Gotta love OS X - running as a non-admin account

Discussion in 'Mac Apps and Mac App Store' started by Westside guy, May 12, 2004.

  1. macrumors 601

    Westside guy

    Joined:
    Oct 15, 2003
    Location:
    The soggy part of the Pacific NW
    #1
    There's been at least one discussion on this forum in the past 1-2 months about whether or not one should use an admin-enabled account as one's default account. As the sole user of this Powerbook, I hadn't been particularly concerned about this issue - so my account was (until a couple days ago) in the admin group.

    Well, after thinking about this and realizing that some of the arguments made against "admin by default" did indeed make sense, I decided to create a new admin-level account and then de-adminify (he he) my regular user account. In large part I was curious to see how annoying/inconvenient this setup would be.

    Those of you who already do this know the answer - it's not inconvenient at all! I have been, once again, impressed by the thought Apple has put into the design of this OS. Even as a non-admin, you don't have to change how you do anything. If you need to do an admin level task, just do it - the OS will prompt you for an admin username and password when/if that level of access is necessary.

    (BTW I am aware that XP will also let you "run as user...", but it's not nearly as elegantly and transparently implemented).

    I will give one warning regarding something I discovered the hard way. When you create a new admin account, make sure you do not use a long name that matches the long name of another account! I inadvertently did this, calling my new admin account "System administrator" - which I found afterward matches the long name for the inactive root account. This situation left me unable to log into the new account I'd created. I'm not sure why the long name matters in this case, but oh well.

    Anyway, the only real shortcoming to this whole setup is that I often need to use "sudo" access for stuff like fink - so I ended up putting my non-admin account into /etc/sudoers. Since sudo requires your password before use, this doesn't seem like a significant security issue.

    P.S. Oh, the other advantage to this set up is it gives people on single-user machines a reason to play with the trés cool fast user switching in Panther. :D
     
  2. macrumors 65816

    rueyeet

    Joined:
    Jun 10, 2003
    Location:
    MD
    #2
    That's good to know....on that glorious day when I can move my Mom over to a Mac machine, I plan setting her up as a non-admin user so that she can't do anything untoward by accident. Which, believe it or not, will give her more peace of mind than it will me. :)
     
  3. macrumors 68020

    Joined:
    Aug 9, 2000
    Location:
    54140
    #3
    this is what non-admin accounts are used for in my circle of friends ;)
     
  4. macrumors 601

    virividox

    Joined:
    Aug 19, 2003
    Location:
    Manila - Nottingham - Philadelphia - Santa Barbar
    #4
    i might de admin myself hehe but i liek the POWER I NEED THE POWER

    but i have several non-admin account but not for me for my friends whenever they wanna play around with my comptuer and i dont want them to change my settings (selfish bastard i know)
     

Share This Page