Skip to main content
Question

Deny change of Computer Name by Users

  • February 25, 2014
  • 5 replies
  • 13 views

Forum|alt.badge.img+9

I'm looking for an option to deny users (admins) from changing there Computer Names. It's not possible for our Standard Users but for the Admin Users.

Is there any trick that you can re-command to do this?

We could disable the complete Sharing options via the authorization file or in 10.9 the authorization db?

Thanks,
Maik

5 replies

bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • February 25, 2014

@maik.sanftenberg, you could block the Sharing Pane via MCX.


Forum|alt.badge.img+18
  • Valued Contributor
  • February 25, 2014

if you do a configuration profile for loginwindow under the options tab there is an option to set computername to computer record name. this will grey out the box in the sharing tab disallowing users to change it.
of course if they have sudo and know about scutil all bets are off.


Forum|alt.badge.img+20
  • Valued Contributor
  • February 25, 2014

I had a script posted here that stored the computer name and then restored it on Login. Ill try and find it but I was having issues with the provided JAMF mechanism actually working all the time. This worked all the time, it was an extension attribute.


Forum|alt.badge.img+15
  • Esteemed Contributor
  • February 25, 2014

Are your Macs bound to AD? The AD binding name is a bit more difficult to change. I have a script that periodically checks the AD binding name and if the sharing name doesn't match, it'll reset the sharing name to match the AD name.


Forum|alt.badge.img
  • New Contributor
  • February 25, 2014

Like cbrewer, I wrote a quick script to update the computer name to match the binding name. I have this setup as a policy. https://github.com/jonathanchan/Macs-AD/blob/master/hostname_check.py. It should be trivial to update this if you don't use AD.