[MacTUG] Preventing unauthorized OSX "Recovery"

[Matthew Oliver]

I don't know how many machines you need to reconfigure, but you may want to consider something like deploy studio. It's free software that allows you to leverage apple's net boot protocol (or you can run around with usb keys, or hard drives too) to re-image (OS X and windows, or linux), build packages, bind to AD, or profile manager, and set things like open firmware passwords that are all part of relatively easy to setup machine profiles.


On 2013-01-28, at 4:29 PM, Keith Peck <keith.peck at uwaterloo.ca<mailto:keith.peck at uwaterloo.ca>>
 wrote:

Thanks!
Now I must find the time to make it so!

Keith

PS – Dani also responded outside of the mailing list.

From: Matthew Oliver
Sent: January-28-13 4:24 PM
To: MacTUG
Cc: Keith Peck
Subject: Re: [MacTUG] Preventing unauthorized OSX "Recovery"

Hi Keith,

You can enable the open firmware password protection by booting the computer either from an installation media (older os) or from the recover partition (newer os).
I've been using this in our lab environment from sometime as it prevents a user from booting from a USB operating system as well, or from accessing single user mode etc.

Just don't forget the password ;-P that becomes a real problem.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/mactug/attachments/20130128/29200b2e/attachment.html>