Possible / how to completely disable Keychain??

Hi,
I know Keychain has its fans, though I suspect most of them don't have to use it in a corporate environment, where AD users have to change passwords every month. It drives our users nuts (and me!).
I know they only have to go into Keychain Access and reset it, and I've explained to them how to do that countless times, but they still get tied into knots with it. Far better for them to just re-enter their password for each network connection (only one in our case, so no great hassle).
Don't want any advice on 'how best to use the Keychain', or to be told how wonderful it is. I simply want to banish it from our systems completely, for ever and ever (Amen!). Is this possible (short of screwing up the machine)?
Any help most welcome thanks.
I've already searched around but can find nothing about how to kill the thing. Does anyone else hate Keychain as much as me?

Hi, Jack.
By "AD" I presume you mean Active Directory.
AFAIK, you can't:• For starters, some applications, like Mail, Safari, and others are "Keychain-aware" and depend on the the keychain and Keychain Services for saving and retrieving account and password info. It's also involved in saving certificates. Remove keychain and such apps are likely to break.
• Second, it's a core part of the OS, specifically Mac OS X Security Services.I see your options as follows:
1. You may want to see if there's a way to configure AD so it does not use the Keychain. However, this means users will have to enter their passwords every time unless AD provides some other secure method for saving them.
2. You have an educational problem here, not a technical problem. Create a tutorial for them, including screen shots, showing them how to update the password. Define a Test User to use in the illustrations so you don't have to use your own account. Then given everyone a copy and place it on one of your servers so folks can download the tutorial when needed.
Good luck!
Dr. Smoke
Author: Troubleshooting Mac® OS X

Similar Messages

  • Is it possible to completely disable Keychain Access in Tiger?

    Does anyone know if it is possible to completely disable keychain access in Tiger? As part of security policies handed down from our corporate office, I need to be able to totally disable the ability to save/store any kind of passwords for servers, email software, other software, etc. Thanks!
    Misc.   Mac OS X (10.4.3)  

    This might be away around it.
    Additional Notes on Protecting Keychains
    For laptops it may be advisable to store all keychains on a portable drive, such as a
    USB flash memory key or a portable FireWire drive, if allowed by organizational
    policy. The portable USB key can then be removed from the laptop and stored
    separately when the keychains are not in use. Anyone attempting to access data on
    the machine will need the laptop, the USB device, and the password for the keychain
    stored on the USB device, providing an extra layer of protection if the laptop is stolen
    or misplaced.
    To use this capability, move all keychain files to the USB storage device and
    configure the Keychain Access application to use the keychains in the new
    location. Remember that the default storage location for keychains is in each user’s
    Library/keychains directory, but that the user may have stored keychains
    elsewhere as well. To move a keychain to a portable USB drive (or to any new
    location):
    1. Start the Keychain Access application.
    2. If the drawer showing the user’s keychains is not open, click on the Show
    Keychains icon to open it.
    3. Click to select the keychain that is to be moved.
    4. Pull down the Edit menu and select Change password for keychain
    “X”..., where X is the keychain being moved.
    5. Click on the Details arrow to display more detail about the keychain.
    6. Note the Keychain Location and click Cancel.
    7. Pull down the File menu and select Delete keychain “X” where X is the
    keychain being moved.
    8. In the window that appears on the screen, select Delete References. Do not
    delete the files; only the references should be deleted here.
    9. Open the folder containing the keychain as noted in step 6.
    10. Copy this file to the new location, such as a USB keychain drive.
    11. Drag the original file to the Trash.
    12. Choose Secure Empty Trash from the Finder menu to delete the file.
    13. In the Keychain Access application, select Add keychain... from the File
    menu and open the keychain file that was moved.The keychain will appear in
    the list of keychains in the Keychain Access application.
    The system will now access the keychain file in its new location.
    While this is for Panther it should be the same for Tiger.
    You might also want to check out the Security Configuration Guide put out by NSA.
    For Client
    http://www.nsa.gov/snac/os/applemac/osxclient_final_v_11.pdf
    For Server
    http://www.nsa.gov/snac/os/applemac/I331-003R-2005.pdf

  • How to completely disable "Touchsmart OS software" Slows & interfers

    How to completely disable "Touchsmart OS software"  What a  Hassle it slows & interferes  Windows & applications.
    I can't find any information how to completely disable this software.  I can't imagine anyone likes it.  It just slows my computer & makes my other programs want to crash.  It wastes at least 2 to 5 minutes every single startup having to shut it down manually.
    I want it off my machine & I bet I am not the only one.  It reminds me of the old Windows over Dos mess.

    Brilliant1, welcome to the forum.
    When requesting help you should always include the make/model of the computer and/or monitor. This information is necessary for us to review the specifications of them.
    I believe that you can go into the Control Panel under "Pen and Touch".  You would uncheck the box "Use finger as input device" (some such words).
    I found this in another thread:
    Per HP Technical Support:  "Hp TouchScreen Configuration" has been replaced by "Pen and Touch."   More recent models would have "Pen and Touch," older models would have "HP TouchScreen Configuration."  The "Configuration" option does not appear on any TouchSmart 610 series all-in-one computers.   So to turn off the finger-operated TouchScreen one would use whichever appears on the Control Panel of the computer in question.
    Please click "Accept as Solution" if your problem is solved.
    Signature:
    HP TouchPad - 1.2 GHz; 1 GB memory; 32 GB storage; WebOS/CyanogenMod 11(Kit Kat)
    HP 10 Plus; Android-Kit Kat; 1.0 GHz Allwinner A31 ARM Cortex A7 Quad Core Processor ; 2GB RAM Memory Long: 2 GB DDR3L SDRAM (1600MHz); 16GB disable eMMC 16GB v4.51
    HP Omen; i7-4710QH; 8 GB memory; 256 GB San Disk SSD; Win 8.1
    HP Photosmart 7520 AIO
    ++++++++++++++++++
    **Click the Thumbs Up+ to say 'Thanks' and the 'Accept as Solution' if I have solved your problem.**
    Intelligence is God given; Wisdom is the sum of our mistakes!
    I am not an HP employee.

  • How can i disable keychain recovery

    How can i disable keychain recovery on a mac?

    I can't help with the keychain question -- but right-click can be done by holding down the Control key while clicking the touchpad.

  • How do I disable Keychain on my mac?

    How do I disable Keychain on my iMac? It's become a burden.

    Open system prefs and select iCloud.
    Untick Keychain, it will ask for your Apple ID. Input that.
    This should switch it off. If you want to reset it and then not enable it. Retick Keychain, it will ask for your Apple ID. Input it. It will then ask for your Security code. At this point, click reset Keychain, follow the prompts through, deleting from Mac or not as per your preference. Once you reach the point where it asks you to set up a new code, cancel out of this. Job done.
    Keychain will remain off until you want to start it up again. Any details other than Credit Card or web passwords will remain in your Utilities Keychain, depending on whether your deleted them from your Mac or not. They will be listed under the header Local and not iCloud within the Keychain app in your Utilities folder.

  • How to completely remove Keychain. Stop it Completely.

    As per my subject line, How do I completely disable/remove/I-do-not-want-keychain-to-be-activated-at-all as I have 5 iMacs for Public Usage. Anyway I can uninstall Keychain ? Like how u can simply uninstall programs in Windows? This feature is getting extremely annoying. It keeps recreating the Keychain entry/account/whatever called "login".

    Errr...thats no good then, it keeps prompting me to login to Keychain under user "login" whch I have not set any password for (I even tried root password but still does not work) and when I try to update the password, I cant, as it keeps saying that I need to enter the "Current Password" which I have no idea what it is. I did delete the user/account "login" as per some guides, but it keeps on reappearing, is this because I am trying to modify the built-in Guest account? as per my previous post:
    https://discussions.apple.com/thread/5817151
    I am modifying the Guest account because I want it to reset back to the template even after users try to change stuff (modified it so it has the company wallpaper, browsers set to company websites, and customised the dock)
    Keychain didnt act up this way in previous versions, it was all fine back in Mountain Lion.

  • HOW TO COMPLETELY DISABLE PASSWORD IN MACBOOK PRO RUNNING MOUNTAIN LION?

    i am quiet annoyed with my mac because everytime i want to isntall something it asks me for password
    i have deleted the password, now i dont have to type it anymore but simply have to press enter
    but is there any way to completely disable this thing?
    its my computer and i want to do whatever i wish and i know what i am doing, is there a way?
    this thing is like using windows VISTA !
    please help !

    You may have one of the 2010 models with the 'bad' GPU - see http://support.apple.com/kb/TS4088?viewlocale=en_US&locale=en_US.
    If so, it should be fixed for nothing. Read the Knowledge Base article and call support to schedule a time that you can take your machine in and have it diagnosed.
    Good luck,
    Clinton

  • Setting geo.enabled to false does not stop websites from knowing location. Seems to be related to my proxy setting.....Any ideas on how to completely disable this?

    Setting geo.enabled to false does not stop websites from knowing location. It changes based off of what proxy I am using. Is there a way to completely disable this?

    I use Comcast in the Chicago area market and have a problem with the "Opt Out" stopping about once a year or so. It appears as being enabled at the Comcast Opt Out page, but the unresolved addresses are still going to the DNS "domain helper" service.
    What works for me is to turn off the opt out preference, log off from that Comcast account, and close Firefox. When I restart Firefox, log in to Comcast, and then set the pref to "opt out" again - it works as intended and doesn't cause me a problem until it happens like 10 to 12 months later.
    As far as why it seems to affect browsers in a different way, I have no idea. I do have Safari, Opera, and IE 8 installed, in addition to multiple versions of Firefox, but I don't use those other browsers enough to have seen a difference. I am usually opening pages from within Firefox in those other browsers to view the difference, ''or to print something that Firefox screws up in the Print Preview''.

  • How to completely disable the function of hotspots

      Hello everyone, this is my first time in the forum, I am looking for a way to neutralize the function of individual access points - HOTSPOT, I mean neutralization through the system, not through the normal shutdown settings
    Thank you all

    hi, michael.
      Thank you for the quick response,
    Excuse me for my tongue,
    Hard to express myself that well,
    The point is this:
    I have an iPhone 4, sometimes the device is with people who work with me,
    Or with friends,
    They connect the device to their computer and play in the internet,
    They finish the transaction with my cellular company,
    If they play with the device - no problem,
    But to connect to a computer - it is a problem!
    So I want to completely disable the option of hotspots
    And again,
    Pardon my language

  • How to completely disable Firefox warning "....certificate... not trusted... no issuer chain... provided." .mil .gov .va sites.

    I have 100s of bookmarks that work fine on other browsers. Most are .mil, .gov., & va websites. All of which say, "The certificate is not trusted because no issuer chain was provided." in Firefox. I want to completely bypass certificate warnings without having to make exceptions for every site. I understand the risks. I prefer them, over these warning. Viruses, malware, phishing, etc, I can deal with. I just want FREEDOM from these certificate blockades, FREEDOM to choose my own security. I will choose security that is less obtrusive / problematic than the attacks they mean to prevent. Even Microsoft allows you to turn off user account controls. My computer IS already secure, & what I input IS secure. Now act like open source and allow me to choose FREEDOM from these certificate blockades.

    Thanks, but is that really the best Firefox users get. Constantly having to manually fix the browser to accept certificates. Firefox's security is fine for those who like to rely on it, but for those who dislike being FORCED to rely on it, there should be some means to bypass it, without having to ask for some link like this every time. I said the majority were .mil links, but I still run into this elsewhere. What is THE solution for those of us who rather dislike being forced to rely on this primitive, dysfunctional, oppressive, big-brother - overprotective - ware? Don't misunderstand me, I get what SSL is and the purpose of certificates. But I also know when I'm entering a known and trusted site vs. some random site found somewhere on the web. I use multiple Firefox profiles. I'd like to disable this stuff on my profiles which I use for official business where I only go on known & trusted sites. Plain and simple, I'd like to stop getting this error in particular. Is it not possible to use Firefox to my liking, for my needs.

  • How do I disable Keychain

    For our users Keychain is a nightmare - especially because they do not remember the first password - as the network enforces them to change it every 90 days. With this the keychain pop keeps coming up constantly and is affecting the users working. So I would like to know how to stop keychain or to disable it?

    I'm having a similar problem.  I tried this:  http://www.ehow.com/how_8678285_disable-keychain-mac.html
    And that got rid of the majority of the pop-ups, but it's still doing it.  I have to click "cancel" on the pop-ups 3 times each time it pops up, which is frequently.  In order to reset my password for this site so that I could post to this discussion I has to enter 2 characters into the box, click "cancel" on the pop-up 3X, enter 2 more characters, click cancel 3 more times...  etc. for both the new password and the confirmation.  It also wouldn't let me use the password I wanted to, which is why I couldn't remember what it was in the first place, it keeps making me change it to something new.  Aside from keeping passwords on a post it note on the computer, which would defeat the purpose, I don't know how to get around this.
    ...and I used to prefer macs because they were more user friendly.  I've been having trouble with tabs in safari not closing when I click on the "X", and other little stuff for a long time too.  In the last year or so I'm starting to think that as long as I have to put up with this kind of buggy stuff I might as well do it on a PC for half the price.

  • How to Completely Disable Autodiscover

    I don't want any clients automatically connecting to my Exchange 2010 servers. I want to handle all client setups manually. I can remove the DNS entry, but how can I remove the autodiscover SCP on my domain?

    If I removed the autodiscover virtual directory, would that accomplish the same thing?
    Here's my scenario:
    Company A has its own domain and Exchange server on companya.com. The merged with Company B and migrated all of their users to companyb.com's Exchange server. Company B created an accepted domain for companya.com and all of Company A's users will continue
    to use [email protected] as their primary smtp address. To complicate matters, Company A will continue to use their old AD domain and will keep their Exchange server running indefinitely.  The MX record still points to exchange.companya.com, and they
    are merely forwarding all of their old companya.com mailboxes to the corresponding companyb.com addresses. Their workstations are still joined to companya.com and they still log into companya.com.
    This appears to be causing problems with setting up email clients for new users and with getting the offline address book. I can't force them to shut down their Exchange server, but they are willing to disable the autodiscover SCP if I can tell them how
    to do it.
    The "whys" of this insane setup are above my pay grade.
    Outlook initiates the autodiscover process, so disabling on the Exchange side wont prevent Outlook from attempting to do its thing.
    With OUtlook 2010 they can add both accounts from both AD forests or they could use Outlook Anywhere, OUtlook Web App. You could always set the Autodiscover URLs to CompanyB URLs, and if they are authenticated against COmpanyB domain, they should be able
    to connect.

  • How to complete disable the option to "restore previous session"?

    I wish to disable the option to "restore previous session".
    This should be disabled from the History tab.

    Maybe disable session restore.
    * http://kb.mozillazine.org/Session_Restore

  • How do i disable keychain as i cannot access anything!

    keychain password not recognised

    Hi ArthurHMac,
    Thanks for visiting Apple Support Communities.
    If the keychain password on your Mac is not being accepted, you may need to reset the keychain. This article has instructions that can help:
    Resetting your keychain in Mac OS X
    http://support.apple.com/kb/ts1544
    If you are using iCloud Keychain, see this article for help:
    iCloud: Troubleshooting iCloud Keychain
    http://support.apple.com/kb/TS4644
    Best,
    Jeremy

  • How do I completely disable Bluetooth Sharing without disabling bluetooth completely on Mac OS 10.7.2?

    I'm trying to secure my Mac Pro that is running 10.7.2 and the only thing left that I cannot get figured out is how to completely disable Bluetooth Sharing without turning off Bluetooth altogether.  Initially I thought that it was blocked in System Preferences -> Sharing unless you had an admin password, but it's the only option that is available no matter if the user is standard or admin.  Is there any way to completely disable this box from toggling on or off?

    Hi Adam, I see there are no replies to ur question. I have the same problem. I can turn bluetooth sharing on or off without my admin password. Please reply if you have found a solution. thank you!

Maybe you are looking for