Auditing the admin guy

Hello,
I log everything from my ASAs to a syslog server, so when I make any changes there is an audit trail of what I have been doing, however my boss said what is stopping you turning off the logging and doing something malicious and then turning the logging back on?
Firstly if I turn off or on logging can it send a syslog message?
Secondly is there any software out there that can help?
Thanks

Hi,
for me, it looks like what would stop an admin from turning off logging/accounting is leveraging those two commands to some higher privilege level (command authorization) which only the boss can have. say level 14 can execute all commands except disabling logging (or aaa accounting), and disabling aaa command authorization, which will be available only for level 15.
An admin should have level 14, and a boss should have level 15.
If the question now turns into: "what is stopping a boss turning off the logging and doing something malicious ?", then i believe it would be an issue of trust and ethics.
Hope this helps
Mashal Alshboul

Similar Messages

Adding a domain user to the admin role within the local user management breaks all metro apps for all users!!

Hi,
I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines.
First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
Here are my exact steps of what I did to reproduce our problem:
Complete format of HDD in preperation for a clean install
Clean install performed
Set up the machine initially with a local account
Test metro apps - all working fine
Open control panel from the desktop, click on System, change the system to join the domain, click reboot
Log into the system using my domain account
Test metro apps - all working fine
Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
I click add and then add my domain account - also giving it administrator access
Sign off or reboot to ensure the new security is applied
Sign back in to the domain account
Test metro - ALL BROKEN
Sign out
Sign in as local account
Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
could fathom was a full re install and not giving the domain user admin access to the local machine.
Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
Thanks

Hi Juke,
Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
in event viewer.
Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
Under "Applications And Services Logs" --> "Microsoft" --> "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
Windows.Launch contract failed with error: The app didn't start."
If you require any further information just let me know and I will provide as much as I can.
Thanks

Restricting access to the Admin WebConsole of WebAccess 2012

Hi,
With the new WebAccess 2012 web application, the console is now a WebConsole that can be accessed by the URL http://<server>/gw/webacc?action=Admin.Open
I search the KB, the documentation and now this forum, looking for a way to restrict access to my precious WebAccess Console. No luck! (Only one thread ask for a similar solution restrict admin tool based on ip with no solution provided so far)
Humm So we are only 2 guys in the Groupwise community concern with security in those days? No engineer at Novell ask himself if exposing an Admin console to the Whole Internet is a good idea?
Furthermore, login (successes and failures) to the Webconsole are not written to log files. So I cannot even monitor if my WebConsole is under a brute force attack!
Here some technical information to consider:
1) I have Groupwise 2012 SP2 running under Windows 2008 R2
2) Since the Admin Webconsole is hosted under the same web site as WebAccess, I cannot restrict access to the URL http://<server>/gw/webacc?action=Admin.Open without blocking at the same time access to WebAccess using firewall or IIS rule.
3) I do not want to use IPS to restrict access to this URL
Truly

Francois, Just FYI the "green dots" are only accumulated by forum users taking the time to rate Laura's answers. She has no control over them and they speak for themselves. I've asked Knowledge partners to put the bit about rating in their signatures, it wasn't Laura's idea. Just FYI Laura also has the highest feedback scores out of all her peers in the program which also says something about her interactions here in the forums. As was pointed out, Laura is not a Novell employee, just another Novell user trying her best to stay on top of the issues and taking time out of her busy day to try to help other forum users. Nobody is going to be right 100% of the time. Please refrain from petty personal attacks in the future.
I suggest you take the time to read the forum Terms of Service: https://forums.novell.com/faq.php?faq=novfor#faq_rules where it states clearly:
Offensive Messages: Messages personally attacking, calling names, or otherwise harassing or being condescending to another forum member or any ethnic or religious group will be deleted. Offensive and/or vulgar language is not appropriate for Novell sponsored forums.
Your message was offensive, personally attacking, condescending and was deleted as per the forum terms and conditions. I wouldn't be surprised if the volunteers around here were a bit slower to respond to any issue you may post here in the future.

Where is the admin pic/photo stored?

hey guys.
you know when you first start up the macbook it'll use isight to use your photo for the admin pic.
i was just wondering where the system stores the photo. i'd just like to send it to a friend but i can't find its location.
thanks!
ronny.

Login to the admin account and open AddressBook. Copy and paste your picture from your card.

How to Audit the Report which is Export to Excel and PDF

Hi All,
Is there any way that we can audit the report which is exported to Excel or PDF and what data the user is exporting to his local computer.
We can audit the scheduled report with output Excel or pdf but i am not sure about the audit for report export activity to excel and pdf.
Thanks & Regards,
Rahul Akurathi

Hi,
You said that you have a new request number when you changed the program in Dev. Release that request and ask your Basis guys to move that transport to Testing Client. The program will be automatically updated in the testing client with the changes you have done in Dev when the transport gets imported in testing.
Reward if useful.
Thanks
Aneesh.

Can I default the Admin account of an ACS SE without a recovery CD

Hi - I have an ACS soultion engine 1111. I've been using it mess around with but now need to return it to stock so need to default it and get rid of the admin account. A TAC engineer has told me I can do this from the CLI but hasn't said exactly how.
Is it possible to return the device to factory defaults from the CLI or do I have to get hold of a recovery CD? The device is running 4.1
Many Thanks in advance
Dom

You can not reset the configuration to default in the ACS SE. It's required to use the recovery CD to re-image the Appliance.
When using the commands or the recovery CD:
Attach a DB-9 to RJ-45 adapter to the serial port of the console.
Set your terminal emulation communication software to operate with the following settings:
â¢Baud = 115200
â¢Databits = 8
â¢Parity = N
â¢Stops = 1
â¢Flow control = None
â¢Terminal emulation type = ANSI
You can not set the password back to "setup":
ACS_Console> set admin
Enter old password:
Enter new account name: administrator
Enter new password:
Reenter new password:
Error: Password must be at least 6 characters long.
Does not contain all or part of the user's account name.
Contains characters from three of the following four categories:
* English upper case characters (A..Z)
* English lower case characters (a..z)
* Base 10 digits (0..9)
* Nonalphanumeric (For example, !,$#,)
If you provide the new guy the current user/password, he could reset it using these commands:
- To set the name of the ACS SE administrator, use the set admin command:
set admin [administratorname]
- To set the ACS SE administrator's password, use the set password command.
If not, he would also need the Recovery CD to reset the password.

How to get the Admin Task to Process Members from Member Sheet?

Hey guys!
I've been successful getting the Custom SSIS Admin Task to process a Dimension using a SQL staging table. However, we have a few dimensions that are best managed in the Excel Member sheets. When we have changes to these member sheets, is it possible to process the dimension using the SSIS Admin Task. If so, how do I go about doing this? What settings do I need to use within the task?
I've tried using the "Scheduled Members Process" option (I honestly don't even know what this option does and I've found no documentation), but when this option is selected the task simply fails without any messages. And I've tried putting the path directly to the Member Spreadsheet in the "SQL Source Table" box. Using this method, the package returns a successful status code, but it's not really processing anyway. It finishes in less than 2 seconds.
Thanks much!
Sean

I don't understand why you want to do this -- if you're maintaining some dimensions manually in the XLS member sheet, then you should process the changes manually too, using the Admin Console. No DTS is required, and you also get the benefits of validation & error messages right away.
Having said that, if you feel it's necessary, you could set up a DTS package which uses the XLS member sheet, via an Excel connection manager, as a data source which is loaded into your custom dimension staging table. Then this staging table is the source of the admin dimension processing task.
Beware, though, that this means every time you add or modify dimension properties, you will need to update the columns in both the Excel connection manager and the staging table. I've always found this to be a very frustratingly manual process in BI Dev Studio, to get the data fields to properly refresh. I usually end up deleting the source & destination data flow objects, just to get the new fields to show up. (Maybe there's a better way, but I haven't found it.)
I always consider the dimension-processing decision on automation to be all or nothing for each dimension. If you're maintaining the dimension manually in the member sheet, use the admin console to process it.

I was the first guy in the world...

...to connect Sun ONE Application Server to PostgreSQL, so I'm expecting to be the first guy in the world who has tried to send email from an EJB deployed on Sun ONE Application Server.
I've gone through all the docs and tried dozens of different variations...I can look up the Session properly, but the problem is when I call Transport.send(). It happens on my application, and ALSO on the sample JavaMail application that ships with S1AS. I've set up the sessions properly via the admin interface.
All I have to go on is the following (completely useless) stack trace. Any ideas?
java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.RemoteException
at com.sun.corba.ee.internal.javax.rmi.CORBA.Util.wrapException(Util.java:364)
at javax.rmi.CORBA.Util.wrapException(Util.java:277)
at com.ai.coaching.ejb.directorymanager._DirectoryManager_Stub.sendEmailToAccount(Unknown Source)
at com.ai.coaching.web.SendEmailAction.perform(SendEmailAction.java:142)
at org.apache.struts.action.Action.execute(Action.java:415)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:465)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1422)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:523)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:720)
at org.apache.catalina.core.StandardWrapperValve.access$000(StandardWrapperValve.java:118)
at org.apache.catalina.core.StandardWrapperValve$1.run(StandardWrapperValve.java:278)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:274)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:203)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:157)
at com.iplanet.ias.web.WebContainer.service(WebContainer.java:598)
Caused by: java.rmi.RemoteException
at com.sun.enterprise.iiop.POAProtocolMgr.mapException(POAProtocolMgr.java:451)
at com.sun.ejb.containers.BaseContainer.postInvoke(BaseContainer.java:545)
at com.ai.coaching.ejb.directorymanager.DirectoryManagerBean_EJBObjectImpl.sendEmailToAccount(DirectoryManagerBean_EJB
at com.ai.coaching.ejb.directorymanager._DirectoryManager_Stub.sendEmailToAccount(Unknown Source)
... 20 more

I too am having a similar problem.
I'm attempting to send an email from within a Struts Action class, deployed on the Sun App Server 7. I have followed several documented ways of sending a JavaMail email without success. When I call Transport.send... I receive the following error msg:
[28/Dec/2003:16:20:48] SEVERE ( 2812): StandardWrapperValve[StrutsController]: Servlet.service() for servlet StrutsController threw exception
javax.servlet.ServletException: Servlet execution threw an exception
     at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:742)
     at org.apache.catalina.core.StandardWrapperValve.access$000(StandardWrapperValve.java:118)
     at org.apache.catalina.core.StandardWrapperValve$1.run(StandardWrapperValve.java:278)
     at java.security.AccessController.doPrivileged(Native Method)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:274)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:203)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:157)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:598)
----- Root Cause -----
java.lang.ExceptionInInitializerError
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:274)
     at javax.mail.Session.getService(Session.java:607)
     at javax.mail.Session.getTransport(Session.java:541)
     at javax.mail.Session.getTransport(Session.java:484)
     at javax.mail.Session.getTransport(Session.java:464)
     at com.americandatacorp.struts.action.MailAction.execute(MailAction.java:60)
     at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
     at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
     at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
     at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:720)
     at org.apache.catalina.core.StandardWrapperValve.access$000(StandardWrapperValve.java:118)
     at org.apache.catalina.core.StandardWrapperValve$1.run(StandardWrapperValve.java:278)
     at java.security.AccessController.doPrivileged(Native Method)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:274)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:203)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:157)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:598)
Caused by: org.apache.commons.logging.LogConfigurationException: java.lang.ClassCastException: org.apache.commons.logging.impl.LogFactoryImpl
     at org.apache.commons.logging.LogFactory.newFactory(LogFactory.java:549)
     at org.apache.commons.logging.LogFactory.getFactory(LogFactory.java:337)
     at org.apache.commons.logging.LogFactory.getLog(LogFactory.java:394)
     at com.sun.mail.smtp.SMTPTransport.<clinit>(SMTPTransport.java:44)
     ... 27 more
Caused by: java.lang.ClassCastException: org.apache.commons.logging.impl.LogFactoryImpl
     at org.apache.commons.logging.LogFactory.newFactory(LogFactory.java:542)
     ... 30 more
When I take the same approach and run the process from a main method in a standalone program it sends a mail successfully. Any idea why this is breaking with in the App Server or what this error message means?
The following is a summary of my code to send the email...
Properties props = new Properties();
props.put( "mail.smtp.host", host );
props.put("mail.smtp.auth", "true");
Authenticator auth = new ADCAuthenticator(); //implemented within this source file...
Session session = Session.getInstance( props, auth );
try {
MimeMessage msg = new MimeMessage( session );
msg.setFrom( new InternetAddress ( fromEmailAddress );
InternetAddress[] address = { new InternetAddress( toEmailAddress ) };
msg.setRecipients( Message.RecipientType.TO, address );
msg.setSubject( "JavaMail APIs Multipart Test" );
msg.setSentDate( new Date() );
MimeBodyPart mbp1 = new MimeBodyPart();
mbp1.setText( msgText1 );
MimeBodyPart mbp2 = new MimeBodyPart();
mbp2.setText( msgText2, "us-ascii" );
Multipart mp = new MimeMultipart();
mp.addBodyPart( mbp1 );
mp.addBodyPart( mbp2 );
msg.setContent( mp );
Transport.send( msg ); //the exception is thrown here.
} catch ( MessagingException mex ) {
mex.printStackTrace();
Exception ex = null;
if ( ( ex = mex.getNextException() ) != null ) {
ex.printStackTrace();
Is this a problem within my code or a bug in the application server? The root cause:
Caused by: java.lang.ClassCastException: org.apache.commons.logging.impl.LogFactoryImpl
concerns me since I'm not making any calls to the application server logging system.
Thanks for your assistance to anyone who can shed any light on this issue.
Regards,
Josh Holtzman

Adobe muse - how to upload images in photo gallery in the admin console?

Question from Adobe Muse beginner - I can't figure out how images can be uploaded in a slideshow/photo gallery in the admin console? I can edit or delete images but not upload additional images?

Hi,
May I know which admin console are you talking about.
You are talking about Business Catalyst or Adobe Muse?
Please provide the steps to access the admin console via Muse.
Regards,
Gaurav Aggarwal

How do you use Time Machine to restore a specific users account? I can't do it from the user screen because I am not allowed. I can't do it from the admin because I can't see other users in Time machine.

I can't restore my user account from the users screen because I get an alert that Mac OS needs something. I can't restore in TimaeMachine from the Admin screen because I can't see other users home folders. What can I do?

See Pondini's TM FAQs for starters.

HR PA Dynamic Actions: Generate mail to the admin when 0002 & 0021 changed

Hi gurus!
My client wants us to generate a mail to the Admin when an employee changes his 0002 or 0021 infotype
through ESS. I believe we could do this is Dynamic Actions. Can you please tell me how we do it?
Thanks and Regards,
Soniya

Hi,
Some good write-ups :
http://wiki.ittoolbox.com/index.php/Dynamic_Action
http://www.sapconfig.com/index-3.html (look for "Dynamic Action Mail for Infotype". This will require registration but free.
Thanks.
Regards
Kir Chern

This happens with only one bookmark. It takes me to a login page, as it should, I log in -- and it doesn't log me in to the admin page, it takes me to the website. This is the website I work on, so now I can't work on it from my laptop.

All of my bookmark and log in functions have worked in previous Firefox versions. But after this last one, the log in function fails with this one bookmark. It takes me to the log in/administrator page, as it should, I log in -- I can see the admin address flash by as it works, but Firefox winds up taking me to the website itself, not the admin dashboard. So ... when I need to work, I have to switch to Safari for just this one site.

See:
* http://kb.mozillazine.org/Location_Bar_search
You can change the pref <b>keyword.URL</b> on the about:config page to a Google Lucky search.
http://kb.mozillazine.org/Keyword%2eURL
http://www.google.com/search?btnI=I%27m+Feeling+Lucky&ie=UTF-8&oe=UTF-8&q=

How can i start the Admin server? may be this will be like clue: "When i try to start the iplanet suite with the start-admin script, i receive the following error:

bash-2.03# ./start-admin
AdmInit: Failed to perform security initialization for communicate with LDAP in SSL mode (error code = -1) Exit
so i can not login to console (./startconsole) because the "admin-serv" is not up: "Can not connect to the Admin Server "http://myserver.com:myportnumber/" The URL is not correct or the server is not running." any ideas..."
---------------------Seumas Froemke on 1/15/2002 said: ----------------
"I'm not familiar with the error, but I'll throw in my two cents and hope it leads you somewhere.
First, be sure you start things in the correct order. LDAP->Admin->Console.
Be sure you've set nsadminservaccessaddresses and nsadminaccesshosts.
Do you have problems starting everything up when you aren't using SSL mode?
You can put startconsole into debug mode with startconsole -D 9 but I don't think there is a start-admin debug mode. You'd have to settle for a truss.
All in all, you should ask this in the LDAP (User Management & Policy) forum."
--------------------and i wrote: -------------------------------------
Homero Borgo Valdez on 1/18/2002 said:
"I start things in the correct order.
how can i check the nsadminservaccessaddresses and nsadminaccesshosts settings (i'm new on this suite as you can see).
if i moved some checkbox when the console was ok how can i view that settings in text mode?
by the way i have another server that can sun console well (port 2125) so what file can i compare to change some wrong settings?
thanks anyway, another idea?"
--------------------so following the commnets i put this history here ----
help please!!

jvm file is in your system file folder.so you can delete that jvm file and to run as it is.

Unable to Open RPD in online mode by using the Admin tool in OBIEE 11g.

Hi All,
I Installed OBIEE 11g (11.1.1.5) in Linux Box.
When I am trying to Open the RPD in online mode by using the Admin tool, I am facing the below error.
Logon failed due to:[nqsError:43113] Message returned from obis
[nQSError:13037] Cannot connect to BI Security Service,please make sure this is running properly (with SSL ot not) in EM.
[nQSError:37001] Couldnot connect to the Oracle BI Server Instance.
All my services are up and the status are Alive,My biserver is in Running Mode and I am able to open the Answers page too.
I am able to open the same RPD in Offline mode but not in Online mode.
I Created a System DSN in ODBC Data Source Administrator for opening the RPD by using the OracleBIServer1 driver,still the issue doesnt resolve.
Any help is highly appreciated.
Thanks,
Praveen.
Edited by: 885630 on Dec 21, 2011 3:33 AM

Hi All,
This question is answered.
The Resolution is
While Installing the RCU i created two instances so the RPD is not able to take the correct instance.After deleting the other instance now i am able to open the RPD in online mode as it is pointing to only one instance.
Thanks,
Praveen.

Changing the Admin Account

I've been operating under my admin account since I've owned a Mac, and in all that time I've always had two accounts, one the admin, the other named 'Test' as a clean user. In light of the new potential danger of future trojan's and such should I (and am I able to) switch the Admin powers over to the mostly unused Test account and make my main account into a daily user? Or am I stuck with this configuration w/out a complete erase and reinstall?
Thanks
Ted

Yeah, geeze, we're getting ahead of the ball game here. These speculative precautions about viruses cause, as we see, more problems than they solve.
Instead of changing the way you work (and the way the OS is designed to work), don't mess with the user accounts. If you're the primary user of the computer, work in an admin account -- it's nothing like working as "root" (which is bad), and there are just too many occasions when you need to be an admin that working as a non-admin user is going to cause a big pain.
The only sensible precaution (in my opinion) is to back up your data. Retrospect Express and blank DVD-R won't cost you much, and they will protect against the myriad failure modes -- not just the unlikely case of a virus.
Once viruses become a problem inOS X (which, I agree, is inevitable), I have every confidence that Apple, Symantec, and lots of other companies will come up with good solutions. But, at the moment, the threat is slight, and so the demand is light, and therefore the products (and workarounds) are lousy. I don't think there's much virtue in being the first on your block to build a fallout shelter.

Auditing the admin guy

Similar Messages

Maybe you are looking for