Best practice for Admin viewing contents of network homes

How are you viewing the contents of your users' network home directories in the gui?
Is there a better way than logging in locally as root? I'd like to do this over AFP if possible.
Can I make an HomeAdmins group and propogate that group to have read access to all users' home folders? How about for new homes that are subsequently created?
Thanks,
b.

You probably know this already, but:
1. Nothing bad should happen if you change the group owner of your home directories unless you're using the current group ownership for something important.
2. If you set the setgid bit on the root directory of the sharepoint and it is owned by the admin group then new folders created within should have the group owner you want. There are various ways to ensure the home directories would have the proper permissions.

Similar Messages

  • Best-practice for Catalog Views ? :|

    Hello community,
    A best practice question:
    The situtation: I have several product categories (110), several items in those categories (4000) and 300 end-users.    I would like to know which is the best practice for segment the catalog.   I mean, some users should only see categories 10,20 & 30.  Other users only category 80, etc.    The problem is how can I implement this ?
    My first idea is:
    1. Create 110 Procurement Catalogs (1 for every prod.category).   Each catalog should contain only its product category.
    2. Assign in my Org Model, in a user-level all the "catalogs" that the user should access.
    Do you have any idea in order to improve this ?
    Saludos desde Mexico,
    Diego

    Hi,
    Your way of doing will work, but you'll get maintenance issues (to many catalogs, and catalog link to maintain for each user).
    The other way is to built your views in CCM, and assign these views to the users, either on the roles (PFCG) or on the user (SU01). The problem is that with CCM 1.0 this is limitated, cause you'll have to assign one by one the items to each view (no dynamic or mass processes), it has been enhanced in CCM 2.0.
    My advice:
    -Challenge your customer about views, and try to limit the number of views, with for example strategic and non strategic
    -With CCM 1.0 stick to the procurement catalogs, or implement BADIs to assign items to the views (I experienced it, it works, but is quite difficult), but with a limitated number of views
    Good luck.
    Vadim

  • Best practice for multi-language content in common areas

    I've got a site with some text in header/footer/nav that needs to be translated between an English and Spanish site, which use the same design. My intention was to set up all the text as content to facilitate. However, if I use a standard dialog with the component's path set to a child of the current page node, I would need to re-enter the text on every page. If I use a design dialog, or a standard dialog with the component's path set absolutely, the Engilsh and Spanish sites will share the same text. If I use a standard dialog with the component's path set relatively (eg path="../../jcr:content/myPath"), the pages using the component would all need to be at the same level of the hierarchy.
    It appears that the Geometrixx demo doesn't address this situation, and leaves copy in English. Is there a best practice for this scenario?

    I'm finding that something to the effect of <cq:include path="<%= strCommonContentPath + "codeEntry" %>" resourceType ...
    works fine for most components, but not for parsys, or a component containing a parsys. When I attempt that, I get a JS error that says "design.path is null or not an object". Is there a way around this?

  • What is the best practice for changing view states?

    I have a component with two Pie Charts that display
    percentages at two specific dates (think start and end values).
    But, I have three views: Start Value only, End Value only, or show
    Both. I am using a ToggleButtonBar to control the display. What is
    the best practice for changing this kind of view state? Right now
    (since this code was inherited), the view states are changed in an
    ActionScript function which sets the visible and includeInLayout
    properties on each Pie Chart based on the selectedIndex of the
    ToggleButtonBar, but, this just doesn't seem like the best way to
    do this - not very dynamic. I'd like to be able to change the state
    based on the name of the selectedItem, in case the order of the
    ToggleButtons changes, and since I am storing the name of the
    selectedItem for future reference.
    Would using States be better? If so, what would be the best
    way to implement this?
    Thanks.

    I would stick with non-states, as I have always heard that
    states are more for smaller components that need to change under
    certain conditions, like a login screen that changes if the user
    needs to register.
    That said, if the UI of what you are dealing with is not
    overly complex, and if it will not become overly complex, maybe
    states is the way to go.
    Looking at your code, I don't think you'll save much in terms
    of lines of code.

  • Best practiceS for setting up Macs on Network

    Greetings.
    We have six Macs on our Windows Server network; three iMacs and three laptops. We have set up all the machines and they are joined to the Active Directory. In the past, we have always created local users on the machines and then "browsed" to the server shares and mounted the them. We've learned things have improved/changed over the years and we're just now realizing we can probably have the machines set up to work better. So, I have a couple of questions for "best practices" when setting up each of the machines.
    1. Since we’re in a network environment, should we not set up “local logins/users” and instead have users login using their AD login? It seems having a local account creates some conflicts with the server since upgrading to lion.
    2. Should we set the computer to not ask for a “list of users” and instead ask for a username and password for logins?
    3. For the user that uses the machine most often, they can still customize their desktop when they use an AD login, correct?
    4. Should we set up Mobile User Accounts? What exactly does this do?
    Any other advice on how we should best be setting up the clients for our environment to make sure we are following best practices would be great!
    Thanks for any help!
    Jay

    Greetings.
    We have six Macs on our Windows Server network; three iMacs and three laptops. We have set up all the machines and they are joined to the Active Directory. In the past, we have always created local users on the machines and then "browsed" to the server shares and mounted the them. We've learned things have improved/changed over the years and we're just now realizing we can probably have the machines set up to work better. So, I have a couple of questions for "best practices" when setting up each of the machines.
    1. Since we’re in a network environment, should we not set up “local logins/users” and instead have users login using their AD login? It seems having a local account creates some conflicts with the server since upgrading to lion.
    2. Should we set the computer to not ask for a “list of users” and instead ask for a username and password for logins?
    3. For the user that uses the machine most often, they can still customize their desktop when they use an AD login, correct?
    4. Should we set up Mobile User Accounts? What exactly does this do?
    Any other advice on how we should best be setting up the clients for our environment to make sure we are following best practices would be great!
    Thanks for any help!
    Jay

  • Best Practices for Creating eLearning Content With Adobe

    As agencies are faced with limited resources and travel restrictions, initiatives for eLearning are becoming more popular. Come join us as we discuss best practices and tips for groups new to eLearning content creation, and the best ways to avoid complications as you grow your eLearning library.
    In this webinar, we will take on common challenges that we have seen in eLearning deployments, and provide simple methods to avoid and overcome them. With a little training and some practice, even beginners can create engaging and effective eLearning content using Adobe Captivate and Adobe Presenter. You can even deploy content to your learners with a few clicks using the Adobe Connect Training Platform!
    Sign up today to learn how to:
    -Deliver self-paced training content that won't conflict with operational demands and unpredictable schedules
    -Create engaging and effective training material optimized for knowledge retention
    -Build curriculum featuring rich content such as quizzes, videos, and interactivity
    -Track program certifications required by Federal and State mandates
    Come join us Wednesday May 23rd at 2P ET (11A PT): http://events.carahsoft.com/event-detail/1506/realeyes/
    Jorma_at_RealEyes
    RealEyes Connect

    You can make it happen by creating a private connection for 40 users by capi script and when creating portlet select 2nd option in Users Logged in section. In this the portlet uses there own private connection every time user logs in.
    So that it won't ask for password.
    Another thing is there is an option of entering password or not in ASC in discoverer section, if your version 10.1.2.2. Let me know if you need more information
    thnaks
    kiran

  • Best practices for translating FrameMaker content?

    I'm interested in learning from Adobe or experienced users about best practices to follow (or references worth reading) about translating FrameMaker publications.

    Haven't done this for a while, but I believe the first recommendation used to be "work with a reputable translation agency who will accept, translate and return .mif files." fwiw, I still remember a run-in with one agency that claimed they did but didn't … they passed our .mif files on to translators who used Word =8-} The result in our case was that all the autonumbering in a long, complex regulatory document failed, because Word had slipped a fine-space character in before every colon in the French translation.
    A separate issue is whether it's worth moving to structured Frame, which is said to make translation management easier as your document evolves.
    There'll be lots of people who can give you more complete, more up-to-date answers, though.

  • Best practices for multiple users on a network?

    We have a centralized server storing all of our media, and a Final Share system allowing about 10 clients to connect.  The details of the system aren't important, it mounts just like a local drive on each client and bandwidth is higher than FW800.
    My question is what is the best way to handle cache files, sidecar files, autosave, etc. when passing edits between editors?  What should be stored locally, what can be placed on the server?  Of course all media has to be placed on the server, but can everything else sit alongside the footage? 
    The reason I ask is we started by pointing everything at the server, but now are having the good old Serious Error whenever two editors (in different project files) are referencing the same media.  We'd love to resolve this... assistant editors can't log footage if doing so causes the editor's project file to lock up. 
    Thanks!
    P.S. first tried called adobe phone support about this... not making that mistake again.  The most apathetic customer service rep I think I've ever spoken with told me they wouldn't provide support because our Serious Error was the result of network issues and not their fault.  And then that we should be storing our media files locally.  I didn't see it necessary to mention that local storage on 10 machines isn't that viable with almost 50TB of data.

    klonaton wrote:
    The reason I ask is we started by pointing everything at the server, but now are having the good old Serious Error whenever two editors (in different project files) are referencing the same media.  We'd love to resolve this... assistant editors can't log footage if doing so causes the editor's project file to lock up.
    Hi Klonaton.
    Are you using two Premiere projects or one Prelude project (for logging) and one Premiere project (for editing) ? I'll have to check tomorrow to be absolutely sure but we do sometimes have simultaneous logging and editing with -respectively- Prelude and Premiere through our small network, with no issues.
    Changes to metadata and comment markers created into Prelude instantly appears and update into Premiere. Subclip don't and have to be sent from Prelude to Premiere on the same computer (or the media has to be imported again inside Premiere). I think it's normal considering how subclips work a bit differently in Prelude and Premiere.
    Every files are on a thunderbolt raid drive shared on the network through an iMac. The Media Cache and Media Cache DB are on the network shared drive too, and common to every users and computers.
    Also I don't get if crashes happen when your two projects are running simultaneously or not (in the latter case, that's a huge problem).

  • Best practice for sharing html content on different group spaces?

    How can html content be shared between several group spaces?
    One way I have found is to add a html doc to ucm and then to add this doc as a iframe to a page.
    Are there other ways, like adding on one group space page a html layout element and then to view this content in a different space. How could this be done, with an expression language reference?
    Has someone experience in presenting the same html content on different spaces and can share how he does it. Any ideas are welcome.
    Thanks,
    Max

    Hey Max,
    Check out our technical whitepaper on Integrating ECM with Portal Technologies.
    Our "Fishbowl Portlets" allow you to share any content - HTML, WYSIWYG user generated content, documents etc - in multiple contexts (portlets, web apps, etc).
    This is one of the things that we showcased as the recent Collaborate conference in Vegas - WebCenter framework, UCM and the portlets surfacing the same items in different contexts - all personalization aware, configurable and end user/super user editable.
    The white paper can be found here:
    http://www.fishbowlsolutions.com/StellentSolutions/ContentManagementResources/index.htm
    A blog post on it can be found here:
    http://cfour.fishbowlsolutions.com/2010/03/10/fishbowl-portlets-followup-cis-and-content-consumption-options/
    warmly,
    Billy Cripe
    Fishbowl Solutions

  • Best Practice for Laptop in Field, Server at Home

    I'm sure this is a common workflow. If somebody has a link to the solution, please pass it along here.
    I keep all my images on a server at home. I would like to keep that as the repository for all my images.
    I also have a laptop that I am going to use in the field and edit work in lightroom. When I get back home I would like to dump those images on my home server (or do it from the field via vpn), but I would like the library to keep the editing settings attached to the images (which would now be on the server and deleted from the laptop). Then if I open them on my desktop (accessed from the server), I'd like all that editing I've already done to show up. Then if I go back to the macbook (from images on the server) all the edits are available.
    Is this possible? Can anybody give me an idea about the best way to do solve this.

    Version 1.1 will be adding much of the fundamental database functionality that is currently missing from V1, and should make the database a practical tool.
    If you are doing individual jobs that you need to carry around between your laptop and your desktop, I recommend using multiple individual databases. You can copy (in actuality move) the database between your laptop and your desktop much easier because the size remains manageable, and you can even do slideshows and sorting without access to the originals. Using one big database is impractical because the thumbnail folders get so humongous.
    It is a rather kludgy workaround, but it sure beats not being able to share a database between a laptop and a desktop system.
    Another option is to keep the Lightroom databases on a removable hard drive, and just use that as your 'main' storage, with your backups on your real main storage. If you keep your originals on the same drive, you can do all your work this way, although you may have to 'find' your folders with your originals every time you move between the different systems.
    Again, even when using a removable drive, using small separate databases seems to be the only way to go for now.
    The XMP path is a terrible workaround IMHO, since the databases get all out of sync between systems, requiring lots of maintenance, and not everything transfers back and forth.

  • Best practices for setting up users on a small office network?

    Hello,
    I am setting up a small office and am wondering what the best practices/steps are to setup/manage the admin, user logins and sharing privileges for the below setup:
    Users: 5 users on new iMacs (x3) and upgraded G4s (x2)
    Video Editing Suite: Want to connect a new iMac and a Mac Pro, on an open login (multiple users)
    All machines are to be able to connect to the network, peripherals and external hard drive. Also, I would like to setup drop boxes as well to easily share files between the computers (I was thinking of using the external harddrive for this).
    Thank you,

    Hi,
    Thanks for your posting.
    When you install AD DS in the hub or staging site, disconnect the installed domain controller, and then ship the computer to the remote site, you are disconnecting a viable domain controller from the replication topology.
    For more and detail information, please refer to:
    Best Practices for Adding Domain Controllers in Remote Sites
    http://technet.microsoft.com/en-us/library/cc794962(v=ws.10).aspx
    Regards.
    Vivian Wang

  • Best Practice for trimming content in Sharepoint Hosted Apps?

    Hey there,
    I'm developing a Sharepoint 2013 App that is set to be Sharepoint Hosted.  I have a section within the app that I'd like to be Configuration-related, so I would like to only allow certain users or roles to be able to access this content or even see
    that it exists (i.e. an Admin button, if you will).  What is the best practice for accomplishing this in Sharepoint 2013 Apps?  Thusfar, I've been doing everything using jQuery and the REST api and I'm hoping there's a standard within this that I
    should be using.
    Thanks in advance to anyone who can weigh in here.
    Mike

    Hi,
    According to
    this documentation, “You must configure a new name in Domain Name Services (DNS) to host the apps. To help improve security, the domain name should not be a subdomain
    of the domain that hosts the SharePoint sites. For example, if the SharePoint sites are at Contoso.com, consider ContosoApps.com instead of App.Contoso.com as the domain name”.
    More information:
    http://technet.microsoft.com/en-us/library/fp161237(v=office.15)
    For production hosting scenarios, you would still have to create a DNS routing strategy within your intranet and optionally configure your firewall.
    The link below will show how to create and configure a production environment for apps for SharePoint:
    http://technet.microsoft.com/en-us/library/fp161232(v=office.15)
    Thanks
    Patrick Liang
    Forum Support
    Please remember to mark the replies as answers if they
    help and unmark them if they provide no help. If you have feedback for TechNet
    Subscriber Support, contact [email protected]
    Patrick Liang
    TechNet Community Support

  • Best practice for integrating a 3 point metro-e in to our network.

    Hello,
    We have just started to integrate a new 3 point metro-e wan connection to our main school office. We are moving from point to point T-1?s to 10 MB metro-e. At the main office we have a 50 MB going out to 3 other sites at 10 MB each. For two of the remote sites we have purchase new routers ? which should be straight up configurations. We are having an issue connecting the main office with the 3rd site.
    At the main office we have a Catalyst 4006 and at the 3rd site we are trying to connect to a catalyst 4503.
    I have attached configurations from both the main office and 3rd remote site as well as a basic diagram of how everything physically connects. These configurations are not working ? we feel that it is a gateway type problem ? but have reached no great solutions. We have tried posting to a different forum ? but so far unable to find the a solution that helps.
    The problem I am having is on the remote side. I can reach the remote catalyst from the main site, but I cannot reach the devices on the other side of the remote catalyst however the remote catalyst can see devices on it's side as well as devices at the main site.
    We have also tried trunking the ports on both sides and using encapsulation dot10q ? but when we do this the 3rd site is able to pick up a DHCP address from the main office ? and we do not feel that is correct. But it works ? is this not causing a large broad cast domain?
    If you have any questions or need further configuration data please let me know.
    The previous connection was a T1 connection through a 2620 but this is not compatible with metro-e so we are trying to connect directly through the catalysts.
    The other two connection points will be connecting through cisco routers that are compatible with metro-e so i don't think I'll have problems with those sites.
    Any and all help is greatly welcome ? as this is our 1st metro e project and want to make sure we are following best practices for this type of integration.
    Thank you in advance for your help.
    Jeff

    Jeff, form your config it seems you main site and remote site are not adjacent in eigrp.
    Try adding a network statement for the 171.0 link and form a neighbourship between main and remote site for the L3 routing to work.
    Upon this you should be able to reach the remote site hosts.
    HTH-Cheers,
    Swaroop

  • Networking "best practice" for setting up a farm

    Hi all.
    We would like to set an OracleVM farm, and I have a question about "best practice" for
    configuring the network. Some background:
    - The hardware I have is comprised of machines with 4 gig-eth NICs each.
    - The storage will be coming primarily from a backend NAS appliance (Netapp, FWIW).
    - We have already allocated a separate VLAN for management.
    - We would like to have HA capable VMs using OCFS2 (on top of NFS.)
    I'm trying to decide between 2 possible configurations. The first would keep physical separation
    between the mgt/storage networks and the DomU networks. The second would just trunk
    everything together across all 4 NICs, something like:
    Config 1:
    - eth0 - management/cluster-interconnect
    - eth1 - storage
    - eth2/eth3 => bond0 - 8021q trunked, bonded interfaces for DomUs
    Config 2:
    - eth0/1/2/3 => bond0
    Do people have experience or recommendation about the best configuration?
    I'm attracted to the first option (perhaps naively) because CI/storage would benefit
    from dedicated bandwidth and this configuration might also be more secure.
    Regards,
    Robert.

    user1070509 wrote:
    Option #4 (802.3ad) looks promising, but I don't know if this can be made to work across
    separate switches.It can, if your switches support cross-switch trunking. Essentially, 802.3ad (also known as LACP or EtherChannel on Cisco devices) requires your switch to be properly configured to allow trunking across the interfaces used for the bond. I know that the high-end Cisco and Juniper switches do support LACP across multiple switches. In the Cisco world, this is called MEC (Multichassis EtherChannel).
    If you're using low-end commodity-grade gear, you'll probably need to use active/passive bonds if you want to span switches. Alternatively, you could use one of the balance algorithms for some bandwitch increase. You'd have to run your own testing to determine which algorithm is best suited for your workload.
    The Linux Foundation's Net:Bonding article has some great information on bonding in general, particularly on the various bonding methods for high availability:
    http://www.linuxfoundation.org/en/Net:Bonding

  • Best Practices For Portal Content Objects Transport System

    Hi All,
    I am going to make some documentation on Transport Sytem for Portal content objects in Best Practices.
    Please help in out and send me some documents related to SAP Best Practices for transport  for Portal Content Objects.
    Thanks,
    Iqbal Ahmad
    Edited by: Iqbal Ahmad on Sep 15, 2008 6:31 PM

    Hi Iqbal,
    Hope you are doing good
    Well, have a look at these links.
    http://help.sap.com/saphelp_nw04/helpdata/en/91/4931eca9ef05449bfe272289d20b37/frameset.htm
    This document, gives a detailed description.
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/f570c7ee-0901-0010-269b-f743aefad0db
    Hope this helps.
    Cheers,
    Sandeep Tudumu

Maybe you are looking for

  • Is there an "Out of Range" Function in LabVIEW?

    Howdy, My issue is I have an input value that is compared to an upper and lower limit. If the input is within the range I want the program to do nothing. If the input is below the lower value I need to send a "TRUE" signal to a relay. If the input is

  • JAXB Related Question

    Hi All, I have started working on JAXB 1.4 reference implementation provided by sun. I have following questions. 1. Do we have any implementation which simply has the Jar files which can be placed in the classpath and can be used. Right now this refe

  • Not all Docs will go into iCloud

    Why can't I put "non-pages" documents on iCloud? It won't take PDF, DOC, RTF files. This is suppose to replace iDisk and doesn't take all the files iDisk did. What's up with that?!

  • How do I plug a Microphone jack into a MacBook Pro with the ability to listen with Headphones

    Specs:- Headset : Razer Carcharias Stereo 2.0 Circumaural Design 270 degree Rotation Microphone Inline Remote 2 Discrete Drivers Price : RM 279.00 / USD 86.75   MacBook Pro 13-inch, Mid 2012 Processor 2.5 GHz Intel Core i5 Memory 4 GB 1600 MHz DDR3 G

  • Where do I essentially start?

    Hello one and all! Tried to call the general customer support number, but my phone is being incredibly tempermental at the moment so I thought I'd plonk myself onto here. I currently live in a building where the owners have their own phone line, inte