MAC OS X tiger help for a Windows technician
Dan Shoop
shoop at iwiring.net
Thu Jun 14 13:18:40 PDT 2007
At 4:38 PM -0400 6/13/07, Karl Kuehn wrote:
>On Jun 13, 2007, at 4:02 PM, Dan Shoop wrote:
>
>>>On the other machine I need to be able to give administrator rights to a
>>>new user. If the user does not know the old employees account details is
>>>there a way to access a default ( if there is one on MACS) account on
>>>the machine so I can edit the users rights?
>>
>>Enable root, and login as root. Read the docs for how to do this.
>
> I am going to advise against this. It is not good practice to
>enable or to log in as root. You can get everything done by simply
>checking the "Allow user to administer this computer" checkbox in
>System Preferences->Accounts. You have have the credentials of a
>administrative user to do this (unless you know your way around
>single user mode and nicl... I do not recommend that unless you
>really know what you are doing).
And since he can't do that since he doesn't have access to an admin
account how do you propose he get that done?
As for this "never login as root or have root enabled" myth, get over
it. If you're too feeble as a sysadmin to work in a root environent
find another job. One where you ask about fries.
If you're concerned that someone other than you will guess your root
password and login then you need to find someone else who be your
security manager b/c you clearly have no clue. You can have root
enabled, just like it is on millions of systems worldwide, and still
be secure. Well, may you can't but the real sysadmins and security
managers can.
--
-dhan
------------------------------------------------------------------------
Dan Shoop AIM: iWiring
Systems & Networks Architect http://www.ustsvs.com/
shoop at iwiring.net http://www.iwiring.net/
1-714-363-1174
More information about the MacOSX-admin
mailing list