Mac Lab Report

How to Limit Network Access for OS X Users

- 2005.06.16

I've recently acquired several Tiger-equipped Mac minis, and the first problem I had with deployment was finding a way to keep them from browsing, accessing, or damaging the school's network. At the same time, I use a server in my classroom to distribute data files for analysis, collect student work, and save copies of electronic documents.

For my Mac OS 9 client computers, I use FoolProof, but it is not available for OS X (if it has been made compatible, I can't find any indication of it on the product description page; no system requirements are given).

The problem with OS X account settings is that there is no way to disable the "Go" menu. This definitely should be a setting for network managers responsible for setting up client computers.

Thanks to the persistent work of a reader, Teemu Masalin, we now have a simple solution to this problem. Assuming your clients are set up with restricted access, all you have to do is go into the Utilities folder, open NetInfo manager, and turn everything off in the Directory Access window. What you are turning off is the kinds of networks that will show up in your Go window when you click "Browse" to locate a network.

NetInfo Manager will require an admin password, so even if students know this trick (or read this article) they won't be able to activate it again by the same method.

Close it, and you're all set.

How do my students get access to their server folders? Simple. I just provide aliases of the servers (created from mounted servers on my teaching computer when I had logged into each folder manually, using my undisabled "Go" function). A copy of all the network folder aliases now sits on the desktop of each mini. Double-click on the alias, and the user goes directly to the password, does not pass "Go", and does not collect any other servers on the network.

I've tested this arrangement, and it seems to work reliably. I asked some students to attempt to get on the network as a test, and they were unable to do so (keep in mind that these were just average computer-literate kids, not programmers or kids from the Cisco class).

Now, that's not to say there aren't other applications that will allow you to access the network - the Terminal comes to mind, for example, but that would require an expert user to use it properly. All I want to do is make it inconvenient enough that it would discourage everyday students from trying.

Thanks, Teemu. The arrangement has been working great, and I'll do it for all future installs of OS X for student users.

Link: First Mac minis in Classroom a Big Hit
Link: FoolProof

Jeff Adkins is a science teacher who isn't afraid to state his preferences in computing platforms. In his classroom he has everything from a beige All-in-One to a a G4 XServe, and they all work together nicely. He calls himself the "poster child for technology integration" in the classroom. He was the 2006 Outstanding Educator of the Year for the California Computer Using Educators (CUE) organization. He also maintains a site for astronomy teachers at www.AstronomyTeacher.com.

Recent Mac Lab Reports

Microsoft Word 2004 vs. iWork Pages 1.0 for writing a book, 2008.01.10. Microsoft Word is great for technical writing, powerful yet slow, while Pages lets you concentrate on just writing, making it great for novels.
iWeb a great tool for quickly creating an attractive website, 2007.09.11. Apple's iWeb software isn't just easy to use, it also integrates nicely with .mac and other programs in the iLife bundle.
Use your Bluetooth phone to control your Mac? Maybe, 2007.02.27. Salling Clicker software turns many Bluetooth phones into remote controls for Bluetooth-equipped Macs.
More in the Mac Lab Report index.

Links for the Day

Mac of the Day: Macintosh Portable, introduced 1989.09.20. The nearly 16 lb. behemoth was innovative but not a smashing success.
February 13 in LEM history: 01: Layoffs may hurt Mac market - 02: Unix for the Mac - Rage against the Macintosh - 03: Options to move data from PCs to Macs - 04: Low cost RAM for older 'Books - 06: Apple, IBM, and Intel - 07: Picking the right cheap computer, new or used - 08: I needed to find an older Mac
Support Low End Mac

Recent Deals

About LEM Support Usage Privacy Contact

Mac Lab Report copyright © 2000-08 by Jeff Adkins. Low End Mac is an independent publication and has not been authorized, sponsored, or otherwise approved by Apple Inc. Entire Low End Mac website copyright ©1997-2012 by Cobweb Publishing, Inc. unless otherwise noted. All rights reserved. Apple, the Apple logo, Macintosh, iPad iPhone, iMac, iPod, MacBook, MagSafe, Mac Pro, Apple TV, and AirPort are registered trademarks of Apple Inc. Additional company and product names may be trademarks or registered trademarks and are hereby acknowledged.
Advice is presented in good faith, but what works for one may not work for all. Please report errors to .
LINKS: We allow and encourage links to any public page as long as the linked page does not appear within a frame that prevents bookmarking it.
Email may be published at our discretion unless marked "not for publication"; email addresses will not be published without permission, and we will encrypt them in hopes of avoiding spammers. Letters may be edited for length, context, and to match house style.
PRIVACY: We don't collect personal information unless you explicitly provide it. For more details, see our Terms of Use.

Custom Search

Follow Low End Mac on Twitter
Join Low End Mac on Facebook

Low End Mac Reader Specials

TypeStyler 11 is now in the Mac App Store!! -- Special Introductory Price of $59.95!! -- To Buy From The Mac App Store Click Here Now!! Or buy direct from Strider Software.

Don't install Parallels to play poker online! Poker Mac will show you how to download and install a native Mac poker and Mac Casino applications in minutes.

Affiliates

Amazon.com
The Apple Store
The iTunes Store
PC Connection Express
GainSaver
Parallels Desktop for Mac
eBay