Background: One of the Macs in one of our student research labs was remote locked and wiped. I want to prevent this from happening again, but at the same time I have to allow the students to install whatever software they want on the machine.
Is there some way I can prevent someone with an administrator account from connecting the machine to their iCloud account and then remotely locking/wiping the machine?
I tried creating two admin accounts, A and B. A will only be accessible by me. B will be what the students use. But if I associate my iCloud account with A, and associate Find My Mac with my iCloud account, a user logging onto the B account can still use their own iCloud account to enable Find My Mac, and essentially disconnect *MY* Find My Mac.
Is there some way I can prevent someone with an administrator account from connecting the machine to their iCloud account and then remotely locking/wiping the machine?
I tried creating two admin accounts, A and B. A will only be accessible by me. B will be what the students use. But if I associate my iCloud account with A, and associate Find My Mac with my iCloud account, a user logging onto the B account can still use their own iCloud account to enable Find My Mac, and essentially disconnect *MY* Find My Mac.