[SOLVED] Need to prevent Admin accounts from remote locking a Mac

Status
Not open for further replies.

mrtasty

Honorable
Nov 1, 2013
2
0
10,510
Background: One of the Macs in one of our student research labs was remote locked and wiped. I want to prevent this from happening again, but at the same time I have to allow the students to install whatever software they want on the machine.

Is there some way I can prevent someone with an administrator account from connecting the machine to their iCloud account and then remotely locking/wiping the machine?

I tried creating two admin accounts, A and B. A will only be accessible by me. B will be what the students use. But if I associate my iCloud account with A, and associate Find My Mac with my iCloud account, a user logging onto the B account can still use their own iCloud account to enable Find My Mac, and essentially disconnect *MY* Find My Mac.

 
Solution
Check the logs, if possible, to see who it was that locked the computer. Tell them, and everyone else, that if they do it again they will be expelled from the course. If you don't have that authority, then get someone who does to issue the ultimatum. In the end it's better to address the problem os students misusing computer resources than to try to use technology to prevent them. If they did this sort of thing in the real world they would likely end up in jail.
Check the logs, if possible, to see who it was that locked the computer. Tell them, and everyone else, that if they do it again they will be expelled from the course. If you don't have that authority, then get someone who does to issue the ultimatum. In the end it's better to address the problem os students misusing computer resources than to try to use technology to prevent them. If they did this sort of thing in the real world they would likely end up in jail.
 
Solution

mrtasty

Honorable
Nov 1, 2013
2
0
10,510
Thanks for the input, guys. I ended up removing the iCloud panel so that no one can connect to iCloud. At least not without going into the Terminal and issuing some commands. I also spoke to the professors in charge of that lab and told them about the severity of the problem. You're right about it being a people problem. They want their researchers to have full access to the computer so we just have to rely on them to behave themselves.
 
Status
Not open for further replies.