Hmmm yeah you make a point about the seperate profiles yeah, we do that with the all the GPOs on the windows machines so should of thought of that. When i as i disable the profile what i really mean is i go into systems manager remove the setting for macos system preferance which i have everything unaccessable then once ive finished fixing the machine/machines i go in and add the restrictions to system preferances back in. So obviously not ideal as all the other computers are also unrestricted at that time. ... View more

yeah thats exactly what im after cause I work in a school and i dont want the kids all messing around in the settings ect and with the dock caus of course the kids always like to make the dock massive. but its annoying when i need to actually fix the machine ... View more