Admin Rights Question

I need to allow my Technologist to run an application using Quick Task -> Launch Application and have the ability to set it to run as the Secure System User. I have give the rights to Remote Execute and to the Quick Tasks (except ILB, INV and TI) but the option to run as Secure System User is greyed out. How can I allow them access to this without opening up the whole system? We do not allow Technologists to assign bundles and other activities to maintain licensing and accountability.

TSOJaybird,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

Delay when starting accdb without local Admin rights.

Hi,
I have a problem with one application, the front end of the application is MS Access DB that's connects to our SQL Server over odbc driver If the user is in a local administrator group everything is working fast. When the same user is put in the user group
without Administrative rights I recive a delay for about 60 sec then the error pops up
After I hit ok a new SQL login pops up and I just press second time ok and the application starts without entering any user and pass. This is not happening if the user is in the built in Administrators Group.
Thanks for the help
fract

Hi fract,
as a Microsoft partner I have asked support for help.
Here is their answer:
Hi Partner,
Thanks for your reply.
Based on my research, the issue is identified as a compatibility issue that Access 2010 has with SQL Server 2008 R2. Access uses PERMISSIONS function to check the privileges. The PERMISSIONS function is deprecated in SQL Server 2008 R2. I haven’t found
any workaround for this issue currently.
You can check the more detail information at below link:
PERMISSIONS (Transact-SQL)
http://msdn.microsoft.com/en-us/library/ms186915(v=sql.105).aspx
I think you need to access SQL Server 2008R2 with local admin right.
If you have any further questions, please let me know.
Best Regards,

Creation of a normal user without admin rights

Hi,
I am new to oracle apex. Can you please let me know how to create a normal user without admin rights in oracle apex application.
Thanks & Regards,
venkat
Edited by: 866673 on Jun 17, 2011 9:53 AM

Welcome to the forum: please read the FAQ and forum sticky threads (if you haven't done so already), and ensure you have updated with your profile with a real handle instead of "866673".
You'll get a faster, more effective response to your questions by including as much relevant information as possible upfront. This should usually include:
<li>Full APEX version
<li>Full DB version and edition
<li>Web server architecture (EPG, OHS or APEX listener)
<li>Browser(s)/version(s) used
<li>Theme
<li>Templates
<li>Region type
(although for your question only the APEX version is necessary).
Assuming you mean a user who can authenticate to an application that uses Application Express Account Credentials?
In APEX 4.0:
1. Go to Home > Application Builder > [Your Application ] > Administration > Create Users and Groups > Create User
2. Enter the User Identification information.
3. In the Account Privileges, specify:
User is a workspace administrator: No
User is a developer: No
4. Complete the rest of the form as necessary.

Admin Rights for Adobe AIR apps

Which Admin rights are needed on a system to install a .AIR file on a system? In our Enterprise scenario users do not have Admin rights on the system. And whenever user tries installing an AIR app an error is thrown for the same. I want to know what are the least (Admin) rights that we need to give to a user on a WindowsXP system so that he can install air apps?

Hello,
Unfortunately, there isn't a simple answer to this question because AIR isn't in complete comtrol over the full set of files and registry keys touched during an install - we rely on Windows Installer for that. However you can find additional information about this at:
Does Installing an AIR Application Require Admin Rights?
What are Administrative Rights, Anyway?
You might also want to vote for this idea: Installation of Adobe AIR apps without having administrative privileges
Hope this helps,
Chris

Setting up security and such for wireless router wrt54g without admin rights (work computer)

We are moving, I am in a new location with a new company and my only computer is this one from work. Trying to get my home network setup, I'm locked out of admin rights on this thing and am trying to set up the above router. I thought I had a modem problem at first, but finally I am online wired for now to the cable modem. I would like to get this router up and running, but I can't use the easy setup disk, and I just tried using the easy setup download and it is locked out as well. How can I get my router setup with security, with no admin rights on the pc?
This will be my first wireless router, so I am very green on the specifics and terminology. Any help is most appreciated.
Many thanks,

Thank you toomanydonuts!
I will do this when I get back to the townhouse this evening.
Just so that I am prepared for tonight - I want to confirm and ask a few questions on the "options" and note a couple things I noticed that may help with answers...
Internet connection type - should be easy, I assume there is a "cable modem" option.
SSID - I do not know what this means or what to choose
wireless encryption method (WEP, WPA, WPA2) - Which is best, or is there one I must pick due to computer used and such, I also want to get my Nintendo Wii accessing correctly, I saw these options on that setup, though it didn't work per my first message on the board. I assume whatever encryption method used needs to be chosen for the Wii?
wireless encryption password - I think I can handle this one
A couple of notes -
this laptop has this always on radar looking for wireless connections - how can I name my router so I know it's mine, other than the fact that it is the strongest signal. Maybe that's a network setting?
Thanks again, glad I came here.
Edit: I suppose I should add, just to ensure - in order to do this process through the url provided above, I need to be ethernet wired through the router to the modem? in order to access last night, I was straight into the modem, didn't seem to work wired through the router.
Message Edited by Syxpack on 03-27-2008 05:25 AM

Adobe Updater 9.3.2 Admin Rights

Hi,
Simple question really. The updater feature in adobe reader 9.3.2, does a user need to have administrative rights to use the "Automatically Install Updates" option.
ive installed it for a test user without admin rights and it has the entire updater feature grayed out and the radio button is set to "Do not download or install updates automatically", even though i have the registry key [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe ARM\1.0\ARM] "iCheck"=dword:00000003 set.
when i log in as someone with admin rights the setting to automatically install updates is selected.
thanks in advance
Eric

no replys to this? no one has an answer or can at least point me to an article with the answer?
thanks

How to give permission to Internal client local admin rights to install applications

Dear All,
I want to give internal client rights to install application in his computer. At the same time I don't want him to login to windows server 2008 with admin rights. Could you please let me know how to do that?

Unfortunately your post is off topic as it's not specific to Microsoft Training and Certification.
This is a standard response I’ve written in advance to help the many people who post their question in this forum in error, but please don’t ignore it. The links I provide below will help you determine the right forum to ask your question
in.
For technical issues with Microsoft products that you would run into as an end user, please visit the Microsoft Answers forum ( http://answers.microsoft.com ) which has sections for Windows, Hotmail,
Office, IE, and other products.
For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), please head to the TechNet Discussion forums at http://social.technet.microsoft.com/forums/en-us, and
search for your product name.
For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), please head to the MSDN discussion forums at http://social.msdn.microsoft.com/forums/en-us, and
search for your product or issue.
If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here: http://community.dynamics.com/
If you think your issue is related to Microsoft Training and Certification and I've flagged it as Off-topic, I apologise. Please repost your question and include as much detail as possible about your problem so that someone can assist you further.
If you really have no idea where to post your question please visit the Where is the forum for…? forum http://social.msdn.microsoft.com/forums/en-us/whatforum/
When you see answers and helpful posts, please click Vote As Helpful,
Propose As Answer, and/or Mark As Answer
Jeff Wharton
MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCSE: Data Platform & Business Intelligence
Blog: Mr. Wharty's Ramblings
Twitter: @Mr_Wharty
MC ID:
Microsoft Transcript

Enable Flash Player in Mozilla Fire Fox without Admin Rights

Hi,
I am from australia i have a question how do i enable flash player in my system without admin rights. at present there is no access to install software to my system. please help thanks in advance
Regards
John Burns

Hi John,
Admin rights are required for installing Flash Player because it installs to a system-wide location which requires elevated permissions to write to. Due to this, there is no way to install Flash Player without having Admin rights. Since it writes to a system-wide location, any user on the machine with Admin rights can install Flash Player.
Maria

AD users losing admin rights when working offline.

We have recently started using AD accounts on our Macs but a critical problem has presented itself.
Under 'Allow administration by' we are using a domain group called 'Domain Users' and this works fine when users are connected to our corporate network but when they are offline and not able to see the AD servers at login they lose their admin rights.
So even if you create a mobile account this settings has to be validated every time the user logs on.
It has been suggested to use the following command to correct the problem but this has no effect:
"sudo dseditgroup -o edit -a "domain\groupname" -t group admin"
Has anyone successfully found a workaround for this problem?

Yep. That is the side effect of the evolution of AD integration. Many more things are live look ups. Have you tried password protected screen savers yet? Yep, live call to AD. The reason this is failing is the domain users is an AD group and the system can not resolve the GUID without access to the domain.
In any case, there is a way around this but it is a little messy and it breaks the whole point of using the plug in to allow for a single point of control. If you are using cached credentials, you should be able to add the user to the admin group. Once again, this posses a number of problems as you are now injecting an AD user into a local account, you have no centralized method of removing admin rights from the user, and each machine requires a custom command (you need to issue the users shortname).
Now, you other option is to say, "it is a security implementation to prevent unauthorized access to the machine when it is not under the protection of out LAN." Yep, line of garbage, but the real question is, why do they need admin rights? If for installing software, that likely should not be up to them if you are enforcing a corporate standard. I generally can't find a good argument for permitting admin rights.

Pushing out software that "requires" admin rights....

I have a piece of software that needs installed on 200 users machines....however the software requires admin rights to install. So, by using group policy, I can successfully push out the software to users that have local admin rights, but it will not install
on machines that do not have local admin rights.
Whats the best way to accomplish this without giving 200 people admin rights?

How did you create a Distribution point ?
To publish or assign a computer program, you must create a distribution point on the publishing server (I am sure, you must have done that already)
However, FYI... Here are the steps
create a distribution point
Log on to the desired server as an administrator.
Create a shared network folder where you will put the Microsoft Windows Installer package (.msi file) that you want to distribute.
Set permissions on the share to allow access to the distribution package.(Authenticated Users should have
READ permissions)
Copy or install the package to the distribution point.
Assign a Package
Computer configuration / Policies / Software Settings / Software installation
Right-click Software installation, point to New, and then click Package.
In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example,
\\FileServer\Share\software.msi
Important: Do not use the Browse button to access the location.
Make sure that you use the UNC path to the shared installer package.
Click Open.
Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.
Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in or gpmc.
When the client computer starts, the managed software package is automatically installed.
Along with Software Distribution policy, you can set another policy "Always install with elevated privileges"
User Configuration\Administrative Templates\Windows Components\Windows Installer
This policy directs Windows Installer to use system permissions when it installs any program on the system.
This policy extends elevated privileges to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add/Remove Programs
in Control Panel. This policy lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers.
If you disable this policy or do not configure it, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer.
Caution : Skilled users can take advantage of the permissions this policy grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy is not guaranteed
to be secure.
Important: This policy appears both in the Computer Configuration and User Configuration folders. To make this policy effective, you must enable the policy in both folders.
Hope that helps.
If it looks good, Eat it ! Likewise, If you don't know the answers, don't hesitate to ask questions !!
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
About Me !!!

Change postalsoft user to admin rights

How do we enable a current Postalsoft user with admin rights? Currently, she doesn't have upgrade rights, some print options are greyed out... The originally installed Postalsoft is under a ex employee logon.
Is there a simple way to change over the rights?
Appreciate any help with this. Thanks. jb

JB,
It still sounds like there is a permission issue. Some settings are stored in the registry, and some of the printing options are stored in the Windows Printers folder. So when you say that they have Read/Write Administrative rights are you sure that all the folders were changed? As for the Presort options being gray it could be that the database is set to Read Only. To check that you can open a job and go to File > Properties > Document. Click on the Database Permissions tab. Make sure that Other's Rights are set to None and Your Rights are set to Read/Write. If this does not fix it please log a message for us in Support.
Below are the steps to log a message for support -
1. Go to http://service.sap.com/bosap-support.
2. Click on "Create a message / Contact technical support".
3. Under System Search, click the drop down arrow next to your installation and choose your system, and click Search and then click on the BOB link.
4. When creating a SAP message it is required to search for Notes. (Knowledge Base articles) to see if you can find an answer to your question without having to log the message for support. In the Search Terms area, type your question and click Continue.
5. If you do not see any Notes pertaining to your question click on Create Message.
6. Choose the correct Component for the product you are creating the message for. The component is the support Q that your call will go into so the correct team can assist you. To do this click on the icon next to the icon next to the Component window to see a drop down list.
7. Click the arrow by BOJ-EIM to see a more detailed list. By each component the names of the u201Cproductsu201D you are using are listed. Choosing the correct component will get your Message logged for the correct support team.
For example:
a. BOJ-EIM-COR is used for ACE, DataRight IQ, Match/Consolidate, IACE, and FirstPrep products.
b. BOJ-EIM-COM is used for DeskTop Mailer, Business Edition, Presort, PrintForm, Label Studio
c. BOJ-EIM-DEP is used for DQXI, Data Insight, eDQ Infa, SAP Siebel, PSFT, Oracle, Rapid Library
8. After choosing the component, fill in any remaining required/optional items. **Required fields under Problem Details are flagged with a red asterisk.
u2022 In the Short Text box, enter a brief description of the question or issue.
u2022 In the Long Text box, you can go into further detail about what you are seeing or questioning.
u2022 click Send Message.
Thanks,
Melissa

Install new xcode without admin rights

Hi there,
I saw alot of threads about XCode as non-admin but non if it helped...
We have a setup with the programmers are non-admins...
We want to make the programmers choose and select a specific XCode version from the server.
We created a simple shell-Script wich lets the user select all versions on the company server wich we provide and copies it to ~/Applications
This works fine and the users are very happy with that.
Problems:
As soon as he starts the XCode.app he gets asked for Administration Privileges to install "Components"
(what are these anyway? Or cant we provide them somehow?)
If this is done by a Administrator the XCode works fine and there is no issue
BUT: If the programmer wants to install Command Line Tools he will be asked again for Admin-rights.
Not for the Doc Sets (We just placed them in the User Library instead of /Library)
We've tried:
DevToolsSecurity -enable
dscl . append /Groups/_developer GroupMembership
Didnt helped :-(
Are there any other suggestions than edit the /etc/authorization file?
thanks in advance for any suggestions.....
Michael

tmaeda wrote:
True, but they do need many of the same tools that programmers will need.
That is an entirely different topic than what the original poster is talking about. I suggest you start your own thread and describe your problem and how you would like things to work in an ideal world.
Students should not have admin rights on machines. There are proper ways to get Xcode to work nicely in an education environment. Unfortunately, that often requires a competent IT staff willing and able to support Macs. I am thinking that your situation is pretty typical and you don't have that. Otherwise, it would already be done and you wouldn't be asking here .
Ideally, have IT handle it. If they can't handle it, as they probably can't, start a new question here in the developer forum and people will help you cobble together some scripts to make it work.

User with admin rights can't access files through the command prompt

I have a strange situation where I have 2 users both setup exactly the same with admin rights on a 2003 (32 bit) server through an AD group membership, but one can do everything as expected but the other can't.
The one that can't is trying to execute a program is a command prompt and keeps getting access denied or invalid directory when trying to cd into the folder. I double and tripled check the permissions and they are correct, this person should have
full admin. In fact I did a effective permissions through explorer and it states full rights. Along those lines this person can also access the folder in question through explorer just not a command prompt.
Has anyone seen this before ? and if so what can be done about it.
Thanks

Hi,
Can the user execute the program through explorer? In Windows Server 2003, the Users group does not have Read and Execute permissions to the command processor (Cmd.exe).
You could refer to the article below to resolve the issue:
"Access is denied" error message when you run a batch job on a Windows Server 2003-based computer
http://support.microsoft.com/kb/867466
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

File Vault Useless when Other User Has Full Admin Rights?

Question:
I'm about to send my MacBook Pro in for service. I've backed it up to a bootable clone, but I'd still rather not erase all my stuff, in case they send it back as-is (they do sometimes do that if they don't have to reinstall OSX).
So, I've given the guest user account full admin privileges on this machine and created it without a password so the AppleCare boys can do what they need to do.
My question is, is my account secure if it is password protected and encrypted with File Vault?
Or, if somebody was feeling malicious, couldn't they just reset the password for my account in the guest account preferences or create a new master password for the machine, since the guest account has full admin rights?
Thanks for any quick answers!

Hi bscepter;
If you are that paranoid about your data, the best
thing for you to do is to remove it off of the
machine before you send it in.
Allan
I'm not "that paranoid" about my data. I was merely curious if File Vault would protect my data should somebody with another admin account want to access or delete it. I mentioned this in my initial post.
But thanks, anyway.

Excel Plugin installation with out admin rights

Hi,
We have developed an excel plugin which is a combination of dll written in c# and VBA project(.xla file). We have created .msi to ship the plugin using Install Shield and the settings in it had Require admin privileges set to NO.
The installation seems to be seamless regardless of whether it was installed on a PC with admin rights or without admin rights.
However the plugin loads fine only on the PC where it was installed with admin rights.
When installed with user without admin rights, Opening excel comes up with an error "Compile error in hidden module: ". The same message appears when closing excel as well.
I have searched through internet and found couple of ways it can it can be resolved
1. By manually registering mscomctl.ocx but cannot be done as the user don't have admin rights
2. Deleting .exd files in USER_HOME\AppData\Roaming\Microsoft\Forms dir (Tried this but no success)
I ran out of ideas and couldn't find anything more on this. Can anyone please let me know what I should be doing to resolve this?
Additional Info:
The location where registry entries are written is HKEY_CURRENT_USER\Software\VB and VBA Program Settings
I am deploying all my files to C:\Program Files\<Project Name> dir
and Interop.Excel.dll is one of the files am shipping along with my dll and .xla file
So don't think any of the above needs admin rights. Please let me know if I am wrong?
Many thanks for your help!!!

Hi Kittu1201,
>>which is a combination of dll written in c# and VBA project(.xla file).
What do you mean by “a combination of dll written in c#”? Do you use VSTO? If yes, is it application level or document level?
>> We have created .msi to ship the plugin using Install Shield and the settings in it had Require admin privileges set to NO.
As far as I know, Install Shield is a third party product and I'm not very familiar with it. For questions about Install Shield, I will suggest you going to the Install Shield official site for help.
>> Opening excel comes up with an error "Compile error in hidden module: ".
I made a research about this error, it could be caused by a specific *.xla file and the KB below might be useful to you:
# You receive a "Compile error in hidden module" error message when you start Word or Excel
https://support.microsoft.com/en-us/kb/307410
If the issue keeps existing, can you share a us very simple sample to help us to reproduce this issue.
Best Regards,
Edward
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey.

Admin Rights Question

Similar Messages

Maybe you are looking for