Thanks!

Now I must find the time to make it so!

Keith

PS – Dani also responded outside of the mailing list.

From: Matthew Oliver
Sent: January-28-13 4:24 PM
To: MacTUG
Cc: Keith Peck
Subject: Re: [MacTUG] Preventing unauthorized OSX "Recovery"

Hi Keith,

You can enable the open firmware password protection by booting the computer either from an installation media (older os) or from the recover partition (newer os).

I've been using this in our lab environment from sometime as it prevents a user from booting from a USB operating system as well, or from accessing single user mode etc.

Just don't forget the password ;-P that becomes a real problem.