Versions Compared

Version Old Version 2 New Version 3
Changes made by

Timothy Pinkham

Former user

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This page explains the changes, and what Biola employees need to know about how the changes will affect their computing experience.

  • Mac
  • Windows PC

 

...

Security and Privacy

  • Removed access to the "Security and Privacy" System Preferences pane.
    • FileVault Settings
    • Firewall Settings
    • Privacy and Location tracking settings
    • Apple Gatekeeper settings
  • Enforce ask for password immediately after screensaver or sleep. 
  • Enforce screensaver enabled after 15 minutes of inactivity. 

Image Added

Users and Groups

  • Removed access to the "Users and Groups" System Preference pane. 
    • Unable to set add or remove users.
    • Unable to remove Active Directory Binding.
    • Unable to change login screen settings. 
    • Unable to change user login items. 

Image Added

Sharing

  • Removed access to the "Sharing" System Preference pane.
    • Unable to change SSL, Remote Management, and Screen Sharing settings, etc. 
    • Unable to change computer name. 

Image Added

Parental Controls and Profiles

  • Removed access to the "Parental Controls" System Preference pane.
    • Unable to create child user and enforce policies.
  • Removed access to the "Profiles" System Preference pane. 
    • Unable to add or remove configuration profiles, including the Biola profile, which enforces all these restrictions. 

Startup Disk

  • Removed access to the "Startup Disk" System Preference pane.
    • Unable to boot to flash drive, network drive, or target disk mode. 
  • Enabled EFI Firmware password
    • Requires password to boot using keyboard commands, such as "Option Boot."

Image Added

Login Window

  • Users are required to enter username and password to login to the computer - automatic login disabled. 
  • Biola University contact information added to the login screen. 

Disk Encryption

  • FileVault 2 Disk Encryption is enabled on the boot drive of the computer.
    • On computer restart, users will be presented with the FileVault 2 login screen. 
    • Only "enabled" users will be allowed to login to the computer.
      • Active Directory groups are not supported by FileVault 2. 
      • Biola IT will have an admin user enabled on all FileVault 2 computers. 
  • Password changes
    • When a user changes their NetID password (via login.biola.edu),