I have a MacBook Pro, running 10.8.2 and I'm the only user (admin of course) with guest accounts disabled. In system preferences, I have the option of, requiring my password after sleep or screen saver begins, set to immediately. When I click the lock at the bottom to lock everything so it can't be changed, requiring my password doesn't get greyed-out. I find this to be a slight security flaw and was wondering, is there a way to make it greyed-out after locking my preferences, maybe through terminal? Thanks!
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Manually grey out options in system preferences
- Thread starter Ebun101
- Start date
- Sort by reaction score
Well the idea of admin accounts is to have administrator privileges over all aspects of the machine. Parental Controls can change that on standard accounts.
A more significant security flaw is that your computer's operating system is way out of date. At least update to 10.8.5 and the latest security updates.
It is a bit strange that Apple leaves that setting unprotected (It remains unprotected in OS X 10.9.4 as well) but I suppose the thinking is that if you lock the screen immediately after the computer goes idle, someone else won't have the chance to change that setting.
No, on my computers with 10.9.4, I can freely change the "require password after" setting regardless of whether or not the "padlock" is locked.
I'm a bit of a luddite when it comes to updating (I liked snow leopard better, tried to downgrade from lion to it, but couldn't since my computer came pre-installed with lion :/). Its just something that could be changed if I'm away from my computer for a minute for a snack or something, and don't want to chance it.
You may want to just set a hot corner in the Screen Saver preferences to sleep the display, and set the security setting to lock the screen immediately.
You really should update OS X to 10.8.5 and subsequent security updates. Your computer is missing many important security fixes, and 10.8 got much more reliable as time went on.
I really have to ask, why is it an issue? Once someone gains physical access to the computer, the game is over.
If you have someone around that you really don't want to have admin access your computer, lock down your admin account with a strong password, turn off all sharing options on the admin account, turn on file vault, and use a standard account for day to day use.
A screen lock does nothing more than keep an honest person honest.
If you have someone around that you really don't want to have admin access your computer, lock down your admin account with a strong password, turn off all sharing options on the admin account, turn on file vault, and use a standard account for day to day use.
A screen lock does nothing more than keep an honest person honest.
Is there a way to add a keychain password for system preferences, so you can't launch the app without it? Cause that could work instead, just not sure how to implement it.
H'okay, you've convinced me
Is there a way to add a keychain password for system preferences, so you can't launch the app without it? Cause that could work instead, just not sure how to implement it.
H'okay, you've convinced me
You can lock your keychain with that button.