Administrators group and Administrator account

I'm setting up an Open Directory network and had some questions regarding the Administrator account and the Administrators Group:
1. How do you add members to the Administrators group and how do you see who is a member?
2. Do members of this group have full access to computers that are members of the domain (i.e., computer accounts listed in Server Admin). I've tried logging in as the Administrator on laptops that were joined to the OD domain, but I was not successful. I'm coming from an Active Directory background and the administrator can log into all domain computers. Logging into the OS X server as the administrator works.
Thanks!

Hi z-admin,
Have you ever gotten the answer to this?
My question is similar: if a user in OD is given FULL administration capabilities in OD, is he a "Mac domain administrator"? If not, how can I make my user a "Mac domain administrator", e.g. a person that can log into any Mac connected to my OD and be an administrator on that machine? Otherwise, I need to create a local admin on every Mac and this is a nightmare for any network administrator.
Thanks!

Similar Messages

Photoshop Elements 11 installed on Mac Mini OS X 10.9.5. Application running successfully on bot main user and administrative accounts for considerable time with no warning messages. When established a new user account on same computer and try to call up

Photoshop Elements 11 installed on Mac Mini OS X 10.9.5. Application running successfully on bot main user and administrative accounts for considerable time with no warning messages. When established a new user account on same computer and try to call up elements receive message “Some ot the application components are missing from the Application directory. Please reinstall the application.” How do I correct this problem without disturbing application in main user account?

Brooks lansing if you create a new Administrator account does the same issue occur? If so then it is likely that there is a file permission failure and file permissions have been set for the existing Users instead of the groups they belong to.
Have you removed and reinstalled Photoshop Elements 11? This may reset the file permissions to the correct state to allow it to work under new accounts.

Link between Material group and GL account

Hi Friends ,
Need your help in the following issue
Where is the link between Material group and GL account. i.e. If material group is selected in PO then the GL account for the material should get picked up automatically in PO (for account assigned POs) ?
What I know is
1. In Account assignment category configuration we need to assign the value "VBR" in Account Modification field.
2. In Material group configuration we need to assign the vluation class for material group
3. In Account determination(OBYC) for GBB transcation type for the combination of general modifier "VBR" & Valuation class we need to assign the GL account .
When PO is created with respective account assignment category the GL account is picked from the above setting.
My question is , "Is there any other setting apart from the above which will decide the GL account in PO fro account assigned POs"?
Thanks
Deva

Hi,
From IMG> Material Management> Purchasing> Material Master> Entry Aids for Items Without a Material Master,
With it you can define the G/L account assignment according to the relationship between material group and valuation class, from my point of view, you had better define some valuation class for non-produciton parts in advance.
Good luck
Tao

WSUS Administrators group and CleanUp error

Hi,
I try to do automatic cleanup of WSUS parent and downstream servers.
My script run fine with my account (domain admin) but I want to run the script with low rights.
So, I created a local account on each server, member of WSUS Administrators local group.
This works fine for Windows 2008 (R2) downstream servers but for 2012 Servers, i get an error: acces denied when performing cleanup.
After reviewing WSUS logs, it seems that it's impossible to stop WSUS Service with this account accros WSUS Remoting API.
Why WSUS administrators group isn't sufficient for 2012 R2 servers ?
Thanks.

Hi Steven,
My script is freely inspired by
this script
http://community.spiceworks.com/scripts/show/336-wsus-automatic-cleanup-script
I will publish it as soon as my account is validated (cannot copy code block...).
With the function $cleanupManager.PerformCleanUp([...]), it works on 2008 R2 servers but on 2012 R2 servers, I get this error:
System.Management.Automation.MethodInvocationException: Exception lors de l'appel de « PerformCleanup » avec « 1 » argument(s) : « Accès refusé » ---> System.ComponentModel.Win32Exception: Accès refusé
   à Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)
   à Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.StopWSUSService()
   à Microsoft.UpdateServices.Administration.CleanupManager.PerformCleanup(CleanupScope cleanupScope)
   à CallSite.Target(Closure , CallSite , Object , Object )
   --- Fin de la trace de la pile d'exception interne ---
   à System.Management.Automation.ExceptionHandlingOps.CheckActionPreference(FunctionContext funcContext, Exception exception)
   à System.Management.Automation.Interpreter.ActionCallInstruction`2.Run(InterpretedFrame frame)
   à System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
   à System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
I tried with the PS Module WSUS and function Invoke-WSUSCleanUp, but i get this error for ALL servers:
System.ComponentModel.Win32Exception (0x80004005): Accès refusé
   à Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)
   à Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.StopWSUSService()
   à Microsoft.UpdateServices.Administration.CleanupManager.PerformCleanup(CleanupScope cleanupScope)
   à Microsoft.UpdateServices.Commands.InvokeWsusServerCleanupCommand.ProcessRecord()
No idea what's the différence between this two functions...
But as you write above, an account in WSUS administrators group cannot stop service on 2012 server, nor on 2008 server !
I've searched the WEB but could not find anything speaking on a limitation for cleanup for WSUS administrators group.
Thank for your help.

Account groups and Recon Account

Dear Experts,
I use SAP R/3 4.6 C.
I've type account : Thirds Party , Affiliates and Subsidiary, and each account have Recon. Account : Thirds Party Recon Account , Affiliates Recon. Account and Subsidiary Recon Account.
I need information about Customer : Account Assignment Groups (OVK8) and Recon. account (XD03).
Are there any connection between above t-code in SD and FI ?
Thanks,
Iwan Siahaan

Hi Expert,
We need to create the Reconciliation Accounts for Customers, according to the Customer Account Groups.
If Customer is Created with the following Account Groups - Thirds Party , Affiliates and Subsidiary then we need to Create the Reconciliation Accounts - Sundry Debtors - Thirds Party Account, Sundry Debtors - Affiliates Account and Sundry Debtors - Subsidiary Account.
FI and SD Integration is done in T-Code: VKOA and in T-Code: OB40(Taxes Account Determination)
T-Code: OVK8 is just for creation of Account Assignment Groups for Customers.
Account Determination at the time of Post Goods Issue - T-Code: OBYC - GBB (Transaction) - VAX - Valuation Class (Finished Product) - COGS Account - No Cost Element (If there is no production Activity)
Regards,
GK
SAP
Edited by: GopiKrishna.Y on Feb 3, 2012 4:28 AM

Adding Group, and Changing Account GID

Hello there,
I am wanting to add a new user group with an ID of 1000, and move my main account into that group, then update everything that has the old GID with the new one. This is so that I can share files easier with another UNIX system I use without having to tweak the permissions for each file.
I've done quite a bit of searching in the past couple days, but all I can seem to come up with are old, outdated instructions that don't work on OS X anymore.
Any help would be much appreciated. Thank you.

Did you try adding the Group in Users & Groups, then right-clicking on the Group and selecting Advanced settings?
I don't know if that is the correct way, but it seems like it.

Difference between "account group" and "reconciliation account"

Hello,
I am new to SAP and I would like to understand the difference between the "account group" and the "reconciliation account" that appear both in the vendor master records.
From what I read, "account group" is just a classification but has no "accounting" impact whereas "reconciliation account" (goods suppliers, overhead expenses suppliers...) do have an accounting impact.
However I am not sure so I would like a confirmation on that and if possible examples so I could really understand.
Thank you.

Hi,
The account group is a way to divide vendors into groups for reporting later on.
The account group is also the link to the number range and the field selection functionality.
Please refer the below link for more clarity.
http://help.sap.com/saphelp_46c/helpdata/en/53/c98647ca3711d2b494006094b9114a/frameset.htm
Account group
The reconciliation account is the account is the account which is posted to at invoice receipt stage where the vendor account represents the sub ledger and the reconcilation account the ledger.
Reconciliation Account
http://sapdocs.info/sap/fico/reconciliation-accounts-and-special-gl-indicator/
Hope it helps you.
Thanks.

Download and administrator account

Sometimes when I use vuze or try to download a pdf from a site, I get the message that the download failed. When I look closer at the occurrence, I found the application try to place my file in the administrator account which I don;t use. Even when I change the preference to my account, it continues to try to download that account. I have given myself permission to have access to what the administrator can do. What am I doing wrong?

Anyone have a suggestion how to correct this abnormally?
Austin

Vendor Account group and recon account

Hi,
I have 2 vendor account groups:
1) ZLOC- For domestic vendors
2) ZIMP- For Import Vendors.
My requirement is when I am creating the vendor master, the recon account meant for local vendors should automatically get selected and for import vendors recon meant for import vendor should be selected.
this is required to avoid entry errors by users. currently they are selecting by drop down and made mistakes.
Regards

Hi,
In std SAP, I don't think it is possible.
We have to maintain it manually.
It's not a day to day activity so very few chances of mistake by user.
Regards,
Piyush

Linking material Group and the Account Assignment...

Hi Gurus,
I have a requirement from the client in which they want to restrict the entry of the Account assignment when a particular material group is enetered in the PO.
The requirement is actually either to have F (order) populated in the account assignment field in PO (display only if possible) when a material group in enetered in the PO.
Can anyone advise me of some configration settings for this please?? I know we could be able to do it as a customised setting for the customer and making changes to the PO program but my concern is will it affect the system and infact the PO program itself.
Thanks in anticipation.
Anoop

material group cannot be assigned as default to an account assignment category. The only link that can be formed is between item categories and A/c assignment categories. As some one has already pointed out, determination of G/L account for posting for a specific material group is possible.

How can I unlock my administration account ? or How can I completely erase file accounts and administration accounts from my apple computer?

So recently my sisters and my mother bought this used computer called a "IMac's IMac" . It cost $700 . This computer is great the only problem is ... There's a LOCK on the administrator's account . And we need the password so we can download "adobe flash player 11" without adobe there's no watching videos , playing online games , or even me editing photos for my photography class. If somebody could help me and my family with this. It would be really grateful !
We bought this beautiful computer on March 17th of 2012
Oh and i'm only 13
More Info:
Mac OS X
Version 10.7.3
Processor: 2 GHz Intel Core 2 Duo
Memory: 3 GB 667 MHz DDR2 SDRAM
20 inch, Mid 2007
Model Identifier: iMac7 , 1

Hello:
You need the original software installation disk to reset an administrator password. If it was not with the used computer, contact the person that sold it to you. If you have it, boot from that and reset the password.
Barry

Account group and Account Type.

Hi all,
Could you please tell me the diferences between GL Account group (by example cash, expense, revenue ....) which we define in IMG - Financial Accounting - General Ledger Accounting - G/L Accounts - Master Records - Preparations - Define Account Group and Account Type (by example: Vendor, Customer, Material, GL Account) which is in the screen "create account type" IMG - Financial Accounting - Financial Accounting Global Settings - Document - Document Header - Define Document Types ?
Thank you very much.
Sylvecast

Hi
Account Group Controls the Master records. It controls the number range of Master record and Field status group (Supress, Required, Optional and Display) also. SAP follows a Grouping principle all throughout SAP to handle the Master Records that may be in GL, AR AP any thing. See to create a GL Account group you define at OBD4 there itself you assign the Number Range or those groups which also controls Field Staus of GL Master Records. And for Creating AR and AP Master Records you create at OBD2 and Vendor at OBD3 which will also controls Field Status Group of And Number range of Master record. The only difference between GL and AR/AP is assigning of number range. For GL will specify at OBD4 itself but for AR/AP we need to create a number range at FBN1 then assign to AR And AP at OBD2 and OBD3 respectively.
One more thing. Remember only Field Status group of Master recard (OBD2, OBD3, OBD4) only contain Display option but not to Posting Key or Field Satus Group (OB41 or OBC4). I am so specifing becoz I commited this mistake in one interview.
In summary, the account group controls:
i) The number ranges of the accounts,
ii) The status of the fields in the company code segment of the master record. Since a chart of accounts contains many different types of accounts, they can be bundled into different "account groups ". Usually one account group bundles
accounts with the same tasks within the general ledger, e. g. cash accounts, material accounts, asset accounts, profit and loss
accounts,...
Surendra

MDT 2012 - Litetouch deploy windows 8 with different administrator account

I have created and captured a custom image of Windows 8 using MDT2012 update 1 and Windows ADK (without SCCM). In the image, I have set an account called DeployUser, with password XXX, adding it to the Administrators group, and I have disabled the User
Account Control.
I did this because the Administrator account is renamed from GPO and the password is changed every 30 days (for security reasons, the password is not disclosed to any IT support).
Next, I created a TS to deploy this image, adding the installation of some software.
In the Unattend.xml, I also added DeployUser to perform the autologon.
After the first logon with DeployUser, the TS stops and does not return any error message.
If I manually run C: \ ProgramData \ Microsoft \ Windows \ Start Menu \ Programs \ Start-up \ LiteTouch.lnk nothing happens, however, if I run it with "Run as Administrator", the TS continues normally.
Somebody who knows a solution for this?

I believe MDT LiteTouch deployments only recognize the Administrator account name for processing task sequences.
Are you joining the domain during an MDT Litetouch deployment? If so, you may want to delay joining to a domain or GPO processing. Take a look at these recommendations:
Domain Policies that break MDT 2010
It may also be possible to disable GPO processing until the end of the taks sequence via a reghack or disabling a service. Take a look at this:
How to Disable/Enable Group Policy
BTW, the task sequence engine in ConfigMgr prevents GPO processing during an OSD.
V/R, Darrick West - Senior Systems Engineer, ConfigMgr: OSD

Pt:tree of community groups and users

I am creating a community emailer portlet for emailing the users of a community. I want to use a pt:tree that lists the groups and users who have membership in the community. I want the individual users, groups and users in groups to be checkable. I've been playing with the pt:tree for a while now without success. Can anyone help? This seems like it would be a common question, but I can not find any answeredthreads on this. Thank you!

"Vikram" <[email protected]> wrote in message
news:3eb6f601$[email protected]..
>
Hi,
We are having problems seeing users or groups in our LDAP repository, thruWLS(7.0
sp2) console. I created a Custom Security Realm(myRealm) in which I addedthe
Novell LDAP Authentication provider as one of the authentication providersbesides
a Default Weblogic Authentication Provider (for system user account). WhenI click
on Users or Groups, I see either the "system" user account or"Administrators,
Deployers, Operators, Monitors" groups.These groups and user accounts areprovided
by the Weblogic Default Authentication provider. I am unable to see any ofour
LDAP groups or User accounts. If I try to login to the WLS console with anLDAP
user account, the authentication goes successfully. So WLS isauthenticating the
user correctly but is not displaying the User and Group information in theconsole.
We need to be able to look at the Group information in order to configurea Group
Portal.
Just out of curiosity, I configured an LDAP authentication provider in theCompatibility
Security Realm and I was not able to see any of our LDAP users or groupsin the
Compatibility Secyrity Realm also. I did reboot the WLS after configuringthe
LDAP authentication provider in both the cases.
I would appreciate if anybody can suggest probable reasons or workaroundsto list
the LDAP groups in the WLS 7.0 console.
I believe this is fixed in the latest 7.0 sp.

The only user was removed from Administrators Group

Hi Experts
We are using Office 365 based Project Online and Project Server Security Mode was applied, also the Active Directory sync was switched to 'OFF' for Administrators Group in PWA. There was only one user which was in the Administrators Group and hence was the
lone user to have access to Project Server 'Groups & Categories' section.
Now I do not know how it happened, but the person logged into the PWA Site, went to Administrators Group and removed his name from the Group and clicked on Save.
As soon as it happened the access right were removed from that user also Now no one has the access to 'Server Settings' page as an administrator. Hence all the admin work is stopped.
My concern was is it possible that by any means can we add any user (or the same user) to the Administrator Group?
Thanks
Manish

Hello,
If no user has access to do this then the only option you have via the UI is to switch permission modes (to the SharePoint permission mode then back to the Project Server permission mode - this add the Company Administrators (global admins) the Admin group).
Do bear in mind this will remove all of the users from the security groups and reset ALL security so probably not an ideal option. The only other option is to open a support query via your Office 365 tenant and see what Microsoft suggest..
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS |
MVP | Downloads

Administrators group and Administrator account

Similar Messages

Maybe you are looking for