Availalbe updates to terminal server: normal users can install!

Hi,
We see that a testuser with no rights on an existing terminal server (Windows 2008) can deploy windows updates to it!?
Please advise howto prevent this.
J.
Jan Hoedt

>can deploy windows updates
I'm assuming you mean they see stuff in the Software Center and can chose to install it.
You have a Deployment of a Software
Update Group that is has the 'experience' settings set to show in the Software Center.
If you do not want all users to be able to install things from the software center on that device, then deploy a Client Settings to a collection that contains it with "Computer Agent > Install Permissions" set to something other than "All
users", such as "Only administrators".
I hope that helps,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you found a bug or want the product to work differently,
share your feedback.
<-- If this post was helpful, please click the up arrow or propose as answer.

Similar Messages

After changing a mail list name in Server end, users can't see the update in outlook client

Dear all,
This is a real issue. I am a Help-desk in a global company and after changing a mail list name in Server end, users can't see the update in outlook client. Even I download Offline address book in full detail, user still can't see the change in her outlook.
Does anyone know how to fix it?
Thanks,
Franklin hong

Hi,
Would you please detail what you did by "changing a mail list name in Server end"? What is the mail list and what server?
If you switch to Online Mode instead of Cached Exchange Mode, does the user see the change?
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

I want to buy photoshop creative cloud for teams, how users can install and use it?

i want to buy photoshop creative cloud for teams, how users can install and use it?

Cancel old and buy new is the only way I know, but you MAY be able to exchange
Return, cancel, or exchange an Adobe order

I have updated my IPhone 4s to ios6, but for some reason it didn't install Siri with the update, is there any way I can install it onto my IPhone without jail breaking the phone?

I have updated my IPhone 4s to ios6, but for some reason it didn't install Siri with the update, is there any way I can install it onto my IPhone without jail breaking the phone?

Macca_astles01 wrote:
It is an iPhone 4s, it has voice control but it's not Siri, is there any way I can install it?
It cannot be installed. It comes pre-installed on every iPhone 4S and later. Maybe it was disabled under Settings > General > Restrictions.
Courcoul wrote:
Wasn't SIRI one of the gee-wiz doodads introduced with iOS 6? Cause my boss' 4s w/iOS 5 certainly does NOT have it. And on my i5, the Spanish-speaking SIRI I got turned out female, with all the foibles and vicissitudes....
iOS 6 only added support for the 3rd generation iPad. It was always on the iPhone 4S. Then the same goes for your boss: Maybe disabled in restrictions, or maybe actually an iPhone 4.

External users can communicate web server, Internal users can't communicate

Hi All,
This Babu, I have Cisco - 1941 and ASA 5510, ISP was terminated on Router point ot point connectivity(10.10.10.0/30). Router isdie ip is Public ip
(49.49.49.1/28), firewall inside ip is 49.49.49.2 and i have done nating in firewall with private ip 192.168.1.0/24.
we have web server, this is also connected in Intranet, this internal ip was 192.168.1.13 nat with publi ip 49.49.49.13.
In this scenario all external users can communicate with web server ie www.example.com. but internal users can't communicate with www.example.com
All internal user able to ping the web server with 192.168.1.13 successfully and get the internet also.
Please help me, what is the problem...

Hi Jereen,
my user tried the following :
- went to http://oraclepartnernetwork.oracle.com/
- at top of the page, click on the "Register / Sign In" link.
- entered user name [email protected], and password (he tried also with a reset system generated password)
- got "Invalid Login" Error
so it seems the issue is not with beehive online, but with SSO to start with...
my other sun.com users have the same issue. Could it be a restriction on Sun.com domain ?
I understand now my issue is not with beehive online, so don't hesitate to redirect me to the appropriate support team if necessary.
Thanks a lot for all your help
christian

Normal users can not login CDE

Hi every body.
I have just installed Solaris 10 in a Ultra 10 box. When my normal users tray to login CDE they must wait long and at the end they have a message window like this:
_DtMessage Failure Messaging System Inoperative To restart: 1) Save all open data files. 2) Logout. 3) Login again. Note: The current session will not be saved. When you are ready to begin the restart process click [ok] and proceed to save your files. behind this window there are another one: Action Required DT messaging system could not be started. To correct the problem 1- Chose [ok] to return to the login screen 2- select failsafe session from the login screen's option menu and login. 3- Check to see that the host name is correct in these locations /etc/src.sh /etc/hosts /usr/adm/inet.sec For additional information see the DT users guide. This issue only occurs when the home directory is mounted via nfs. If is mounted locally there are no problems. I deleted .dt* directories but this does not solve the problem. Any idea will be very appreciated. Guix

Is the "ttdbserverd" rpc service running on the nfs server?
Does the nfs client log anything to it's /var/adm/messages file?
For example errors like this:
Aug 12 18:43:31 elise-3com.tools.intra /usr/dt/bin/ttsession[851]: [ID 424917 daemon.error] Error: rpc.ttdbserverd on leo is not running
Aug 12 18:43:31 elise-3com.tools.intra /usr/dt/bin/ttsession[851]: [ID 908584 daemon.error] Ttdb_client::connectToDb(): fcntl(F_SETFD): Bad file number

Automount using udev, but normal user can't access

i'm using udev rules to automount usb drive. one of my external drive using usb to connect my pc.the file system of that external hdd is ntfs. when i plugin, automount in /media, but i can't using normal user to go in. need superuser.how to i slove this question?

miau wrote:You could also try to install ntfs-3g, maybe its a problem related to NTFS.
i already install ntfs-3g, i use "mount -t ntfs-3g /dev/sdb1 /media/usbhd" with no problem read and write.
how do i add to udev rules?

Upgraded to OS X Server, now users can't login

I recently went to the Apple Store and worked with the guys there to upgrade from Lion Server to Mountain Lion and then to OS X Server.
Following the upgrade I can see two users, administrator and a user. The user account will not login, it says "Cannot login, there is an error", also in the Server app, Users, the + - buttons are greyed out, so it is not possible to add accounts.
Help! Does anyone know how I can get around this.
Thanks

That's a pain. Personally... but that's me personally... I never try to do major version upgrades to server products. I always do data export, or copy from old system, and do a clean install. If the hardware is old I get new hardware and do data copy to new, clean installed, system.
You didn't make clear in your first post whether the machine was a 'production' & dedicated server (not workstation doing double duty).
Do you have a (total) backup of old Lion server? Did you do a data export?
Can you SSH into the box?
Obviously at this time you should be giving up on trying to revive this installation and be focusing on getting data out then doing a clean install.

Reader update on terminal server

I am upgrading reader on a terminal server. I don't want the 'Acrobat Security Settings' dialog box popping up asking to import settings the first time each user opens a signature enabled pdf. Is there a way to avoid this?

Hi,
I added bAskBeforeInstalling in the registry on these exact locations but to no avail.
(Note: I placed _ as space because this forum keeps on reformatting my path)
HKEY_CURRENT_USER\Software\Adobe\Acrobat_Reader\11.0\Security\cDigSig\cAdobeDownload\bAskB eforeInstalling = value is 0
HKEY_CURRENT_USER\Software\Adobe\Acrobat_Reader\10.0\Security\cDigSig\cAdobeDownload\bAskB eforeInstalling = value is 0
and
HKEY_CURRENT_USER\Software\Adobe\Adobe_Acrobat\10.0\Security\cDigSig\cAdobeDownload\bAskBe foreInstalling = value is 0
I did it both manually on the registry, via GPO or Custom Wizard. Other people have tried but has the same exact issues:
http://forums.adobe.com/thread/1203540
http://forums.adobe.com/message/4961805 .
When I also looked here http://www.adobe.com/devnet-docs/acrobatetk/tools/PrefRef/Windows/index.html for bAskBeforeInstalling Pref Reference the version is TBD. Therefore, it appears that this may not work on XI *or* on a computer that runs two different versions.
I think what I am trying to accomplish is not supported and recommended to coexist because according here
http://helpx.adobe.com/acrobat/kb/acrobat-product-interoperability-install-remove.html
https://blogs.adobe.com/pdfitmatters/2011/09/installing-both-reader-and-acrobat-on-the-sam e-machine.html
Did someone able to successfully make this import dialog go away on a computer that is Windows 7, Adobe Acrobat 10 and Adobe Reader XI without deleting or renaming the .acro files?
Thank you!

Added a second IP to our server = Now users can't log-in

Hi,
I had a server that was working fine. It had one external IP address. I then added a second external (dedicated) IP address to the same ethernet port, by adding a second port in "Network Preferences" and manually typing in the IP configuration - just as I did for the original ethernet interface when the server was originally configured.
The reason I added a second IP address is so that I could run Apache2 on port 80 on the new IP while continuing to run Apache1.3 on port 80 of the original IP.
Of course now I've screwed up the reverse DNS and such and my users can't login over AFP (though SMB is ok). My initial IP has a properly configured reverse lookup, the new IP does not. The new IP is using the ISP's default domain name.
In a situation like this, am I supposed to configure both IPs to resolve to the same computer name? myServer.company.com ? Or should each IP resolve differently..
Thanks
Woody

Of course now I've screwed up the reverse DNS and
such and my users can't login over AFP (though SMB is
ok).
How do the users connect to AFP? WAN or LAN, Hostname or IP ?
My initial IP has a properly configured
reverse lookup, the new IP does not. The new IP is
using the ISP's default domain name.
In a situation like this, am I supposed to configure
both IPs to resolve to the same computer name?
myServer.company.com ? Or should each IP resolve
differently..
Reverse lookups (PTR records) shouldn't come into it. If users use a hostname to connect then all you will need is an A record to convert the hostname to an IP. If they use an IP to connect, then no DNS is accessed. So if you cannot connect directly using the IP address then it suggests firewall or config - test for open 548 port etc.
-david
Server 10.4.8

Can one deauthorize FCE HD 3.5 so that another user can install?

Hi,
Many thanks in advance for your attention.
1. Is there a limited number of installs one is permitted with FCE? How do I deauthorize 3.5 in my computer so that it can be installed anew on another's computer? Put another way, how do I transfer the 3.5 Serial Number over to someone else?
2. I have FCE 4 now. Can I install that over my FCE HD 3.5 imbedded in computer now? Or should I uninstall FCE 3.5 first? From what I read, no easy way to uninstall 3.5
3. Like in iTunes, if one gets a new computer, you can deauthorize your old one, and reinstall your iTunes purchases anew in your new computer.

1. The FCE license allows you to install on one desktop and one laptop as long as you own both, are the user of both, and only use it on one machine at at time. This is somewhat on the honor system. There is no formal deauthorization like there is in iTunes. You can transfer the 3.5 license to someone else as long as you don't keep 3.5 on your system and you don't use 3.5 as the basis for upgrading to FCE4 (i.e. the $99 upgrade as opposed to the $299 full license).
2. Yes, you can install FCE4 over FCE 3.5. If you really want to uninstall FCE3.5 first, here are the instructions.
But be honest here. If you purchased the FCE 4 upgrade (as opposed to the full version) for the purpose of upgrading from FCE 3.5 then you are legally not allowed to transfer the 3.5 version to someone else, or even to another computer that you own. You will need the 3.5 serial number in order to install 4.0
3. FCE is not like iTunes.

A terminal server must be in install mode??

I'm trying to install the ODP.NET 10103Beta software on a windows 2000 server machine. But I get a message saying a terminal server must be install mode. I don't understand this. I'm currently running the 10101 stable and had no problems with that.
Any help would be appreciated.
Thanks,
Jeremy

Just wanted to post the answer in case anyone else is having issues.
1. As the Oracle download page says, make sure the path you unpack the .zip file in has no spaces.
2. Run the setup.exe program from Start-Control Panel->Add/Remove Programs
3. Hit Floppy/CD Rom...wait for it to give up, then browse to the setup.exe in the Disk1 folder and select it.
My .NET C# application automagically picked up on the new driver...I pretty much had to do nothing there.

Normal user can't connect to Time Machine drive on another machine

Hi guys, get the feeling I've missed something simple…
1. Physically attached big external drive to 'server' machine
2. Set up Time Machine to use external drive both on server and from my laptop (by mounting on desktop)
Everything happy.
3. On server did chgrp for the external drive to a group which user J is in
J can see (and write to) the drive when logged into server, but not when logging into server from her laptop. I can see drive from her laptop but only when attaching to server as me.
4. Undid 3 and tried adding her username to drive instead via Get Info. Same deal.
So I'm the only remote user which can see the drive. What did I miss?
All machines 10.6.1
Cheers

Tom Robinson5 wrote:
Thanks James. I've set up File Sharing on the destination as you say. On the source I can only see the destination when connecting as my user ID, not as a different account—despite setting up permissions for this.
Hmm. I've not done TM backups this way, but you might try to see if it's sensitive to names this way, as it often is with Time Capsules and drives attached to Airport Extremes.
Start with the Computer name (System Preferences > Sharing). Keep it short, use only numbers and letters -- no spaces, punctuation, or special characters. Then click Edit and make the corresponding change to the Local Hostname. This makes no sense, of course, but often works anyhow!

Lion Server: new user can't connect

This is a local ethernet network, Mac Mini running Lion Server 10.7.4.
I created 2 new users with Server app, same specs as already existing users, but can't connect to the server with the new id's. I just don't undrestand what I'm missing. The old id's all work perfectly when I try to connect.

Check your Services' ACL with Server Admin. It may happen that the new users are included in groups which are allowed for some services, but the new users are not included automatically in this group.

Is there a way to have a wiki on osx server where users can be created at first logon? (for a semi-public wiki)

Hello,
I am installing an osx server that will be primarly used as a wiki for collaboration.
Problem: there will be many users from various organisations -> creating users manually on the server is not an option.
Is there a way to have a page/something where users will login and the account will be created at first logon? (after being approved if possible).
I'd want my users to go to the wiki and do something like click a "new user" or "create account" button then fill a form. The account in th directory would be then auto magically created.
Does this feature already exist for osx server with the built-in wiki?

Just generate the TTS on a separate slide and then assign the audio file created in the LIbrary to whatever object you need.

Availalbe updates to terminal server: normal users can install!

Similar Messages

Maybe you are looking for