Granting Access to Network System Preferences

Alan

In OD there are MCX Settings to allow access to each individual
preference pane in System Preferences. I am sure you could mimic those
settings in Casper.

I think perhaps he means so that a user doesn't need admin rights, similar to how /etc/authorization can be modified for DVD region code and printer authority.

j

Correct, I am trying to let a non-admin user click on Network in system
prefs and not have to authenticate to make changes.
--
Alan Benedict
?
Macintosh Technician
The Integer Group
http://www.integer.com

What specifically are you wanting to allow them to do?
On 8/3/10 9:00 PM, "Alan Benedict" <abenedict at integer.com> wrote:

Wireless settings can be handled by non-admins using the Airport menu.
Proxy settings and similar network-specific settings can be handled with
the Apple menu --> Location command.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

VPN settings and the ability to remove their 802.1x profile.

--
Alan Benedict
?
Macintosh Technician
The Integer Group
O: 515-247-2738
C: 515-770-8234
http://www.integer.com

Did you ever find a solution for this? We need to do the same thing - allow
non-admin access the Network system preference.

Maura

Maura Fennelly
Technology Department
Archbishop Mitty High School
mfennelly at mitty.com
408.324.4243

Nothing yet...

:(

--
Alan Benedict
?
Macintosh Technician
The Integer Group
http://www.integer.com

Just visiting this thread because i need to do this today.

Did anyone come up with a solution for this?

I'm not 100% sure, but believe this can be done, and probably only done, by editing the /etc/authorization file on the system.

If you export a copy of the authorization file like this-

sudo cat /etc/authorization > ~/Desktop/authorization.txt

You can look through it in TextEdit or TextWrangler, etc and locate the appropriate settings. (tip: do a search on "system.preferences" in your text editor)
Off the top of my head I think you'd need to change the group for the "<key>system.preferences</key>" section at the bottom from this:

<key>group</key>
<string>admin</string>

to this:

<key>group</key>
<string>lpadmin</string>

You could also change the group to "everyone" if you feel comfortable with that.
Do the same for "<key>system.preferences.network</key>"

If you then add all your users into the lpadmin group, I think they then should be able to administer the Network System Preference Pane, once the above changes are in place.

Search around here on JAMFNation for threads related to /etc/authorization and you'll find some walkthroughs on the proper editing procedures and some syntax using PlistBuddy. The most important aspect will be to make a backup copy of the unedited authorization file before making any changes, so in case you goof up you can back out of it by replacing it with the original file.

http://youtu.be/2w6jEsTRzIM