Allow Non-Administrator accounts to create event sources and write to event logs

We are setting up BizTalk 2013 in Windows Server 2012 and one of the requirements is to allow the service account to create sources and write in event logs (Application) of the BizTalk servers. We have found what it seems to be a simple solution for this
without giving service accounts local admin rights.
Give Full control for the following registry keys to the service accounts or groups to allow creating of event sources and write to event logs:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security
Note: when changing permissions for EventLog key, the child keys will inherit the permissions by default except Security key which must be done manually.
Initial tests using a .net test app seems to work as expected. New event sources are being created in the event logs and writing to the event logs after that works perfectly.
The above method has been deployed in production and this is the most suitable solution for us.

Hi Keong6806,
Thanks a lot for posting and sharing here.
Do you have any other questions regarding this topic? If not I would change the type as 'Discussion' then.
Best Regards,
Elaine
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

Flash removed by non-administrator accounts

Here is a perennial problem that I have as a network administrator:
All users in my domain have no greater rights to the local computers (mostly Windows XP) than Power Users, and in many cases, only Users. This is to keep them from installing all their favorite games and wasting my time trying to remove all the junk. I keep Flash relatively current by updating it across the network periodically (perhaps twice per year or as I get notification of new versions).
However, Flash insists on notifying these non-administrators when an update is available. When the user accepts the update, it uninstalls the current version but cannot install the new version because he does not have administrative rights. Now he has no Flash. When he then attempts to access Flash content, he gets a message indicating that he needs to update his Flash, which prompts him to send me an e-mail telling me he is unable to access the site until he updates his Flash.
These are not users that are going to the Adobe website to manually update; they are just accepting the stock in-your-face update notifications. I have tested this under a non-administrative account. Sure enough, when I accept an update, it removes the current version (i.e. it is no longer listed in Add/Remove Programs) but cannot install the new one, leaving me with none until I log on administratively and install it.
This is beginning to consume more time for me because it takes extra time dealing with all the users who think they should just accept every update that comes along. I do instruct users to cancel any offered updates, but they regularly ignore my instruction because they always think it won't hurt to try.
It is as though Flash was written without any consideration for mixed-security environments. The program insists on advertising updates, allows anyone to remove the old version, but requires administrative rights to install the new one. One would think that it should require administrative rights for removal. I am guessing that there is probably a way to turn off advertisement of new versions to users; however, I suspect that is a lot of administrative overhead for one little program on many computers, and I would also guess that I would have to reset the "do not offer updates to users" after every update.
Any ideas (other than making everyone local administrators and spending all my time cleaning off all their games & other junk)?

Let me be more exact. Although the config file option is a sound management
strategy in a single-network scenario, it is not very workable with 150
individual computers across eight disparate networks owned by different
clients. I am just spending an inordinate amount of time on managing one
little application.
It would likely cost my clients more to have me proactively manage this one
application than to clean up after a few users in the cases where it is a
problem. I will report this as a bug; I just find it a little surprising
that the issue has persisted over the last several releases of Flash. I
guess I have just been expecting that someone would have reported it and
have been waiting for the behavior to change while I have been entirely
buried in larger projects.

Acrobat/CS5.5 won't open from a non-Administrator account

I have an intermittent problem that occurs when I double-click a .pdf file from a non-Administrator account. Acrobat.exe shows up as an active process in Task Manager, but Acrobat never actually launches or opens the file. My administrator doesn't have this problem from his account on the same computer. This is an intermittent problem that occurs about 70% of the time I try to open a .pdf. I am also unable to launch Acrobat from the Start menu when I am experiencing the problem. I am running Windows 7. Any help would be greatly appreciated.

I completed all of the recommendations and I am still having this problem. I'm going to completely uninstall all Adobe products and re-install again. Is there any recommended steps for a complete uninstall?

Allowing non-Administrator "Users" to use AEBS (1)

I'm getting tired of always having to "Authorize" other "Users" on my computer without Administrator Privilege when they wish to connect to my "Closed" AEBS. How can I work around this issue so all "Users" can conect to the AEBS?

It seems that I have originally stated the happenings incorrectly. It should been titled.
Allowing non-Administrator (or Standard) "Users" to use the Airport Card freely
I am both the 'Administrator' and the 'User' in this scenario.
I log in as the 'User', without "Allow user to Administer this computer" checked in System Preferences. This is for enhanced security while surfing at home and also when using open networks on the road. This way an Authentication by the Administrator is required every time when changes to Mac OS X are about to occur.
And, as far as I am aware, MY 'User' keychain has all the passwords I need to do what I need to do.
It's when I am logged in as the 'User' and I go to 'Turn Airport on' (in the Apple Menu) that I get the 'Authenticate' window asking me to "Type an Administrator's name and password to make changes to Mac OS X".
How do I get around having to 'Authenticate' every time 'User" needs to turn the Airport on?

Unified Contact Store UCS integration issue - Event Source: LS Storage Service - Event ID: 32043

Experiencing weird issues with getting UCS working in one environment (including OWA/IM and UM). Event Source: LS Storage Service - Event ID: 32043
I've had no issues with UCS in other environments with multiple 2013 Mailbox servers and multiple 2013 CAS servers. This particular environment is having issues. I do have Exchange split with MBX and CAS.
I Followed all procedures from TechNet, NextHop, etc. I am Running same oAuth cert on all exchange and lync boxes.
I still have Lync 2010 and Exchange 2010 in the environment, since I'm in the middle of a coexistence migration but don't really want to cut over to new servers until the Lync 2013 to Exchange 2013 integration is complete and tested.
Test-CsExStorageConnectivity -SipUri [email protected]
Test-CsExStorageConnectivity : ExCreateItem exchange operation failed,
code=574, reason=StoreContext{traceId=[2048369003],
activityId=[53f4e8c5-e7e3-491a-adf4-cef37c517cb4]}StoreException:
code=ErrorUnhandledException, reason=Wrapped callback failed --->
System.InvalidOperationException: Client found response content type of '',
but expected 'text/xml'.
I have had a case opened with MS for weeks now and have torn down and rebuilt the config several times - the certificates should solid all around including using servers' FQDNs in the SN instead of just somewhere in the SAN list and using just the domain as
the SN for the oAuth certs (using the exact same cert on both Lync and Exchange for oAuth)
Any comments would be greatly appreciated
Here are the steps i did on the integration (certificates not included however they are verified)
****************** ON LYNC
Get-CsCertificate -Type OAuthTokenIssuer
Issuer : CN=dc02, DC=domain, DC=com
NotAfter : 11/12/2015 5:38:22 PM
NotBefore : 11/12/2013 5:38:22 PM
SerialNumber : 360000000901D6BF9542A0E971000100000009
Subject : CN=domain.com, OU=IT Department, O="Customer Name",
L=Santa Clarita, S=California, C=US
AlternativeNames : {}
Thumbprint : A42D2481AB68473EB25B78DAB8964ADDFF9F8245
EffectiveDate : 11/12/2013 5:48:30 PM
PreviousThumbprint :
UpdateTime :
Use : OAuthTokenIssuer
SourceScope : Global
Set-CsOAuthConfiguration -Identity Global -ExchangeAutoDiscoverURL 'https://excas02.domain.com/autodiscover/autodiscover.svc'
New-CsPartnerApplication -Identity Exchange -ApplicationTrustLevel Full -MetadataUrl "https://excas02.domain.com/autodiscover/metadata/json/1"
Identity : Exchange
AuthToken : Value=https://excas02.domain.com/au
todiscover/metadata/json/1
Name : Exchange
ApplicationIdentifier : 00000002-0000-0ff1-ce00-000000000000
Realm : domain.com
ApplicationTrustLevel : Full
AcceptSecurityIdentifierInformation : False
Enabled : True
Get-CsOAuthConfiguration
Identity : Global
PartnerApplications : {Name=Exchange;ApplicationIdentifier=00000
002-0000-0ff1-ce00-000000000000;Realm=ushw
orks.com;ApplicationTrustLevel=Full;Accept
SecurityIdentifierInformation=False;Enable
d=True}
OAuthServers : {}
Realm : domain.com
ServiceName : 00000004-0000-0ff1-ce00-000000000000
ExchangeAutodiscoverUrl : https://excas02.domain.com/autodisco
ver/autodiscover.svc
ExchangeAutodiscoverAllowedDomains :
****************** ON Exchange
[Get-AuthConfig
RunspaceId : 2b3c00ee-adbf-45a0-81d1-dc87d1e8aa6f
CurrentCertificateThumbprint : A42D2481AB68473EB25B78DAB8964ADDFF9F8245
PreviousCertificateThumbprint :
NextCertificateThumbprint :
NextCertificateEffectiveDate :
ServiceName : 00000002-0000-0ff1-ce00-000000000000
Realm :
Name : Auth Configuration
AdminDisplayName :
ExchangeVersion : 0.20 (15.0.0.0)
DistinguishedName : CN=Auth Configuration,CN=Customer,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : Auth Configuration
Guid : db55e975-4986-49b7-a799-15ecb8c40e8f
ObjectCategory : domain.com/Configuration/Schema/ms-Exch-Auth-Auth-Config
ObjectClass : {top, container, msExchContainer, msExchAuthAuthConfig}
WhenChanged : 1/28/2014 5:37:30 PM
WhenCreated : 10/8/2013 6:35:32 PM
WhenChangedUTC : 1/29/2014 1:37:30 AM
WhenCreatedUTC : 10/9/2013 1:35:32 AM
OrganizationId :
OriginatingServer : DC04.domain.com
IsValid : True
ObjectState : Unchanged
Set-ClientAccessServer -identity excas02 -AutodiscoverServiceInternalUri 'https://excas02.domain.com/autodiscover/autodiscover.xml'
Get-ClientAccesSserver excas02 | fl
RunspaceId : 568a785b-b51f-459a-abf2-d7283744a84a
Name : EXCAS02
Fqdn : EXCAS02.domain.com
OutlookAnywhereEnabled : True
AutoDiscoverServiceCN : EXCAS02
AutoDiscoverServiceClassName : ms-Exchange-AutoDiscover-Service
AutoDiscoverServiceInternalUri : https://excas02.domain.com/autodiscover/autodiscover.xml
AutoDiscoverServiceGuid : 77378f46-2c66-4aa9-a6a6-3e7a48b19596
AutoDiscoverSiteScope : {West}
AlternateServiceAccountConfiguration :
IsOutOfService : False
WorkloadManagementPolicy : DefaultWorkloadManagementPolicy_15.0.505.0
Identity : EXCAS02
IsValid : True
ExchangeVersion : 0.1 (8.0.535.0)
DistinguishedName : CN=EXCAS02,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Customer,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=domain,DC=com
Guid : 2d3b4138-a933-46e1-b5da-3f7115cb5d00
ObjectCategory : domain.com/Configuration/Schema/ms-Exch-Exchange-Server
ObjectClass : {top, server, msExchExchangeServer}
WhenChanged : 1/30/2014 11:35:25 AM
WhenCreated : 10/8/2013 7:06:35 PM
WhenChangedUTC : 1/30/2014 7:35:25 PM
WhenCreatedUTC : 10/9/2013 2:06:35 AM
OrganizationId :
OriginatingServer : DC04.domain.com
ObjectState : Unchanged
cd "C:\Program Files\Microsoft\Exchange Server\V15\Scripts\"
.\Configure-EnterPrisePartnerApplication.ps1 -AuthMetadataUrl "https://lyfe02.domain.com/metadata/json/1" -ApplicationType Lync
Creating User <LyncEnterprise-ApplicationAccount> for Partner Application.
Created User <domain.com/Users/LyncEnterprise-ApplicationAccount> for Partner Application.
Assigning role <UserApplication> to Application User <domain.com/Users/LyncEnterprise-ApplicationAccount>.
Assigning role <ArchiveApplication> to Application User <domain.com/Users/LyncEnterprise-ApplicationAccount>.
Creating Partner Application <LyncEnterprise-dd9f8b8f52fd4b4fb5f928a0d4a02b9c> using metadata <https://lyfe02.ushwor
ks.com/metadata/json/1> with linked account <domain.com/Users/LyncEnterprise-ApplicationAccount>.
Created Partner Application <LyncEnterprise-dd9f8b8f52fd4b4fb5f928a0d4a02b9c>.
THE CONFIGURATION HAS SUCCEEDED.
****************** On Lync
****************** ERROR
Test-CsExStorageConnectivity -SipUri [email protected]
Test-CsExStorageConnectivity : ExCreateItem exchange operation failed,
code=574, reason=StoreContext{traceId=[2109175579],
activityId=[cf8138ff-9436-4f56-937e-26ab8c712ab2]}StoreException:
code=ErrorUnhandledException, reason=Wrapped callback failed --->
System.InvalidOperationException: Client found response content type of '',
but expected 'text/xml'.
The request failed with an empty response.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapCli
entMessage message, WebResponse response, Stream responseStream, Boolean
asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult
asyncResult)
at Microsoft.Rtc.Internal.Storage.Exchange.Ews.ExchangeServiceBinding.EndInv
oke(IAsyncResult asyncResult)
at Microsoft.Rtc.Internal.Storage.Exchange.Ews.ExchangeServiceBinding.EndCre
ateItem(IAsyncResult asyncResult)
at Microsoft.Rtc.Internal.Storage.Adaptor.ExStoreAdaptor.OnCreateItemComplet
e(IAsyncResult result)
at
Microsoft.Rtc.Internal.Storage.StoreAsyncResult`1.CallbackWrapper(IAsyncResult
result)
--- End of inner exception stack trace ---
at Microsoft.Rtc.Internal.Storage.Api.StorageService.EndExecuteCommand(IAsyn
cResult asyncResult)
, exception=System.ServiceModel.FaultException:
StoreContext{traceId=[2109175579],
activityId=[cf8138ff-9436-4f56-937e-26ab8c712ab2]}StoreException:
code=ErrorUnhandledException, reason=Wrapped callback failed --->
System.InvalidOperationException: Client found response content type of '',
but expected 'text/xml'.
The request failed with an empty response.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapCli
entMessage message, WebResponse response, Stream responseStream, Boolean
asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult
asyncResult)
at Microsoft.Rtc.Internal.Storage.Exchange.Ews.ExchangeServiceBinding.EndInv
oke(IAsyncResult asyncResult)
at Microsoft.Rtc.Internal.Storage.Exchange.Ews.ExchangeServiceBinding.EndCre
ateItem(IAsyncResult asyncResult)
at Microsoft.Rtc.Internal.Storage.Adaptor.ExStoreAdaptor.OnCreateItemComplet
e(IAsyncResult result)
at
Microsoft.Rtc.Internal.Storage.StoreAsyncResult`1.CallbackWrapper(IAsyncResult
result)
--- End of inner exception stack trace ---
at Microsoft.Rtc.Internal.Storage.Api.StorageService.EndExecuteCommand(IAsyn
cResult asyncResult)
Server stack trace:
at
System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime
operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.EndCall(String action,
Object[] outs, IAsyncResult result)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeEndService(IMethod
CallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&
msgData, Int32 type)
at
Microsoft.Rtc.Internal.Storage.IStorageService.EndExecuteCommand(IAsyncResult
asyncResult)
at Microsoft.Rtc.Management.Lyss.Cmdlets.LyssCmdletCommon.ExecuteExCommand(S
toreOperation operation, String sipUri, BaseRequestType ewsRequest, Nullable`1
autoCreateParentFolder, IStorageService& client, Boolean reAuthorize), inner
exception=. Please check event log and trace for relevant information.
At line:1 char:1
+ Test-CsExStorageConnectivity -SipUri [email protected]
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Test-CsExStorageConnectiv
ity], FaultException
+ FullyQualifiedErrorId : ErrorExecuteExchangeCommandFailedWithFaultExcept
ion,Microsoft.Rtc.Management.Lyss.Cmdlets.TestExStorageConnectivityCmdlet
Test failed.
PS C:\Users\jmadsen>
Jens

I fixed the issue
It had to do with the Lync server still trying to access the old CAS server
For internal URLs on both CAS servers I am using the internal name, however the external url is https://webmail.domain.com
On both servers and internally that DNS record points to the old CAS server since we haven't cut over users yet
This was affecting the connection process some how Lync was using the external URL instead of the internal URL to connect to EWS
I was able to see with a packet sniffer that Lync frontend was trying to communicate with both the new CAS server and the old CAS server
When connecting to auto discovery it was connecting to the right CAS server, but after receiving the Autodiscover.xml it started connecting to webmail.ushworls.com (not EXCAS02)
I create an entry in the local HOST file on the Lync Front end server and pointed webmail.domain.com to the new CAS server
Issue Fixed – I can remove the entry from the host file after we make the DNS change internally and cut over users

Error saving map. Stored procedure returned non-zero result. Check if source and target schemas are present.

I am using VS 2012 and BizTalk 2013 and attempting to deploy an application to BizTalk when I get these errors:
Error 47
at Microsoft.BizTalk.Deployment.Assembly.BtsMap.Save()
at Microsoft.BizTalk.Deployment.Assembly.BtsArtifactCollection.Save()
at Microsoft.BizTalk.Deployment.Assembly.BtsAssembly.Save(String applicationName)
at Microsoft.BizTalk.Deployment.BizTalkAssembly.PrivateDeploy(String server, String database, String assemblyPathname, String applicationName)
at Microsoft.BizTalk.Deployment.BizTalkAssembly.Deploy(Boolean redeploy, String server, String database, String assemblyPathname, String group, String applicationName, ApplicationLog log)
0 0
Error 49
Failed to add resource(s). Change requests failed for some resources. BizTalkAssemblyResourceManager failed to complete end type change request. Failed to deploy map "XXX.BTS2013.XXX.Maps.map_XXXX_R01_InsLabProc".
Error saving map. Stored procedure returned non-zero result. Check if source and target schemas are present. Error saving map. Stored procedure returned non-zero result. Check if source and target schemas are present.
0 0
Error 46
Failed to deploy map "XXX.BTS2013.XXX.Maps.map_XXXX_R01_InsLabProc".
Error saving map. Stored procedure returned non-zero result. Check if source and target schemas are present.
0 0
I also tried to Import a MSI file from our test environment to see if that would work...got the same errors. After spending hours (not kidding) looking for an answer, all I could find is that a hotfix would work. So, I got the hotfix from Microsoft
Support and applied it then rebooted. Still getting the same errors. I'm absolutely at a stand still. Interesting that I got this application to deploy yesterday and then the next time I deployed it I started getting these errors. I'm
ready to pull my hair out!
Is there an answer for this out there somewhere? Any help would be appreciated.
Thanks,
Dave

Hi Dave,
Which hotfix have you applied? I don't think a hotfix of this issue is available for BizTalk 2013 yet. You should create a
support ticket with Microsoft to get a solution.
If this answers your question please mark as answer. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

Safari asking for keychain "login" in non-administrative account.

To protect my wife's newly acquired refurbished MacBook from her complete lack of knowledge about Macs or computers in general, I set myself up as the Administrator on her MacBook and protected this account with a password. I then set her up as a simple user without a password, but to whose account the MacBook goes automatically after a reboot (to make things simple for her).
Now each time my wife opens Safari on her account, it asks her for "your keychain password" (she has none established on her account). Instead, the password that is accepted by Safari is my administrative account (while she is opening Safari on her account that is not password protected). Interestingly, when I log in to my administrative account and open Safari, it does not ask for this password.
If she hits "cancel" on this password request, Safari appears to function without problems, however, she is annoyed by this frequent appearance of this window asking for the password and is asking me to make it stop (I have no clue how).
Any suggestions?
Thanks.

Hi resourcesforlif...,
I did as suggested and lost my keychain set-up. (nameX.keychain). It still seems to be in home/Library/Keychains but haven't figured how it get it back - it is no longer listed in Keaychain sidebar. When/if I do I will methodically go through my key chain and manually copy all data I need and then print it out and laboriously re-enter it into a new keychain file. ( I do have a back up of nameX.keychain incase what I found in my home library is corrupted); at some previous point I was able to make my nameX.keychain my default keychain. Will figure it out again, I am sure.
What a bore, though; the hours I have wasted on all this.
Since installing Leopard to my 4 month old MacBook I feel I am getting bloatware from Apple. Enough is enough. So far the following have occurred:
-Help crashes all the time from the Finder (all Help was gone but now I get it sporadically in Safari, Palm stuff, a few other apps but it is temperamental).
- Mt Keychain problems: Seemed scrambled and had to sign in whenever opening Safari;
- my Contacts/Addresses and Calendar to my Palm TX broke - can't isync them though all else in PalmDeskTop works; to be fair, this may have happened between Leopard instal and keychain fix-it the little update mentioned above.
-I don't know if I can blame this on Leopard but now my Word docs cannot be spell checked in anything other than American spelling and there is no way to change it to British spelling. I have to check everything in Texted. Go figure.
I suspect Leopard was released too early.
I've never had this problem with any Mac OS upgrade and I've done them all. I feel like I'm in a Windows Nightmare. Given what I have gone through, I would never have upgraded. Ya, ya! I should have backed up but I don't have the room and I really trusted Apple to get it right, again.
Cheers,
mhikl

Using administrator and non administrator accounts - questions

I have been looking around re security for my iMac - newly updated to Snow Leopard. I am not very savvy re much of computer things. I just found a pdf entitled Mac OS X Security Configuration. It recommended having a standard nonadministrator account as well as an administrator account. When I first set up my iMac in Leopard coming from a pc, I had telephone support for my first three years and used it when I ran into some issues. During that time following directions from different support people I have ended up in Systems Preferences "Accounts" having 5 different accounts - one "Administrator", one "Login only" entitled "Guest Account", and three Standard [one entitiled with my name and the other two "TEST1" and "TEST2"]. When I am in the "accounts" window in Systems Preferences, my "Administrator" account is selected, but I cannot select any of the others.
I am thinking from what I read in the article that I should probably delete the three "standard" accounts so I am left with the "Administrator" and "Guest" accounts. And then when my computer turns on, it will use my "Guest" account. Would you agree? Right now when I want to get back in after my computer went to sleep, I have to enter my password. Would this not be required if I am in the "Guest" acccount?
Two questions:
(1) I don't know how to delete those accounts - if, in fact, I should.
(2) How and when will I use the two accounts that are left when the computer turns on?

1. You can delete the Test1 and Test2 accounts if you log into your Administrator Account. Once in your Admin Account, open System Preferences > Users & Groups and you will see and be able to delete the Test1 & Test2 accounts.
2. Leave your Guest account for, well, guest users. Do not use it in the normal course of events. When you log out of the Guest account, all the settings, caches, etc. are wiped, as are all files and folders that you may have saved in the Guest account home folder. The Guest account is truly designed only for temporary, guest use.
3. Leave your Administrator account for use only for installing programs, doing system administration, managing accounts, etc.
4. User your named account as your regular account. It appears to already be a User account. The primary limitation is you cannot install programs in a regular User account. This actually helps protect your Mac from viruses and other malware that would need to install software in order to corrupt your system.
5. You can turn off the need to enter a password when your computer sleeps in System Preferences > Security & Privacy > General. UNcheck the option called "Require password for sleep and screen saver."

How do I allow non-admin accounts to have access to the player?

I need help please. First I want to say that I did read the "Read this first" sequence, but I have no idea how to find out where all those posts are or how to browse for them, so PLEASE do not be cross with me if I am asking something already addressed. Here is my problem: I downloaded and installed the latest version of flashplayer according to the instructions. That gave me the flashplayer debugger and it all works like a charm on my administrator account. But as soon as I switch to a regular user account (any non admin, acct) it is as if I had not installed anything that is the videos do not get displayed instead I get a blank space, My computer Operating System is a windows 7 and I use Internet Explorer version 8. the win 7 runs both the 32 version and the 64 version of the IE8 but I never use the 64 (because I read somewhere that does not work), Thank you very much!

First thing(s) to try:
on the limited account, can you see the Flash animation at http://www.adobe.com/software/flash/about/ ?
if yes, can you right-click on the Flash object, select Settings, then disable Hardware Acceleration?
if still not working, can you check IE Tools | add-ons, if Shockwave Flash object is enabled?
If it still fails, can you try the following:
download the executable installer http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe (save to disk)
still on the limited account, right-click on the downloaded installer, then select 'Run as Administrator')
Does it work now?

Trouble installing software on a non-administrator account

I am the Administrator on the family iMac desktop. My daughter has a Nikon camera and I am trying to install the software for her camera while she is logged into her account. When I go to install the software, I am prompted by the Mac to enter my Admin name and password. Then a few secs later another msg comes up prompted by the software stating that Administrator or higher level access privileges are needed.......
Huh???
What does an administrator need to do in order to install software for a non-admin account? Do I need to log into my own account as an administrator to do this?
Thanks

Administrator privileges are normally required to install software. That's a Mac OS X security measure. I suggest booting into your account and installing it from there, globally, so all users can affectively use them.

Allowing non-administrator users to deploy workflows

I need to allow users who do not have admin group access on the server to deploy workflows. How can I do this? Is there a group to which I add them (_pcastserver didn't work)? Ideally, I would like to enable persons in a few Active Directory groups to deploy workflows, but if they need to be individual user IDs, that's (marginally) acceptable.
Thanks,
Charles

From our Apple Sales Engineer:
"The closest thing to allowing non-administrators to be able to submit workflows would be to configure users or groups as Podcast Producer administrators only. They would then be able to submit workflows, and however be able to configure Podcast Producer within Server Admin.
Server Admin --> Server --> Access --> Administrators --> Podcast Producer
Add a user or group and grant the ability to administer. They will not have the ability to administer the server or escalate to root privileges."
These users still have access to Administer Podcast Producer with Server Admin though.

Removing Hard Disks from non-administrator accounts

Hi all.
I am wanting to set up a second (non-admin) account on the mac. Which I have done although I would prefer it to only mount the main internal drive when in 'guest mode'.
Let me explain a bit better. Currently I have the Main system drive, a second internal drive an a number of firewire drives that I use with my account which is the admin account. I wish to set up an account for the kids so they can use a few apps and the internet etc but I only want them to have access to the main internal drive and there own home folder. This would leave me safe in the knowledge that all my hard work (ha!) is safe.
Any help would be appreciated
G5 Mac OS X (10.4.5)

Move your work on the additional drives into specific folders on those drives, and then choose Get Info from the File menu for each folder. Set the permissions to Read & Write for yourself, with you being the owner, and No Access for other accounts. Repeat this for each folder which contains your work, and then do the same for the actual drive, this time setting the other permissions to Read Only, as well as unchecking the Ignore Permissions on this volume option. You should not set a disk's permissions to No Access, and you should not change the permissions at the top level of a Mac OS X startup disk at all. Your kids will see the external hard disk, but won't be able to delete anything from it or look at your work.
(10838)

Creating Product Source and Source Reference in OPM

We are testing creating projects directly in OPM rather than uploading them from Microsoft Project. However, the fields Product Source and Source Reference are not populated when we use this method. We need the Source Reference to be populated with the Project# in order for the project to properly interface with our other external systems. These fields are currently protected against changes when accessed through Financial Analyst responsibilities. Does anyone know how we can manually (or another method) populate the Source Reference field with the Project# when creating projects directly in OPM?
Thank you

jschell, thanks for your suggestions.
And caching the second is definitely wrong. Arguments are passed as local references. The reference lifetime is only guaranteed for the lifetime of the method call.In my case, it just works, because my "callback" is only called before the "handleMessageQ" returns, which means it's within the lifetime of "jobject", etc.
Use GetEnv to get the environment.Could you please provide some sample codes?
Create a static java method which returns the object reference. In your callback call that method to get the reference that you want to work with. I didn't really understand. Could you please show me some sample codes?
Thanks a lot!

Not being able to create TDMS file and write to it

I m new to labview and lately i have been trying to code a RT vi which allows me create a TDMS file and write into it. I have seen a couple of examples on web. and this is what i implemented (refer the snippet i attached) after going through them.
Now the problem is, there is no file being created on my desktop. I dont understand what is wrong. I may be missing some simple part. Please help me to figure it out
Solved!
Go to Solution.
Attachments:
RT_write to TDMS.PNG ‏10 KB

Hi Rex,
usually "RT targets" are NOT capable of accessing your Windows PC desktop as they are computers of their own…
Write to the RT storage and copy the files created there using FTP to your PC!
Best regards,
GerdW
CLAD, using 2009SP1 + LV2011SP1 + LV2014SP1 on WinXP+Win7+cRIO
Kudos are welcome

Create xml file and write data in to it:

Hi All,
I have a small requirement here.....
I have a java program which reads a xml file.
Now i have stored the contents of that file in to a java object.
I want a sample code now which would take theabove mentioned java object as an input ,create a xml file and write these entries in to the file.
Can anyone help me in this?
Your help would be appreciated.
Thanks in advance.
vrkr

Hmmm. There is nothing special about an XML file to any other file. The data is simply formatted in a certain way. So to write an XML file, it is no different to writing any other form of file in Java (assuming you know the structure of the xml format to write - which you should)
If you don't know how to write files using Java I would suggest using the Java Tutorial found on java.sun.com and do some reading up about I/O since this is fairly fundamental.
http://java.sun.com/docs/books/tutorial/
http://java.sun.com/docs/books/tutorial/essential/io/index.html

Allow Non-Administrator accounts to create event sources and write to event logs

Similar Messages

Maybe you are looking for