Cannot Run Scans in non-admin account...

So, mymain accounton my Mac is not an administrator for security reasons, which is not a concern normally. When I need to install something or perform a fucntion that requires admin privileges, I am prompted for the account name and passwor. However, when I try to run a scan in OSX,. I am merely told that I need to be an administrator, but there is no prompt. Is there a way I can enable a prompt for admin credentials so I can run this scan with the proper permissions, other than making my account an admin or logging into the admin account separately? Many thanks in advance

Did some research on this the other day, to see if i could get Software Update to run in the middle of the night like Windows can do.
Software Update requires Root powers, so when you give it your Admin Password your opening a sudo window of 5 minutes for it to complete it's task.
Software Update doesn't check for updates while in Standard User becuase Standard Users supposedly can't do anything about it anyway and it would be a obvious distraction. "Mommy the computer....!!!"
Apple should have a option in Software update preferences to let certain Standard Users know a Software Update is ready just for the purpose your explaining. I run in Standard as well.
I ran some Software Update commands via the Terminal for a launchd just to see what I could do.
Apprantly one can DOWNLOAD updates automatically with launchd in Admin, but not install them because of the need for sudo.
I just misssed a perfect opoortunity (todays update) to run a launchd to do automatic downloads of Software update, then see how to go about installing them afterwards. So fsck me, I'll have to wait now. (unless i use my other machine! ahhh!!)
Anyway the program you want is this little gem: Lingon
it's on Sourceforge (grab the image)
Ok so that takes care of the Software update downloads (man softwareupdate in Terminal for commands)
/usr/sbin/softwareupdate --download --all
Will do the automatic downloads, now it's just a script away to let you know ( a nice pop up window) that you have something in your folder where the Software Update just downloaded into.
That's the next question is where that is and how to run it.

Similar Messages

Can't run programs from non-admin account: redux

Background: I have years of experience with PCs, very little with Macs. I work with children in a group home. The tech support people who set up this iMac (OS X 10.2) have long since departed, and no one in the organization has any clue as to what changes they made to this system, and I'm sure that those tech people made some changes. For example, in admin accounts other than "root," either there is no access to the Utilities folder or the folder has been well hidden.
The Problem: The boys in this home will use a non-admin account. The programs I have installed for them will run under admin accounts but not under the "boys" account, which is non-admin. The system tells me that the account does not have enough access privileges to run the programs. (Program that had been installed before I got access to this iMac will run under the "boys" account.)
In discussions on this forum several months ago, I thought the answers I got here had helped me solve the problem. Then, for administrative reasons, I did not touch the iMac until last week. What I thought had been solved is not solved.
From "root," using the "Capabilities" option in the Accounts folder, I have added to the "Add other applications..." section the programs I want "boys" to have access to. But this doesn't work. When I log in to "boys," access is denied: insufficient access privileges.
If I give up on this system, the boys will not be able to use this iMac, and that would be a shame.

I realize that it sounds like I ignored all the previous advice before I drafted this latest post. But the first thing I did when I returned to the iMac was to look at the posts.
I didn't touch the system for six months. I was waiting for approval from administration to upgrade the OS. By the time I got the approval, upgrading was no longer an option -- according to the manager of the local Genius Bar. This system is not capable of running 10.5, and Apple will no longer sell 10.4. I can find 10.4 on the Net, but those are private sellers and the price is too high.
Now that I've got that out of the way, the current task: I have no idea why, but the gains I accomplished six months ago have disappeared. The "boys" account can run none of the software I installed. No one else has touched the system. (I live alone.)
I logged on as "root" and went to Accounts. Using 10.2's Capabilities function, I tried to check all the boxes for "boys." But when I close the screen and then re-open it, the system has unchecked "Open all System Preferences"; "Change Password"; and access to "Utilities."
At this point I cannot create new folders under "boys." "boys" can run software that was installed before I got the machine, but that's all.
I have to assume that I inadvertently did something that wiped out my previous gains. But I ain't got a clue.

Can't run programs from non-admin account

I'm new to the Mac and rusty with -- but not new to -- UNIX. I'm working with an iMac running OS X 10.2. I have installed several programs in a non-admin account (called "boys"), but they will not run from that account. The "get info" screen tells me that the "boys" account is the owner of the program. Read/write permission is enabled. When I try to run the programs, I get this error message: "The operation could not be completed because you do not have enough access privileges." I have installed the same programs in an admin account, and the programs run just fine from that account. I'd like to get this working so that the boys in the "boys" account can actually use the system. I have "inherited" this system from prior users. Programs that were on the system when I got my hands on it do run -- for the most part -- from "boys."
iMac Mac OS X (10.2.x)
iMac Mac OS X (10.2.x)

Thanks for the reply, Ken. My various unsuccessful attempts to solve this problem led me to create a folder named "Programs." (I know, my PC roots are showing.) I did this for two reasons: 1) I hoped that this would give me more control over what was happening; and 2) I wanted to give the children with whom I am working an easy way to find the programs that I want them to use. When I use < cd /users/boys > and then do an ls- l, I see the Programs folder. An ls -l on that folder shows all the program I have loaded and indicates that the "x" permission is applied to owner, group and others. Moreover, I assumed (incorrectly, perhaps) that installing the programs using the "boys" non-admin account would make them the "owner" of the programs and that "x" permission would follow. Well, ls -l indicates that they are the owners and that they do have execute permission. I can only guess that the prior users of this system -- and nobody in this organization seems to know where they are -- did something that requires more than Advil to overcome.
J...
iMac Mac OS X (10.2.x)
iMac Mac OS X (10.2.x)

Run software update in non-admin account?

I did some searching through past posts, but the most recent one I found was several years old.
Is there any way to run Software Update automatically in a non-admin account? I run in a non-admin account unless there's some task that really needs admin privileges to complete, for security purposes, but having Software Update not run automatically is rather suboptimal for security.
So, is there any way to get Software Update to check for updates automatically from a non-admin account? (I'm not averse to using the crontab or launchd, if necessary—I've never done it before, but given instructions, I'm sure I could figure it out.
Thanks in advance!

Did some research on this the other day, to see if i could get Software Update to run in the middle of the night like Windows can do.
Software Update requires Root powers, so when you give it your Admin Password your opening a sudo window of 5 minutes for it to complete it's task.
Software Update doesn't check for updates while in Standard User becuase Standard Users supposedly can't do anything about it anyway and it would be a obvious distraction. "Mommy the computer....!!!"
Apple should have a option in Software update preferences to let certain Standard Users know a Software Update is ready just for the purpose your explaining. I run in Standard as well.
I ran some Software Update commands via the Terminal for a launchd just to see what I could do.
Apprantly one can DOWNLOAD updates automatically with launchd in Admin, but not install them because of the need for sudo.
I just misssed a perfect opoortunity (todays update) to run a launchd to do automatic downloads of Software update, then see how to go about installing them afterwards. So fsck me, I'll have to wait now. (unless i use my other machine! ahhh!!)
Anyway the program you want is this little gem: Lingon
it's on Sourceforge (grab the image)
Ok so that takes care of the Software update downloads (man softwareupdate in Terminal for commands)
/usr/sbin/softwareupdate --download --all
Will do the automatic downloads, now it's just a script away to let you know ( a nice pop up window) that you have something in your folder where the Software Update just downloaded into.
That's the next question is where that is and how to run it.

How to run admin tasks with non-admin account ?

Hello,
The title says it all: I want to allow some non-administrative accounts to run admin tasks which must be run as root.
A solution would be to use 'sudo' and give rights to those non-admin accounts on the binaries used by the tasks. But I notably use 'chmod' and 'chown' in those tasks, and I would not want to give to non-admin accounts rights to run those commands as root outside the admin task scripts. But from my understanding of 'sudo', if I do it, non-admin accounts will be able to use chmod and chown outside the scripts. Is this right ?
The sid bit could have been a solution I think, but sadly it is not supported on Mac OSX 10.5.
Thanks

I am trying to use the sudo route add command in a script, which should run as part of a vpn connection config file. I get an unable to run script error in the log.
I searched and found the following older discussion
http://discussions.apple.com/thread.jspa?messageID=1986808
I tried that but I get a syntax error when trying to save the sudoers file I chose to save anyway.
Tried to run the command from the terminal and got the following error
postdrop warning: unable to look up public/pickup:no such file or directory.
Can you give me an example of your sudoers file with the correct syntax etc.
Thanx

Running Photoshop CS3 under a non-admin account?

Is it possible to run Photoshop CS3 under a non-admin account with Mac OS 10.4.11? If yes, is it stable then, and are there any known issues?

Buko and Ann:
Can you support with some documentation please? A quick Google search has many sites recommending to create two accounts. I could fine none (quickly) that stated it might not be necessary. I'm not so much concerned with being right (as it would be somebody else that was wrong) but purely to know that all the articles I have read are also full of sh!t.
I can assure you however that it is not a nuisance to work in a standard account. Certainly any maintenance I do is usually administered through the admin account. It would be a f!cking exasperating not to be able to log in as admin at the end/beginning of the day and manage these tasks on my time. In batch modding files I do find myself typing in passwords I shouldn't have to type, but I batch mod files infrequently and only because our file server is set up with no trust to individual users. I know if I change the setup someone will immediately delete someone else's directory just to teach me not to fiddle.
Rich: I've run CS2 and CS3 (and CS2 & CS3 ;)) in standard accounts with no problems. The only thing I can think of off the top is that Sing system error which was certainly permissions related. I will disclose that my office is relaxed (gov't) and I no longer consider myself a power-user. Though that probably means I am closer now that ever. I click a button and the computer does its thing. No worries.
I'm open to new ideas, and love to learn. I suppose the above is only strongly worded in response...
J

Problems running TestStand 4.0 under non-admin account

I am having problems running TestStand 4.0 under a non-admin account under windows XP. I have done the following:
   1. Set full control protection to entire National Instrument directory
   2. tcverselext.exe was giving me problems until I changed it to run in window 95 compatability mode. Otherwise I get an "you do not have administrator priviliges to run this command" error. Don't know if this is the correct fic for this.
   3. Now when starting TestStand I get a "Retrieving COM class factory for component with CLSID {B2794EF6-C0B6-11D0-939C-0020AF68E893} - failed due to the following error: 80040154." error
Everything works fine as administrator.
Can anyone help me?
Don

The Version Selector needs to be run with Administrator Access. When you are running it in Windows 95 Compatability Mode, you are masking the problem. However, once you set the correct version of TestStand, you no longer need Administrator Access to use the Sequence Editor.
Allen P.
NI

Lightroom 3 asks for serial number launching in non-admin account

The following information was provided by Carey Burgess (Adobe Employee):
Does Lightroom 3 launch and work fine in an admin account, but when you launch the application in a standard (i.e. non-admin) account it asks for a serial number?
If so, then it is likely due to a file permissions issue either in the original (admin) account or with the standard account.
(Although you need administrator access to install Lightroom, and you do need proper access permissions to your photos, you should be able to run Lightroom without issue in a standard user account.)
Lightroom 3 stores registration data (the serial number) in a file called Lightroom 3.0 Registration, which is stored by default in one of these locations:
    * Mac OS: /Library/Application Support/Adobe/Lightroom
    * Windows XP: C:\Documents and Settings\All Users\Application Data\Adobe\Lightroom
    * Windows 7/Vista: C:\ProgramData\Adobe\Lightroom
- Check for the registration file in the appropriate location for your system.
If the file does not exist in that location, then ensure you are logged in with the admin account (the one where Lightroom doesn't prompt for a serial number) and check the user-specific location instead:
    * Mac OS: /Users/YOUR USER NAME/Library/Application Support/Adobe/Lightroom
    * Windows XP: C:\Documents and Settings\YOUR USER NAME\Application Data\Adobe\Lightroom
    * Windows 7/Vista: C:\Users\YOUR USER NAME\AppData\Roaming\Adobe\Lightroom
If the file exists in the user-specific location instead, then I would suggest that you ensure that you have quit Lightroom, and then move the registration file from the user location to the default system-wide location. Lightroom should now no longer prompt for serial number when you open it from a non-admin account.
If the registration file did (or now does) exist in the default system-wide location, but you are still being prompted to enter a serial number when opening Lightroom in a standard user account, then that account does not have sufficient access permission to the registration file.
To resolve this aspect, there are two possible solutions (the first being the recommended solution):
1. Change the access permissions on the Lightroom folder that contains the registration file to grant "Read" access for the standard user account. (You can do this for each account individually, or you can use a broader group like Everyone.)
For more information about changing permissions, see one of these articles:
    * Windows XP: http://support.microsoft.com/kb/308419#4
    * Windows Vista/Windows 7: http://windows.microsoft.com/en-us/windows7/What-are-permissions
    * Mac OS: http://docs.info.apple.com/article.html?path=Mac/10.6/en/8342.html
2. Copy the registration file from the system-wide location to the user-specific location for the standard user account. (You would need to repeat this step for each standard user that needs access to Lightroom.)
Reply here if these steps do not resolve your issue, or if you have any questions.

Months ago, I had a routine clearout of old software boxes etc and chucked out my Lightroom 1.0 box. A couple of weeks ago I reinstalled Lion on my mac to find that I cannot register Lightroom. I have the 3.0 upgrade serial, the 2.0 upgrade serial, but the 1.0 was on the box..
I followed the instructions above to find the files in crashplan form before the fomat that hold the registration details. I have tried placing them in the location described, but it doesn't seem to work.
The serials (or something) are in the file, but given in the string that is difficult to decipher - and doesn't work in the registration screen, wrong size and a mix of letters and numbers rather than just numbers as my 3.0 serial is.
Any suggestions for what I could do? Could I send the strings in to Adobe to be deciphered? Perhaps move files around a bit more?
Thanks in advance,
Rog.

IChat doesn't display OD users for non admin account

I have a Mac Mini SL server with iChat service running. When I add an Admin account (Account with admin privilege to work group manager) it can see other accounts and groups. However, when I add a non admin account it doesn't see any user nor group!
Checking the iChat logs, I can see the non admin account logging in and being authorized:
Oct 24 13:49:59 qserv jabberd/c2s[1631]: [14] [::ffff:192.168.1.29, port=50799] connect
Oct 24 13:49:59 qserv jabberd/c2s[1631]: [14] SASL authentication succeeded: mechanism=DIGEST-MD5; authzid=[email protected], TLS negotiated
Oct 24 13:49:59 qserv jabberd/c2s[1631]: odauth_check_servicemembership: checking user "user" access for service "chat"
Oct 24 13:49:59 qserv jabberd/c2s[1631]: odauth_check_servicemembership: mbrcheck_servicemembership returned 0
Oct 24 13:49:59 qserv jabberd/c2s[1631]: odauth_check_servicemembership: user "user" is authorized to access service "chat"
Oct 24 13:49:59 qserv jabberd/c2s[1631]: [14] bound: jid=[email protected]/Luminous
Oct 24 13:49:59 qserv jabberd/sm[1629]: session started: jid=[email protected]/Luminous
All clients are Mac OS X 10.6

Tim Harris wrote:
odauth_check_servicemembership: user "user" is authorized to access service "chat"
This means that this user is not allowed to use the iChat services. In sever admin - access, you get to set who or what type of users / group, etc is allowed access to which services. Did you check that?
Unfortunately I don't see that! I'm using Server Admin 10.6.3 and when I click on the iChat service it displays three tabs only; Overview, Logs, Settings where settings has two sub tabs (General and Logging).
There isn't any option where I can define whom can or cannot access iChat service in Server Admin.
Under the Setting's General tab I have:
Host domains set to: qserv.xxx.net
I also have my SSL Certificate selected
Authentication: Any method
Enable XMPP server-to-server federation is not checked

Can't login to local NON-admin accounts-Directory Access set to server

I have a strange problem on a set of laptops that I cannot resolve and am hoping someone can help me.
Here is the issue:
I have a set of building laptops (PowerPC, OSX.4.11) that seemingly will not "search locally" in the authentication process. The logins seem to work fine for NETWORK logins to our Open Directory Master xserve, but these machines will not login to any LOCAL non-admin accounts. The local root and local admin account logins do, however, work fine. ?? The remainder of the building computers (Intel iMacs OSX.4.11) appear to have the exact same settings and login fine both locally and via the network home directories.
I have tried the following:
Deleted DirectoryService preferences folder (MacintoshHD-->Library-->Preferences->DirectoryService)
Deleted the mcx cache in Directory Access
Tried adding a new non-admin user to test (still will not login)
Removed and re-created LDAP configuration (all set to custom)
Tried setting the LDAP to the automatic settings ("Add DHCP-supplied LDAP servers to automatic search policies")
Disabled all network connectivity (turned off Airport and disconnected the ethernet cable), still cannot login to local accounts
Tried to bind in LDAP configuration (when I did bind the machine, it would no longer authenticate to the network authentication server, so I did an "unbind" and restarted and it went back to performing the network logins, but still will not login to local non-admin accounts).
Reset passwords in System Prefs and also re-typed them in NetInfo Manager
Deleted login keychains
Deleted mcx.plist
Reinstalled the OS from disk and local logins worked TEMPORARILY--UNTIL I set the LDAP directory access to authenticate to our server (which I also need for the network logins to work),then, the issue started again.
*Same results with both ethernet and wireless connectivity enabled.
*Note: I also manage these local accounts via WGM (installed on the local machine) and even tried disabling that and still no luck.
Please help...I have spent hours and hours trying to find a solution and nothing seems to work! What am I missing??

Mostly just a bump...
How about that .local extension, or trailing / ?

Photoshop Elements 6 in non-admin account?

I just got the long-awaited Photoshop Elements 6 for Mac and installed it. The installation seemed to go well. But when I tried to use it, non of the layer styles and effects show up. I have read the Adobe site and see that it is intended to run only in and Admin account, but doesn't that defeat the purpose of several accounts. I tried letting the rebuild the mediadatabase.db3 file as suggested here,
http://www.scrappersguide.com/forums/showthread.php?p=28421
but that hasn't fixed the problem. I'm hoping some one here has a solution that will let me work in a non-admin account.
Thanks!

Previous versions also had permissions problems. Maybe some of the fixes will help the current version
<http://forums.macnn.com/82/applications/237093/installing-photoshop-elements-3- a/>

Installing apps from non-admin account

I read an earlier post that installing apps from a non-admin account is a bad idea because SL applies the wrong permissions. I normally install from a non-admin account.... I don't see that the permissions on stuff I've installed are any different from apps that came with SL. Most everything is drwxr-xr-x. Was this fixed, or am I missing the problem.

KJK555 wrote:
+"That isn't a problem at all. Applications should not require that the user have write+
+access to the application."+
I didn't say anything about a user having write access permission, I was talking about read
permissions. All apps installed in the /Applications directory should have group permissions
set to admin or wheel (depending on the type of app), so the system can read them without
problems. That's the Unix way.
I completely disagee. The system already has read permission to all applications in the /Applications folder. It doesn't matter what the group privilege is set to. The "other" permissions are set to read only. System (root) can read it regardless. If you can show me an Apple tech article that says that apps installed in the /Applications folder should have their group privilege changed to "admin" or "wheel" then I would gladly take that back.
+"Leopard does not put any ACLs on anything installed in the /Applications folder"+
That's right, it doesn't normally, but if it finds an app that it does not have permission
to read, it will assign an ACE(s) to it so that it can access it.
I just tested that in 10.5.8, and it does not happen as you say. I can't try it in 10.6. I'd appreciate if you could provide a specific example where you can make this happen.
Besides, all users, by default, have read only access to all applications. Unless a user specifically changes permissions on an app to deny read access to everyone, then this isn't an issue.
http://discussions.apple.com/thread.jspa?threadID=1875193&start=60&tstart=0
http://discussions.apple.com/thread.jspa?threadID=1866808&start=15&tstart=0
http://discussions.apple.com/thread.jspa?messageID=8776714&#8776714
http://discussions.apple.com/thread.jspa?threadID=1850256&start=30&tstart=0
http://discussions.apple.com/thread.jspa?threadID=2351437&start=15&tstart=0
http://discussions.apple.com/thread.jspa?messageID=9447059&#9447059
http://discussions.apple.com/thread.jspa?messageID=9067640&#9067640
I know what ACLs are and how they work. I have read through those and cannot find in any of those threads anything about what you had been talking about.
+"That is also false. Root rights are granted by the user entering the admin username+
+and password when prompted. It does not matter where an application is installed in+
+order for it to be given root permission."+
http://support.apple.com/kb/HT2963
"Application installers, Applications folder
A third-party application installer incorrectly sets permissions on the files it installs,
or even the entire Applications folder. Symptoms of the Application folder's permissions
being set incorrectly include applications appearing in the dock as question marks, and/or
not being able to connect to the Internet. It is also possible that software installed while
logged in as one user will be inaccessible when logged in as another. To avoid this, make sure
you are logged in with your normal user account when installing software that you wish to use
with that account."
That has to do with third party installer apps that developers have not written properly to conform to OS X standards. It isn't an issue with applications that install by drag-and-drop. It sounds to me like you have looked at the permissions that Apple has put on its own apps and jumped to the conclusion that third party apps won't work unless they have the exact same permissions applied to them. That simply isn't true.
"Software access=user access
Most applications executed by a user only have access to the files that the user has access to.
Backup software, for example, may not back up Mac OS X system files that have root ownership."
Utilities, especially disk utilities, are to be installed in the /Applications/Utilities folder, for reasons
stated above.
No. That is completely wrong. Like I said earlier, an application is given root permission by user authentication. It matters not one little bit what the application's enclosing folder is. I personally have no third party apps in /Applications/Utilities; just what Apple puts there as part of a standard OS X installation.
More permission tips:
http://www.bombich.com/mactips/image.html
http://mostlyslow.blogspot.com/2009/04/technical-mac-os-x-permissions-issues.htm l
Have you even read those? I suggest that you do; because most of what you have written about how file/folder/application permissions in OS X is completely wrong.

Possible conflict with iTunes 7 and non-admin account

I've tried burning cd's in my usual windows account (limited) and it comes up with the error message "disc burner or software not found", but when I log into my admin account and try and burn an mp3 then it burns just fine. I wonder if they changed the way version 7 burns cd's...
Any solutuions or fixes?

I'm not really looking for a way to roll it back. I was just hoping to find a fix for the current version, or make them aware that there is a problem with running it in a non-admin account.
Thanks for the info though!

Reader X will not open (non-admin account)

I installed Adobe Reader X on an admin account for the computer. On the non-administrator accounts, Adobe Reader X will not open. There are no error messages or anything - it just will not open in non-admin accounts. Is there a setting I've overlooked to allow other users to access it?

How do you open the Reader on the non-admin account - directly (from the Start menu or desktop shortcut), or by double-clicking a PDF file?
After you do that, can you check with the Task Manager's Processes tab if AcroRd32.exe is running?

Problems with libraries and plugins - non admin account

I''ve got a couple of problems with a fresh install of photoshop on my windows Windows 7 64 bits system.
1. Libraries panel does not work. It displays the following error and interaction is not possible:
2. 3rd party plugins would load their content.
3. In the Creative Cloud Application the apps tab would load and displays the "download error" message:
The funny thing is that all the above errors don't occur on the loacl admin account. So I think this might be a permission problem. I think the most easy sollution would be to work under the admin account, but sadly that's no option (company policy). I am able to extent the rights of the useraccount I work on, but I don't know in wich folders the software needs write permissions. The both Adobe folders in program files and program files (x86) I already changed to full acces for all users. Can someone please help me?

Problems with libraries and plugins - non admin account https://forums.adobe.com/people/pippyn%20stortelder
This is a permissions Error. The other accounts on the computer do have permissions to use / change the administrator settings of these particular items.
There are two ways you can fix this. 1.) contact the admin of the system and let him know your accounts need read access to these items
My Preferred method is:
If you are on a Windows Account, then you can choose those items to run in Administrator mode for all people. ( win7,64bit )
Right click the infinity system for creative cloud (creative cloud icon - you would normally click to start the program. (not the one in your service tray, but the one in your menu area with the square red on it.
choose/click on properties
choose/click compatibility (tab at the top of the window)
Last boxed option on this screen is: Run Program As Administrator, Click that check box.
Click on Change Settings for All Users
in the window that comes up again choose, put an X in the box- the last option, Run Program As Administrator - Click Apply
Click OK
Click OK and the opened preferences window should now be closed.
You should be able to simply invoke the Cloud app now. But you might want to reboot to safe.
Depending on the installation methods used for your add-ons, you may have to perform this same process for all add-ins. I believe that would depend on which account, first installed the add-on and what level of permissions they have.
Good Luck
~elaine.

Cannot Run Scans in non-admin account...

Similar Messages

Maybe you are looking for