How to disable that “Guest User” from appearing at the OS X 10.7.2 login screen
- Open System Preferences
- Click on “Security & Privacy”
- Click the lock in the lower corner and type in your administrative
password to unlock the control panel
- Check the box next to “Disable restarting to Safari when screen is
locked”
This prevents the Guest User account from being visible at the login screen both during reboot and at the login screen. Again, it’s highly recommended to keep this enabled for security purposes, but if your Mac is locked down with a security cable or you don’t have any use for Find My Mac, you could disable this and not feel too bad about it.
If you haven’t tried it yet, clicking on the Guest User account gives you this message:
This computer will restart to a secure, Safari-only system for the Guest user.
The reboot process is quick and opens directly to Safari, there is no access to anything else. No Finder, no preferences, nothing.
Source: osxdaily
Another update... I started fresh with a new install of Lion. Updated to 10.7.3 first, having read about everyone's nightmares after this update.
Anyway, my Kerberos realm is now set to domain1.com, but Profile Manager still insists on using the incoming server name (hostname.domain1.com)as the email address. I tried using both variables, %email% and %short_name%@domain1.com. No luck either way.
What I find aggravating is that if you view the Profile when it is installed, or in Systems Settings > Profiles, the email address is correct. This was also the case before I started over. This leads me to believe that the profiles are somehow not implemented correctly by either Mail or the profile installation process. I looked at the XML in the profile, and do not see any settings that would be responsible for the behavior. Everywhere I used a variable, the resulting values were precisely as I expected.
I again tested the default "Settings for Everyone" profile that is configured automatically based on your server settings, and the Server Admin > Mail > General > "Host name:" setting still takes precedence. So, if you put your actual hostname in this field (i.e. mail.domain.com) your users will all end up using user@mail.domain.com as an address.
I am admitting defeat for now, and just set up A records for domain.com that point to the mail server. This way, I can set my two profiles up, one for each that use domain1.com and domain2.com, respectively, as their incoming servers. The email address will then default to %short_name%@incomingserver
Best Answer
It looks like there is a way to make Guest account settings "persistent", it's just a bunch of settings files.
See this hint for how to get those settings files configured how you like them.
So you would copy the Guest preference files (once configured how you please), and then copy them to that
User Template
folder on all your deployed computers, so every Guest login starts with those settings.I haven't used Profile Manager, but hopefully you have some simple way to copy the
/System/Library/User Template/English.lproj/
folder to all of your client computers. Please post if you find a good way to copy a system folder to all the Macs in your control.(Also you'll want to delete everything inside the "Keychains" folder before deploying, or you'll get keychain popups at Guest login. See the comments in the aforementioned hint.)