Discussion Point
| « Previous | Next | Reply | List » |
|
Re: I'd love to get your thoughts Posted: May 14, 2004 Christopher Holland, Staff Engineer, EarthLink, Inc. |
|
An Enterprise IT director would be well-advised to deploy cheap eMacs or snazzier iMacs to employee desktops:
When properly configured, OS X can lock any user out of installing any piece of software on the operating system without an administrator password. Users can be confined to their home directories. Thru preferences you can even restrict which applications a given user may access (System Preferences --> Accounts --> create a new user --> Limitations Tab --> Some Limits --> check "this user can only use these applications" --> check boxes for apps they may run. they'll be locked out of anything else they even try to run off their home directory, how cool is that !@!). All network ports are already turned off by default, and users won't have a way of enabling any of them unless they have administrator access. Panther ships with industry-standard secure Kerberos authentication: http://web.mit.edu/macdev/KfM/KerberosClients/KerberosApp/Documentation/using-osx.html which would allow an IT department to even centralize workstation access. Many of these features are available on windows, but operating-system level user restrictions are usually fairly easy to get around in windows, stuff that should run in user space, can magically make its way to kernel space, especially when installing silly software thru ActiveX controls while browsing the web and stumbling upon a really cool "free screensaver". This message was a reply Posted by Rodney Adams on May 11, 2004
|
|
|
| « Previous | Next | Reply | List » |
