Locking down 'berrys without a BES

I have a teenage daughter with a Curve 8900 that I'd like to 1-Ensure the GPS is not turned off and 2-ensure that a certain app isn't uninstalled. Is there a way to lock it down without using a BES?
Thanks!

In BIS only device I don't think its possible.
tanzim
If your query is resolved then please click on “Accept as Solution”
Click on the LIKE on the bottom right if the post deserves credit

Similar Messages

Move files without locking down edits

In LightRoom 5 when I try to move image files (or sub-folders) to another folder I get a message that, if I continue, I will not be able to undo any changes made prior to the move. I take this to mean that moving the file will lock down any edits so that I cannot revert back to my unedited RAW file if I wish. Is this correct? If so, is there a way to move the files without locking down current edits?

I think that message is a bit ambiguous and refers to file locations, not edits. In fact if you copy folders first using your computer OS, you can safely update the folder location, without seeing the message and before deleting to tidy up the OS. It’s generally felt to be a safer method – see fig 8 on the attached link. Why not give it a try.
http://www.computer-darkroom.com/lr2_find_folder/find-folder.htm

Lock down X140e BIOS

Hello!
I'm deploying 55 of the Thinkpad x140e to a school, and I want to be able to lock down the BIOS so the students won't be able to boot from other devices or make any other changes in the BIOS. I'm wondering if anyone knows of an application that allows me to lock down the BIOS without having to do it manually on every machine. I'm imaging them with the same image, so if there's an application that can be put on the image beforehand, that would be ideal. Anyone run into a similar situation or know of any solutions?
Thanks in advance for any help you can provide!
Solved!
Go to Solution.

Lenovo has some scripts (and accompanying documentation) for configuring the BIOS through WMI available here:
http://support.lenovo.com/us/en/documents/ht100612
The X140e isn't listed as a supported model, but it might be worth a try anyhow.
How are you deploying the image? If you're using something like MDT or SCCM you would create a task that runs the script as part of the imaging process.

Hello My ipads Power button is not working properly when I press it once it shows option to turn off instead of locking and some other display problems like it suddenly lockes down or display disappears ...Please help. Thank You

Hello My ipads Power button is not working properly when I press it once it shows option to turn off instead of locking and some other display problems like it suddenly lockes down or display disappears ...Please help. Thank You

Thanks for that information!
I'm sure I will be calling AppleCare, but the problem is, they charge for the phone calls don't they? Because I don't have money to be spending to be on the phone with a support service.
In other things, it seemed like the only time my MacBook was working was when I had Snow Leopard without the 10.6.8 update download that was supposed to be done to prepare for OS X Lion.
When I look at the information of my HD it says that I have 10.6.8 but that was the install that it claimed to have failed and caused me to restart resulting in all of the repeated problems.
Also, because my computer is currently down, and I've lost all files how would that effect the use of my iPhone? Because if it doesn't get fixed by the time OS 5 is released, how would I be able to upgrade?!

Directory preferences in a locked down PC environment

How do I change:
ide.pref.dir
ide.pref.dir.base
ide.user.dir
ide.work.dir
ide.work.dir.base
user.home
so that they don't reference a windows path like \\<server>\<user>$, but <drive letter>:\Oracle\sqldeveloper instead
We use locked down PC's (with no access to the A: and C: drives) . And when we start SQLD we get 16 dialogue windows say that it cannot access the A: drive, to which we press the continue button. You also get the message when using the File navigator and the File->Open or File-Save functions.
On upgrade from 1.5.1 to 1.5.4 the number of dialogue windows dropped from 16 to 2.
We also always lose our connextions and have to reimport from a saved file every morning.
A response to thread Connections fail to load at startup by user user641239 at 1-sep-2008 0:59 seems to have the solution - except it requires access to regedit. We don't have that. It's much too painful to get SQLD part of the PC build at the customer, so we need to be able to configure without resorting to regedit.
Any help appreciated.
Nic
Edited by: Nic Atkin on 17-apr-2009 2:41
Edited by: Nic Atkin on 17-apr-2009 2:54

Hi FurryOne,
There is a way to hide both A: and C: - but you need Windows Administrator rights to do it. Not possible in a locked down PC, So I'll live with it for now.
I was also having the Configure File Type Associations at startup everytime problem (see
Re: Configure File Type Associations at startup everytime
So, my current solution looks like this:
AddVMOption -Dide.pref.dir.base=M:\Oracle\
AddVMOption -Dide.pref.dir=M:\Oracle\sqldeveloper
AddVMOption -Dide.user.dir.base=M:\Oracle\
AddVMOption -Dide.user.dir=M:\Oracle\sqldeveloper
AddVMOption -Dide.work.dir.base=M:\Oracle\
AddVMOption -Dide.work.dir=M:\Oracle\sqldeveloper
AddVMOption -Duser.home=M:\
AddVMOption -Dno.shell.integration=true

Forward facing locked down machines... kiosk?

Hey everyone,
So I have done a lot of research on this topic, but have yet to find an end-all solution to my conundrum. I have many machines in my network that are forward facing and public use reference terminals that connect to a database of books and things. These
machines are not and should not be used to casual internet browsing so we have manually locked them down. These machines currently run IE10 Win7x32. The windows side locking down is no problem. But we are having a BIG issue with the current way we allow specific
sites and lock out all others.
In our system, we have an abundance of allowed sites for quick research purposes that these machines are allowed to access. Still technically reference information. For the sake of argument, we have about 25 sites including the main database site that should
be allowed through a proxy or other filtering system. Currently, we have this proxy based with exceptions built into IE... however, there is around a 255 char limit on that input box (for whatever reason).
So that brings me to my current solution that is not quite working correctly. I have configured a .PAC script and stored it on a server that these machines can access and an msi for IE10 branding using the IEAK for IE10. This .PAC script does not seem to
be working the way it should. I got the idea from a site I didn't save, but the basic idea is below:
function FindProxyForURL(url, host)
// variable strings to return
var proxy_yes = "PROXY 255.255.255.255:8080";
var proxy_no = "DIRECT";
if (shExpMatch(url, "*.google.com")) { return proxy_no; }
// Proxy anything else with yes
return proxy_yes;
So, my understanding is this would run when sites are accessed, if it matches the if statements it passes and if it doesn't, it defaults to proxy_yes which doesn't exist and thus doesn't load. The ADMX configures the proxy itself and everything should be
great.
My main question: is there a better way to allow sites through to a machine WITHOUT loading the pages first. A simple whitelist/blacklist doesn't necessarily work because it, as far as I understand, still loads the pages but does not display them. Currently,
it looks like IEAK is the only way to correctly manipulate these settings in internet explorer 10+, unless I'm getting that wrong. It doesn't seem like the list from our previous installation from GP is being overridden using this method, and it doesn't
apply to new machines connected to the policy. Of course, I know it is applying because other functions, like the content rating system that I accidentally left on, have caused some problems in the past.
We will be upgrading these machines to newer optiplex models and installing Windows 8, so if there is a more effective solution that only works in windows 8, I am willing to try it.
Thanks in advance for the help, you guys are always awesome!

Hi,
>>Currently, it looks like IEAK is the only way to correctly manipulate these settings in internet explorer 10+, unless I'm getting that wrong.
In addition to IEAK 10, to configure proxy for IE 10 on Windows 7, if our most up-to-date domain controller is Windows Server 2012 or R2, we can use Group Policy Preferences
Internet Settings extension to configure the proxy setting. Besides, we can also choose to install Remote Server Administrative Tools on a Windows 8 or 8.1 client and manage group policy settings from this client.
Moreover, another way is that we can try using Group Policy Preferences Registry extension to configure the proxy settings for IE10 on Windows 7.
Regarding this point, the following thread can be referred to as reference.
Proxy settings not applying to IE above 8
http://social.technet.microsoft.com/Forums/en-US/3b0f54d7-7293-49dc-9e3f-e8799c20265b/proxy-settings-not-applying-to-ie-above-8?forum=winserverGP
Best regards,
Frank Shen

Locking down anyconnect client profile

I was wondering if there is a way to lock down the anyconnect profile on a clients machine. Basically we are using certifcates to authenticate so the client can make a VPN connection. We have enabled the certifcate match function to check for IPSec User Extended Match Key. I can modify the XML on the client PC to bypass the check and authenticate. We would like to keep users from doing that. Is there something I can setup on the ASA versus the client to check the certificate or prevent the XML from being modified?
Thanks in advance.

I went in and modified the xml and removed the following. I was then able to make a connection without checking for the IPSecUser extended key usage. I have 2 certs on my client. One cert has the IPSecUser extended key usage and the other does not.
IPSecUser

(Paranoid) physically locking down harddrives through the FS

Basically what I have and want to do is lock down my fs including swap. Basically I use my linux box for file sharing ect. Some of my files on this box are lets say are not kosher. Basically what I want are encrytpted hard drives (both are non-removable). I really don't care if the startup of the system requires passwords to boot up and require physical apperance to enter them in. My box has had times of 6 months of up time without reboot (gotta love linux). I know I am looking into a bit of a performance decrease but i am willing to take the hit. I read a little about loop aes from linuxquestions.org but nothing to relavent. Right now my linux box is going through a Gutmann format and awaiting my new installation of Arch hopefully with cryto'ed drives. I tried looking for packages and ect.. but no luck. I was wondering if someone has done this before share with me how to do it that is also using Arch. Before I get flamed that if any gov agency(or corps that like to act like gov agency, I won't say names....MPAA) want to break it they can...I know they have the resources to do it but the cost of doing this for the files I have will not be cost effective. Any help would great...

the best protection against getting caught breaking the law is to not break the law
other than that...once you've broken the law, you can't really protect yourself - you can only try not to get caught. i3839 is right, if they're confiscating your PC you're already pretty well screwed. And believe me, it's not that hard to get past any encryption stuff you could possibly put on your drives. It'd take them an hour at most - they already have all the tools.

Access Connections v4.52 - user rights in locked down environment

I'm currently working on a small project to deploy various Lenovo wireless drivers, Access Connections v4.52, Hotkey and Power Management drivers via SMS but have come across a slight issue with Access Connections that I can't seem to resolve.
I'm hoping to provide my locked down users with a selection of standard profiles that are copied to their machines on logon but would also like to give them the ability to create and modify new ones too - this is where I'm having problems.
Through Group Policy I have set:
Allow Windows users without administrator privileges to create and apply WLAN location profiles using Find Wireless Network function
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableCreateProfilewithFWN 1
Allow Windows users without administrator privileges to create and apply location profiles
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableUserMode 1
I have also manually set the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
I couldn't find a key for the 'EnableUserMode' option
Unfortunately, none of these give standard users access to create or modify profiles.
Have any of you come across this in your environment and if so did you manage to come up with a suitable solution?
Thanks in advance.

Hi,
the steps, that you performed are correct.
However I would not do the last step:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
This might cause confusiong.
I have just tested it in here and it's working fine with the 5.x version of AC
Cheers

How Creative Cloud working under locked down IT administration environment

We are existing CS6 and would like to sign for Creative Cloud. Just want to know how it works on the locked down user computers (without local administrator rights)?
DISCLAIMER The contents of this email and any attachments (together "this email") may contain information that is confidential to Breville Group Limited (and/or its associated entities) (together"BRG"). Information contained in this email is subject to copyright. If you are not the intended recipient, you cannot print, use, rely, or disseminate any part of this email. If you receive this email in error, please notify us immediately by return e-mail and erase all copies. If you are the intended recipient of this email you should not copy, disclose, or distribute this email without the authority of BRG. Any views expressed in this email are those of the individual sender, except where the sender specifically states them to be the views of BRG. If this email contains any defamatory comments expressed by the individual sender, these comments are made outside the scope of his/her authority. BRG does not accept liability in respect of such defamatory comments. BRG does not warrant that the integrity of this email has been maintained, or that this email is free of errors or viruses, and has not been intercepted or interfered with. It is your responsibility to scan this email for computer viruses and other defects. BRG does not accept liability for any loss or damage however caused, whether by negligence or otherwise, which may result directly or indirectly from this email. In any event, BRG's liability is limited to the cost of re-supplying this email. Please consider the environment before printing this email. ***************************************************************

The deployment is just the same like for the conventional suites and the same rules apply, so I'm not sure what you are asking.
Mylenium

Locking down the sound

Hello fellow macers!
I have multiple accounts setup on my Apple Macs, and most things work well, though I am struggling to solve one little gripe:
The managed users can turn up or down the volume as much as they want. I would like to stop this function totally as it is disruptive to a classroom environment.
Any ideas? I have used the com.apple.dock.plist file rights before, I had a quick peak for a sound file but no joy. Maybe I looked in the wrong place or there is another method?
Cheers guys.
Rob

Give them pencils to tap on their desks instead. That'll stop their ability to distract you with the computer's volume button.
All kidding aside (or is it?), output volume preferences are stored in "/Library/Preferences/.GlobalPreferences.plist". I'm not completely sure if it's easily locked down without potential future headaches, but that's where the setting is stored.

HELP - Macbook Pro Locked Down

Ok, to make a long story short, I bought a used Macbook Pro and the password I was given is not working. The person I bought the computer from seemed fishy, I should have realized something was wrong before agreeing to buy the computer. The computer seems like it is a demo machine from an Apple Store or some other retail store. It is locked down and I can not gain access to the administrator account. I have tried everything I found on the internet. I called Apple up to inquire about this machine to see if it is marked/reported as being fraudlent/stolen/counterfiet and they confirmed the serial number is fine and it is an official apple computer. They said I have hardware support until end of March 2011, but no longer have software support. Oh by the way, I am new to Macs, this is my first Mac, so I'm not familiar with them. Not a very good first experience. I guess its my fault for buying a used computer without receiving the install/backup disks.
Below is a summary of what is happening and what I tried:
When I turn the computer on, it logs in fine. Everything seems to function fine. But if I try to do anything administratively it asks for password and I can not do anything.
I tried the following things:
- entering single user mode, removing the AppleSetupDone file. After I reboot from that, it just logs in as normal and doesn't prompt for new account. When I went back into single user mode, the AppleSetupDone file was back.
- entered single user mode, changing password via command line. Seems like it changes fine with no errors. After I reboot, logs in fine and I try password I changed to and it doesn't accept it.
- Tried putting OS 10.6.3 into DVD and booting from that by holding c key, but it ends up going to grey screen with Apple logo and does nothing.
- Tried putting OS 10.6.3 into DVD and pressing "Option" key while booting to choose which device to boot from. I choose DVD and it goes to grey screen with Apple logo and does nothing.
- I tried formating the hard drive, went to single user mode, did a rm -rf / Seemed like it erased the hard drive, so I figured it has to boot from DVD. Well when I turned on computer, it booted fine and logged in as normal. Went back into single user mode and everything was restored as was.
- Tried clearing the PRAM and NVRAM thinking maybe there was something in the non-volatile memory, but that did nothing. Logged in as normal and still would not allow me to boot from DVD.
Someone suggested the firmware was password protected, but I had read if you hold the option key down while booting that a lock would appear if the firmware was password protected and that didn't happen, I got the HD or DVD options to boot.
Seems like the computer is locked down somehow to restrict anyone from modifying anything and at bootup, it restores everything to original state. Does anyone have any ideas or suggestions? Does anyone know how Apple stores lock down their demo computers to avoid customers from modifying them? Is there something in the hardware? Are there jumpers set somewhere that could be causing the machine to do a unique protected/recovery bootup? Someone mentioned pulling the hard drive and formatting it in another computer. Do you think this would do it for me?
Thank you for the help,
Kevin

Proof? I bought it used from someone. All I have is the computer and charger. When I talked to the Apple representative on the phone about the serial number, he said the machine has not been registered yet. So what would the proof be?

Is there a way to passcode lock my iPhone without waiting for the preset idle time?

Is there a way to passcode lock my iPhone without waiting for the preset time?
My iPhone is set up to require a passcode after 15 minutes of idle time. Normally, this setting works best for me. However, there are times when I would like to lock it immediately, without waiting for the 15 minutes of idle time to pass. Is there a way to do that easily, without changing my settings? I know that I can click the power button to immediately kill the screen, but that just defaults to "slide to open" with no passcode required.
Just to clarify, the idea is to leave my 15 minute setting, since this is the way I like it 98% if the time. I'm just wondering if, let's say I am resting my phone down while a curious person is around, I can quickly pass code lock it, much like I could just click the power button to put it to sleep.

Unfortunately, my phone doesn't ask for the passcode when I do this (just slide-to-open). I've searched settings, but I don't see any way to set it up to require the passcode after the screen is locked with the power button.
Do you remember how you set your iPhone up to achieve this?

I am using a Photoshop cs2, and I wonder if it is possible to keep the settings of the guidelines when closing an image, with the actual document ? It would be nice to have the guidelines locked down, I find it than when opening the same or another image,

I am using a Photoshop cs2, and I wonder if it is possible to keep the settings of the guidelines when closing an image, with the actual document ? It would be nice to have the guidelines locked down, I find it than when opening the same or another image, the guidelines are not locked, it is annoying to have to lock them down again. and it would actually be nice, to ba able to give specific directions when placing the guidelines. Thanks

Then why are the guides unlocked when I reopen a document that I saved with the guides locked ?
Thanks.

How do you modify the web.xml to lock down the pages from a user role

how do you modify the web.xml to lock down the pages from a user role

I'll make a stab at your question:
The following is an example of where a URL is protected within a web.xml deployment descriptor. In this example, the URL /protectedA within the application is protected:

<security-constraint>
<web-resource-collection>
<web-resource-name>protectedA</web-resource-name>
<url-pattern>/protectedA</url-pattern>
</web-resource-collection>

<auth-constraint>
<role-name>sr_developer</role-name>
</auth-constraint>
</security-constraint>
Sun's explaination here:
http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security4.html

Locking down 'berrys without a BES

Similar Messages

Maybe you are looking for