MP All Models Protect internal SSD while macOS is booted from external SSD

[7Seas]

Hi.
Besides Filevault is there anyway(dongle or SW), I can protect my internal ssd drive in my MP 6.1 if someone boots from an external SSD?
Filevault slows down my system that I need for real-time processing. Sometime though I need to boot from external drive with a different config and give admin access to clients, while maintaining my personal data protected. I am not able to always be present when this is happening... Just unmouting the disk is not an acceptable solution as it can be mounted.
I need something that askes for a PW the first time it is accessed after boot.

I have a MP6.1 32GB ram, in last iteration of Sierra but moving to Mojave ASAP.

Thank you in advance.

 

[lowendlinux]

What do they need to do that they need admin rights?

 

[7Seas]

What do they need to do that they need admin rights?

Standard user will not work when they have to copy their work to their (other), external drive. If I am present I will enter my admin pw myself, but if I am not this would be a problem.

 

[lowendlinux]

Standard user will not work when they have to copy their work to their (other), external drive. If I am present I will enter my admin pw myself, but if I am not this would be a problem.

When you set up their user account only give them permission the folder that needs copied from and to the plugged in device, or you could also only give yourself access to the internal drive.

There is third party encryption software so you could encrypt your user folder on the internal drive but that doesn't fix the permission issue

 

[7Seas]

lowendlinux, thanks for your help!
However my clients are creating new files, so not an option.
Giving myself-only permission would function, but is easily bypassed...

I am trying for a external dongle that is somehow linked with the internal SSD, even if it is not booted from there.

The alternative would be for me to only use an external SSD, but I would need speeds of around 2Gbs.
Creating 2 raid 0 from 2 TB2 ports would do the trick, however the OWC thunderbolt 2 mini-thunderbay is no longer up for sale...

 

[lowendlinux]

If you only give yourself permission they can’t even see the partition and even if they did they’d have to know your username and password to access it.

They can run software and create files as a normal user they don’t need admin rights to do that and technically you can block a normal users access to certain software so you could block them from the terminal.

 

[7Seas]

If you only give yourself permission they can’t even see the partition and even if they did they’d have to know your username and password to access it.

Ok... I must be missing something here. How do I give myself only permission. Not in Finder 'get info'?
If there is another way through Terminal I don't know, then please help me.

If you only give yourself permission they can’t even see the partition and even if they did they’d have to know your username and password to access it.

Yes! That would be great!

They can run software and create files as a normal user they don’t need admin rights to do that and technically you can block a normal users access to certain software so you could block them from the terminal.

Ok... Then please explain how...

 

[Flint Ironstag]

Could the clients do what they need to in a VM?

 

[7Seas]

Could the clients do what they need to in a VM?

Nope. Working in real-time, too much overhead.
The ideal solution would be to obtain speeds equivalent to the 2 Gbps with the (upgraded), internal SSD, on a external TB2 solution.

 

[Flint Ironstag]

OK I just re-read the thread and see you're aware of the OWC solutions. I've deployed dozens of their TB2 stuff populated with SSDs. Rock solid. Give them a call or email; sometimes they get the odd items that aren't on the website. You can also find lots of TB2 equipment hitting the used market on ebay. Never had an issue with a used item, either.

I'm always interested in hearing what folks are doing to push their Macs. Would you be willing to share some more about your workflow / industry?

 

[7Seas]

OK I just re-read the thread and see you're aware of the OWC solutions. I've deployed dozens of their TB2 stuff populated with SSDs. Rock solid. Give them a call or email; sometimes they get the odd items that aren't on the website. You can also find lots of TB2 equipment hitting the used market on ebay. Never had an issue with a used item, either.

I'm always interested in hearing what folks are doing to push their Macs. Would you be willing to share some more about your workflow / industry?

I have been using a thunderbay mini for years now. Very solid and reliable (reliable being the most important as this is for work) use OWC memory as well on my MP 6.1.
I will take your suggestion and send them a mail I won't mind if they have scratches or other problems as long as it accepts SSDs and works well...
Thanks for the tip.

 

[Flint Ironstag]

Let us know how it works out. Folks badmouth TB2 as if it suddenly became slow or obsolete overnight.