Parental control & network accounts

Is there any way to set up parental control for network accounts?
All my family member's accounts are of the network type, including the kids'. However, it appears only managed users can have parental controls turned on.

Kevin,
I wondered if you had found a way to access the various logs available on Leopard client but when using network accounts. I'm proposing using it in a school but without the logging facility it won't be feasible.
Thanks
Alistair

Similar Messages

  • Netboot and a Parental Control managed account

    I am trying to set up a group of kiosks (Mac Minis) using NetBoot off of OS X Server 10.5.2. I've created a netbootable disk image with two accounts. One is an admin account, the other is a managed account with Parental Controls.
    My thinking was that I could lock down the managed account and limit the websites that can be visited as well as apps that can be launched using Parental Controls. Everything seems to work fine except one important piece. Neither Firefox or Safari can actually access the internet. I always get a connection error from the browsers. If I run network diagnostics, it returns green on all levels. Similarly, in a Terminal window under that same account, I can ping the webservers I'm trying to get to.
    Does anyone have any ideas why Parental Controls on that account seem to limit the ability for the browsers to see the Internet? It works fine when the original image is booted locally. Are managed Parental Control accounts not compatible with NetBoot? Any suggestions?

    Ok, this gets more interesting. Based on more testing, I believe there is an incompatibility between Netboot and a Parental Control account. I tried doing a port scan using Network Utility (ports 0-1000) in a variety of accounts both local drive boot and Netboot. The results are further below.
    For some reason, the Parental Control account on the Netboot device does not see port 80 (http) off the computer it is scanning. As you can see there are three different cases. The http and https protocols are where the discrepancy occurs. Anyone know if this is by design or a bug? I find it hard to believe I'm the only one trying such a solution but this seems to be a pretty significant roadblock.
    *_Netboot Parental Control account results:_*
    Port Scan has started ...
    Port Scanning host: 10.16.31.84
    Open TCP Port: 22 ssh
    Open TCP Port: 88 kerberos
    Open TCP Port: 139 netbios-ssn
    Open TCP Port: 443 https
    Open TCP Port: 445 microsoft-ds
    Open TCP Port: 548 afpovertcp
    Port Scan has completed ...
    *_Original HD/OS that is the source of the Netboot image in Parental Control account:_*
    Port Scan has started ...
    Port Scanning host: 10.16.31.84
    Open TCP Port: 22 ssh
    Open TCP Port: 80 http
    Open TCP Port: 88 kerberos
    Open TCP Port: 139 netbios-ssn
    Open TCP Port: 443 https
    Open TCP Port: 445 microsoft-ds
    Open TCP Port: 548 afpovertcp
    Port Scan has completed ...
    *_Other instances results:_*
    *(Includes Netbooted Admin account,*
    *Netbooted Standard account,*
    *3rd machine hard drive boot as an additional example)*
    Port Scan has started ...
    Port Scanning host: 10.16.31.84
    Open TCP Port: 22 ssh
    Open TCP Port: 80 http
    Open TCP Port: 88 kerberos
    Open TCP Port: 139 netbios-ssn
    Open TCP Port: 445 microsoft-ds
    Open TCP Port: 548 afpovertcp
    Port Scan has completed ...

  • Parental Controls -- Managed Account Time Limits

    My son's MacBook Air is running Mavericks OS X 10.9.3; MacBookAir6,1; Intel Core i5
    I set a 2 hour time limit per day and upon the 2 hours expiring, the system logs him off.  Then he shuts it and closes it for the night.
    However, upon opening it the next day, the login screen prompts him for a time extension.  It's a whole new day and the 2 hours should start over, but they don't.
    Worse, when I go to extend his time to let him log on, it sometimes gets caught in a loop of some sort where it will allow him back on per my administrator password to allow it.  It will allow him on for a split second, then immediately restrict him again saying he reached the maximum time limit and the administrator box shows up again.   The only way I've been able to fix this is by deleting his managed user profile, then adding it in again, once again defining all the parental control parameters, allowed websites, etc.  It's a pain.  I do try to have him log off at the end of his sessions thinking that it will help keeping things orderly, but if the computer cuts him off, I'm guessing that he was automatically logged out and I am not sure that's the case.  It cuts off his time (as it's supposed to) nonetheless.  Overall, it's as if the computer's date/time function doesn't factor in to the parental control settings.   How could Apple overlook such an obvious detail when planning for time limits?   Please, Apple, get these two parts of the OS working together.  So...
    Honey-Do List for Mavericks OS X Gurus
    Get the Date-Time settings to jive with Parental Controls; kill the loop that occurs when time extension requirement shows up first thing the next day
    Create a countdown timer of a sort for managed accounts that keeps the user aware of how much of their logon time is used/still left
    Pretty please 
    Thanks!

    I have found the most common way is simply this: he knows your administrator password. To see if this is the case just change your password (don't leave a sticky note laying around with the written down password on it please) and see if he's still able to get his way.
    Also, restrict access to applications like Terminal. Some Google searches could have shown him how to get stuff done through the command line.

  • Multiple Applications in Parent Controlled User Account

    I've been running Mac for a while but this is the first time I've set up a second user.  I'm also not as Mac savvy as a lot of you are on here but I can make my way around, so please be patient with me if I ask a silly question or two.
    In setting up a user account for my "Kids", I used the Simple Finder, limited their applications to a select few, and limited their web use to a set number of web pages as they are still quite young and are just beginning to use computers.  Everything worked out well, except when we log out and back in again.  When we do this, a second copy of applications show up in the Applications folder. With every log in, there is a new set.  I think we are now up to 19 copies of each application allowed.
    I deleted the shortcuts and they reappear.  I've deleted the user account entirely and carefully set it all up again.  Same thing.  I tried deleting it again but ditto with the result.  I've restarted multiple times.  I've reset the PRAM.  I've deleted prefences files.  I've ran a Mac Cleaner.  I updated to Mavericks from Lion in hopes it was related. It still does it.  This is driving me nuts.  I've googled and googled.  I've searched these discussion boards.  What am I missing?  Surely there is something relatively simple to resolve this?  I'm out of ideas and I'd really like this fixed so my kids can use their user account.
    Can anyone help out a stressed out mom?
    Thanks in advance.

    I still need a bit of guidance with this please.  When I enter the expanded finder and open up the "Kids" Library folder, under Managed Items/My Applications, it lists all the duplicate application shortcuts.  I've deleted these again.  Put them in the trash, logged out and restarted.  Once logging back in, again, I have duplicates occuring. What is going on??  Please help.  I'm not sure what else to try or do.  There has to be a simple fix to this.  Doesn't there?

  • How do I allow parental controlled users to access third party apps on the admin account?

    I just set my son up with a separate parental controlled user account and he can't seem to access some third party games that we installed for him under my admin account. He has saved progress on these games that we don't want to lose, so I don't want to reinstall them. I checked them off as allowed apps, but when he tries to play- the game icon shows up in the doc then changes to the updater icon and they won't run. I've searched for answers to this question, but can't seem to find any. Please help? My son and I would be very grateful!

    jeremiahfromva wrote:
    Mavericks (isn't that an old Ford model?
    Sure was! They used it on 4 different models. But that was Maverick, as in horse. This will be Mavericks as in ocean waves.

  • Mac: Firefox software update process will not authorize in parental controlled account-Bug?

    OS: 10.7.5
    Firefox 20
    Parental Controlled user account: Firefox and Firefox Plugin processes are checked in parental controls. No other Firefox processes are visible.
    When logged into parental controlled account, user launches Firefox from the Dock. Message appears:
    You do not have permission to run Firefox Software Update. Admin required authorization.
    Admin clicked Always Allow, entered admin name & password. Firefox would not launch.
    Logged out of Parental Controlled account.
    Logged in to Admin account.
    Launched Firefox. "About Firefox" shows Firefox up to date.
    Logged out.
    Logged back into parental controlled account.
    Firefox opens.
    Is this a bug or is there some other reason the admin authorization failed?

    I have a student that is having the same issue. Whenever she attempts to open Firefox, either from the dock or applications folder, she gets the permission error. I tried this under an admin account and get the same error, and it will not go past it, even with the admin user/pass. A strange icon appears in the dock for a second and the disappears, but Firefox never opens.
    We have around 1600 student laptops in the school and I am seeing this on one of them. I have confirmed that she is running the latest version of Firefox and have tried to clear out the preferences, but there don't appear to be any.
    Does anyone have anything useful to add to the conversation? Tyler just doesn't seem to be grasping the issue.

  • Safari can't connect to server with parental controls on

    I have one user with admin rights and one user plus guest with parental controls turned on. Recently when parental controls are turned on, I get 'safari can't connect to server' error. When I turn parental controls off again I can connect to the internet again. Why is this?

    Hi and welcome....
    Unfortunately, Parental Controls can only be enabled on a non admin account.
    See if there's a proxy set up for Safari. From the Safari menu bar click Safari / Preferences then select the Advanced tab. Click "Change Settings" next to: Proxies.
    That will launch System Preferences / Network - Proxies.
    If there are any boxes checked under: Select a protocol to configure, deselect the box then click Ok.
    Quit Safari (Command + Q) then relaunch Safari.
    See if Safari can connect in a parental controlled user account.
    Carolyn

  • Safari "Can't connect to server" with parental controls enabled

    Safari says "Can't connect to server" when my childrens' accounts have parental controls enabled. Is there a way to enable parental controls on the administer's account??

    Hi and welcome....
    Unfortunately, Parental Controls can only be enabled on a non admin account.
    See if there's a proxy set up for Safari. From the Safari menu bar click Safari / Preferences then select the Advanced tab. Click "Change Settings" next to: Proxies.
    That will launch System Preferences / Network - Proxies.
    If there are any boxes checked under: Select a protocol to configure, deselect the box then click Ok.
    Quit Safari (Command + Q) then relaunch Safari.
    See if Safari can connect in a parental controlled user account.
    Carolyn

  • Parental Controls Problem, I think.

    I am running 10.7.3 on my iMac. I have parental control user accounts for my daughters. I get the following on a window when they log in, "You don't have permission to use the application "appstoreupdateagnet." I also get, "You don't have permission to use the application "Updater Startup Utility."  Both then say "For more information, contact the person who set up your account." How do I get rid of this? These applications are not listed in the Parental Controls. I have allowed the App Store and Google Updater but this did not resolve the error.

    Hello,
    Not sure if you still needed an answer for this, but what you need to do is to temporarily add an adobe program.  You can then start up on the account with parental controls.  Then start up the program.  It might ask you to authenticate more programs.  Do so.  Then when you get to the program, click check for updates in the Help menu bar.  Run the update.  Then when it is done, click the preferences button.  You can then turn off Check for updates on startup.  Unfortunately  this has to be done on each account, so that's why it throws the error on the parental controlled account.  Once you have done all this, go ahead and disable all the programs it added and you should be fine after that.

  • Parental controls are disabling Safari.

    I am trying to set up an account on my Macbook v.10.6.8 for my 7 yr old.  He is going to have online classwork this year and I want to limit his access to the internet.  The moment I enable parental controls, his account no longer has access to safari.  I have made sure that the safari box is checked, but it is just showing as a "?". Please help.

    There are a variety of Adobe services that need to remain enabled in order for Photoshop to work.
    I would log in to the administrator account and make sure anything with Adobe is set to "allow."
    Then, log in to the restricted account and test. If Photoshop works as expected, you can turn off one item at a time until you find the one that "breaks" Photoshop's functionality.
    ~Lyssa

  • Controlling email under parental controls for network accounts

    I use OS X server (10.8) to mange kids accounts at home, so they can logon to laptop or desktop and all there stuff is there.
    This works perfectly as does the profile server ensuring that they have their parental controls set.
    I've just stated to look at creating an email account for the older one and found that whilst there is a great 'People' tab in the Systems Preferences parental controls this doesn't seem to exist in profile manger at all.
    Does anyone kniow how to setup 'safe' lists of people for inbound and outbound email using profile manager or directory admin ?
    Thanks in advance

    Quick Kick wrote:
    Thank you.
    But does anyone know the default Parental Controls Settings, specifically under the Other tab?
    you can find them out yourself. make a new account and enable parental controls on it. then expand "other" and see what's checked and what's not checked.

  • How can I enforce Parental Controls on a group of network users on an Open Directory client?

    I have a Mac mini running OS X Server (Mountain Lion) and have a client family iMac that is a client of the Open Directory server. I have created network users for my kids and put them into a group and created Parental Control restrictions that apply to members of the group. However, the kids can log into the iMac with the same network accounts and no Parental Control policies are enforced on the iMac.
    I'd like to restrict times and hours per day, as well as the obvious content/website restrictions. I'm not sure why the Parental Control policy isn't being enforced. While I'm not great at it, I do have a basic understanding/overview of knowledge on Windows Server administration, but OS X Server seems to be waaay different...
    I have fiddled with the certificate, and I have told the client iMac to trust the certificate coming from my Open Directory server, but it doesn't seem to make much of a difference with the enforcement of the kids group's Parental Control policies.
    Can anyone assist or offer any suggestions?

    Related logs from the OD client iMac below:
    2013-07-13 20:37:45 -0400 mdmclient[12003]: *** ERROR *** [Agent:501] Sending 'OTA-Phase2' request to server: https://server.local/devicemanagement/api/device/ota_service (<NSURLErrorDomain:-1001> The request timed out.
    UserInfo: {
        NSErrorFailingURLKey = "https://server.local/devicemanagement/api/device/ota_service";
        NSErrorFailingURLStringKey = "https://server.local/devicemanagement/api/device/ota_service";
        NSLocalizedDescription = "The request timed out.";
        NSUnderlyingError = "Error Domain=kCFErrorDomainCFNetwork Code=-1001 \"The request timed out.\" UserInfo=0x7fef6a82b2b0 {NSErrorFailingURLStringKey=https://server.local/devicemanagement/api/device/ota_service, NSLocalizedDescription=The request timed out., NSErrorFailingURLKey=https://server.local/devicemanagement/api/device/ota_service}";
    2013-07-13 20:37:45 -0400 mdmclient[12003]: *** ERROR *** [Agent:501] ProcessOTABootstrapProfileCore (<NSURLErrorDomain:-1001> The request timed out.
    UserInfo: {
        NSErrorFailingURLKey = "https://server.local/devicemanagement/api/device/ota_service";
        NSErrorFailingURLStringKey = "https://server.local/devicemanagement/api/device/ota_service";
        NSLocalizedDescription = "The request timed out.";
        NSUnderlyingError = "Error Domain=kCFErrorDomainCFNetwork Code=-1001 \"The request timed out.\" UserInfo=0x7fef6a82b2b0 {NSErrorFailingURLStringKey=https://server.local/devicemanagement/api/device/ota_service, NSLocalizedDescription=The request timed out., NSErrorFailingURLKey=https://server.local/devicemanagement/api/device/ota_service}";
    2013-07-13 20:37:45 -0400 System Preferences[11138]: *** ERROR *** [CPInstallerUI:501] Profile installation (Device Enrollment (com.apple.ota.server.local.bootstrap)) (<NSURLErrorDomain:-1001> The request timed out.
    UserInfo: {
        NSErrorFailingURLKey = "https://server.local/devicemanagement/api/device/ota_service";
        NSErrorFailingURLStringKey = "https://server.local/devicemanagement/api/device/ota_service";
        NSLocalizedDescription = "The request timed out.";

  • Network library with parental controls?

    I have a network location with our iTunes library.  There are 2 PCs with 3 iTouches that use this library location.  The problem is that one of the devices is for a 12 year old and I want to restrict that user from seeing content that is already in the library.  Parental controls does not limit this content.  Seems to only prevent adding 'New' content.
    Any thoughts?
    Ernst.

    ..."I've allowed all Utilities, Applications, etc and no matter what, as soon as I turn on the "only allowed selected programs" option, it won't work."...
    I'm not sure, but it is possible that allowing / disallowing based on the pre-defined categories may not work because the software that Wacom uses on my system is in an atypical location, and has an atypical structure - it actually has one application contained inside another. It may be necessary to approve the apps explicitly.
    Perhaps try either:
    i) Opening "/Library" > "Application Support" > "Tablet" and explicitly dragging any apps present there into the "Parental Controls" pref pane in the panel where the programmes are listed. On my system, the app is called "PenTabletDriver.app"...
    or
    ii) Logging in to the managed account (with application restrictions in place), and trying to launch the "PenTabletDriver.app" programme. If this generates the "application is not allowed" message, it should be possible to "always allow" with "admin" authentication to white-list it at that stage...

  • Vista Parental Control Settings to allow use of a networked iTunes library?

    I just installed iTunes on a new Vista machine, and under a user account with no parental controls, I can access my main library on my XP machine on a local area network. However, as soon as I put on Parental Controls in Vista, iTunes running on the Vista will not allow me to access my main library on my XP machine. I get an error saying that I need to modify my Firewall (Defender) to allow access to the shared (networked) library.
    Does anyone know if there are some basic settings in the Vista Parental Controls that I can change that will allow access to the shared iTunes library?
    Thanks,
    Paul

    OK, I seem to have found a solution to this issue after looking around the web.
    I did some experimentation with the allowed web site listing within Vista, and found that when I put the following allowed web sites/domains into my son's listing, I can keep parental controls running and allow him to access the iTunes store.
    http://phobos.apple.com
    http://phobos.apple.com.edgesuite.net
    Actually, the second site is the one that is the one that enables the access, but the web posting that i found listed them both.
    Good luck to all in providing a safe computing environment for their kids!
    Sincerely,
    A Concerned Parent

  • I made my main account a parental control account and when I accessed the account created as admin, at the Parental Control options I deleted my main account and now I can't get back in it. I need help with this problem.

    I made my administrator account a parental control account, at the time of creating it, the system asked for my administrator password, to restart the computer, and the new account was created. When I accessed that account at the parental control menu I could see my main account on the list and i deleted the account from that list, and now i'm trying to get back to it but I'm not able to because every time i restart the computer brings me back to the account I created. I searched for help on the web and it says to go to users and select the account I want to restore but I can't do it. Please help.

    User account – restore missing admin

Maybe you are looking for