, etc. It appears anyone can change them, any time.) I realize it goes against everything Mac to eliminate creativity as an option, but this has become a quality-of-life issue for me big time. The students frequently post their Photo Booth pics as the Student picture on the login screen.

The copy of the user picture that is actually used appears to be "/Library/Caches/com.apple.user###pictureCache.tiff", where "###" is the user's 'uid' - which can be determined by entering 'id -u username' using "/Applications" > "Utilities" > "Terminal.app" (substitute the user's "short name" for 'username' in that command).
Because of the permissions of the parent folder, it appears that changing the ownership of the user's "com.apple.user###pictureCache.tiff" file to something else (eg. "system", or the local administrator, etc.) is sufficient to prevent the user from changing the user picture.
The "Desktop" background setting is stored in "com.apple.desktop.plist" file in the user's "~/Library/Preferences" folder, so locking that down is more difficult. One way is to use "Workgroup Manager.app" - being in a school environment, I don't know if you are already using this or not, but it is a part of the "Server Admin Tools" which can be downloaded from Apple.
In Tiger, "Workgroup Manager.app" allows individual plist files to be loaded into 'mcx_settings' so that the account uses the managed settings instead of the settings in the user's "home" folder, preventing the user from changing them.

Similar Messages

How to configure security policies like account locking, account expiry in portal application?

Hi All,
Can anybody pls tell me how to configure security policies like account locking,
account expiry in portal application? By default, it has a 30 minutes lock period
after 5 retries. But if I want to set other values or want to unlock account of
a user, then what to do ?
TIA,
Sudarson

I have read the SSO admin guide, and performed the steps for enabling SSL on the SSO, and followed the steps to configure mod_osso with virtual host on port 4443 as mentioned in the admin guide.
The case now is that when I call my form (which is developed by forms developer suite 10g and deployed on the forms server which is SSO enabled) , it calls the SSO module on port 7777 using http (the default behaviour).
on a URL that looks like this :
http://myhostname:7777/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
and gives the error :
( Forbidden
You don't have permisission to access /sso/auth on this server at port 7777)
when I manually change the URL to :
https://myhostname:4443/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
the SSO works correctly.
The question is :
How can I change this default behaviour and make it call SSO on port 4443 using https instead ?
Any ideas ?
Thanks in advance

Is it possible to lock account Groups of customers

Hi,
ist it possible to lock account Groups of customers? I don't want to delete some groups, because
there some customers with this groups i want to lock, but i will avoid that there are new customers with
this groups.
Regards, Dieter

Hi,
Yes Basis Consultant will ristrict the authorization of creating certain Customer Groups as satish said.
So Provide the List of Customer grps to Basis Consultant and ask him to ristrict to all the users.
Regards,
Padma

Sun Directory Server: Disabling and Locking Accounts

Folks,
Have some questions about disabling and locked accounts on Directory Server v5.2. Seems like a password policy would be the way to go, but these are my requirements:
1. Automatically disable accounts for that werent used (password expired) in the previous two calendar years.
2. Automatically, on a nightly bases, disable accounts for which a temporary password was not changed in 30 days.
How exactly can I configure this? Also, this is Sun ONE DS 5.2...running on Windows 2003. :)
Many thanks...

Your goals seem to be good candidates for custom scripts. AFAIK, the password policy comes into effect only when a BIND is attempted. It's not designed to walk the entries and disable accounts.
http://docs.sun.com/source/816-6698-10/useracct.html#14386
Edited by: etst123 on Apr 24, 2009 5:02 PM

Problems listing locked accounts

Hi!
I'm having some problems listing locked accounts. They usual receipe is "log in to the SSO self-service console (oiddas) - choose Directory, then Users, there it will be some unlock-options etc." However, I don't have that option within the Users-bracket, and can't seem to find it anywhere else.
We also have an Oracle Collab. Suite, someone has whispered in my ear that this might be the reason the design of oiddas is a bit different. How can I now find the locked accounts? Sql, ldapsearch? Anyone?
Thanks for any help.
Regards, Vidar

Hi morganmadplus8,
Are you still having issues when trying to access your sub-accounts? Is it only some of them or all of them?
Dean
BTCare Community Mod
If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

How can I prevent oracle from locking accounts after failed logins?

how can I prevent oracle from locking accounts after failed logins?
Thanks

svarma wrote:
So what is the difference between the profile settings ...FAILED_LOGIN_ATTEMPTS and the parameter settings SEC_MAX_FAILED_LOGIN_ATTEMPTS?
Prior to 11g we only used profiles to control failed_login_attempts.. Then why we need thsi new parameter now?http://download.oracle.com/docs/cd/E11882_01/server.112/e17110/initparams221.htm#I1010274
http://download.oracle.com/docs/cd/E11882_01/server.112/e17222/changes.htm#UPGRD12504
http://download.oracle.com/docs/cd/E11882_01/server.112/e17118/statements_6010.htm#SQLRF01310
As documented ...
FAILED_LOGIN_ATTEMPTS is a property of a profile, and will lock an account
SEC_MAX_FAILED_LOGIN_ATTEMPTS is an initialization parameter and will drop a connection but says nothing about locking accounts.

Security Module: locking account

Hello,
I have installed a web applications in a managed server. The application works
fine, but when I enter the applications the following message appears:
<May 21, 2003 8:01:59 AM CEST> <Notice> <Security> <User cristina has had 5 invalid
login attempts, locking account for 30 minutes.>
The security module is not being used at all, why am I getting this message?
Am I doing something wrong?
My platform is WL 6.1 SP4 on Solaris 8.
TIA and regards.
Cristina

Generally you would see this message when an invalid user tries to log onto
the Admin Console. The No. of Attempts and Locking Duration can be
configured thru' the Admin Console > Domains > Security tab > Passwords
tab.....
"CRISTINA CEBALLOS" <[email protected]> wrote in message
news:3ecb365b$[email protected]..
>
Hello,
I have installed a web applications in a managed server. The applicationworks
fine, but when I enter the applications the following message appears:
<May 21, 2003 8:01:59 AM CEST> <Notice> <Security> <User cristina has had5 invalid
login attempts, locking account for 30 minutes.>
The security module is not being used at all, why am I getting thismessage?
Am I doing something wrong?
My platform is WL 6.1 SP4 on Solaris 8.
TIA and regards.
Cristina

Reason / Person who last locked account - IUserAccount API

Hello,
Im writing a java portal application where I need to display user account information including:
Date of Last Locked Account
Person who Last Locked Account
Reason for Last Account Lock (description)
This information is displayed on the Account Information tab in portal user administration. However, in the IUserAccount api, I can only find LockDate. I cant find the person or the reason description for the locked account.
For example, when an administrator locks an account they enter a description of the reason why they locked the account. The reason, person, and date of account lock are recorded and can be viewed on the Account Information tab.
Does anyone know what api or how to find the person who locked the account and the reason description?
Thanks,
Scott

Hi Scott,
U can use the API getLockReason() which will Returns the reason code for account lock.
and lockDate() will returns lock date.
to know more about the available API use the following URL
<a href="https://help.sap.com/javadocs/NW04/current/um/index.html">User managment API</a>
Regards,
Sithi

How to find out what user locked account

We had production type schema account locked this morning. I checked profile which this user belongs and it has 3 times for Failed Login Attempts. My question is how to find out what user had 3 unsuccessful login attempts and lock this account.
Oracle version 8.1.7

Assuming that [auditing was enabled|http://download.oracle.com/docs/cd/B19306_01/server.102/b14220/security.htm#sthref2916], the command
AUDIT CONNECT WHENEVER NOT SUCCESSFULThat will write audit records when there is an unsuccessful login. Depending on how you've configured auditing, those records will either be written to the SYS.AUD$ table, in which case you can query them through a few different views, or to a file on the operating system that you can grep.
Justin

Locked Account due to change of name details on ne...

As my current credit card expired i registered my new one, which had slightly different name details. Same account,s ame bank, but name added to reflect my married status. i did not ask the credit card to do this. they jsut did it. As a result Skype locked my account. I then had a lengthy on line chat with support who said that to protect my security, they would have to check it all out. Fair enough! I gave them every bit of informattion i could think of and have heard nothing for 10 days. I am so **bleep** frustrated as i need the account when I travel to make business calls on the go and to call my family overseas. Has anyone had a similar problem or can suggest what I should do now- other than taking out a full page add in the FT abusing Skype!

I am in the same situation. I need to change the last name on my account. The only way to do it is to take your original Marriage Certificate to the closest Comcast store along with your official picture ID that shows your new name. They require as much or more documentation and inconvenience than Social Security or DMV! I could change all my credit cards and other accounts by mail, email, or fax. NOT COMCAST!

Locked account in APEX 4.0

Hi
I'm trying APEX 4.0 and my main account is locked so I can't log in even after I did "Request Password".
How/Who do I need to contact to unlock it?
Many thanks

Hi Alistair,
Your account has been unlocked and an e-mail with your new password should be on its way.
Joel

How to set a reason for locked account throught source code with the API

Hi all,
I need to set the lock reason of an user account. When we lock a user account at identity management, the system shows us a text edit and keep that lock reason on the account data tab. I need to simulate that, anybody could help me with this?
Slds,
MC

Hi Mariana,
you can use the below code snippet to lock and maintain the lock reason.
              IUserAccountFactory uaFactory= UMFactory.getUserAccountFactory();
              IUserAccount userAccount=uaFactory.getUserAccountByLogonId("user_hr");
              IUserAccount mutableUserAccount=uaFactory.getMutableUserAccount(userAccount.getUniqueID());
              mutableUserAccount.setLocked(true,IUserAccount.LOCKED_BY_ADMIN);
              mutableUserAccount.commit();
Thanks
Prashant

Password Sync from Active Directory Locking Accounts

Hello,
We recently set up Active Directory as a resource and are synching passwords. We are using IDM 7.1.1.11. We are noticing that when actions in IDM push the password out to AD, and they sync comes back to IDM, the sync workflow is locking up the account, before the original IDM action completes. For example, when an admin resets a users password, they see several error messages stating that the account is locked by the account that authenticates through the password sync utility. They also see succesful password reset messages, but I would like it if they didn't see errors saying the account is locked. We are using a direct connection between the Password Sync util and IDM. Has anyone ran into this? Any advice on overcoming it?
Thanks.
Jim

I opened a support case with Sun about this issue, and they recommended logging a trace file for com.waveset.adapter.ActiveDirectoryActiveSyncAdapter. While the tracefile does not seem to contain any useful information, the simple fact that there is tracing going on for it now seems to be easing the situation. In my test environment I saw occurrences of this locking problem drop by 90-95% simply by turning the tracing on. I started tracing in production in the hopes that it will at least lessen the occurances of this.
Sounds like we are taking the same approach Raj, the problem I've been having with it is getting it to happen will I'm debugging our reset password workflow. I want to make sure I add the locking check in the right place, so I was attempting to determine which area to check for it.
I'll be sure to keep the thread updated if anything changes on our end.
Jim

How to lock account picture

I need to create a user account for several pupils. I don't want them to change the account picture.
How do I lock the picture.
I Know there is this Guest Account, I am not talking about that.
Please help.
Mikko

Thanks.
Could you be a little more specific.
If I put Parental controls on, then the user can still change the account picture.
Mikko

HOW TO LOCK ACCOUNT WITHOUT LOGGING OUT?

does anybody know how can i do to lock the account without having to log out from it?
im also having problems finding one of the simbols for the quick keys options, like for example force to quit, from the keyboard? the firt key what is it? im looking for that symbol all over the keyboard..

What do you want to lock out, the screen or the keychain?
If you want to lock out just the keychain, you can do this though keychain access. In it you can add the menu item to the menu to be able to lock it whenever you want or you can set an idle time to lock the specified keychain whenever it's idle.
If you want to just lock the screen, you can do this through security in your system preferences. Just select require password from sleep or screen saver.

Locking account photographs

Similar Messages

Maybe you are looking for