How to disable the Command-S startup option?

Question

Level 1

4 points

How to disable the Command-S startup option?

I have a group of Macs whose users are all "managed with parental controls." But, since everyone knows how to reboot the Mac while pressing Command-S into single user mode (root), all the security measures I place are useless.

How can I disable anyone pressing Command-S on the 64-bit Intel Macs (MBPs, Airs, etc...)?

I don't want to remove all the Macs and replace them with clones running Debian, but security is crucial. If Macs are not secure, I must get something that is.

Ideas? I'm open. Thanks for your time!

Posted on Jan 28, 2014 7:54 AM

Reply

Answer 1

Jan 28, 2014 8:19 AM in response to R. Yannetta

You didn't search very hard.

Enable the Open Firmware password, that disables single-user mode

http://support.apple.com/kb/HT1492

I searched the Apple site for "Disable Single User Mode".

Reply

Answer 2

R. Yannetta Author

Level 1

4 points

Jan 28, 2014 8:33 AM in response to Keith Barkley

This link mentions: "You cannot enter single-user or verbose mode if the computer owner or administrator has enabled Open Firmware Password Protection."

This is exactly what I'm looking for. I see instructions for this as a separate application for osx 10.1-10.3... but for 10.8, how?

Reply

Answer 3

Jan 28, 2014 9:10 AM in response to R. Yannetta

Why can't you use Google?

https://encrypted.google.com/search?q=%22os+x+10.8%22+%22firmware+password%22&as _qdr=all&newwindow=1&num=100&filter=0

Reply

Answer 4

rccharles

Level 6

12,957 points

Jan 28, 2014 1:23 PM in response to R. Yannetta

Be sure to write your password down on a piece of paper and put the paper in a secure location. On newer machines, you will have to take the machine in for Apple service to remove the password.

Robert

Reply