While all of that might be useful if you're working with corporate security, the VAST majority of users will never have the sophistication to crack the system and really track down all the bits. No need to change or wipe machines, and very very VERY few people install spyware on computers that they share with their partners, unless they both have deep problems that have been going on for years and years, and they're particularly computer skilled.
To lock down a system that's been shared: 1- In System Preferences, create a new user account with administrator privileges and a strong password. 2- Restart and login with that new account. 3- In System Preferences, disable administrator privileges on all other accounts. 4- Restart again. 5- Login on the user account you want to protect. 6- In System Preferences, change the user account's password. 7- If the account shared permissions in the file system with any other account, change the permissions on those folders to restrict access to just the owning account. 8- Logout of the user account, login on the administrator account. 9- Enable FileVault with a strong password. At this point, the contents of the computer are inaccessible to anyone without special knowledge of how to get around the login passwords and encrypted hard drive (which isn't easy even if you DO know how to do it). If the system is remaining shared while they are still together and they used separate accounts, the other users might not even notice that the system is locked down to other than their account. If the person's soon-ex has access to shared internet accounts (Apple ID, socials, banking, credit card, etc), all of those need to have their passwords changed. G > On May 1, 2016, at 11:12 AM, steve harley <[email protected]> wrote: > > it's not exactly simple… > > if he has physical access to the computer and a little bit of knowledge, the > only way to keep him out would be to use FileVault to encrypt the whole hard > drive; if that's not an issue, at a minimum you need to look for > > 1) change passwords for all Users (System Preferences > Users and Groups); > note that any user labeled "admin" can access all files on the computer > > 2) change iCloud password (for Mail, iTunes purchases, etc.) managed on the > web via icloud.com > > 3) carefully check the settings for each service under System Preferences > > Sharing (each of these has detailed settings for who can use that sharing > type); turn off unneeded sharing, and vet the list of users for any needed > sharing type > > 4) reset password for ISP and any wifi router > > this doesn't begin to address her internet accounts; Stan is right about the > Keychain — if he has already got a copy of it and knows her old login > passsword, he can unlock that he can get all the passwords to internet > accounts and whatnot that might have been saved > > i have probably overlooked something, and there's always a chance that > spyware or something might be hidden on the computer … the most paranoid > course would be (after changing passwords) to start with a new computer, turn > filevault on, and transfer her info (Apple will often do that as a courtesy > when you buy a computer), then destroy the hard drive in the old computer, > and change passwords again -- PDML Pentax-Discuss Mail List [email protected] http://pdml.net/mailman/listinfo/pdml_pdml.net to UNSUBSCRIBE from the PDML, please visit the link directly above and follow the directions.
