Access Connections v4.52 - user rights in locked down environment

I'm currently working on a small project to deploy various Lenovo wireless drivers, Access Connections v4.52, Hotkey and Power Management drivers via SMS but have come across a slight issue with Access Connections that I can't seem to resolve.
I'm hoping to provide my locked down users with a selection of standard profiles that are copied to their machines on logon but would also like to give them the ability to create and modify new ones too - this is where I'm having problems.
Through Group Policy I have set:
Allow Windows users without administrator privileges to create and apply WLAN location profiles using Find Wireless Network function
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableCreateProfilewithFWN 1
Allow Windows users without administrator privileges to create and apply location profiles
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableUserMode 1
I have also manually set the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
I couldn't find a key for the 'EnableUserMode' option
Unfortunately, none of these give standard users access to create or modify profiles.
Have any of you come across this in your environment and if so did you manage to come up with a suitable solution?
Thanks in advance.

Hi,
the steps, that you performed are correct.
However I would not do the last step:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
This might cause confusiong.
I have just tested it in here and it's working fine with the 5.x version of AC
Cheers

Similar Messages

TV Access Connections per-user settings?

I needed to set up a 2nd user acct profile on my T500 (Win XP Pro) to use for a special purpose and need for the Wireless Radio to be powered off when this user's desktop loads (same as clicking the TVAC icon in the system tray and choosing Power Off Wireless Radio).
So far my experience has been that any TVAC changes made while using the 2nd user account are carried over to the 1st user acct, and vice-versa. I would like settings to be on a per-user basis and not applied globally to all users. Is this possible, and if so how can I do it?
Using the system tray icon, I was able to have the radio powered off in the 2nd acct and powered on in the 1st acct. And when the 2nd user's desktop loads the icon is in fact powered off, at least initially, but then the auto-connect popup appears and automatically powers on the radio. If I could configure the 2nd acct to not attempt to connect automatically that would work for me, but I can't figure out how that is possible.
Any help is appreciated.
Regards,
Frank

It is not possible to do per user setting in Access Connections.

Access Connections and 2 users

I run Access Connections 4.42 as default for configuring network access on a T61with XP SP2. When two users are logged in Access Connections fails with: Access Connections is being used by another user... If I click ok,then I'm unable to set any network settings. When I log out second user it takes some minutes because some programs won't stop: The Message appears LPManager has no reaction and then ACWLIconWnd has no reaction.. If I abort immeadiatly by task manager log out proceeds. Then log in to the first user will crash function of ThinkVantage key and you cant start any Lenovo ThinkVantage Programs (Access Connections too). To get proper function you need to reboot.
Is there any way to make Access Connections working with two users like windows XP manage network connections when several user are loged (Registry settings...)?
Otherwise how can I stop running Access Connections temporaly when working with two users?
Is there any program with quite similar functions for maniging network profiles....?

wireman wrote:
I run Access Connections 4.42 as default for configuring network access on a T61with XP SP2. When two users are logged in Access Connections fails with: Access Connections is being used by another user.
A lurker reviewed this and sent back this message:
"Fast User Switching. Since the first user doesn't actually log off, any attempt to use Access Connections by the second user will result in the alert referenced in the post. It's working as designed."
English Community Deutsche Community Comunidad en Español Русскоязычное Сообщество
Jane
2015 X1 Carbon, ThinkPad Slate, T410s, X301, X200 Tablet, T60p, HP TouchPad, iPad Air 2, iPhone 5S, IdeaTab A2107A, Yoga Tablet, Yoga 3 Pro
I am not a Lenovo Employee.
I AM one of those crazy ThinkPad zealots!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!

Cheap laptop for home sales users with full lock down

Unfortunately (for now) Internet Explorer is the only browser that this application will run in.

I've bought a great little cheap Toshiba C50 to test (£175!) but it's got Windows 8.1 Home (with Bing nonsense) on it which means I can't lock it down with group policies. We're currently testing DeskMan which seems pretty good but it's extra cost (£40) and extra effort so ideally I'd like a cheap laptop with Windows Professional on it and Internet Explorer locked to two websites. Nothing else required.
We're hoping to roll out at least 10 of these.
Any UK based recommendations? Price isn't the main factor but a good business case is.
Cheers.
This topic first appeared in the Spiceworks Community

Access Connections Problems With Windows 7 and Microsoft Security Essentials

There appears to be a conflict with Access Connections and Microsoft Security Essentials which causes Microsoft Security Essentials to generate high page faults and high CPU usage, and prevents normal operation of Access Connections.
After fresh install and reboot Access Connections would not launch, and when cursor was moved to the taskbar, the cursor pointer changed to a spinning loop. Clicking on the Access Connections gadget did nothing. Looking at Task Manager, Microsoft Security Essentials program msmpeng.exe was experiencing 5000+ page faults per interval. Terminating msmpeng.exe immediately caused Access Connections to launch.
System configuration: Lenovo Thinkpad x200s with Windows 7 Ultimate 64 RTM (installed with a fresh install) with all current updates, and all updates from Leovo including Access Connections V 5,42 Build 6JC725WW,
Solved!
Go to Solution.

Here is a workaround to fix the issue
1) Launch MS Security Essentials
2) Click on the "settings" tab
3) Click on "Excluded files & Locations"
4) Click "Add"
5) browse and add the following exceptions
a) C:\Users\Public\Lenovo\Access connections
b) C:\Users\Public\Lenovo\Access connections\AccConnAdvanced.html
6) Click "Save Changes"
The issue is also resolved in AC 5.5 which is posted to the web
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-73682
Can someone please test both solutions and let me know if the issue is resolved.
Thanks

Turning Bluetooth on and off w/o Access Connections Vista Ultimate/T61p

This might be a very noob type question but I haven't been able to find an answer... I've gotten rid of Access Connections because of how much it bogged down my system. In fact, the only programs i'm running now from Lenovo is the fingerprint reader and Active Protection.
Problem is, how do you turn bluetooth on and off in vista alone?

Have you tried Fn-F5?
Keith
Formerly 600E 2645, T30 2366, X31 2673, T40 2373, T41 2379, T42 2373, T42 2379, T60 1952, T61p 8889, T61p 8891
Currently T420 4177-CTO, T430 2347-A54, T430 2349-L64, T430 2347-UN9, T430 2342-CTR, Ideapad K1, H520S 2561-1LU

Java daemon on boot: "This user is not allowed access to the window system right now."

The daemon is located in /Library/LaunchDaemons/ and launches successfully on most occasions. However, it sometimes fails to start with this error:
Nov 17 20:36:24 server.local java[28972]: This user is not allowed access to the window system right now.
Nov 17 20:36:24 server com.apple.launchd[1] (net.java.server): Throttling respawn: Will start in 10 seconds
I have the server command running as a background daemon using its "nogui" option (the developers claim to have written it to not display a gui). However, it seems that somewhere along the line, Java is trying to display something. As the daemon is running before users log in, it gives this error. Once a user is logged in to the system, it runs fine; however, logging in a user to run the server is not an option. It needs to run on boot.
Any ideas for how to solve this? I'm going to contact the developers to see if it may be something they can fix, but I want to be able to force the issue in case the problem ever occurs in the future.

Irrespective of any claims by the developer, this certainly appears to be a test case that shows that the tool is not working as expected, and that the application has a bug. This test case would be better if there was some evidence around why only some of the startups fail, but in general this will involve what's been suggested earlier: "Contact the application developer."
As some general background on what's involved, see daemons and agents and related; processes that are not allowed to connect to the GUI for reasons of security.
I'd also suggest testing your DNS, as seeing "server.local" can imply local DNS configuration errors. Launch Terminal.app from Applications > Utilities and issue the following harmless diagnostic command and see if it reports no changes, or if it detects network or DNS errors:
sudo changeip -checkhostname
If this is OS X Server and a NAT'd network, you do not want to reference any DNS servers located off of your NAT'd network.
Why DNS? Because DNS errors can cause only some operations to fail, particularly if there's more than one DNS server selected (and where some subset of the DNS servers are malfunctioning or misconfigured).

Unable to connect End user layer /You do not have access to any end user Layer tables

I get the following error message in Disco Admin ver 4.1.33.1.6 :
1)Unable to connect End user layer
In disco plus I get the follg error:
a)You do not have access to any end user Layer tables
This is despite the fact that my userid/passsword combination@databaseid has acess to all tables in Oracle sqlplus SQL*Plus: Release 8.0.6.0.0 -
Connected to:
Oracle8i Enterprise Edition Release 8.1.7.1.0 - 64bit Production
With the Partitioning option
JServer Release 8.1.7.1.0 - 64bit Production
Please reply ASAP if anyone has any ideas
Thanks
Gurman
null

Have u created a EUL for your user through Administration Edition.
If not login as a user who has DBA rights and create EUL for your user.
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Gurman Sandhu ([email protected]):
I get the following error message in Disco Admin ver 4.1.33.1.6 :
1)Unable to connect End user layer
In disco plus I get the follg error:
a)You do not have access to any end user Layer tables
This is despite the fact that my userid/passsword combination@databaseid has acess to all tables in Oracle sqlplus SQL*Plus: Release 8.0.6.0.0 -
Connected to:
Oracle8i Enterprise Edition Release 8.1.7.1.0 - 64bit Production
With the Partitioning option
JServer Release 8.1.7.1.0 - 64bit Production
Please reply ASAP if anyone has any ideas
Thanks
Gurman
<HR></BLOCKQUOTE>
null

The account is invalid to access, please help me to connect to a new right email address. This is urgent for the pre-order, please respond as soon as possible.

My email account is invalid to access, please help me to connect to a new right email address. This is urgent for the pre-order process, please respond as soon as possible.
<Email Edited by Host>

This is a user-to-user technical support forum. No one here can help you.
Try
https://expresslane.apple.com

ThinkVantage Access Connections and Limited User Account (LUA) on XP SP3

Is it really so that one has to be logged on with at least Power User privileges to get the Access Connections utility working properly with 3G/HSDPA? When logging on as a Limited User, the computer can find all the cell phone operators nearby but does not let to do a connect. But when logged on as a Power User, all problems go away.
I would not like to bump up my user privileges from Limited User to Power User, since all else seems to work fine with a Limited User Account. Any ideas about what is going wrong -- or did I just hit into a wall here?
The environment in question is Thinkpad X200 and XP SP3. Access Connections and the HSDPA driver are the latest ones I could find from the Lenovo driver download site (Access Connections v. 5.21, Ericsson HSDPA driver v. 1.0.1046.221).
Would there be any other way to use 3G connections than to use the Access Connections utility (without changing to another o/s)?
--sami

Hi Sami,
I just got stuck on the same problem as you and following is what I found in details fro ThinkVantage Access Connections version 5.30. Hope this helps.
Jakub
<Limited User>
A Limited user can create and apply only modem profiles. However, if
Administrator sets "Allow Windows users without administrator
privileges to create and apply location profiles" option in the
Global settings then the user can create and apply any kinds of
profiles in the system.
Also, a limited user cannot:
1. Edit setting for the Automatic Ethernet and Wireless location
profiles switching.
2. Edit Global settings.
3. Edit profiles created by another user in the system.
4. Renew or release IP in the Diagnostics panel.
5. Export profiles.
The limitations on Power user also apply on Limited user.

DUN Bluetooth connection to PocketPC, Vista and restricted user rights

Hallo,
I've successfully established a DUN connection to my Pocket WM5-based QTEK 9100 smartphone via Bluetooth and the Toshiba Stack, latest version. My notebook is a X200-21D with Vista Home Premium.
Everything works well as far as I don't change the Vista user to an user with restricted rights, for the user with Administrator rights the Bluetooth Utility created a new DUN connection and a new modem with a virtual COM port. The user with the restricted rights isn't allowed to setup a new connection but this is necessary to connect to the smartphone with the Bluetooth Utility. On the administrative account the radio button to allow the connection to be dialed from other users is disabled and greyed out, so there is now way to open it for other users.
How can I setup an Bluetooth DUN connection for a user with restricted rights ?
Thank you in advance !

Should the Restricted user use the same DUN configuration like the Admin ?
If so, then you can use "Bluetooth Settings-> Custom Mode". This allows you to
select the "33600 Standard Modem" from the list which was configured before by
the Admin. So every DUN which was configured by the Admin can be used by the
Restricted user with this method. Restricted users can not install hardware, so
if the Admin has not installed a modem, then also the Restricted user can not use it.
The Admin can pre-install a modem with the Bluetooth stack installation.
This is useful if the restricted user should be able to configure a DUN connections
with advanced modem settings which are not used by the Admin.
This should be possible if the "as.ini" file has a line "MODEMINST = 1"

I have a "OVMAPI_6000E Internal Error: Connection refused Connection refused " not "User lock"

Dear all,
I have a "OVMAPI_6000E Internal Error: Connection refused Connection refused " not "User lock" and in this discussion
Please advise me.
Show log as below
==> AdminServer.log <==
####<Sep 26, 2013 5:23:59 PM ICT> <Info> <Health> <OVMM2> <AdminServer> <weblogic.GCMonitor> <<anonymous>> <> <aa1419c5c5beaacb:21222087:14159c0b975:-8000-000000000000000d> <1380191039464> <WL-310002> <67% of the total memory in the server is free>
==> AdminServer-diagnostic.log <==
[2013-09-26T17:24:31.702+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000083,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:31 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:31 ICT 2013]
[2013-09-26T17:24:35.399+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000085,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:35 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:35 ICT 2013]
[2013-09-26T17:24:38.425+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000087,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:38 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:38 ICT 2013]
[2013-09-26T17:24:41.054+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-0000000000000089,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:41 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:41 ICT 2013]
[2013-09-26T17:24:56.569+07:00] [AdminServer] [ERROR] [] [com.oracle.ovm.mgr.faces.backing.Login] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: aa1419c5c5beaacb:21222087:14159c0b975:-8000-000000000000008d,0] [APP: ovm_console] Unexpected error during login (com.oracle.ovm.mgr.api.exception.FailedOperationException: OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:56 ICT 2013]), please consult logs for details. OVMAPI_6000E Internal Error: Connection refused Connection refused [Thu Sep 26 17:24:56 ICT 2013]
Message was edited by: 9bb5edee-5117-4494-b75e-c081a39dd35f

Hi,
Look at this URL, maybe can help you
Best Regards

Access Connections on Windows 7 with Standard User Privilege

My company is developing a Windows 7 Professional image based on Lenovo’s factory build. One of the key objectives to this image is to get our users away from being Administrators (admin) on their systems to greatly reduce the security risks associated with admin privileges. One of the ThinkVantage utilities we have found most valuable to our laptop users is Access Connections (AC). In our initial testing we have found that AC does not allow for the creation or modification of connection Profiles as a standard user.
Is there any way to configure AC so it does not require admin privilege to create and manage profiles?
Thanks
"Imagination is more important than knowledge. Knowledge is limited but imagination encircles the world."
Albert Einstein

Hi,
yes, the previous post is the correct one.
Just one note, in case you want to deploy some network connections to multiple users, then you can use the .LOA files, where you can also distribute specific configuartion settings for the end user. All that is needed, once the .LOA file is on please is to restart the both AC services and you are ready to go.
This is just a note, in case you have >1000 users which you would like to administrate.
Cheers

Access Connections icon on the left side instead of the right side on taskbar

As stated in the title of this post the icon of Access Connection 5.72 is on the left side. The only way to have it correctly on the right side is to go to 'Toolbars' on the task bar -> uncheck Access Connections -> apply -> recheck Access Connections -> apply -> ok
Lenovo, please fix this

@kingskawn,
Could you let me know where can I obtain this SCCM software so I may try to replicate this bug?
Also do update the TVAC to the latest version.
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-73682
I understand you are using Update Retriver to download the software but there are some delays in the Update Retriver compared to the Lenovo Support site. Therefore try installing the latest TVAC and then install the SCCM software and see the bug still occur.
//JameZ
Check out the Community Knowledge Base for hints and tips.
Did someone help you today? Press the star on the left to thank them with a Kudo!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!
X240 | 8GB RAM | 512GB Samsung SSD

Unable to connect to : eul4_us@VIS, You do not have access to any End User

Hi all
I have configured and created EUL in 11.5.10.2 VISION instance on widows 2003,
When I tried to connect to Discoever4i on 11i VIS instance I am getting the following error :
Unable to connect to : eul4_us@VIS
You do not have access to any End User Layer tables
But I can connect to eul4_us@VIS via TOAD and SQL*PLUS Client, Also Discoverer Administration Edition can connect to eul4_us@VIS.
Also with the same Discoverer Release 4 Desktop Edition we can connect to the another VIS instance which is running on solaris 9, Only problem with the VIS at Windows2003,
Please Can any one give some solutions ASAP
Thanks
Divyanand

Hi,
In general, with an Apps mode EUL I would expect that you will get the the "You do not have access to any End User Layer tables" when you connect to desktop as the EUL owner. This is because the EUL owner does not have (and does not need) privileges to the Apps tables and functions. You should connect to Desktop as an Apps user.
Rod West

Access Connections v4.52 - user rights in locked down environment

Similar Messages

Maybe you are looking for