Administrative Users / Rights cannot change why?

cannot modify administrative user account in SCCM 2012 R2
security roles for a user cannot be added or removed. It looks like this first pic and the second pick is what it is supposed to look like. The third pick is on properties security roles. Thought about just removing the user from
SCCM and letting it re-populate through AD?

Are you able to modify any of the other SCCM administrative user accounts? Trying to determine if you have "rights" to do so. What SCCM role\s are assigned to the administrative user\group you below to?
--Tony

Similar Messages

I'm the administrator and I cannot change some options in keychain

I am the administrator of my computer and there are some options that I cannot change (they are a lighter text and the check mark box is filled in with grey) on system preferences (with some panes like the Accounts pane and others) and with keychain (under the 'edit' tab and the 'file' tab.) For instance with System Preferences under the Accounts pane, when it says "Allow this user to administer this computer" (with my user selected and after I have entered in my login password of-course) the box is selected, but the text is a light grey and I am unable to change the selection (not that I want to.)
Now with keychain the text that says "Make Keychain Login 'Default'" under the file tab is a light grey and same with the text that says "Export Items..," even when I have unlocked the keychain. When I have selected the System item in the Keychain menu, I am unable to change the option "Change Settings for Keychain 'System'" and "Change Password for keychain 'System'" under the edit tab. Furthermore under the file tab, I am unable to change the option "Delete Keychain 'System'" and "Make Keychain 'System' Default." Finally under the Keychain Access tab itself I am unable to view the item that says "Show All." These are all with the keychain unlocked, and there are also many other options that I am not able to change. Can someone help me? Is there a hacker or a malicious program on my computer? Please help

I believe that this is all normal behavior. I checked and my System Preferences and Keychain Access work the same way as yours. You should not worry about it.

Admin and user rights for change active airport

Hello alltogether,
my son has a new MacBook (System 10.5) for his school and he learn with the computer in all school-subjects. So I create two users, admin and one for him. After he has install all applications that he need for school, I gave the admin a password. Now my son can't install applications or change system settings. But i must give him admin rights, because when he stay at school, he must change the airport environment for school and if he stay at home he must change it back to home. Is it not possible to set the rights for a not admin user so, that he can change the airport environment?
Thanks for reading.
Regards,
Tommy

If he needs admin status to use the wireless connection, then you need to make him an admin user. As far as I know, there is no partial admin configuration.

AD User object - cannot change Terminal Server Profile Path

Hello
When I try to change the "Profile Path:" on the "Remote Desktop Services Profile" Tab on a Users AD Properties, I receive a Error Message:
"Operation failed: The operation completed successfully."
After closing and reopen the users properties, the old path is shown as Profile Path...
The problemes seems to be on only 1 user account.
Any Ideas how i can fix this error?
Thanks very much for any help
pAscii

Hi,
Could you tell us how many user have these question?
Did you change the path to remote domain?
Is there any other error information?
Does the user have permission to access the new location?
More detailed information about this setting is appropriate.
Best Regards,
Erin

How to Restrict Users Rights to Change Select List

Good morning everyone,
I've got a select list that is populated using a basic query on a table. Lets say the items in the list are A,B,C and D.
At the moment the users are able to choose any of those options and they are written to the database as expected.
I want to prevent users from selecting option D unless they are a member of an authorization scheme, say SchemeX.
I've tried a validation process but can only access the current database value not the value that the user is attempting to set.
I've successfully used
APEX_UTIL.PUBLIC_CHECK_AUTHORIZATION('SchemeX')
to test whether a user is a member of SchemeX but can't quite get my hands on the value the user is trying to set.
Any ideas would be gratefully received :-)

Thanks for the replies.
I tried the disable options method but unfortunately that doesn't work on IE 6 .. all my users are forced to use IE 6 at the moment. Works fine in Opera which I can use for testing purposes.
Drawing on inspiration from this thread I managed to sort it out. I set "Display Extra Values" to YES in my Select List and inserted this query as the "List of values definition" :
IF APEX_UTIL.PUBLIC_CHECK_AUTHORIZATION('OR_AUTHORISE_MANAGE') THEN
RETURN
'SELECT STATUS d, STATUS r ' ||
'FROM LSTSTATUS ORDER BY STATUS ASC';
ELSE
RETURN
'SELECT STATUS d, STATUS r ' ||
'FROM LSTSTATUS ' ||
'WHERE STATUS<>''Closed''' ||
'ORDER BY STATUS ASC';
END IF;
If the user is a member of OR_AUTHORISE_MANAGE they get the full list. If they are not they get the list minus "Closed" ... unless the record has already been set to "Closed" in which case it is added as an "Extra Value".
Thanks for the nudges :-)

Administrator cannot change printer properties on "Advanced" tab from "Devices and Printers" on Windows Server 2012 R2

Hello, dear Colleagues.
User with administrators rights cannot change printer properties on "Advanced" tab from "Devices and Printers" on Windows Server 2012 R2.
If to launch "Devices and Printers" on server, all printer properties on "Advanced" tab are inactive (see screen below).
But I can change it manually with "Print Management". Features become active.
The main purpose - to uncheck "Enable advanced printing features" with powershell
scripts.
$erroractionpreference = "continue"
$colPrinters = Get-Wmiobject -Class win32_printer -computername print_server -Filter "Name like 'printer1' or Name like 'printer2' or Name like 'printer3' or Name like 'printer4' or Name like 'printer5' or Name like 'printer6'" # get printers on server and filter with names
ForEach ($objPrinter in $colPrinters) { # get printer details from WMI
If ($objPrinter.RawOnly -ne "True") { # check that Advanced printing fetaures is turned on
Write-host $objPrinter.Name
Write-Host $objPrinter.RawOnly
$objPrinter.RawOnly = "True" # Untick and update the object in WMI
$objPrinter.Put()
It works on Windows 7 workstation, but does not on print server Windows Server 2012 R2 with error
Exception calling "Put" with "0" argument(s): "Generic failure "
At \\print_server\c$\DisableAdvancedPrintingFeatures.ps1:8 char:17
+ $objPrinter.Put()
+ ~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException
Can you help me with that? Look like somethings with rights.
Thank you.

Hello, Alan
Morris.
Thanks for your reply.
I've tried to runs PS Script both locally and remotely, previously running Powershell ISE as Administrator.
I've noticed interesting thing - if to
check "Enable advanced printing features"
manually thru Print Management snap-in, script works fine. But, time to time after some manipulations on print server, this advanced feature returns to enabled state automatically by system, I think. In this case PS Script does not work. Next, if to disable
feature manually again (thru Print Management snap-in),
and enable manually again, PS Script will work. Very strange situation.
Thanks.

Cannot Change Gnome Theme Anymore

Hello,
I installed a theme and ran it and it was fine. I tried to return to the default but that did not work. I tried to run another theme and it didn't work either. I am not stuck with this theme and I want to change it. I installed the extension user-theme to use it. What is the problem?
I have 3.6.2 Gnome
And help is appreciated.

SASLR wrote:
I just started to have the same problem... Can no longer change desktop images... I've tried to do it from within iPhoto, right clicking on desktop, and going in through system preferences... My "padlock" is "open", I am the system administrator, but still cannot change the image...
HELP!
Have you done your homework?
Run DU, check/repair HD and permissions.
If that does not work, move following .plists to desktop; let system create new plists
try this one first:
com.apple.desktop.plist
reboot and see if this fixes it.
if not then move this one to desktop and repeat
com.apple.desktopscreensaver.rsspictures.plist
report back here with results.

Cannot Change Desktop Picture Anymore

Hi -
Problem is described in the Header. And goes for ALL accounts incl. ROOT Account.
Scenario: I open Sys Pref. Go to Desktop/ScreenSaver - it opens fine and I can click the images. They will even show in the little preview window in the top. The only thing NOT changing is the Actual Desktop. It remains Solid Blue.
Tried deleting Finder, desktop, .globalpref( in both pref folders) - Preferences
Any Ideas ?

SASLR wrote:
I just started to have the same problem... Can no longer change desktop images... I've tried to do it from within iPhoto, right clicking on desktop, and going in through system preferences... My "padlock" is "open", I am the system administrator, but still cannot change the image...
HELP!
Have you done your homework?
Run DU, check/repair HD and permissions.
If that does not work, move following .plists to desktop; let system create new plists
try this one first:
com.apple.desktop.plist
reboot and see if this fixes it.
if not then move this one to desktop and repeat
com.apple.desktopscreensaver.rsspictures.plist
report back here with results.

Cannot change account settings anymore

When I try and view/change settings of an account I get a pop up message "An account with this name already exists. Please enter a different account name."
This only seems to have happened after the recent upgrade to 31.4.0, prior to this I have always been able to view/change the account settings.

SASLR wrote:
I just started to have the same problem... Can no longer change desktop images... I've tried to do it from within iPhoto, right clicking on desktop, and going in through system preferences... My "padlock" is "open", I am the system administrator, but still cannot change the image...
HELP!
Have you done your homework?
Run DU, check/repair HD and permissions.
If that does not work, move following .plists to desktop; let system create new plists
try this one first:
com.apple.desktop.plist
reboot and see if this fixes it.
if not then move this one to desktop and repeat
com.apple.desktopscreensaver.rsspictures.plist
report back here with results.

Cannot change anything in user account and family safety, even logging as an administrator account.

My 1st user account was an administrator account, 2nd user account was a standard account. 3rd user account was a guest account of window 8 single language, however i accidentally made a mistake by setting guest account from standard account to become an
administrator account. I also set down the 1st user account from administrator to standard account and after these stupid settings, the guest account becomes administrator account anyone can access in without any password, the 1st and 2nd accounts become standard
accounts! Before this mistake, the 1st user account was the main account of mine, 2nd and 3rd (guest account) were logged in very rarely.
The problem is when i logged in guest account as administrator, i cannot set the 1st or 2nd back to become another administrator account. Something has gone strange, it has been prevented me to set the others to be administrator and the guest back to standard
account. Being as an administrator account, the guest account was totally useless in changing settings. When i logged in with 1st and 2nd account, i also cannot change anything in the user account settings (change type of user account) and family safety, all
attempts to change the user account settings was useless such as i never tried. I also tried "refresh your computer without losing files" but not worked. Please provide me some advices!
I did not find the forum for win 8 single language, so i place my question here.

Thanks for your reply. I tried to go to safe mode of win 8 by holding the shift key while clicking "restart" on the login screen. (My login screen now shows 3 account users). Then i chose troubleshoot -> advanced options -> windows startup
settings-> i went to safe mode. The safe mode only showed a complete black screen with an only window: "Administrator: cmd.exe". I did as you said (typing NETPLWIZ) and the User accounts window appeared. I went to "properties" of each
user account and set 1st and 2nd accounts to Administrator but got the error: "This user cannot be added. Access is denied." and another error window: "Usert accounts: the group membership for ... could not be updated."
Yesterday, i went to elevated command prompt as an administrator and typed "net user administrator /active:yes" with hope that the built-in administrator would be activated and i would use it for full control settings of 3 other user accounts.
But i got the error: "system error 5. Access is denied."
Now, my position is quite bad. Login with guest account which was set as administrator, i still can not have full control of this laptop, so that all attempts of mine to change the user account settings is denied. This guest account also does not have a
password at all so that everyone can open my computer without typing a password. Because access is denied, i cannot set a password for the guest account even now it is the administrator account and i am loging in it.
p/s: I tried to refresh the system but still got the error: "There was a problem refreshing your PC. No changes were made". And i also tried to restore the system, but got the error: "System restore did not complete successfully. Your computer's
system files and settings were not changed. Details: A volume shadow copy service component encountered an unexpected error. Check the Application event log for more information (0x80042302)"
I went in registry editor in safe mode and did as you said but there was no "AutoAdminLogon", "DefaultUserName", "DefaultPassword". I only saw "AutoLogonSID" and other different names...
The problem i got half year ago has still remained and recently i made this mistake. https://social.technet.microsoft.com/Forums/en-US/8ebd868c-bdfd-412e-95a6-9dc0095d431c/cannot-paste-any-online-pictures-from-any-websites-into-wordpowerpointonenote-2013?forum=officeitpro
I am a young woman who always creates mistakes when setting computer because of my carelessness.
Hi,
These phenomenon should be access rights problem, you need to check your current system User Accounts status. In my opinion, your administrator account probably disabled.
Open Run, type LUSRMGR.MSC, press Enter.
Then check your current system account which Group they are belongs to.
If there is any progress, please feel free let me know.
Roger Lu
TechNet Community Support

User cannot change password option is automatically getting unchecked while giving domain admin rights

user cannot change password option is automatically getting unchecked while giving domain admin rights

Greetings!
"Domain Admins" falls into the category of protected groups and it is included in ADminSDHolder process. It is normal and was designed in order to prevent the modification to these privileged groups. More information on the link below:
AdminSDHolder, Protected Groups and SDPROP
Regards.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Why does my home user name not change when I created a new administrator

why does my home user name not change in finder when I created a new administrator?

Because you need to be logged into that account to have a different home username.
(69884)

Cannot delete login item "You cannot change this item because it's managed by your system administrator"

We migrated a server (ldap and file serving) to some new machines, which have new names. We've got all of the login and file sharing functionality working on the new machines, but wherever we have a mount of a share in the Login Items for a user, we can't get the old machine out of the Login Items. It's not fatal, but it does make login take a lot longer because it has to fail first.
We can mount the share from the new server, and save THAT in a NEW Login Item just fine -- it's just that when you click on the old defunct one the minus sign is greyed out, and the mouseover says "You cannot change this item because it's managed by your system administrator." There is a yellow triangle next to the item in the list. Went into the user's ~/Library/Preferences/com.apple.loginitems.plist and it's not in the file. The /Library/Preferences don't have anything that looks like a plist of the right name.
Where do I find it and how do I get rid of it?

In response to ManishBhatt94's post today, I may have some information that may be useful to you. I called Microsoft's 800-642-7676 and spoke with a technical representative with questions pertaining to my particular issue. I also have friend that has the
same issue with her computer running windows 8. A representative from my ISP told me how to go into 1)Tools, 2)Internet Options, 3)Connections, 4)LAN settings and uncheck the proxy settings box. However after restarting or shutting down my computer it reappears.
It will also reappears while I play games on Facebook not allowing me continue until I go back into the proxy settings in LAN and uncheck the box AGAIN and AGAIN. A local owner of a computer repair shop told my friend that it was a virus. After speaking with
Microsoft today I was told the same thing/it was more than likely a virus on my personal PC at home. As most people likely do, I use wireless internet in my home on the affected computer. Solution; as suggested by Microsoft rep was to have the virus
professionally removed either by someone or to use their remote service for a fee of $149 which comes with several guarantees and does not require you to re-install software or documents. I hope that my response was of some help to you. I also kept trying
to fix this problem but wasted a lot of time. He also suggested to Google the proxy problem to see if ANYONE has any alternatives to fixing this problem!

Exchange 2013 SP1 users randomly prompted with "The Microsoft Exchange Administrator has made a change that requires you quit and restart Outlook"

I got a call to check an issue with a Exchange Server 2013 SP1 environment recently. All server was upgraded from Exchange server 2013 CU2 to Exchange Server 2013 SP1. It was done successfully but many users were being randomly prompted with a popup in their outlook
client with the following message:-
“The Microsoft Exchange Administrator has made a change that requires you quit and restart Outlook”
Although there wasn’t any changes of late in the environment there were random popups like these for multiple users. As the behaviour was not consistent and effecting the entire upgration population
Please suggest us how to resolve the issue.
Regards, Md Ehteshamuddin Khan All the opinions expressed here is mine. This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

Hi,
Does the issue happen to all Outlook 2013 users? Please create a new Outlook profile to have a try.
If it fails, please check the msExchHomePublicMDB value in ADSI Edit:
1. In Adsiedit, expand Configuration-->CN=Services -> CN=Microsoft Exchange -> CN=domain -> CN=Administrative Groups -> CN=Exchange Administrative Group -> CN=Databases.
2. Right-click the listed database > Properties.
3. Check whether the msExchHomePublicMDB value is set to an available value. Please change the value to <not set>.
4. Click OK.
Then check whether the issue persists.
Thanks,
Winnie Liang
TechNet Community Support

ISE 1.2 Guest portal user cannot change their passwords

I have a WLC 5508(version 7.6) and a server installed the ISE (version 1.2.1.198)，Now we configured the CWA，Use guest portal as an employee and guest login url，We can use the manually create internal user and password successfully logged in, and we set up allow guest users to change password in Multi-Portal, but the user can not change the password in the guest portal ,I suspect the change password option on the Guest Portal actually works? Can anyone tell me how to change their own username password in the guest portal ?

Requiring Guests to Change Password
You can allow or require guest users to change their password after their initial account credentials are created by the sponsor. If guest users change their passwords, sponsors cannot provide guests with their login credentials if they are lost. The sponsor must create a new guest account.
You can either allow guests to change their passwords, or you can require that they do it at expiration and at first login. To require internal users using a guest portal to change their password upon their next login, choose Administration > Identity Management > Identities > Users . Select the specific internal user from the Network Access Users list and enable the change password check box.
Before You Begin
Create a Guest portal or modify the DefaultGuestPortal. This setting is specific to each Guest portal.
Step 1 Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configuration.
Step 2 Check the Guest portal to update and click Edit .
Step 3 Click the Operations tab.
Step 4 Check either or both options:
Allow guest users to change password
Require guest users to change password at expiration and first login
Step 5 Click Save .

Administrative Users / Rights cannot change why?

Similar Messages

Maybe you are looking for