The problem is that without one in place, it allows someone with enough Mac technical skill to boot the machine from another volume and try to gain access to data stored on the HD among other things. We're required to have them on all our Macs since they are 99% laptops and our security office is adamant about it, but it does hamper things for those remote workers who run into problems. As mentioned above, it does put a snag in things because it means users can't self resolve issues by booting to Recovery HD and running a disk repair for example. If they are alone with no local support, then I can completely understand the concern with putting a fw password on them.
Let me ask you, is there any IT staff out at the location where these Macs are used, or are these users essentially on their own? If its the former, you could give local IT staff the firmware password in the event of any boot issues, with clear instructions to never give it to a user.
0 kommentar(er)
