Skip to main content
Question

DIsabling "Firewire, Bluetooth PAN and Thunderbolt Bridge"

  • October 19, 2017
  • 1 reply
  • 49 views

Forum|alt.badge.img+3

Does anyone knows how to disable this option in the Network panel? I mean, restricting users from making changes to them. However if you are an Administrator user you can made some changes, but is there any option that it does not matter if you are an administrator, block this option to any user?

1 reply

cdev
Forum|alt.badge.img+14
  • Contributor
  • October 20, 2017

I'm not sure you can granularly restrict the specific interfaces from being modified if you are going to allow others. There are a few options scripting the networksetup command with say a LaunchAgent triggering a script. or a casper policy to trigger a script every X minutes/day to re-enforce the settings, e.g.:

networksetup -setnetworkserviceenabled 'Bluetooth PAN' Off
networksetup -setnetworkserviceenabled 'Thunderbolt Bridge' Off
networksetup -setnetworkserviceenabled 'Firewire' Off

The key with network setup is it's very particular about the exact name of the interface. Disabling Firewire doesn't disable Thunderbolt Firewire. Can the user still enable these services? If they have admin rights, you bet. You could optionally remove the interfaces (networksetup -removenetworkservice <network service name>) if they are detected instead of disabling them, but an admin can still re-add it.