It's in the Mail

I've been lurking here for so long and every time I read one of these threads I think to myself one day when I get my MBP, I'll do a search and not post "I GOT MINE!!!"

Well, let's call it what it is. I'm a 28 year old GRUP who can't wait for his new MBP to come in the door.

I have used PC's all my life - but my first comp was an Apple IIc . I am looking forward to the "intuitive" OS.

I have a ton of resources bookmarked, but I remember reading about the first thing I should do is NOT create an admin account? Can someone clarify that? Can't seem to find that thread. I also plan on uninstalling all the language packs to free up space.

I got the base MBP with the following upgrades:
- 2gb RAM
- Glossy
- 160gb HD

Any feedback, comments or words of wisdom are more then welcome and much appreciated.

Regards,
dolo

 

It's not that you shouldn't create an admin account. It's that you shouldn't run under an admin account. You should create a limited user account, or whatever Apple's calling them. It's a security thing. It's a little bit safer, and I think there's at least one privilege escalation attack you're not vulnerable to that way.

Welcome to the Koolaid trough.

PS. What is a GRUP? I'm almost certain I remember that from some book...

 

l33t_c0w,

Thanks for the reply, I think you hit it on the head. So to confirm, I should create a limited user account which is the one that I will use as my main account?

As for GRUPs - here's the article: http://nymag.com/news/features/16529/index.html?imw=Y

One last thing - is there a link to some "must do" checks to make sure my laptop is good to go? (dead pixels, etc.)

Big investment for me, would love to make sure I am not overlooking anything by accident.

Graz!
dolo

 

Bascially read the first two stickies. That should give you a list of good software and things to do with your mac.

Definently create and admin account, but only use it when absolutely necesary. Use your limited user account. The purpose of this is that nothing can be installed or change the settings on the system without explicit admin permission. You don't have to log in as admin, but you need to type in the account username and password.

 

hollownail,

great point and thanks for clearing that up. your dedication to these forums are just plain awesome. there are many others that deserve as much credit, but regarding your post and you posting it - had to pass that along.

keep it going you guys here kick @ss.

Regards,
dolo

 

OT: I believe that the term 'Grup' came about during a TOS Star Trek episode where the children would age slowly until puberty, but upon reaching that time in their lives would rapidly age and die. </nerdiness>

 

Running from a standard account is what Apple recommends. You can't install or uninstall applications from such an account and there is a lot of configuration stuff you can't change so its almost impossible to get a virus or spyware when running from such an account.

If you got AppleCare with your MBP it will come with some decent diagnostic software you can chesk out "unseen" things with.

 

Step by step guide to handling user accounts from the moment you start your new Mac up:

Basically, when you first start it up you will be met with the Setup Assistant or whatever it's called. In there you will be asked to fill out information that will create your first account. Keep in mind that this account WILL be your admin account.

After the assistant you can go into System Preferences -> Accounts and add a new user (unlock the padlock, click the +, fill it out) and make this your "normal" user (so don't tick the "Allow this user to administer" box).

It should ask you if you want to keep automatic login or not, if you want to keep it but want it to log in your "normal" user just click that away and then go into the Login Options and choose your new (non-admin) account in the drop-down menu next to "Automatically log in as:". If you do not want it to automatically log in on startup, just choose not to keep automatic login when asked (or go into the Login Options and un-tick the "Automatically log in as:" box).

That should cover it all I hope

 

what is the actual difference between an admin acct and a normal acct? I'm using an admin acct but whenever I'm installing a program it still asks me for pw. Is admin acct really not that safe?

 

There are several levels of security built into OS X. An admin account can install/uninstall programs but if the program needs to make a change to some system configuration details (for example associating files with a particular extension to the new program), you will still be asked for an Admin password to remind you a program is asking to make a serious change. If you see a new text editor asking for permissions to act on all .app files you should be suspicious ;-)

There is an option to password protect all System Preferences by default - even from an admin account but you can turn it on or off.

You can also touch ANY user files from an admin account

A non-admin account can not install or uninstall programs, cannot change system preferences or configuration details, or touch any user files but its own. Basically it allows you to use whatever is set up on the system, as its set up on the system to act on your user files and no more.

 

Vespoli - you are absolutely correct, it does stem from that Star Trek episode, click the link to the article, it highlights it in the first paragraph

Jim, thanks for the clarification there, I'm clear on that now.

Starlight, your step by step listing is just great. I really appreciate it

I am in the process of downloading apps (butler, adium, etc.) so I can install and be ready to fly right off the bat. I'm torn with re-formatting my external HD to be fat32 or using the macdrive software and calling it a day.

I'll run through setup, calibrate the battery and install apps. I've found apple to actually be a great resource as well: http://www.apple.com/support/mac101/tour/

Thanks again and keep it coming!

It still hasn't shipped which leads me to believe it may not arrive till Monday

Regards,
dolo

 

Wait, I thought you had to enter a password to install anything even from an admin account. Mine's set to be in stealth mode at all times, and it's set to deny UDP traffic or whatever. So basically on any network I'm like invisible or something.

 

Nope, the install can happen from an admin account with no further dialog. If the program needs to change any system settings (like registering file extensions to that program etc) you will get a popup regardless of being on an admin account.

Being firewalled to that extent is pretty safe, but thats a two way street - there a lot of things you can't see either without letting some things like UDP traffic through.

 

The difference is that the admin account can change things in the system, whereas the normal user account cannot. And when you are asked for a password in your normal user (and often also in your admin user) to change something, it will usually be asking you for an administrators password because it entails a change to the system.