Allow users to run installed applications

doing tons of homework on this to no avail--safarie and other applications are available to admin--i want to select applications as admin and pick which ones users can use--how the heck do you do this?--new to mac but tons of computer exp including some unix

Any program installed in the /Applications folder (at the top level of the hard drive) should by default be accessible to all other users, except when access for a specific user has been blocked with Parental Controls.

Similar Messages

Allowing user to run an optional test

I'm new to Teststand and Labview. Can anyone tell me a simple way for allowing users to run an optional test sequence at the end of another test sequence. I've played around with the message popup step, hoping that I could just call the optional sequence if the operator presses an 'OK' button or end the original test sequence if the operator presses a 'CANCEL' button, but haven't had much luck so far.
Thanks in advance!

Hi,
Make use of the Precondition, an example of this is the Computer Motherboard Test.seq in the TestStand\examples\demo folder.
This has diagnostics test sequence which it runs if any of the test steps fail.
Regards
Ray Farmer
Regards
Ray Farmer

I would like to run a stock analysis program called Toolkit 6 on my Macbook Pro, but it only works on the Windows platform. Is there software that allows me to run Windows applications on the Mac?

I would like to run a stock analysis program called Toolkit 6 on my Macbook Pro, but it only works on the Windows platform. Is there software that allows me to run Windows applications on the Mac?

Yes it's MS Windows! You will need a license of MS Windows (preferable Windows 7) and from there you can decide on the strategy for running Windows on your iMac. You can use Boot Camp (you already have this) or you use virtualization software such as Parallels or Fusion. For your situation I'd recommend virtualization software. However for only one program I'd do some due diligence to see if there is a OS X version. You can start with the App store or simply use Google to search.
Kappy has provided a good article on running Windows on a Mac and the various options. Here is the link:
Kappy's explanation
Roger

How to allow users to run infopackage without giving access to Workbench

Hi,
I have certain infopackages which I want to give access to users to run. It mainly relates to loading of flat files which they want to be able to execute when they want and also loading the P&L data from R/3.
I am on 3.5..I don't want the users to have access to do anything else on the Admin workebench.
what is the best way? Is there a program or tcode which I can give access to the users where they specify the infopackage name and run it.
Thanks

Hi,
Create a role in transaction pfcg. Goto authorization tab-> change authorization data-> manual entry of authorization objects -> give the standard authorization object 's_rs_admwb'.
This autho-object is for protecting DWWB objects.
Inside this object , you will have option 'data warehouse workbench object' . Click change.. select 'infopackage'. In the activity you can give options display and execute. Save the authorization and generate profile. In the user tab, give the user ids of those who need to execute the infopackage. This should work exactly for your requirement..
Regards,
Krishna.

Restricted user cannot run applescript application

I have written an applescript application (locked) for students using iMacs on our win2000 network to dismount pc shares. The applications accessed by the students are restricted via parental controls. When I search and select the application (logout) within the parental controls I get the message 'logout can not be run with the limitations set'. Whilst logout can be run by admin it will not run for the student. Has anyone got any ideas?

Hi Richard,
Thank you for using the National Instruments forums!
Is this error only with this one specific VI or with all VI's?? What does this VI do in terms of function?
Have you tried this same VI as a copy of this file, to make sure there is no corruptions with the VI?
Error related to lvinit.cpp are generally due to administrator rights / user rights issues.. Was LabVIEW installed with admin priveleges, and that users are allowed to read/write on the file used by LabVIEW? It has been seen before that the issue can be solved with giving the users the suitable read/write permissions to LabVIEW.
Kind regards,
Ashish Naik
Field Sales Engineer
National Instruments UK

[SOLVED] [sudo] allow user to run commands as root

Hello,
I want to run programs like netctl and vpnc as normal user without typing in my password. This is what I've come up with for /etc/sudoers:
myusername ALL = (root) NOPASSWD: /usr/bin/netctl, /usr/bin/vpnc, /usr/bin/vpnc-disconnect
But running e.g. "netctl start someprofile" fails because access to the file `someprofile' is denied -- the file is owned by root and only root may read it.
Doesn't running programs as root also mean that these programs can read files owned by root? Or is this a misconception and I should change permissions to the corresponding files?
Thanks & Regards
Edit:
I just realized, that, with the setup above, "sudo netctl start someprofile" does work without demanding a password. This is nice. But can it be tuned further so that I don't have to prepend "sudo"?
Last edited by ball (2013-05-23 19:22:17)

@qinohe:
I am in group wheel and I already have
%wheel ALL=(ALL) ALL
myusername ALL=NOPASSWD: /usr/bin/netctl, /usr/bin/vpnc, /usr/bin/vpnc-disconnect
So this would be same, wouldn't it?
I just realized, that "sudo netctl start someprofile" does work without demanding a password. This is nice. But can it be tuned further so that I don't have to prepend "sudo"?
Last edited by ball (2013-05-23 18:50:46)

Administrative user only for install software but prevent intercative session

Hello,
as an university, we are not allowing domain users di write anything on the C:\ drive on our Win7/64 PCs; therefore users are unable to install any software and that is what we - usually - want.
But there are some users (researchers, Teachers or labs) who sometimes need to install software in order to test it. So we created on their PCs a local user "install" as member of the local administrator Group. They should use it when
UAC prompts them to give administrative rights to install software or with the "Run as administrator" right click. This works fine but unfortunately we noticed that many users are using the "install" account to do their daily work, so they
are working the whole day long with the highest privileges and we do not want this for obvious security reasons.
We want to leave the administrative user "install" for the software installation purpose but we want prevent users using it interactively; we couldn't find a way to do this. Is it possible ?
In order to discourage users, we also made some tests giving the "install" local user, deny permission on the start menu, desktop and some other folders, so that they couldn't find programs and be very limited in using the installa account
interactively, but this does not give the expected results (for example the user is able to create a folder on the desktop after a couple of popus warnings, or the start menu is not completely empty).
Any ideas ?
Thank you in advance.
Best regards,
Eric

Hi,
In my opinion, you can try to use AppLocker to accomplish this task. You can create a new pricple the allow specific user or group install application. Also the type of about to be installed app could be customized.
You can allocate User group app install permission to make sure they could install APP unrestricted but doesn't have administrator rights.
Please refer to the link below for more details about APP Locker:
http://technet.microsoft.com/en-us/library/dd723678(v=ws.10).aspx
Roger Lu
TechNet Community Support

My TaskSequence aborts prior to installing applications

Hi guys, so I've been using a task sequence that lets the user pick and install applications from a list.
For halv a year now without any issues.
a few days ago I upgraded the server from SP1 to R2, I thought that everything was now set as it was suppose to..
but apperently its not. Cause my task sequence aborts.
Right after installing drivers, it restarts then goes to windows.. it leaves this folder behind
C:\_SMSTasksequence - filled with stuff in it. furthermore no applications are installed.
I googled the folder cause I had never seen it before and its clear this is still here because the task sequence aborts unexpectedly
As the task sequence is completely identical to the one before I upgraded to R2, I don't understand whats wrong.
Hoping you can help me decode the log so I can start looking at what issues there might be, here is the
SMSTLOG, site wouldn't take its size so had to move it to pastebin
SMSTS Log
I see it at one point writes '<![LOG[BaseVar = '', ContinueOnError='']LOG]!><time="16:57:54.380-120" date="05-27-2014" component="InstallSoftware" context="" type="1" thread="1908" file="main.cpp:319">'
Should BaseVar='COALESCEDAPPS' ?
This is from my OSDSetupWizard in the same folder -->
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'TsApplicationBaseVariable'. Value = 'COALESCEDAPPS'
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'TsWindowsAppPackageAppBaseVariable'. Value = 'WINDOWSAPPPACKAGEAPPS'
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'TsAppInstall'. Value = 'AppInstall'
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'AppInstall001'. Value = 'ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/Application_55e0bf56-08c2-407e-9a0a-614128afcb8e:!Mapdrev'
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'COALESCEDAPPS001'. Value = 'Mapdrev'
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'COALESCEDAPPS002'. Value = 'Acrobat Reader'
14:26:43.311 05-27-2014 2 TSVariableRepository Saved variable 'COALESCEDAPPS003'. Value = 'Exformatics Office Extension 7.0.140'
as you can see, I have at least 3 apps, set to the right variable COALESCEDAPPS.
So they should be installed?...
and just to make it even more weird.. this is from my appDiscovery
<![LOG[Entering ExecQueryAsync for query "select * from CCM_AppDeliveryType where (AppDeliveryTypeId = "ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b54b1f01-c4d5-45d2-ac23-c44c4d097537" AND Revision = 5)"]LOG]!><time="17:09:58.036-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="appprovider.cpp:406">
<![LOG[ Performing detection of app deployment type Hotkey - x230, x240(ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b54b1f01-c4d5-45d2-ac23-c44c4d097537, revision 5) for system.]LOG]!><time="17:09:58.052-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="appprovider.cpp:2148">
<![LOG[+++ Application not discovered. [AppDT Id: ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b54b1f01-c4d5-45d2-ac23-c44c4d097537, Revision: 5]]LOG]!><time="17:09:58.083-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="localapphandler.cpp:291">
<![LOG[+++ Did not detect app deployment type Hotkey - x230, x240(ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b54b1f01-c4d5-45d2-ac23-c44c4d097537, revision 5) for system.]LOG]!><time="17:09:58.083-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="appprovider.cpp:540">
<![LOG[Entering ExecQueryAsync for query "select * from CCM_AppDeliveryType where (AppDeliveryTypeId = "ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b7dd6c6d-36be-4ada-91bf-a9aa810bd44e" AND Revision = 15)"]LOG]!><time="17:09:58.083-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="appprovider.cpp:406">
<![LOG[ Performing detection of app deployment type Thinkpad Hotkey Integration(ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b7dd6c6d-36be-4ada-91bf-a9aa810bd44e, revision 15) for system.]LOG]!><time="17:09:58.083-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="appprovider.cpp:2148">
<![LOG[+++ Application not discovered. [AppDT Id: ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b7dd6c6d-36be-4ada-91bf-a9aa810bd44e, Revision: 15]]LOG]!><time="17:09:58.098-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="localapphandler.cpp:291">
<![LOG[+++ Did not detect app deployment type Thinkpad Hotkey Integration(ScopeId_08EFDC2F-7EF8-49E7-9EB6-92C27C1C9B61/DeploymentType_b7dd6c6d-36be-4ada-91bf-a9aa810bd44e, revision 15) for system.]LOG]!><time="17:09:58.098-120" date="05-27-2014" component="AppDiscovery" context="" type="1" thread="1884" file="appprovider.cpp:540">
Whats really weird about these 2 applications is, that they aren't deployed to the variable..
They are however deployed to the collection the device is placed in.
I need a place to start... cause the logs dont help me much at this point.

hi Peter and thx for the answer.
are you refering to main.cpp:319 ? I see you are right it does have three digits there.
First I wanna say I'm sure you are right its somewhere here the problem lies. My UDI Wizard that I use to Display applications on a list, got updated aswell and I had to redo settings.
I wanna point out again
This task sequence I'm about to show did work prior to the Update from SP1 to R2..
Convert List to two digits:
I already have a step thats suppose to convert to, two digit numbers in my TaskSequence. Anyways here is my step, do you see any problems with that?
Install Application
And here is the step where I set a variable for installing applications, in UDI Wizard I use the same variable, to display and select from a list of 15-17 apps.
UDI Wizard
And here to show you what COALSCEDAPPS is pointing too.
(This I had to rename, it had 'APPLICATIONS' set as variable after the update)
I did however try both without luck

How do I not let certain users run an installed application?

I have a computer lab at a school that is running Snow Leopard and a Snow Leopard server. Is there a way in Workgroup Manager to disallow the student group from running an installed application? I know that I can "always allow" all the rest of the applications, but there is just one that I specifically want to disallow and I don't want to have to be constantly updating an application whitelist.

Hang an ACL off the bundle and — presuming your students are all associated with a group I'll refer to as "student" group — use the ACL to deny access to anybody in "student"? That's sort-of and sort-of-not WGM, but it'll work.

How to allow application access to particular User while running payroll

Guys,
We are using Oracle Co-Hrms and payroll application and running fine,but one majore problem we face in every payroll,while running the payroll if any employee profile opened by any user ,which is inculde in assignment set of running payroll then system take much time,Howevery,rightnow we inform to whole department to don't use hrms between x to y time,but it is not effectivey properly and also not propery way according to this big Application "Oracle E-Business Suit,i think,there must be an opetion to cover this problem,
Is there any possibilit to locke all of the user temporary excep one to two user,who work on Salary Process(payroll).
Please advice
thanks

Thanks for reploy,
The way you have defined is better to avoide this issue,could you please tell me one thing,is there any request in application to disconnect all the user forcely on the spot who are connected and allow again to login in application only thoes user who have System Administator Responsibility,
--thanks

How to give permission to user to run and install application like data card or modem

Hi,
when a standard user try to use an Data card (airtel 3G Dongle), windows 7 prompts for a administrator password to run the application.
I have to go and type admin password each time when that person uses the dongle. Is there any way that i can give permission for that user account only to run that application without admin password.
I don't want to add him to administrator group and then it will be a mess.
please help me out here............
Thanks in Advance.

I would check to see if there is software that can be downloaded to the PC from the manufacturer. I am assuming your device is a "plug and play" device. The manufacturer might still have the device drivers for install on their website.
Installing the drivers manually should alleviate the problem
Otherwise, you can make the changes in Group Policy to solve the problem
See this link: http://technet.microsoft.com/en-us/library/cc725772.aspx

"Invalid User ID" error while running OSoft Application in browser

Hi,
I have installed BPC 7.5 SP04 in Multi Server environment where SQL Server, OLAP Server, Reporting Server on one machine and Application Server and Web Server on other machine, After installing I tried to run Osoft application via url "http://Application Server name/OSoft" as suggested in Install guide but receiving "Invalid User ID" error
Error Information
Server Error in '/OSoft' Application.
Invalid UserID
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Exception: Invalid UserID
Please guide me on this as what can be the cause of this error and how to fix it.
I have used Windows Server 2008 with IIS 7.
Thanks,
Rohit
Edited by: Khatak Rohit on Mar 18, 2011 10:57 AM

First login must be done with Installation user.
In your case you tried to login from your PC where you were conected with your user.
This user is used to connect to BPC and this user has no rights into BPC.
It was used this user because BPC allow Windows authentication.
So you have to go into IE - Tools - Internet Options
Select Security Tab - Select Intranet
Push Custom Level
Go to section - User Authentication - select "Prompt always user and pwd"
Close IE
Open again and try http://nameofserver/osoft you will receive now a prompt for user and pwd.
Input an user and pwd with access to BPC and you will see this time the page will be load correct.
Regards
Sorin Radulescu

How do I restrict users from installing applications?

Or more specifically, yahoo messenger. I can't seem to figure this one out. Two user settings on our machines (public and admin), public does not have admin priveleges, so cannot make modifications like installing applications, but someone seems to keep installing messenger all the same. I investigated and figured out that it seems like when logged onto the public account, one can still install applications in their user/applications folder without needing to authenticate. or maybe Yahoo Messenger doesn't read as an application, so it doesn't need authetication? I am trying to make it so no one can install any application without admin priveleges.

"Parental Controls" works on a "white list" principle, so if an app isn't available in the "Accounts" pref pane, it shouldn't be accessible for the "managed" user because the default is to deny everything not on the list.
But also be aware that the type of "Parental Controls" you have selected may affect the user's ability to use a given programme. For example, if the "Allow supporting programmes" checkbox is selected, it may be possible to launch indirectly a programme that hasn't been approved explicitly.
Also, note that a "Simple Finder" account doesn't (and isn't intended to) restrict application access at all, whereas a "Some Limits" account does.
And as "Keith Gaboury1" points out, if a given service allows access through a web interface, restriction of a programme on the local computer won't have any effect.
"Parental Controls" are somewhat effective in preventing users from using unauthorized programmes, but as far as preventing the installation of apps, that is something that would be fairly difficult to do if the user is to have a functional account. If a user can save files to a directory (such as their home folder or "/Users/Shared" or the "admin" user's "Drop Box"), it would be possible for them to install an application there. There are ways of preventing executables in the user's own "home" from functioning, but then they could always run an app from a CD or a flash drive or a disk image instead (I'm not sure how to block those). So the "white list" approach of controlling application use (as opposed to installation) is probably the best compromise.

New Mac Mini Server, two Hard drives, Can I install an older Mac OS on the second drive and switch start up disks to run PowerPc applications?

New Mac Mini Server, has two Hard drives, could I install an older Mac OS on the second drive and switch start up disks to run PowerPc applications?

I haven't purchased a Mac Mini at this time and I may not if I can't use it as a non server. I need to update my system I would be better off buying a new Mac with Snow Leopard the last app that will run Rosetta. The Mac Mini Server has a quad 2.0 processor and 4 GB RAM and two internal hard drives and should out perform my dual 1.25 G4. I can run PPC apps on my G4 but it is 8+ years old and seems to be getting noisy. I don't want to tie myself to another old machine. I want a machine that will work with Intel Apps I was hoping that the two hard drives would allow me to boot from the second with Snow Leopard and use Lion on the first drive to be able to keep up to date with all my other universal apps and Mac OS up grades. The application I use the most is my CanvasX app with drawing & vector effects, text & typography, sprite technology, painting, image editing, and multimedia tools are all in this one app but will not be updated to run Intel apps. I am frozen in time because my most valuable Application won't be updated and Apple has cut me off by not supporting PPC in Lion and onward; Apple used to backward support but I guess that they are no longer as user friendly and concerned with a happy user. I have always been a loyal Mac user and I will not migrate to Windows under any circumstance; I hate windows!
Thanks for your prompt response,
Dick Deaton

Install application to user's without administrator rights

If a user is not in the windows administrators group they can not install applications.
A simple zwsreg / zwsunreg will not run, In Console One applications under run options selecting run as secure system user does not work. I have tried several other options with workstations association etc. Can someone point me in the right direction to allow local users accounts permission to install applications from the Application Launcher ( NAL)
Im thinking the workstation manager should have rights to install applications from the NAL
Thanks!

Jbeattie,
> c:\install\picasa3-setup.exe
>
> Under "Run Options" Environment in "Console One "
> Executable security level:
> "Run as unsecured system user"
> It launches and shows up on the try but will not finish install?? Just
> hangs.
>
OK. Any way to enable logging? Also see:
http://www.appdeploy.com/packages/detail.asp?id=634
- Anders Gustafsson (Sysop)
The Aaland Islands (N60 E20)
Novell has a new enhancement request system,
or what is now known as the requirement portal.
If customers would like to give input in the upcoming
releases of Novell products then they should go to
http://www.novell.com/rms

Allow users to run installed applications

Similar Messages

Maybe you are looking for