Setup guide

Uncheck the box for “User may press Shift to keep items from opening” to prevent
users from disabling any automatic launches.
Click the Login Options tab.
Click the “Always” radio button in the “Manage these settings” list.
For “Display Login Window as:” select “Name and password text fields.”
Uncheck the box for “Show Restart Button in the Login Window.”
Uncheck the box for “Show Shut Down Button in the Login Window.”
Uncheck the box for “Show password hint after 3 attempts to enter a password.”
Uncheck the box for “Enable Auto Login Client Setting.”
Uncheck the box for “Allow users to log-in using “>console.”
Uncheck the box for “Enable Fast User Switching.”
Click the Auto Log-Out tab.
Click the “Always” radio button in the “Manage these settings” list.
Uncheck the box for “Log out users after: __ minutes of activity.” This feature is not
recommended.
5.2.4 Media Access
Media Access preference management allows control over CD/DVD and other drives.
If use of the CD/DVD drive or external disks such as USB flash drives or FireWire
drives should be restricted, then apply the following settings in the Media Access
pane or each computer list, group, and user account:
Click the “Always” radio button in the “Manage these settings” list.
Click the Disc Media tab.
Uncheck the boxes that allow CDs & CD-ROMs, DVDs, and Recordable Discs if these
items should not mounted by users.
• Click the Other Media tab.
Uncheck the box for External Devices if these items should not be mounted by users.
5.2.5 Mobile Accounts
The Mobile Accounts feature allows users to log into systems that may not always be
connected to the network. Unless operational need exists, this feature should be
disabled on clients. To do so, in the Mobile Accounts pane for each computer list,
group, and user account:
Click the “Always” radio button in the “Manage these settings” list.
Uncheck the box for “Create Mobile Account at login.”
5.2.6 System Preferences
Users can be limited to seeing only certain items in the System Preferences program
on client systems. Access to any security-relevant client settings should be
restricted. To allow users access to personalization items but hide all others, in the
System Preferences pane for each computer list, group, and user account:
Click the “Always” radio button in the “Manage these settings” list.
Click the “Show None” button.
61
UNCLASSIFIED