Skip to main content
Question

Block Screenshots on Casper

  • December 9, 2013
  • 8 replies
  • 37 views

Forum|alt.badge.img+8

Hello,

Is there a way you can block a student from taking screenshots on the mac?

8 replies

Forum|alt.badge.img+13
  • Contributor
  • December 9, 2013

You could make a custom config profile for disabling the keyboard shortcuts that allow screenshots: System Preferences > Keyboard > Keyboard Shortcuts > Screen Shots.

Or you could prevent /usr/bin/screencapture from running


Forum|alt.badge.img+8
  • Author
  • Contributor
  • December 9, 2013

Thanks Jacob that makes since!


mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • December 9, 2013

You may want to also block the Grab.app. I don't know if it uses the command line screencapture binary to do its work, although maybe.


Forum|alt.badge.img+6
  • Contributor
  • January 21, 2015

@ jacob_salmela
How exactly would I create this config profile? I know how to disable the keyboard shortcut, but I'm not clear as to how I would disable it in a profile.


davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • January 21, 2015

If you're already doing application whitelisting with the restrictions payload in a config profile then that would probably be the way to go.

Otherwise (with some testing) I would just remove the binary from the machines via a policy. You could grab a separate copy and store it in Casper so you can easily deploy it if you need to.


Forum|alt.badge.img+6
  • Contributor
  • January 21, 2015

What is the actual name to disable in the Restrictions Payload?


mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • January 21, 2015

Something else that could help, but not exclusively (I would still implement the above solutions like creating Restricted Software items and Config Profiles, etc) is the following command run as the user. Maybe a script line run at login, or even a Config Profile payload to do this?

defaults write com.apple.screencapture location /private/var/
killall SystemUIServer

This sets the save location for screenshots to /private/var/ which can't be written to without admin authorization. When you try to do a screen shot, even when using an admin level account, you get an error in the Finder that the screenshot can't be saved to the location where they get stored (it doesn't mention the actual location)
This doesn't prevent throwing in the Control key to the key combo to store the capture in the clipboard though.


bpavlov
Forum|alt.badge.img+18
  • Esteemed Contributor
  • January 21, 2015

Obviously this is a technical question and you've gotten some good ones in that regard. However, if the end user has a camera then your implementation is pretty much moot. Perhaps you already know that and security is tight enough that cameras aren't allowed, but just figured I'd mention it.