OSX Account Security Question

[timnosenzo]

Quick question... I am going to be leaving my MacBook with my local Apple store for a few days while it gets some warranty work done. Instead of giving them my account password (and essentially giving them the keys to my life), I thought it would make sense to create a guest account with admin access and leave them with that.

So if I just give them access to the guest account, is there anyway for them to still able able to access my account? I know they could reset my password (at least I would know that they did that)--is there anyway for me to block that level of control for them?

FWIW, I'm just having the screen replaced, so they shouldn't have to be messing around with the OS much.

Thanks for the help!
Tim

 

[/dev/toaster]

Thats how I would handle it, nobody ... and I mean, nobody gets my account passwords.

 

[XheartcoreboyX]

Why dont you just politely tell them not to see or mess with your files cause they are very personal??!!

im so sure they would take your word.

 

[MisterMe]

... Instead of giving them my account password (and essentially giving them the keys to my life), I thought it would make sense to create a guest account with admin access and leave them with that.

...

Creating a guest account for the technician is a complete and total waste of time. If he wants to steal your "life," then all he has to do is to use a System Restore disk for your model computer to change your password to anything he wants or remove it all together

 

[bankshot]

So if I just give them access to the guest account, is there anyway for them to still able able to access my account?

Yes, unless you used FileVault. If they have admin access (and I believe they do ask for it), they can access everything that isn't encrypted.

If it's very important to you, you have two choices:

1. Make a complete backup and wipe your account off the machine entirely. I've done this in the past when sending computers in for repair.

2. Use FileVault.

 

[kolax]

I'd make a Guest account with limited access - what else do they need to do when they replace the screen? Change resolution, maybe run a test program but they won't need anything else.

Why dont you just politely tell them not to see or mess with your files cause they are very personal??!!

im so sure they would take your word.

Haha - no chance. I've dealt with computers that have been returned by customers and been amazed that they didn't even bother to delete their data.

Don't trust anybody with your stuff. That's as stupid as writing your name and address on a suitcase incase it gets lost - giving baggage handlers at the Airport a possible empty home to rob. Not paranoia, just being wise.

 

[MisterMe]

...

Don't trust anybody with your stuff. That's as stupid as writing your name and address on a suitcase incase it gets lost - giving baggage handlers at the Airport a possible empty home to rob. Not paranoia, just being wise.

If you routinely take your computer to the shop while it is user-accessible and have the time to establish new accounts, then fine. However, most people take their compuers in for repairs when they are broken. In that event, deleting files may not be an option.

 

[kolax]

If you routinely take your computer to the shop while it is user-accessible and have the time to establish new accounts, then fine. However, most people take their compuers in for repairs when they are broken. In that event, deleting files may not be an option.

Where did I mention deleting files exactly...?

I was promoting the use of a Guest account (as stated by a previous poster). But might be an idea to make a Guest account right now incase it is required in the future..

 

[xUKHCx]

They always ask for an admin account which means they can quick and very easily get into your files just by changing permissions of your home directory.

You would have no idea that they did that because they could easily revert the permissions back.

It is really a trivial task for anyone let alone an apple "genius".

I put all my files in an encrypted disk image which has a separate and very strong password.

And of course back it up before hand. They could easily lose all of your data. Don't learn the hard way.

 

[timnosenzo]

Thanks for the replies, all. xUKHCx is right... with admin access I can just change the privileges on another users folder and look through it. Forgot about that..

FileVault requires a TON of disc space though, right? My home folder is 67 GB's, and I only have 12 GB's or so free on my HD. If I recall correctly, I can't activate FileVault, right?

Thanks
Tim

 

[xUKHCx]

Thanks for the replies, all. xUKHCx is right... with admin access I can just change the privileges on another users folder and look through it. Forgot about that..

FileVault requires a TON of disc space though, right? My home folder is 67 GB's, and I only have 12 GB's or so free on my HD. If I recall correctly, I can't activate FileVault, right?

Thanks
Tim

From all accounts Filevault is way too much trouble and dangerous that I would never advise going down that route. Just create some encrypted disk images to dump your files into and then you can move them back out once it has come back. I've said it before but will say it again, backup for files before sending it in, even though they are replacing the screen they could reinstall/drop your laptop and your data is definitly worth the cost of a couple dvds or 15.