Granting Access to Network System Preferences

[abenedict]

Does anyone know of a way to grant permanent access to the Network System
Preference? I noticed in the resource kit there was a script that grants
access to the DVD region code via /etc/authorization, does anyone know if I
can do what I want using that file?
--
Alan Benedict
?
Macintosh Technician
The Integer Group
http://www.integer.com

[tlarkin]

Alan

In OD there are MCX Settings to allow access to each individual
preference pane in System Preferences. I am sure you could mimic those
settings in Casper.

[jarednichols]

I think perhaps he means so that a user doesn't need admin rights, similar to how /etc/authorization can be modified for DVD region code and printer authority.

j

[abenedict]

Correct, I am trying to let a non-admin user click on Network in system
prefs and not have to authenticate to make changes.
--
Alan Benedict
?
Macintosh Technician
The Integer Group
http://www.integer.com

[talkingmoose]

What specifically are you wanting to allow them to do?
On 8/3/10 9:00 PM, "Alan Benedict" <abenedict at integer.com> wrote:

Wireless settings can be handled by non-admins using the Airport menu.
Proxy settings and similar network-specific settings can be handled with
the Apple menu --> Location command.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

[abenedict]

VPN settings and the ability to remove their 802.1x profile.

--
Alan Benedict
?
Macintosh Technician
The Integer Group
O: 515-247-2738
C: 515-770-8234
http://www.integer.com

[mfennelly]

Did you ever find a solution for this? We need to do the same thing - allow
non-admin access the Network system preference.

Maura

Maura Fennelly
Technology Department
Archbishop Mitty High School
mfennelly at mitty.com
408.324.4243

[abenedict]

Nothing yet...

:(

--
Alan Benedict
?
Macintosh Technician
The Integer Group
http://www.integer.com

[PeterG]

Just visiting this thread because i need to do this today.

Did anyone come up with a solution for this?

[mm2270]

I'm not 100% sure, but believe this can be done, and probably only done, by editing the /etc/authorization file on the system.

If you export a copy of the authorization file like this-

sudo cat /etc/authorization > ~/Desktop/authorization.txt

You can look through it in TextEdit or TextWrangler, etc and locate the appropriate settings. (tip: do a search on "system.preferences" in your text editor)
Off the top of my head I think you'd need to change the group for the "<key>system.preferences</key>" section at the bottom from this:

<key>group</key>
<string>admin</string>

to this:

<key>group</key>
<string>lpadmin</string>

You could also change the group to "everyone" if you feel comfortable with that.
Do the same for "<key>system.preferences.network</key>"

If you then add all your users into the lpadmin group, I think they then should be able to administer the Network System Preference Pane, once the above changes are in place.

Search around here on JAMFNation for threads related to /etc/authorization and you'll find some walkthroughs on the proper editing procedures and some syntax using PlistBuddy. The most important aspect will be to make a backup copy of the unedited authorization file before making any changes, so in case you goof up you can back out of it by replacing it with the original file.

[Kumarasinghe]

http://youtu.be/2w6jEsTRzIM