Preventing users from restoring to factory defaults

Just wondering if it is possible. Right now any standard user with a legitimate password is capable of pressing F8 when loading windows, enter repair and restore computer to factory defaults. Is there any way to prevent ordinary users from doing so?
This question was solved.
View Solution.

@arachnologist,
There isn't really an official way to prevent a full system recovery from being performed. By resetting the system to factory default, I take it you are referring to the F11 system recovery provided by HP which would return it to an out of the box condition.
Since this process takes place outside of Windows, setting permissions or making changes inside windows itself will not prevent this. However, you could make sure you have working recovery disks for the unit and then delete the recovery partition. Removing the recovery partition would eliminate the easy method of restoring the unit to factory defaults since the recovery partition (where the factory reset retrieves the files from) will be missing. However, this is how a user can reinstall Windows should something go wrong and this is why I recommend having the recovery disks on hand in a safe location.
Alternatively, you could also set a power on password for the unit. A power on password is set in the BIOS under security. With a power on password, only someone who knows this password could even get past the BIOS screen in order to reset the system or to boot any device (CD, USB, HDD, etc.). Be sure to remember this password as you would any other password. Keep in mind that this is not without its risks. For example, a forgotten power on password can be difficult to overcome. Due to the secure nature and depending on the unit (desktop, notebook, commercial unit), there may not be an easy or cheap way to get past a forgotten power-on password.
The solution with the least risk, in my opinion, would be to delete the recovery partition. This document details how to do this.
↙-----------How do I give Kudos?| How do I mark a post as Solved? ----------------↓

Similar Messages

Picked up older powermac G4 from a garage sale. Can not do any updates because owner, that has now moved did not wipe it clean and I need a password to do anything. Is there a way to restore to factory default and make myself admin?

Recently purchased older powermac G4 at a garage sale. Unable to do anything because owner, that has now moved, did not wipe it clean and everything I try to do requires his password. Is there a way to restore to factory default, make myself admin and reset password? Hoping this purchase wasnt a complete waste of my time and money.

Here's the instructions if you have the discs.
Mac OS X: Changing or resetting an account password
http://support.apple.com/kb/HT1274?viewlocale=en_US
Changing your administrator password
http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh655.html
Here's one method to reset the password without the install disc:
1. boot computer and hold the "apple" key and the "s" key.
2. wait for terminal show
3. release keys
4. type without the quotes: "/sbin/mount -uaw"
5. press enter
6. type without the quotes: "rm /var/db/.applesetupdone
7. press enter
8. type without the quotes: "reboot"
9. press enter
This will let you create a new admin account when you reboot your computer.
Also, without the discs, look at Mac OS X Tip - No Password, No Root, No CD? No Problem.
http://www.macobserver.com/tip/2003/06/16.1.shtml
Here is a way to get around not knowing the admin password on Macs.
To reset your OS X password without an OS X CD you need to enter terminal and create a new admin account:
   1. Reboot
   2. Hold apple + s down after you hear the chime.
   3. When you get text prompt enter in these terminal commands to create a brand new admin account (hitting return after each line):
          * mount -uw /
          * rm /var/db/.AppleSetupDone
          * shutdown -h now
   4. After rebooting you should have a brand new admin account. When you login as the new admin you can simply delete the old one and you’re good to go again!
Not sure is this will work on a Mac running OS 9.
 Cheers, Tom

How to prevent users from running PRC: Transaction Import from WebADI form?

Hi,
We are 12.1.3 and trying to create a workflow to approve Project transactions coming through web ADI before they become effective. To this end, we want to prevent users from running the PRC: Transaction Import from the Web ADI.
I know that if the checkbox Automatically run transaction import is not checked, the program does not run. But we want to hide this checkbox and not allow the possibility that the program could get triggered.
To this end, we updated the BNE_INTEGRATORS_B with source='C'. This allows you to edit the integrator from Desktop Integration Manager.
UPDATE BNE_INTEGRATORS_B SET SOURCE ='C' WHERE INTEGRATOR_CODE ='PAXTTRXB'
In the 4th step, where the value for Uploader Parameters is set, we have set boolean value to No. These are the fields on the page:
Parameter Name: bne:import
Display Name: Start Transaction Upload
Data Type: Boolean
Category: Field
Default Value: Boolean Flag: No
Description: start Transaction Import Concurrent Request
Display Options: Displayed: Unchecked
Display Options: Enabled: Checked
Display Options: Required: Checked
Prompt Left: Automatically submit Transaction import
Display Type: Check Box
Maximun Size: 100
Display Size:100
Now the checkbox is not appearing for the user to check it, But the program is automatically running when you hit Upload in the WebADI.

Hi ,
Try removing the PRC: Transaction Import Program from the request group for the responsibility used by customers to submit the WebADI and then check if the program launches.
Regards,
Raghavan

Upgraded to IOS 8 and restore to factory default and now get error trying to restore

I was told to restore Ipod Touch 5th G to Factory defaults to check mic problem. I performed backup which seemed to work fine and forced to install update to IOS 8. Did the Restore to factory default which seemed to work without a problem.
Now when I go to RESTORE from backup I get a message saying that backup failed "....backup session failed"
What do I do now? I copied the backup folder to my desktop as they suggested.
If I go to iTunes 12 it will show ipod with the name it previously had but still nothing.

Synced mead like apps and music are not included int he iPod backup that iTunes makes. They are synced back tot he device from yur iTunes library. If they are not in the library then they can't be synced back.
If necessary;
You can redownload most iTunes purchases by:
Downloading past purchases from the App Store, iBookstore, and iTunes Store

Is it possible to prevent users from viewing a page in Edit Mode?

Hello everyone,
I would like to know if it is possible to prevent users from accessing a portal page in Edit Mode. Currently, the users do not have access to any links that take them to edit mode, but if they add &_mode=16 to the end, they view the page in edit mode. Granted, they don't have permissions to add or edit content, but I would like to keep them from seeing this.
I am using 9.0.4.1
Any help or suggestions would be greatly appreciated!
Jim

hi jim,
you cannot really configure this in portal. if somebody manually appends &_mode=16 we display the default edit mode, but fully enforce security. this means that the user cannot see anything he is not allowed to see: like pending items, hidden, expired or deleted items. as you said he also cannot add, edit or delete any items.
regards,
christian

Prevent user from posting invoices

Hello Profs
How would one generally/theoritically or practically prevent user from posting invoices >1000 rs (arbitary value), in MM Invoice verification.
some thoughts please
Thanks

Sunil,
As per my knowledge, there is no option to prevent user posting invoices if the invoice amount exceeds Rs.1000/-. And it can not be possible with standard /default LIV in MM.
You can do so for the PO's, since there is a procedure called release procedure and for each release code you can set the amount limit and if it falls within that, then he can release the PO (by configuring the release procedure based on total net order value with classification).
Similar to the above you can not do for the Invoices, but this can be possible to the user through workflow to the logistics inovice verification process. For that you need to activate the workflow concept for the LIV (i.e. you can set the workflow for your invoice verification process, if the invoice verification is done by more than one accounts payable processer (i.e user), like first invoice is parked by user1 and then later the user2 will verify (complete) and post the invoice verification process. And for that you can setup workflow concept, so that the next user gets intimated once the first user is completes his process in the LIV. But i don't think it is possible to stop or prevent if the invoice amount exceeds.
But, this can be possible to the some extent, that is though the configuration of attributes of system messages in LIV (by that the user will be notified with a text (i.e. error) message on the status bar, when the user is posting the invoice document which exceeds, hence he can not post the inovice in this case and also try by maintaining the user default paramer (i.e.WLC: Workflow -User specific settings (i.e. to be maintained in parameter id in in user master).
Suggestion:
Refer useful link for more information on workflow:
http://help.sap.com/saphelp_47x200/helpdata/en/9b/572614f6ca11d1952e0000e82dec10/frameset.htm
http://help.sap.com/search/highlightContent.jsp
Hope this will clarifies you,
Reward, if it helps,
Regards,
Srin.K

Message displays itunes cannot read the contents of the iphone when connected on a laptop. Doesnt let me back up and sync and asks for restoring to factory defaults??!!

message displays itunes cannot read the contents of the iphone when connected on a laptop. Doesnt let me back up and sync and asks for restoring to factory defaults??!!

Hello ardninam,
Thanks for using Apple Support Communities.
If the content on your iPhone cannot be read by iTunes, then you will need to follow the directions in the popup and restore your iPhone to the factory settings. You can then try and restore from a previous backup.
Use iTunes to restore your iPhone, iPad, or iPod to factory settings - Apple Support
Restore your device from an iCloud or iTunes backup - Apple Support
Take care,
Alex H.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in Oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Thanks for your advise.
However, I missed to mention that we have two set of users One is for Finished Goods and another for Spares.
Only Spares users need to be prevented from creating Direct/Manual Sales Orders in Oracle.
As you suggested, if this will be done at Form level, that may Disallow FG users also to create Manula Sales Orders which should not be the case.
Further, I tried to test one scenario through Processing Constraints but it did not work.
Application
OM
Validation Type
Entity
Temp
Short Name
TBL
Validation Semantics
Created By
Equal To
User(Myself)
Processing Cosntraint
Application
OM
Entity
Order Header
Constraint
Operation
User Action
Create
Not Allowed
Conditions
Group
Scope
Validation Entity
Record Set
Validation Template
101
Any
Order Header
Order
Above Created
Please advise.

How do I prevent users from being able to update Firmware

I have several users (14) with iPad 2 and they rely on an in-house developed App. we have yet to test this App on iOS 5.1 and therefore want to avoid any of the users updating the iPads at all cost!
this question is in two parts:
How can I prevent users from upgrading firmware themselves short of just asking nicely?
How can I stop the iPad from automatically downloading the Upgrade when I deploy a Policy using the iPhone Configuration Utility?
Any advice would be great!

We've been looking at the AirWatch mdm and have been told it has this capability. Not sure if it would be justified from an economic standpoint for you, however.

Is there any way to prevent users from ship confirming on a particular date?

Hello All,
We have a requirement to prevent users from ship confirming on a particular date. This is due to they are performing Annual Physical Inventory.
Is it possible to restrict users performing shipping transactions on this particular date?
I have tried adding exception to the existing Calendar set at org level and there is no customer specific Calendar defined, however it is still allowing me to perform ship confirm.
Please let me know if you have any suggestion on this requirement.
Thanks

Hi,
Yes is Possible.
You can add An Exception in Your Shipping Calender.
So when Some one tries to ship an Order on that date Oracle will automatically select Next possible date.
Thanks
Shameer

How to prevent users from saving and emailing intranet documents externally

Someone in our company needs to upload a pdf to our sharepoint intranet site for internal-only use. How can I prevent users from downloading it and emailing it externally?
I mean, a user could screenshot it I guess, but I need to give management a due diligence answer.

You would need to look into a reverse proxy/firewall that had the ability to block access based on content. This isn't something you can accomplish out of the box with SharePoint (even with AD RMS).
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

How can SAP be configured to prevent users from consuming locks?

How can SAP be configured to prevent users from consuming locks?
The issue is that we want to prevent users to use upto maximum locks and so that we will not get lock table overflow issue. I know that we can assign parameter "enque/table_size" a good amount of value. But it is not for any specific user.
Also want to alert in CCMS if any user reaches to its maximum speficified limit of locks.
Thanks
Gopesh

You cannot set a limit of locks per user. There are two ways to reduce/control the number of locks:
- change fewer records within one transaction
- cover more records with one lock using wildcards
Basically it is an application / development issue.
Best regards, Michael

To prevent user from droping any object from a sepacific schema

Dear User
I have a database user like "aaa" in oracle 7.3.4.0.1 database.i do not want user "aaa" to drop his own schema objects like table and any other objects that he is owner.Do i have any system privilege to stop this user from doing so.User should be able to create objects and modify object but not to drop any object.For this purpose i have created a database trigger at database level to stop user "aaa" for doing above action.this trigger is giving me error on creation in oracle 7.3.4.0.1 .But when i tried same trigger in oracle 8i and 9i it work well.In oracle 8i and 9i it is preventing user from droping his own objects but i get other errors also along with raised error in trigger which i want to stop .The error which i am raising in trigger is
ORA-20001 INVALID COMMAND BUT OTHER TWO ERRORS THAT R RAISED AUTOMATICALLY ARE
ORA-00604 ERROR OCCURED AT RECURSIVE SQL LEVEL 1
AND
ORA-06512 AT LINE 8
I WANT TO STOP THESE TWO ERRORS .
PLZ HELP ME IN THIS REGARD AS SOON AS POSSBILE .
Thank u.

Given that you have not posted your code it is very difficult to know why you are getting these errors.
Howver, I can take a guess. If I were trying to implement this functionality I would build a database event trigger that fired whenever a DROP command was issued and cause that command to fail. If this is the approach you've taken I think you are out of luck, as I belive DDL triggers were introduced in Oracle 8.
Mind you, it's been a long time since I worked on Oracle7, so I might be wrong. In which case post your code, don't make me guess again.
Cheers, APC

To prevent user from droping his own object .

Dear User
I have a database user like "aaa" in oracle 7.3.4.0.1 database.i do not want user "aaa" to drop his own schema objects like table and any other objects that he is owner.Do i have any system privilege to stop this user from doing so.User should be able to create objects and modify object but not to drop his own objects.For this purpose i have created a database trigger at database level to stop user "aaa" for doing above action.this trigger is giving me error on creation in oracle 7.3.4.0.1 .But when i tried same trigger in oracle 8i and 9i it work well.In oracle 8i and 9i it is preventing user from droping his own objects but i get other errors also along with raised error in trigger which i want to stop .The error which i am raising in trigger is
ORA-20001 INVALID COMMAND BUT OTHER TWO ERRORS THAT R RAISED AUTOMATICALLY ARE
ORA-00604 ERROR OCCURED AT RECURSIVE SQL LEVEL 1
AND
ORA-06512 AT LINE 8
I WANT TO STOP THESE TWO ERRORS .
PLZ HELP ME IN THIS REGARD AS SOON AS POSSBILE .
plz tell me is there any system privilege to stop user from droping his own object or any other way along with trigger at database level.
Thank u.

Hi
DBAs can use PRODUCT_USER_PROFILE (in system schema) to disable certain SQL and SQL*Plus commands in the SQL*Plus environment on a per-user basis. SQL*Plus, not Oracle, enforces this security. DBAs can even restrict access to the GRANT, REVOKE, and SET ROLE commands in order to control users' ability to change their database privileges.
The PRODUCT_USER_PROFILE table enables you to list roles which you do not want users to activate with an application. You can also explicitly disable use of various commands, such as SET ROLE. For example, you could create an entry in the PRODUCT_USER_PROFILE table to:
read more about this at
http://download-west.oracle.com/docs/cd/B10501_01/server.920/a90842/ch10.htm#1005648

CE10 how to prevent user from view hostrical instance

hi,
We are currently using CE10. One of our user used search functionality in enterprise to search for reports start with 'employee' and it came back with all the crystal reports on the server that started with employees, even the one the user doesn't have access to. My greatest concern about this is that users can view historical instance and it is sensitive data. Does anybody know whether or not this is a bug in CE10? Is there a patch/fix for this? Is there any configuration change that I can make to
prevent users from being able search all the reports on the server rather just their own reports? Any help is greatly appreciated.
Regards,
Susan

hi,
I have an EVERYONE group with limited access(view object), and EVERYONE group is added to each folder with NO ACCESS. If I revoke view object(explicitly denied) privilege from EVERYONE group, do I still need to remove EVERYONE group from each folder? When I'm at folder level in CMC, I see EVERYONE GROUP added, but when I tried to remove the EVERYONE GROUP, the EVERYONE group is not an option for removal. What am I missing?
Thanks for your help!
Regards,
Susan Johnson

Preventing users from restoring to factory defaults

Similar Messages

Maybe you are looking for