Allowing 127.0.0.1:600000 to be used by non-admin users

We have this application that needs to relay via 127.0.0.1:600000. It only shows up in netstat -an while logged in as an admin with the program running.
It disappears when a non-admin is logged on.
Is there a way to grant access to this port using security permissions?
I tried Firewall rules for that port, and the application Inbound and Outbound.
Thanks
port numbers cannot exceed 65535 as they are built with a 16-bit container
Corsair Carbide 300R with window
Corsair TX850V2 70A@12V
Asus M5A99FX PRO R2.0 CFX/SLI
AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
G.SKILL RipjawsX DDR3-2133 8 GB
EVGA GTX 6600 Ti FTW Signature 2(Gk104 Kepler)
Asus PA238QR IPS LED HDMI DP 1080p
ST2000DM001 & Windows 8.1 Enterprise x64
Microsoft Wireless Desktop 2000
Wacom Bamboo CHT470M
Place your rig specifics into your signature like I have, makes it 100x easier to understand!
Hardcore Games Legendary is the Only Way to Play!

Similar Messages

How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

Hi all,
I have a company (+150 users) and I would like to allow users to update Java, FLASH and Adobe Reader only.
These software are already installed in the hosts, but there are updates of the program every week and it needs to be updated.
How can I give permissions to every user in the domain to do that? Just "Java, FLASH and Adobe Reader"
Remember that I dont want distribute software because they were installed.
I tried to enable "Enable user to patch evelated products" directive but it didn't work at my domain.
is it possible?

I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself. To automate flash player, I created a Policy and added the following:
Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
I used notepad to edit the mms.cfg, and used the following in the body:
AutoUpdateDisable=0
SilentAutoUpdateEnable=1
AutoUpdateInterval=0
My non-admin users now update flash in the background silently and automatically.

Allow Non-Admin Users Update Software Installed In Their Computers

Hello All;
At our location, we have several users who are not always in the office. In some instances, the imac or macbook pro ask for several updates such as Office 2011, and Adobe CS 5 and 6. And, the second issue, these users are not part of the administrator group or ever will be the administrator of their computers.
Is it possible to adjust the authorization file to allow non-admin users to run these sort of updates?
or
Is there a product on the market that can push updates to all these different programs?
Thanks Kindly

Is there a product on the market that can push updates to all these different programs?
Apple Remote Desktop, for one.

Allowing non-admin users to use certain programs without authenticating

I would like to allow certain programs to be run by non-admin users without forcing them to authenticate as an admin. Here is my example: I'm running Parallels Desktop with a VM to Windows. I want to allow my children to use this VM to access Windows programs. But, when starting a VM, the Mac OS requires an administrator to authenticate. Needless to say, I don't want my children to be administrators on the machine. I've been assured that this is not an issue related to how Parallels works (from the support team at Parallels). Instead, this is an issue with the Mac. i'm not sure one way or the other, but it seams useful to be able to (in general) allow non-admin users to use certain programs without forcing them to authenicate as administrators.
There is only one summary in the Mac help on allowing non-admin users to change the time zone settings by directly editing the /etc/authorization file. Does anybody know if this procedure would work for other programs?
Thanks!

If you know what the requested right is, that procedure can be applied to any right in an application with a graphic interface by duplicating and modifying entries. The contents of that file don't control usage of sudo in the Terminal.
(25922)

Allows non admin users to add printers

We have some new MacBooks with Mavericks, but I can't figure out how to leave the printer & scanners system preference panel unlocked, so users can add printers wherever they go with their laptops. Is there a way to make it happen?

Follow the instructions for mobile users on this page:
Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

Allowing non-admin users partial admin privileges

Hi All
I manage a number of Macs on a large corporate (PC-centric) network. Organisation policy prohibits giving users admin privileges. However, I want users to be able to do some admin tasks like installing software, but not to have admin privileges per se. The Parental Controls option for non-admin accounts does not offer sufficient functionality.
All the Macs are stand alone (not managed accounts), and are accessible via Apple Remote desktop. Few of the Mac users are command line savvy, so any solution has to be invisible, or via a simple gui.
Thanks in advance
Dave Mitchelll

Most software does not need to be in the Applications folder to run. Non-admin users can install most drag-and-drop software right inside their home folders and run the apps from there.

How do I allow access to non admin network users to disk volume?

I would like to allow access to a specific volume (disk) on one of our networked macs (Mac1) to all users. I've set user accounts on Mac 1 for all network users. These users are "regular" users, not admin. They can access this disk (and all others on Mac1) if I log in as Admin set Users to Admin. If I do this, then users have access to ALL data on all disks. If I do not, leaving them as "regular" users, when they log in they only see public folders. How can I allow access to the one disk volume without making network users admin? I tried changing various settings for the volume in Finder Info (everone else=read/write; ignore permissions) with no luck.
Thanks
iMac, ibooks, G5, Tibook Mac OS X (10.4.4)

Your observations are correct - by default, an "admin" user connecting over AFP can choose from available "volumes" (default) or "shares", whereas a non-admin user can only mount "shares".
By default, the only "shares" on an OS X client machine are the users' "Public" folders, and unlike pre-OS X Macs, it isn't easy to configure your own share points. Apple's official statement is that users wanting this functionality should buy OS X Server.
However, it is possible to create an arbitrary share point using 3rd party software called "SharePoints" (donationware). I have never used it, but it seems to be well regarded. Alternatively, you can do it manually following the instructions in this hint & comments (especially apw8's):
http://www.macosxhints.com/article.php?story=20011108161839416
Once the external drive (or folder on the external drive) is configured as a share point, it should be possible for non-admin users to select and mount it once they connect over AFP.

Allowing Shockwave Player to run for non-admins

Hi all, I see the following problem on and off for years now, with Adobe Flash and in particular Adobe Shockwave Player.
I have a school that has a Windows 7 lab. Shockwave Player 11.6 is installed as part of the base image. It shows up in "Programs and Features"
After it was initially installed, I tested the plug-in by going to http://www.adobe.com/shockwave/welcome and it worked fine.
The problem I'm having is with non-admin users. Our students aren't local admins. Say they go to a website that has Shockwave content, for example, http://www.pbs.org/wgbh/aso/tryit/dna/index.html
When I (with a non-admin student account) click on the link to play the Shockwave content, a pop-up window appears. Then IE 9 displays a message "This webpage wants to run the following add-on: "Adobe Shockwave Player 11.6" from Adobe Systems Incorporated. Allow/Allow for all websites?" I don't want to see this again, so I click Allow for All websites. Then I get another window: "Adobe Shockwave Player is now installing....Installing compatibility components." So far, so good. The problem is, once the installation progress bar gets to the end, Windows User Access control pops up prompting for an admin user account and password to complete the install. Since they don't have an admin account, the install can't complete.
How do I get Shockwave Player to "just work" for non admin users? I see for Flash there is this document at http://forums.adobe.com/thread/987370 about registry permissions, etc. Is there a similar solution for Shockwave Player?
Please help, thanks,
Sir_Timbit

If SW is trying to install compatibility components, be sure to run the full installer before creating your base image

Allow non-admins to install software?

I find it rather tedious to have to type my password every time others want to install something on the computer (which is a shared computer, by the way). Is there any way to allow a non-admin user to install software, but not have other admin priveleges?

On the screen where you're prompted for the password, find and note down the requested right. Use a program such as TextWrangler to edit the /private/etc/authorization file so that all accounts have that right.
(59954)

Allow non-admins to setup Time Machine?

I have 850 managed client computers that are all non-admin users. Some of the clients would like to use time machine to backup their data to external drives at home. When they go to set this up they are prompted for a admin password. Is there a way of setting up these computers to not prompt for a admin password when setting up Time Machine? Maybe in the /etc/authorization?

I was able to figure this out.
first I navigated in the registry to HKLM\System\CurrentcontrolSet\Services Here it lists each service name. I copied the 'display name' of the service from the services.msc console and did a find on this registry key and found the name of the
service. Then I was able to run this command.
sc sdset [service name] D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPDTLO;;;RD)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
When performing the command sc sdshow [service name] I received this. D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
What i added is what allowed the Remote desktop usrs group to get start/stop/pause/resume access.
sc sdset [service name] D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPDTLO;;;RD)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
Zach Smith

Remote management under Sharing will not allow me to add admin user

I have just imaged my iMac lab to Lion. I am using Apple Remote Desktop 3.5. (I have used it for several years and know how to set it up and use it.) The problem I am having is adding my admin account to the list of users that are allowed remote management through sharing in system preferences.
The user list shows every other account, but will not show my admin account. I have imaged labs each year and have never experienced this issue. Not sure where to go from here. I am able to log in to each of the systems using the missing admin account but can't add that user to authorize remote management as it isn't listed. The sytems have recently been updated to 10.7.4.
For example, I have these accounts:
Me (admin)
User 1
User 2
User 3
User 4
When I go to system prefs>sharing>remote manage and click the Add to authorize only certain users, I only see User's 1-4. The admin account isn't listed...even if I am not currently logged into that account.
*I have just updated to ARD 3.6.

I can add "Administrators" under Remote Login just not Remote Management.

Have tried to install icloud 4.0 for windows and again it does not allow syncing with outlook 2013 calendar and contact using windows 8.1 and IOS 8.02 (unexpected error)? I thought itunes 12.0 and icloud 4.0 would solve issue but still same result.

I have tried to install icloud 4.0 for windows and again is does not allow syncing with outlook 2013 calendar and contact, using windows 8.1 and IOS 8.02 (get - unexpected error)?

Having same issues. had been syncing every few days with outlook 2007 contacts and calendar but since updated to 4.0.2 and latest itunes I get an error that it is unable to sync. I can't seem to find any solution.

Use of non-migratable database link not allowed in OSB

Hi All,
I have a procedure in which tables are invoked using Database links.
Now I have created a business service which uses this procedure. However I am getting below error
The invocation resulted in an error: Invoke JCA outbound service failed with application error, exception: com.bea.wli.sb.transports.jca.JCATransportException: oracle.tip.adapter.sa.api.JCABindingException: oracle.tip.adapter.sa.impl.fw.ext.org.collaxa.thirdparty.apache.wsif.WSIFException: servicebus:/WSDL/E2xInterface_V1/WSDL/GetEWOStatus [ GetEWOStatus_ptt::GetEWOStatus(InputParameters,OutputParameters) ] - WSIF JCA Execute of operation 'GetEWOStatus' failed due to: Stored procedure invocation error.
Error while trying to prepare and execute the SP_GETEWOSTATUS API.
An error occurred while preparing and executing the SP_GETEWOSTATUS API. Cause: java.sql.SQLException: ORA-00604: error occurred at recursive SQL level 1
ORA-24777: use of non-migratable database link not allowed
can we use dblink in procedure while accessing through business service. Please let me know.
Thanks
Chandana

hello gurus . i have same problem on my stored procedure what is a non xa datasource. how can i create on my weblogic server

Can I create a template and that will allow me to add a region when i use i

Is it possible to create a template that will allow me to add a region when i use the template on my pages? I have a region that allows the user to create content in the region, but now i would like to have another region next to it.
thanks
Angie

You cannot add regions on a page that uses a portal template.

Allowing 127.0.0.1:600000 to be used by non-admin users

Similar Messages

Maybe you are looking for