Security

This message is not archived
 >> Stay informed about: Security 

In article , ns
wrote:

> If a password is set to log on, is a Master Password necessary.
That is a user password, it is different for each user, and usually not
very complex or secured.
It also can include user security settings which mean even the admin
account can't open files.

But everything can be accessed (even individual users with security and
encryption) from the user with the master password, which is normally
set with something very complex and secure.

It's just an option for better security than a simple user password.


> What is the value of File Vault?

Encryption. If you need to keep data secure, or just keep individual
user accounts from reading each other, you want user encryption.


> I'm trying to determine what features have a real value or can be
> passed over. The temptation is to enable everything, perhaps needlessly.

It's smart to avoid using everything -- not just because it causes the
system more work and more storage, but because it causes the USER to do
more to work with the computer.

I'd suggest this, until you know what you actually need:
Set up a master password (and know it forever).
Set up an admin account, with nothing enabled (for maintenance and
installations and repairs).
Set up a single user account, set up the way you want, then turn off
admin options for it. Use that for daily work.

If you separate your work by projects or activities, set up other user
accounts for the other activities. You can remove/optimize features and
functions based on what each does, such as an internet and
net-authoring arrangement, or a gaming arrangement. You can turn off
Expose, screen saver, desktop options and the Dashboard, automatic
updates and such things.
Apple also knew that peple working with images like to reduce color
influences; this is why the appearance options include gray items. So
you might set up a user with all gray and solid desktop, no colors on
buttons, hiding Dock, etc.
I have a friend doing client work who creates a separate user for each
account and has a timer for each, so he can keep all files separated
(and archive them whole when he finishes each).
 >> Stay informed about: Security