[MPMoriarty]

Here's what I am trying to do. I want to be able to create a limited user account at home at home that doesn't have the ability to connect to the Internet. I am already familiar with the user account dialog and limiting functionality for a user, but I just can't figure out how I can simply disable all network connections for a specific user.

Would I have to use the Networking pane in System Preferences and turn off all networking connections?

And if so, wouldn't this disable the network connections for all other users?

Mike

[MPMoriarty]

Hasn't anyone ever created an account like this before?

[timmerk]

You could buy LittleSnitch and install it just on that one user account, then block all ports.
I think that would work.

[fisherKing]

what about logging in to that user's account, and, in the network pref pane, unchecking the available connection options (ie ethernet, airport, int. modem), then locking the lock.
then only the admin can change those settings...

[mikemako]

or you could limit their access to all internet applications. Going into the "Accounts" preference pane, click on "Limitations", choose "Some Limits" and list which applications they are allowed to use. Just don't allow them to use any app that's internet related. Also remember to un-check the "Open all System Preferences" option- that way they can't get into system preferences to alter anything.

[Love Calm Quiet]

Of course locking out all browsers means that they could not look at .html files via a browser right? (something I often need to do when off-line)

[MPMoriarty]

I had thought about unchecking all the network connections in that specific user account, but I thought that would affect all users.

I will try it and get back to you guys.

I was going to just disable applications that could access the Internet, but that is a workaround. The account is still connected to the Internet is some fashion. I want that account totally closed off from any network connections.

[Angus_D]

Originally posted by MPMoriarty:
I had thought about unchecking all the network connections in that specific user account, but I thought that would affect all users.

It does.

[larkost]

What is it you are trying to accomplish? There is probably a better way of doing it.

[MPMoriarty]

I simply want to create a user account that when that user is logged in that there is no way they can access the Internet or any network connections other accounts are able to. I mean, I didn't think it was that hard but maybe it is.

[Amorya]

Originally posted by MPMoriarty:
I simply want to create a user account that when that user is logged in that there is no way they can access the Internet or any network connections other accounts are able to. I mean, I didn't think it was that hard but maybe it is.

I think larkost was asking more like why you want to do that. Is it to limit a child? Or to stop a certain app from phoning home?

Amorya

[Gavin]

Another question is how sophisticated is this user? That could alter the approach here.
Can he just turn things back on himself in the control panel? Or is it a child who will never figure it out?

You could have a script that runs on login that turns off networking.

#!/bin/sh
ifconfig en0 down

and one that runs on logout to bring it backup

#!/bin/sh
#ifconfig en0 up


login scripts may apply to every user...
anyone know how to put this in an if statement to check for a particular user?


check this out:
http://www.bombich.com/mactips/loginhooks.html