Admin user can't administer other accounts

I somehow did something on my iMac when I was playing around with the account settings and I activated parental controls. Even though I am logged on as the admin user, I am not able to administer either the parental control permissions for the guest account or the other standard account on my iMac. When I am in account settings those two other accounts are completely grayed out, as are the + and - so that I can't even add a new account or delete any of the existing ones.
Does anyone know how to fix this?

Ah! The missing information. I have a suspicion that your account's reverted to a standard one, thereby disabling your ability to administer things. See http://support.apple.com/kb/TS1278 for starters.

Similar Messages

Administrative user can't access other accounts or delete remote login

I have the administrative user account on my iMac at home. My daughter can't remember the new password I assigned her and needs me to change it. When I log into system preferences/accounts, it shows that I am the administrative user. However, when I try to access her account or the Guest account on the computer they are gray and I can't select them. I can't add any new accounts or delete any existing ones either.
I also noticed that remote login SSH is turned on. I tried to uncheck that box multiple times but my iMac just freezes. I have to force quit system preferences.
Any ideas on how I fix this?

I enabled the root user. While now I can access the elements that were greyed out before, when I attempt to change something my Mac will freeze and just show the color wheel when I attempt to do something with the mouse. If I go up to the menu and pick Force Quit, the list shows System Preferences (the ap has stopped responding). I've shut system preferences with a force quit, rebooted several times and tried again but the same thing happens every time.
I also can't get it to read a disc so I can't even reboot from my Mac OS system disc to do an archive and reinstall. Does it sound like my system, hardware or both? Is it something that I bundle off my iMac to a Mac Genius to fix?
If this was a PC, I would swear that I had a virus.

Non admin user can't browse in Firefox

I have installed firefox as admin user, it works fine. Non admin user can open firefox, however can not browse any site although they can browse in IE. There are no error message or pop up.
Please advise...

You can check: http://kb.mozillazine.org/Browser_will_not_start_up

Can't access other accounts

Suddenly I can't access other accounts in my Mac, everything works fine but when I choose to log into other user account it just remains in the progress bar and never logs in, even if I create a new user account it does not let me in (password or not). The information is intact but I just can log into the administrator account (no changes has been done in the accounts administration since they where created, everything happens in a sudden)

With 10.3.9 you would go System Preferences-> Accounts -> (click on an Account)-> Limitations, then either No Limits or Some Limits depending how they were originally set up.
You can adjust the criteria at this point.
You may want to try deleting an account that is least used and re-adding a different one in its place. This will give you an account to experiment with to see if it behaves as the other accounts you're having trouble with.
You'll likely be able to solve the problem by seeing what is different between this new account and your old ones.
Hope this helps. If so please let the Apple Discussion forum know.

How nonSystem Admin user can make proxy to him/her self to System Admin usr

How non System Admin user can make proxy to him/her self to System Admin user??

What it means, do you ant to make System Admin as a proxy user of any non adin user.
Go to proxy tab then you can select any user from there. AFAIK, user can make proxy to any user (including system admin).
I don have machine, please check and let me know. Otherwise you ave the APIs too for this.
API
Look at SetProxyForUser API

A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before?

A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before? It has happen twice. Two different teachers in two different classrooms entering the correct user name and passwords and computer won't allow them to login. Then they try in different computers in same classroom and have no problem login.

Yes. I can login with a test user. And any other network user can login as well to this particular mac. Actually the mac has bootcamp and boots into either mac or windows. The same user entering the same login username and password can login into the windows side, but not the mac side.
I had this same issue last semester in another classroom, another mac and a different teacher. This summer I reformatted and imaged that mac and I asked that teacher to login today to that reimagened mac and she had no problem today doing so.

How do you configure the iMac so separate users can access each other's files, especially iPhoto and iTunes? I need to be able to transfer media between two users and not just gain limited access using 'share'.

How do you configure the iMac so separate users can access each other's files, especially iPhoto and iTunes? I need to be able to transfer media between two users and not just gain limited access using 'share'.

See Terence Devlin's thorough explanation here.

Default admin user can't open apps which other user can

hi all,
running os x 10.9.4, my default admin user account cannot open several apps (for this specific question i'll use room eq wizarz as an example). however, when i log out, and log in as another user (which also has admin privilages) the app opens and runs perfectly fine...
there are several other apps with which i'm haing the same issue...
any ideas?
thanks in advance.

Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
The title of the Console window should be All Messages. If it isn't, select
SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
View ▹ Show Log List
from the menu bar at the top of the screen.Click the Clear Display icon in the toolbar. Then try the action that you're having trouble with again. Select any messages that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
Some private information, such as your name, may appear in the log. Anonymize before posting.

Non-admin user can not logon to web pages

I setup an iMac, I am the administrator and I set up a non-admin user. I also setup parental controls to their default settings.
The user can log on to their account but when they go to a web page, any web page, that requires a logon, the authentication fails. I can login to the iMac as the administrator and can go to those same pages and try to logon and it works.
I tried disabling parenting controls but it still doesn't work. I don't think that I should have to change any settings to allow a non-admin user to log on to a website, but maybe there is something I am missing...
Any tips or things I should try?

It's recommended to have your Security mode on.
Anyways if you wish to, go to ''''Firefox'''' tab > ''''Options'''' > ''''Options'''' > '''''Security'''''
and do your custom settings.
Re-installing Mozilla Firefox may fix this problem.

Any user can unlock any other user password protected screen?

Major problem I'm having...!
On my Macbook Air - both myself and my wife can unlock each others password protected screen saver?
Surely this shouldn't be the case...?
We are both admin - but I would of assumed each could only unlock it's own user password protected screen saver.
Any help would be appreciated.

..."That doesn't make sense...as the login window is available from that password protected screensaver also..."...
The option to switch to the loginwindow only appears if the "Fast User Switching" GUI is enabled in the "Accounts" pref pane. If that option were to be disabled and eg. a user on a shared computer went home without logging out, in the absence of "admin" access, that computer would be entirely unusable to other users short of pulling the plug, which might interrupt any background operations in progress.
I suppose the behaviour could be alterred depending on the "FUS" status, but really, what would be the point since, as you acknowledge, an "admin" user ultimately has the ability to access an open session anyway?
For reference, note that "admin" users, in addition to the "session owner" are granted the right to unlock the screen in the "/private/etc/authorization" file under the 'system.login.screensaver' key so the behaviour can be adjusted from there.

Non-admin users can't view GAL with Outlook Connector

Non-admin users are unable to view the Global Address List with Outlook Connector. When I give a test user admin rights (in our portal), the user can view the GAL. The VLV index is setup and functioning correctly for admin users. My versions are Directory Server 5.2 Patch 4, JES 2005Q4, Outlook Connector 7.1.222.4.
I've reviewed the ACIs on o=cp per http://docs.sun.com/app/docs/doc/819-5200/gbnse?a=view and verified that they are getting passed down to the child entries. I added a new ACI for a specfic test user, but I see no effect when I run an ldapsearch as that user. Here are the ACIs:
1. Allow Calendar Administrators to proxy
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow Calendar administrators to proxy - product=ics,class=admin,num=2,version=1";
allow (proxy)(groupdn = "ldap:///cn=Calendar Administrators, ou=Groups, o=cp");)
2. Allow Calendar users to read and search other users
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow Calendar users to read and search other users - product=ics,class=admin,num=3,version=1";
allow (read,search)(userdn = "ldap:///uid=*,ou=People,o=pcc.edu,o=cp");)
3. Allow test users to proxy
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow test users to proxy - product=ics,class=admin,num=2,version=1";
allow (proxy)(userdn = "ldap:///uid=299899598658566,ou=People,o=pcc.edu,o=cp");)
Here's the log for an ldapsearch as a non-admin user:
-bash-3.00$ grep "conn=386080 op=1 msgId=2" access
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - SORT cn
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - VLV 1:1:dpelinka 2964:11852 (0)
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
When the same search is run by an admin user, nentires=3.
Here is the test ldapsearch:
ldapsearch -h vmpt1 -p 389 -D "uid=299899598658566,ou=People,o=pcc.edu,o=cp" -w {password} \
-b "ou=People,o=pcc.edu,o=cp" -x -s "sub" -S "cn" \
-G "1:1:dpelinka" "pdsRole=Employee" uid
David,

Jay,
Here's a full set of logs. The first set is from my test search; the second from an actual OC search. I don't see anything different between the admin and non-admin except for the number of entries returned.
ADMIN TEST SEARCH
-bash-3.00$ ./test_vlvindex.shl
version: 1
dn: uid=375308679900788,ou=People,o=pcc.edu,o=cp
uid: 375308679900788
dn: uid=534616896694744,ou=People,o=pcc.edu,o=cp
uid: 534616896694744
dn: uid=506947161967075,ou=People,o=pcc.edu,o=cp
uid: 506947161967075
index 2973 content count 11893
DS log-bash-3.00$ grep "conn=1964292 op=1" access
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - SORT cn
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - VLV 1:1:dpelinka 2973:11893 (0)
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - RESULT err=0 tag=101 nentries=3 etime=0
NON-ADMIN TEST SEARCH
-bash-3.00$ ./test_vlvindex.shl
index 2973 content count 11893
DS log-bash-3.00$ grep "conn=1973983 op=1 msgId=2" access
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - SORT cn
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - VLV 1:1:dpelinka 2973:11893 (0)
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
ADMIN OC SEARCH
-bash-3.00$ grep -i vlv access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - VLV 0:8:0:0 1:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - VLV 0:10:9:0 10:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - VLV 0:17:20:0 21:11893 (0)
-bash-3.00$ grep "conn=1000785 op=14 msgId=15" access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - SORT cn
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - VLV 0:8:0:0 1:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - RESULT err=0 tag=101 nentries=9 etime=0
-bash-3.00$ grep "conn=1000785 op=15" access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - SORT cn
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - VLV 0:10:9:0 10:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - RESULT err=0 tag=101 nentries=11 etime=0
-bash-3.00$ grep "conn=1000785 op=16 msgId=17" access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - SORT cn
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - VLV 0:17:20:0 21:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - RESULT err=0 tag=101 nentries=18 etime=0
NON-ADMIN OC SEARCH
-bash-3.00$ grep -i vlv access
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - VLV 1:1:1:0 2:11893 (0)
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - VLV 0:8:0:0 1:11893 (0)
-bash-3.00$ grep "conn=2220710 op=1" access
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="cn mail uid objectClass"
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - SORT cn
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - VLV 1:1:1:0 2:11893 (0)
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
-bash-3.00$ grep "conn=2220710 op=2" access.20080107-171147
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - SORT cn
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - VLV 0:8:0:0 1:11893 (0)
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - RESULT err=0 tag=101 nentries=0 etime=0
-bash-3.00$
David.

Non Admin user can cancel the time machine backup an Admin user started?

Today I had to do a new time machine backup but as it was running the user was switched to a non admin user but that admin user was able to terminate the backup that Time Machine was running since the panel showed up on their screen. Why is that?

Barney-15E wrote:
I wouldn't think it was a bug. If I was a user trying to get something done that was processor intensive, I'd like to be able to stop the backup. As the admin, I wouldn't think missing one backup was a big deal.
The o.p. didn't seem to agree.
I'm not sure what I'd think in that situation.
But it could easily be allowed, for those who want it -- just put the TM icon in the other user's menubar before locking the preferences panel.

How can ikeep my other account names from appearing in the sign in box for gmail

when i sign in to gmail while using firefox,al of my other account names appear in the sign in box.How can I prevent this

See:
* http://kb.mozillazine.org/Deleting_autocomplete_entries
* http://kb.mozillazine.org/Password_Manager

Lync login error use self account without delete cache , but can login with others account anyway

Greetings
I deployed Lync Server 2010 for my customer. it's running well for about one year.
but there are some users cannot login on lync these days. we tested the issue, the following is the test details:
- only about 20% users cannot login on lync use themselves client computers.
- when I delete the lync cache files at C:\Users\username\AppData\Local\Microsoft\Communicator
folder, they can login on once. we must delete the folder next time when the user need login on.
- we can use other user account to login on at the above computer anyway, need not the delete the folder.
would you plese give me some advice about this case.
Thanks
Frank@Hiweb 冯立超@瀚博资讯

Is this Desktop virtualization scenario? or do does user have roaming profile? Please ensure
C:\Users\username\AppData\Local\Microsoft\Communicator
is excluded from AV scan and test
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer". Regards Edwin Anthony Joseph

New user can't create an account!

PLEASE HELP I'M GOING CRAZY HERE
When I first got my ipod (friday night) i checked out the music store and started to create an account. when i realized i needed a credit card i had to log off untill i found my wallet (hah)
now i can't seem to get passed the 2nd page. The progress bar continually stalls / freezes a half inch from the end.
i have tried all the usual suspects: restarting, etc. and think i have exausted all options that i could find in the help articles.
it almost seems like it's a "busy" day on line. i have dial up - i know a faster connection is better, but please don't tell me i NEED one!
thanks,
kim

i use dial up too and while it is sooo ssslllooowww. it works ok for me though. has your credit card expired, this happened to me, and it said nothing, just wouldn't log on. try deleting the preferences file, this often fixes glitches. also check that you have a valid apple user id. good luck!

Admin user can't administer other accounts

Similar Messages

Maybe you are looking for