Allow non-admins to setup Time Machine?

I have 850 managed client computers that are all non-admin users. Some of the clients would like to use time machine to backup their data to external drives at home. When they go to set this up they are prompted for a admin password. Is there a way of setting up these computers to not prompt for a admin password when setting up Time Machine? Maybe in the /etc/authorization?

I was able to figure this out. 
first I navigated in the registry to HKLM\System\CurrentcontrolSet\Services  Here it lists each service name.  I copied the 'display name' of the service from the services.msc console and did a find on this registry key and found the name of the
service.  Then I was able to run this command.
sc sdset [service name] D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPDTLO;;;RD)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
When performing the command sc sdshow [service name] I received this.  D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
What i added is what allowed the Remote desktop usrs group to get start/stop/pause/resume access.
sc sdset [service name] D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPDTLO;;;RD)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
Zach Smith

Similar Messages

  • Non-admin users and Time Machine

    We have a 1-1 laptop program with 7th and 8th grade students. The students are not admins of their own laptops.
    This year we gave each student an external hard drive and had them use Time Machine to back-up their accounts. The problem was when a student needed to restore from Time Machine, we needed to enter the administrator's password.
    We'll be switching to Lion over the summer, and by default, a non-admin user cannot even turn on Time Machine without an adminsitrator's password, which makes Time Machine useless. I don't want to have our students go back to manually dragging and dropping all of their school data (and movies and music) to back it all up (what a messy process).
    Is there any way around the need for an admin password to use Time Machine?

    Time Machine (the application) is already allowed. That's not the problem.
    In order to set-up Time Machine the first time, users have to open the Time Machine Preference, and that is locked. When a user tries to unlock it, they need to enter an administrator's password, but our students are only standar users.
    We don't want to have to enter that password for 250 machines each time students need to access that preference.
    In addition, an administrator's password is needed to restore anything from a Time Machine drive, and we'd like a way around that too.

  • Non-admin Printer Setup?

    At my work, none of the 350 users are admins. Before we can deploy Mac OS X 10.5.x, we have to allow them to add/delete their own printer. With Mac OS X 10.4.x, the Printer Setup Utility did not require an administrator name and password, so all was fine. But, I can't have 350 users submitting requests to me to add or delete printers for them 12 hours a day (there would have to me more than two more of me) from five time zones. Since there are remote users in 15 states and a total of 70 different offices, there's no way I can add all the printers someone might use ahead of time. How can I change Mac OS X 10.5.x to allow non-admin users to add printers?
    -Doug

    Follow up to my previous post.
    After some further thought, there are permutations to the procedure I set out before. If you want to open it up for all users to add and administer printers, you can comment out the applicable Policy sections of cupsd.conf. Specifically, the following blocks commented out will allow a Standard user (or any user) to add and administer printers. This can be done through the web interface, command line 'lpadmin', or through *Add Printer* from a print window. With this configuration, no password will be required.
    EDIT: No Parental Controls need be set with this method. The user could be Standard or Managed.
    <pre style="overflow: auto;font-size:small; font-family: Monaco, 'Courier New', Courier, monospace; color: #222; background: #ddd; padding: .3em .8em .3em .8em; font-size: 9px;"># <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    # AuthType Default
    # Require user @SYSTEM
    # Order deny,allow
    # </Limit>
    # <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
    # AuthType Default
    # Require user @AUTHKEY(system.print.admin) @admin @lpadmin
    # Order deny,allow
    # </Limit></pre>
    Obviously, there are policy and security implications with the above. You will have to decide if the new policies are within your overall security limits.
    Note that I have left in place the earlier directive to allow only admin (sudoers) to change the cupsd.conf file.
    <pre style="overflow: auto;font-size:small; font-family: Monaco, 'Courier New', Courier, monospace; color: #222; background: #ddd; padding: .3em .8em .3em .8em; font-size: 9px;"><Location /admin/conf>
    AuthType Default
    Require user @SYSTEM
    # Restrict access to the configuration files...
    Order allow,deny
    Allow localhost
    </Location></pre>
    Matt
    Message was edited by: Matt Broughton

  • Allowing non-admin users to use certain programs without authenticating

    I would like to allow certain programs to be run by non-admin users without forcing them to authenticate as an admin. Here is my example: I'm running Parallels Desktop with a VM to Windows. I want to allow my children to use this VM to access Windows programs. But, when starting a VM, the Mac OS requires an administrator to authenticate. Needless to say, I don't want my children to be administrators on the machine. I've been assured that this is not an issue related to how Parallels works (from the support team at Parallels). Instead, this is an issue with the Mac. i'm not sure one way or the other, but it seams useful to be able to (in general) allow non-admin users to use certain programs without forcing them to authenicate as administrators.
    There is only one summary in the Mac help on allowing non-admin users to change the time zone settings by directly editing the /etc/authorization file. Does anybody know if this procedure would work for other programs?
    Thanks!

    If you know what the requested right is, that procedure can be applied to any right in an application with a graphic interface by duplicating and modifying entries. The contents of that file don't control usage of sudo in the Terminal.
    (25922)

  • Allow Non-Admin Users Update Software Installed In Their Computers

    Hello All;
    At our location, we have several users who are not always in the office. In some instances, the imac or macbook pro ask for several updates such as Office 2011, and Adobe CS 5 and 6. And, the second issue, these users are not part of the administrator group or ever will be the administrator of their computers.
    Is it possible to adjust the authorization file to allow non-admin users to run these sort of updates?
    or
    Is there a product on the market that can push updates to all these different programs?
    Thanks Kindly

    Is there a product on the market that can push updates to all these different programs?
    Apple Remote Desktop, for one.

  • Allow non-admins to install software?

    I find it rather tedious to have to type my password every time others want to install something on the computer (which is a shared computer, by the way). Is there any way to allow a non-admin user to install software, but not have other admin priveleges?

    On the screen where you're prompted for the password, find and note down the requested right. Use a program such as TextWrangler to edit the /private/etc/authorization file so that all accounts have that right.
    (59954)

  • How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

    Hi all,
    I have a company (+150 users) and I would like  to allow users to update Java, FLASH and Adobe Reader only.
    These software are already installed in the hosts, but there are updates of the program every week and it needs to be updated.
    How can I give permissions to every user in the domain to do that? Just "Java, FLASH and Adobe Reader"
    Remember that I dont want distribute software because they were installed.
    I tried to enable "Enable user to patch evelated products" directive but it didn't work at my domain.
    is it possible?

    I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself.  To automate flash player, I created a Policy and added the following:
    Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
    I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
    I used notepad to edit the mms.cfg, and used the following in the body:
    AutoUpdateDisable=0
    SilentAutoUpdateEnable=1
    AutoUpdateInterval=0
    My non-admin users now update flash in the background silently and automatically.

  • Where do I change file preferences to allow opening of files in time Machine? Or can it only be restored?

    TRying to see if photos backed up with time machine are actually on the backup drive. It will not allow to open?

    Go to your photos in Finder, then enter TM interface. When you see that they are there you can cancel.
    See...
    http://pondini.org/TM/FAQ.html

  • If I reset my admin password, will Time Machine backups be impacted?

    I have a Mac Mini, OS X10.6.8. I forgot my admin password, but I see I can reboot with specific commands to reset my admin password. Before I do this, I would like to know if files on my computer AND/OR backup files on my Time Machine will be impacted. Will all remain the same, no disrupt if I reset by rebooting and giving commands? Thanks!

    Time Machine won't be affected. Neither will your files, except the keychains, which will be reset to empty. You can't recover those without the password.

  • How to setup Time Machine on 2 drives in 2 different locations

    I back up on 2 different drives in 2 different locations. Time Machine only remembers 1 drive so every time I go home I have to open TM pref and switch drives to backup to. Is there a way to get TM to remember the settings for both drives and make it a plug and play backup?

    the following method was proposed by biovizier on this forum and it seemed to work when I tried it. you can try it and see if it works.
    First, give both backup drives the same name. then enable showing hidden files in finder. you can do this using Tinkertool or using the following terminal command
    defaults write com.apple.finder AppleShowAllFiles TRUE; killall Finder
    then open the TM drive at home in finder. there will be a file at its top level with the name like .001d4f56a01d. Copy this file to the main disk, go to the other location and move this file to the other TM drive.
    You'll have to authenticate with your admin password to do this. then unplug and replug the TM drive and
    see if TM backups work without reselecting the drive.
    you also might have to change the ownership on that file - I'm not completely sure about that.

  • Allowing non admins to update flash

    I work for a school, we do not give instructors admin rights, but it would be helpful to both us (IT staff) and them (instructors) to be able to just click "update" when a new version is out. what folders/ registry keys do I need to give write access to in order for a non-admin to update flash? this would be on a Windows 7 x32 x64 machine.
    Thank you.

    I don't know how this can be done the way you describe it.
    The easiest would be if you distribute the executable installer(s) from http://www.adobe.com/products/flashplayer/fp_distribution3.html, then right-click and 'Run as Administrator'.
    Or deploy it using the MSI installer; see http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html for more information.

  • I deleted a contact from my phone and it synced with all my other devices including my Mac. However, I have setup time machine and have many previous backups. Can I open or use a file in back ups to get my contact back? Where and which one? Thanks!

    Its all in the question.
    I have backups from months ago.
    And ICLOUD deleted my contact from others devices.

    Bring the Contacts window forward, then enter Time Machine and scroll back to a snapshot that includes the contacts you want to restore. Select the contacts and click the Restore button in the lower right corner of the screen.
    If you don't have a Time Machine backup, but your contacts are all on iCloud and haven't been overwritten, then you can recover them by following the instructions on this page. Double-click the downloaded file to import it into Contacts. This procedure will not work if you've synced an empty Contacts database to iCloud.

  • How do I allow non-admin accounts to have access to the player?

    I need help please. First I want to say that I did read the "Read this first"  sequence, but I have no idea how to find out where all those posts are or how to browse for them, so PLEASE do not be cross  with me if I am  asking something already addressed.  Here is my problem: I downloaded and installed the latest version of flashplayer according to the instructions. That gave me the   flashplayer debugger and it all works like a charm on my administrator account. But as soon as I switch to a regular user account (any non admin, acct)  it is as if I had not installed anything    that is the videos do not get displayed instead I get a blank  space, My computer Operating System is a windows 7  and I use Internet Explorer version 8.  the win 7 runs both the 32 version and the 64 version of the IE8 but I never use the 64 (because I read somewhere that does not work),  Thank you very much!

    First thing(s) to try:
    on the limited account, can you see the Flash animation at http://www.adobe.com/software/flash/about/ ?
    if yes, can you right-click on the Flash object, select Settings, then disable Hardware Acceleration?
    if still not working, can you check IE Tools | add-ons, if Shockwave Flash object is enabled?
    If it still fails, can you try the following:
    download the executable installer http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe (save to disk)
    still on the limited account, right-click on the downloaded installer, then select 'Run as Administrator')
    Does it work now?

  • Setup Time Machine Backup To Multiple Devices

    I currently have a Time Capsule and I let Time Machine run it's regular back ups. What would I have to do if I wanted to run a manual backup once a month to another drive/device? Can this be done, or would I need to use another backup program/method to do a monthly backup to another device/drive?
    I know that Time Machine does a monthly, I'd just like have a 2nd backup. Thanks!

    Mike72677 wrote:
    I currently have a Time Capsule and I let Time Machine run it's regular back ups. What would I have to do if I wanted to run a manual backup once a month to another drive/device? Can this be done, or would I need to use another backup program/method to do a monthly backup to another device/drive?
    All you have to do is format the other drive properly, then go to TM Preferences > Change Disk and select the alternate. The first backup to it will be a full one, of course, so quite lengthy.
    Then to switch back to the TC, just use +Change Disk+ again. The only caution is, if you go several days (over 10) between backups on the alternate, TM may, depending on the volume of changes, do another full backup the next time.
    Both sets of backups will be independent and complete, but have different "snapshots" of your system.
    I know that Time Machine does a monthly, I'd just like have a 2nd backup. Thanks!
    That's not exactly true. TM does hourly backups, then "thins" them out, keeping one per week as long as there's room; the first of each day for a month; all others for 24 hours. But they're all done in exactly the same way, and each is a full picture of your system.
    An alternative, that many of us do, is to make a full "bootable clone" with CarbonCopyCloner, SuperDuper! or the like, in addition to full TM backups. These have advantages and disadvantages vs. Time Machine, and for those of us who think that Murphy was an optimist, it's always good to have a second, independent backup. It's a bit safer to use a separate disk for these, but you can also use a separate partition on the same disk.
    One thing you might consider is getting a portable external for the "clone," and taking it to your safe deposit box, workplace, relative's house, etc., so you're also protected from fire, flood, theft, direct lightning strike, etc.

  • Allowing non-admin users partial admin privileges

    Hi All
    I manage a number of Macs on a large corporate (PC-centric) network. Organisation policy prohibits giving users admin privileges. However, I want users to be able to do some admin tasks like installing software, but not to have admin privileges per se. The Parental Controls option for non-admin accounts does not offer sufficient functionality.
    All the Macs are stand alone (not managed accounts), and are accessible via Apple Remote desktop. Few of the Mac users are command line savvy, so any solution has to be invisible, or via a simple gui.
    Thanks in advance
    Dave Mitchelll

    Most software does not need to be in the Applications folder to run. Non-admin users can install most drag-and-drop software right inside their home folders and run the apps from there.

Maybe you are looking for