Restrict user access to network

[Analog Kid]

Is there a way to restrict a user's access to the network? I'm looking to make a sandbox account that I can keep from talking out that I can keep logged in while I also have a more functional account logged in for regular use.

I thought there used to be a way of creating a "restricted" account as an alternative to "standard" and "administrator", but I don't see that option. Screen Time seems app based rather than resource based.

 

[ssmed]

It is a bit unclear what you are wanting to achieve - all of these are machine rather than account based.

You could deny access:
to the internet, by putting in a local and non-functional DNS
to the network by putting Mac address restrictions at your DCHP server (your router)

You could close down many links to the network by using the firewall on the Mac:
use block all incoming connections (using the check box) would be a start
or adding manual blocks to services
or using LittleSnitch

 

[Analog Kid]

It is a bit unclear what you are wanting to achieve - all of these are machine rather than account based.

You could deny access:
to the internet, by putting in a local and non-functional DNS
to the network by putting Mac address restrictions at your DCHP server (your router)

You could close down many links to the network by using the firewall on the Mac:
use block all incoming connections (using the check box) would be a start
or adding manual blocks to services
or using LittleSnitch

Yeah, I'm looking for per account control. Can Little Snitch run different rules based on account? If so, that might work. The firewall only blocks incoming connections.

 

[gilby101]

Is there a way to restrict a user's access to the network? I'm looking to make a sandbox account that I can keep from talking out that I can keep logged in while I also have a more functional account logged in for regular use.

So this would be an account without access to iCloud or any other network services. That would lock it out of Safari or apps which use internet based app licensing. Is that what you are asking for?

 

[Analog Kid]

So this would be an account without access to iCloud or any other network services. That would lock it out of Safari or apps which use internet based app licensing. Is that what you are asking for?

Yes. That's why I don't want to lock down the whole machine, but only one account that I can switch to and back from.

 

[Weaselboy]

How to use Parental Controls on your Mac: The ultimate guide

Keep your kids safe while they surf, work, and play on the Mac with parental controls.

www.imore.com

I think you can accomplish what you are after by setting up an account with Screentime restrictions.