Admin privileges can't be accessed
I can boot up my mac, type in the password and browse the net or whatever else I want to do. However, when I want to update anything, I am prompted to type in my user name and password. At this point... I am NOT able to access my admin abilities. I have changed the password and rebooted (in system prefs). I even put in the install disk and changed the password... but nothing seems to work. I even went as far at to RE-install Leopard using "archive and install"... but now I am denied access to my iTunes songs (when before I wasn't). The message says "The file "iTunes Library" cannot be read because it was updated by a newer version of iTunes." What can I do to fix everything? And can I restore my iTunes songs... or are they now lost?
Hi Thomas. Thanks for your help. I called the Apple store and the tech helped me thru it. I ended up re-installing Leopard on another hd. Although this worked for me... I also found another problem/solution just like mine in this forum (with a much different explaination)... so if you ever hear of the problem again... this is a second option:
Mac OS X 10.5.7: User cannot log in on managed client
Last Modified: May 22, 2009
Article: TS2762
Symptoms
After updating to Mac OS X 10.5.7, a user may not be able to log in to a managed client workstation. On startup, or after entering the user name and password, the user may be prompted for an administrator name and password, but nothing can be entered.
This issue can occur on PowerPC-based Macs if the file /etc/authorization is not updated correctly when installing the Mac OS X 10.5.7 Update.
Products Affected
Managed Client
Resolution
Copy the file /etc/authorization from an Intel-based Mac to the affected computer, then restart it.
Note: When copying the file make sure that it has the correct permissions set at the destination. If you enter the following command in a Terminal window:
ls -l /etc/authorization
...the results should look like:
-rw-r--r-- 1 root wheel 22017 May 12 22:29 /etc/authorization
Using Apple Remote Desktop
You can use a management application such as Apple Remote Desktop to copy the /etc/authorization file to several workstations at once with the correct permissions.
On an Intel-based administration computer running Mac OS X 10.5.7, open Remote Desktop.
Select the target workstation(s).
Select the Copy Items command.
Click the + button to locate the item to copy.
Press Command-Shift-G to display the "Go to Folder" sheet.
Type "/etc" and click Go.
Select the file "authorization" and click Open.
Select the following options:
- Place items in: Same relative location
- If an item already exists: Replace the item
- Set item ownership to: Inherit from destination folder
Click Copy.
Similar Messages
-
Only users with admin privileges can connect to shares
i have set up a 10.6.4 server but only admin users can see the shares.
other users can connect but no shares appear. (their connection appears in the log and on 10.3.9 you get a blank list of shares available)
i do have the users set via POSIX as the group owner (all users are in the assigned group).
i have propogated the permissions as well.
i did alter the access pane to make it so all could use AFP.
i tried making it restricted and adding all groups and users to no avail.
i feel it's something pretty silly i'm missing.
any advice would be appreciated.bzzzz wrote:
i have set up a 10.6.4 server but only admin users can see the shares.
other users can connect but no shares appear. (their connection appears in the log and on 10.3.9 you get a blank list of shares available)
i do have the users set via POSIX as the group owner (all users are in the assigned group).
i have propogated the permissions as well.
i did alter the access pane to make it so all could use AFP.
i tried making it restricted and adding all groups and users to no avail.
i feel it's something pretty silly i'm missing.
any advice would be appreciated.
Two possibilities spring to mind -
1. The Service security settings may not allow users to connect, look in Server Admin, click on the Access icon at the top, check the security settings for the AFP service.
2. ACLs (Access Control Lists) override the POSIX security settings, and Leopard and Snow Leopard much prefer using ACLs (Tiger like POSIX better). If no ACLs are defined for a directory then the POSIX permissions apply. -
Airport Admin Utility can no longer access Airport Extreme, what now?
I have an Airport Extreme that worked fine for a long time with a specific IP. They sold out and the new company came in and installed new equipment. The settings had to change on the Airport. After that, I lost my ability to print through the Airport USB port.
I tried to resolve the problem the other day. My Airport Admin Utility saw the Airport, but I couldn't access it. When I clicked configure, a window came up saying "Reading configuration from base station", then a Password login window came up. I enter my password, it says "Reading configuration from base station", then it says "An error occurred while trying to access the base station. Make sure your network connection is valid and try again.". It does the same thing whether I enter the right or wrong password.
It started working unexpectedly for a little while. I experimented with some settings. Now I can't access it again. The Airport Admin Utility sees the Airport as 10.0.0.0, my laptop's IP says 169.xx.whatever. I thought the Airport was supposed to distribute IP addressed. It did for awhile after I set it that way, but then it went back to 169.xx.whatever.
I'm lost. I don't know how I will ever access the Airport again. Or get my printing capability back.
Help!!!Ok. I'm going to try a reset on a day where I have some time to mess with it. There are some things I need clarified for me about settings. Please correct me as needed.
In the internet tab:
-Connect using Ethernet is selected.
-Configure Manually was selected before as it is now.
-IP address: do I use their IP or 10.0.0.0 or 10.0.1.1 or what?
-Subnet mask: It used to be 255.255.255.0 now it's 255.255.0.0.
-Router address: What do I put here, use their IP or 10.0.0.0 or 10.0.1.1 or what?
-DNS servers: I will enter their DNS servers.
-Domain name: blank
-WAN Ethernet Port is selected Automatic.
Under Network Tab:
-Distribute IP adresses is checked.
-Share a single IP address (using DHCP & NAT)used to be checked, now Share a rnage of IP addresses (using only DHCP) is checked.
-DHCP Lease: 4 hours. What is best here?
Do I really need to worry about anything else? If the password is reset how to I access from default settings?
Thanks, after this I should have a better understanding of network settings and the AEBS.
J- -
How can I disable wireless admin privileges to the router ?
I am using an Airport Utility for Windows for Airport Extreme. For the sake of better security, how can I disable wireless admin privileges to the router so that the router can only be configured via hardwire connection?
For the sake of better security, how can I disable wireless admin privileges to the router so that the router can only be configured via hardwire connection?
Sorry, but this is not possible.
If you want to limit access to administration of the router, you should change the Base Station password, and only give out that password to those individuals that you want to have access to the administration settings of the router.
The forums have been having problems displaying screenshots, but we will attach one below in the hopes that the problems may be fixed.
Important Note.......even with this, "security" on the AirPort routers is an illusion.......since a one second press on the reset button will give any user 5 minutes of free access to go in and change any settings that they want.
So, you might want to keep any eye on things. -
Migration closed 1/2 way through now cannot access any admin privileges
A little background I got my new imac to replace an older g4 ibook I did not however get to using the migration assistant tell 4 months after getting the imac.
when I ran the migration assistant it told me that the account that I wanted to move over had the same name as the account that is the admin account and asked if I waned to replace it and I selected yes. Now the bad part I did not tell my wife what I was doing and she came in half way into the migration and wanted to use the imac, she closed my ibook that was in the way and changed users.
Now on my imac my admin login is gone I can see that all the files have been moved into a Deleted Users folder under /users so I know all our family photos are there and save for now. I cannot however do anything on the computer, my login was the only admin account. I cannot use the install disk to reset the admin password, or use the disk utility. They both ask for an admin username and password, I have tried every password I have ever used but none of them work.
when I check the netInfo my account that was the admin account is gone from here as well
If anyone has any ideas please let me know.JTolman wrote:
… but their usernames/passwords still do not work for anything else such as the disk utility or running the install disk.
What? This is very strange. I'd like to look at some of your netinfo database. These commands will not change anything. Log in as one of the accounts you just gave admin privileges to.
Open the Terminal (from /Applications/Utilities) and copy and paste the following into the Terminal window, one line at a time, with a return after each line:
id
nireport . /users uid gid name realname home | awk '$1>500 {print $0}'
nicl . read /groups/admin
nicl . read /users/`id -un`
ls -ln /Users
Copy and paste all of the output (include your commands) and post it here. You can edit out anything sensitive if you really must!
Also, unless it is obvious, tell me which was your original admin user (I would assume uid 501, but you never know )
EDIT I'm unlikely to get back to you today since it is now getting late here.
Message was edited by: Michael Conniff -
I'm attempting to reinstall ITunes because of a runtime error (R6034) when I start it. At end of install it says 'Apple Mobile Device' failed to start. I verified that I have admin privileges. Can anyone help?
Go to Control Panel > Add or Remove Programs (Win XP) or Programs and Features (later)
Remove all of these items in the following order:
iTunes
Apple Software Update
Apple Mobile Device Support (if this won't uninstall move on to the next item)
Bonjour
Apple Application Support
Reboot, download iTunes, then reinstall, either using an account with administrative rights, or right-clicking the downloaded installer and selecting Run as Administrator.
The uninstall and reinstall process will preserve your iTunes library and settings, but ideally you would back up the library and your other important personal documents and data on a regular basis. See this user tip for a suggested technique.
Please note:
Some users may need to follow all the steps in whichever of the following support documents applies to their system. These include some additional manual file and folder deletions not mentioned above.
HT1925: Removing and Reinstalling iTunes for Windows XP
HT1923: Removing and reinstalling iTunes for Windows Vista, Windows 7, or Windows 8
tt2 -
Why can't I access folders on my external hard drive when I am an admin user?
Early 2011 15" MacBook Pro
2GHz Intel Core i7
Lion
I have a 2TB external hard drive connected to my Airport Extreme that I use to save all of my files. Both my user profile & my wife's are admin users, however she cannot access the external drive at all. It has a red circle with a white line through it when you look at it on finder & none of the folders are listed to change permissions under her login.
When I go to finder under my login, I have selected Read & Write permission for "everyone", but she still cannot access the drive. When I attempt to add permission for her user profile specifically, I am told "The name you entered isn't valid. Please try again"
Help!ld3mb wrote:
Thanks everyone. I suppose I'll just reformat for Apple. I need to use it for large files, and I suppose I could survive without editing ablities on Windows.
There's another alternative, format it as exFat, 4G limit does not apply and OSX + Windows will be able to read/write. -
Limited Admin Privileges/Specific Elevation of User Accounts
I'm hoping to create an account on my laptop for my roommate. I don't want him to have a full admin account, but he knows enough about computers that he could troubleshoot networking, and I want to enable him to install programs on the system. I'm not sure what the best way to go about creating an account which can elevate itself for specific tasks; I've never modified my sudoers file before, and I don't know how to do so to grant him access to the privileges he should have. I don't want to force him to use Terminal; I'd rather have him be able to enter a username/password for Admin privileges when prompted, whether that's his standard user account or a limited Admin account, but I want to make sure that account DOESN'T have access to modify anything in Users & Groups, can't create accounts with dscl, can't modify the keychain or hard drive partitions, etc.
Am I right in thinking the sudoers file is the best way to approach this? How do I find out what processes to allow access to? Does Network Preferences, for example, have any dependencies he will also need to be able to run? Also, is there a good starting point/article on modifying the sudoers file for this type of thing anywhere? <<clearly googling the wrong thing because my searches just tell me how to add someone to the sudoers file>>To modify network settings he needs to be able to unlock the preference pane. If you can unlock one pane you can unlock them all including Users & Groups.
While it is more feasible allow him some latitude in the application installing scenario it's going to be a pain. The non-server version of OS X is just not setup for this. Either a user has admin privileges or he doesn't there is no part way.
Again if you trust him then you should also trust him not to do what you don't want him to do. If you tell him he can do x but please don't do y and you think he won't abide by your rules then giving him any access is potential trouble.
And again if he can get to the machine when you are not around he can do what he likes, privileges or no privileges.
good luck,
regards -
Catch 22 on lost admin privileges
After update to a pbookG4 12", both admin users became standard; root user is not enabled. Can't enable root user, because no admin privs to change settings in the Directory Utility. Can't login as root because login is pic only, no "other" for allowing text login. Can't change login format from Accounts pane because that requires Admin privs.
Is there a way, from Terminal or SingleUser, to enable root user? or to escalate a user's privs from Standard to Admin?hirammm wrote:
Rebooting with Command-s (releasing the keys once text started appearing), I tried the *sudo passwd root*, which gave me some errors; then I looked more closely at the prompt, *root #* and said hmmmm. Used the command *passwd root*, entered the root password I had earlier set from the OS dvd password utility, entered the new password twice (happened to use the same password, no use adding another to my limited memory lobes); typed exit to reboot, and the "Other" user option became available; logged in as root with the password, went to System Preferences/Accounts, and gave the appropriate users Admin privileges, and all seems well, except I may have to suffer through +Dancing with the Stars+.
*Thanks particularly nerowolfe* for the responses. BTW, the spy-hill reference looks to me as though it's based on an earlier OS-X Server, I seem to remember net-info from those days.
Even partial success is good
Yes that article is old, but the reference to the root account being disabled is still valid. And for a good reason.
I think now that you have access to your OS you can start fixing up other things, DWTS, as you jokingly call it.
Usually perseverance pays off. Many people give up way too early and too easily. I congratulate you for sticking to it and proving that problems usually have solutions. -
X200 Laptop WWAN ATT Communicaton Manager 6.10 to work without Admin Privileges
Hello newbie to this forum....I have x200's I deploy in a corporate environment and we do not want to use the access connection software from Lenovo. ATT Comm Mgr works with admin privileges but when you remove it it just hangs and never connects. Everything lights up signal strength is good. Does anyone know where in the registry or what hack to get this software to work without admin rights?? Contacted Lenovo and they only want you to use Access Connections and ATT is no help either. Any help would be greatly appreciated!! thanks
Hi x200RQ, and welcome to the Lenovo User Community.
This is not a direct answer to your question, but you can use AT&T WWAN without either Access Connections or AT&T Communications Manager. Here are the AT&T instructions for this in Vista and XP.
This might get you where you want to be... tell us if that helps.
I don't work for Lenovo. I'm a crazy volunteer! -
We are unable to deny ASA admin functions to users who have connected via VPN.
In summary, any user that makes a remote VPN connection to our ASA is able to start up ASDM and/or the https java applet regardless of the privileges set. This, in our opinion, is bad.
Symptoms:
1) Local authentication used.
2) Privilege set to 0 (zero) - have also tried 1 & 2.
3) User makes remote VPN connection.
4) User able to use ASDM/https to view any/all of the ASA configuration, but is not able to make changes.
Would appreciate advice on how admin functions can be denied, but still permit access to local LAN.
TIACurt, the access to the firewall is controled by two statements in the firewall.
for example, if you have in your asa this:
http 0.0.0.0 0.0.0.0 inside
this means any inside Ip address in any subnet will be able to load asdm and of course if you have AAA local server they will connect to ASA, now with priviledge set to 0 user can connect but don't think it can make any changes to firewall whatsoever.
You could be more granular in the way the firewall is accessed, you may do it in several ways.
You could allow only one, two or three IP address be able to connect to ASA ASDM as well as Telnet , or a combination of IP address hosts and subnets.
e.g.
http 192.168.1.50 255.255.255.255 inside
telnet 192.168.1.50 255.255.255.255 inside
http 192.168.2.0 255.255.255.0 inside
telnet 182.168.2.0 255.255.255.0 inside
in above example only 192.168.1.50 will be able to connect to asa either through asdm or telnet, and any hosts from 192.168.2.0 subnet should be able to do the same for both asdm and telnet.
there is also another command , the management-access inside allows for access to the firewall from vpn connections, so if you want to avoid all above administrative hassle and just deny asa administration from vpn connections you could accomplish this through [no management-access inside] command in enable mode and leave http 0.0.0.0 0.0.0.0 inside statement , but if you want to access firewall from a vpn connection you will have to rdp to a machine inside you LAN that is permited in ASA for asdm and telnet access.
HTH
Rgds
Jorge -
Network User with Local Admin Privileges?
I have a small network (around 25 clients total) that was setup prior to my arrival. Each client has its own unique local admin (each machine was setup by the individual user) and it's become somewhat daunting to support them.
All of the machines are connected (but not specifically bound) to an Open Directory and each is accessible via Remote Desktop, however I cannot push software updates, etc. without local admin privileges.
I'd rather not create an account on each machine, nor do I want to completely lock down each computer (I'd like them to still have the flexibility to be admins so they can install apps, etc.)
Is it possible to authenticate against OD and obtain local admin privileges?Yes.
You can wipe all account information and then recreate a common initial admin account. This will make administration far easier as all machines will have the same admin username/password combination. Next, bind all of the systems to the domain and create domain accounts for all users on the server (likely already exist). Log in as the domain accounts and migrate permissions to domain ids. Finally, promote the user to the local admin group through System Preferences > Accounts on the workstation. You must enable the account as a mobile account in Workgroup Manager first. If you do not, the account will not cache to the workstation and you will be unable to add it to the admin group.
Also, in a workgroup of 25, I would recommend rethinking the decision to grant local admin access to end users. This is asking for trouble as you will have no control over when updates are applied or even if they are. In theory (and probably in practice), you will have 25 completely different machines configurations. This is far harder to manage and troubleshoot than 25 systems with different admin accounts.
If you must provide some level of autonomy, while not trivial, you might want to consider modifying /etc/authorization and granting limited admin rights to the users.
Hope this helps - congrats on the opportunity -
Running Palm Desktop without Admin Privileges?
I'm trying to get Palm Desktop 6.2 working on my company's Win 7 laptop. To get it to (mostly) work, I had to install using the administrator password. In its wisdom, the company does not give me permanent admin privileges but provides a temporary checkout mechanism for the administrator password. Palm Desktop will only run only if I run it as administrator with the password enabled and checked out (and entered when the program is run), an incredibly tedious procedure just to run Palm Desktop. Is there any way to do the password checkout just once and enable running Palm Desktop just as a user to avoid this tedious procedure? Otherwise, running as a user, Palm Desktop will just hang at the splash screen. I tried changing privileges (UAC) to all the program files in the Programs (x86)\Palm folder to allow access to users but that didn't help. Is it to the data as well? Thanks in advance for any help.
mraki
P.S. I posted earlier with the missing files problem listed in the registry (Annanotifier.dll, pdn20.dll, AlarmNotify.dll, EASNotify.dll) and these still post a HotSync missing files error but seem to cause no problem other than the error message. Thanks for any help here as well.I'm afraid I have no personal experience with what you're attempting to do...
All I can remember is that Full Admin rights were supposed to be granted to the user account during the entire installation of Palm Desktop, and a successful HotSync performed. Whether the check-out routine is doing this is beyond me.
Once the above is complete, the rights can be revoked back to "User".
You might want to search over at Brighthand.com for some information on this subject.
WyreNut
I am a Volunteer here, not employed by HP.
You too can become an HP Expert! Details HERE!
If my post has helped you, click the Kudos Thumbs up!
If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked! -
Admin Account does not have Admin Privileges
Here's the story
iMac 20" Aluminium
One of twenty for a school lab
Customised one from scratch, fresh OS install from accompanying disk set, installed all applications, ran all updates for OS and all applications, repaired permissions before and after.
Admin account in place, obviously.
I log in as admin and can open most applications. I cannot, however, open System Preferences.
I am told "Admin does not have permission etc". I did not set up a root account, and didn't really want to at this stage as it has not been necessary before.
Anyway, as access to System Preferences was not possible, I started up the iMac in target mode and booted my Mac Mini from the iMac OS. I could then log in as admin and access System Preferences.
In Accounts I created a second account which I called Admin1, and gave it admin privileges.
I repaired Permissions (twice) again. Disk Utility worked under this Mac Mini log in, but did not work when logged in directly on the iMac.
I logged out, shut down, detached the firewire cable and started up the iMac. It allowed me to log in using the new Admin1 account, but I still cannot access System Preferences. It is not connected to a network, as I have experienced Admin issues in the past when servers seem to interrupt some processes, because they have an Admin account too, of course.
I really do not want to go through the process of installing dozens of applications again (it's for an art lab, so has everything, with a full install taking six hours).
Has anyone experienced this weirdness and, more importantly, figured out a way to fix the problem.
I have been so careful with this configuration and have no idea what could have happened.
iMac details
2GHz Intel Core 2 Duo
2 GB 667Mhz DDR2 SDRAM
I cannot even open the More Info part of "About this Mac"..
I'm stumped. Help...
Thanks in Advance
Tonyseveral things you can do:
+ run terminal, type su and login as root, if not configured yet type sudo passwd enter your passwd and then enter your root passwd, then chmod 777 to system preferences application folder, or
+ open system preferences > account > give your account permission to administer system, or
+ show input menu to be show on login menu, logout, then login to OS X as root, then open account preferences again and use parental control to grant system preferences to be access and modified by your administrator account. REMEMBER remove the root option from login menu after that, to avoid other brute force your root password from login menu.
hope useful. if you have further question about your problem, don't hesitate to ask... -
Why does App Manager think I need Admin privileges to install updates?
I'm a Creative Cloud subscriber, and when I open apps (such as Muse) I get a message to install upgrades (or not). If I ask to install, I'm asked for login and password info, which is then refused and I get an error message that I need Admin privileges. So the install fails.
I can log in to this site using my login and password, so that's not the problem. I can also open the application (without the upgrades) but these are listed as being time-sensitive: only available until, for example, June 14. But there's no way for me to install these new releases. HELP!!!It's down to where the updates are writing their files / registry keys. For example, installing/updating the Flash Player runtime has always required admin access as the file lives within the operating system folder tree (on Windows it's in system32/Macromed). Registry-wise, Adobe places keys in HKCU and HKLM - the latter is read-only for normal users.
If you're managing a network with enterprise-licensed software, there are tools for Creative Cloud that permit an IT manager to build offline deployment packs for the base installers and updates. If your users have retail copies of CC, that isn't an option and everything has to be managed on a per-machine basis.
Maybe you are looking for
-
Even I cant believe this is happening again! i'm once again asking for help with my account. Since im very sick I ask that u look into my account and read the hell verizon has put me through and assist ending the hell once and for all even if that m
-
"Could not open a file mapping" and crashes.
Hello. I've just downloaded ReaderX from Adobe website. Rebooted. Now when I try to start Reader, the message box with title "Adobe Reader:AcroRd32.exe - Application Error", and the message box contents are "Could not open a file mapping". Reader win
-
Automatic payment for payment by bills of exchange
HI, I have freshly set up the automatic payment program for bills of exchange. I have created a payment method (X) for bills of exchange and given the special GL indicator as 'W' in the payment methods screen. However when i process the payment run f
-
Is there a way to just project management the Audio from a project so I can send it to mix? Adam
-
I have the latest version of imovie and yosemite. I recently finished a project and tried to share to file, nothing happens! Tried to share to theater, nothing happens! There is no error msg or other indication anything is happening. I have