ColorSync and non-admin users

Is there a way to allow non-admin users to change ColorSync profiles for printers using the ColorSync Utility? Our non-admin users can launch the utility and see all the printers listed in the "Devices" section but the option to change the default profile for any particular printer is greyed out.
Thanks.

Kurt is far more expert on this than I am, so take his advice first.
Hi,
There are three things to consider...
#1. Profiles in use, like Fast User Switching being on and another User logged in, cannot be changed/edited.
#2. There are at least 2 locations for the .ICCs...
/Library/ColorSync/Profiles/Displays/
/Users/YourUserName/Library/ColorSync/Profiles/
Profiles in the 1st location cannot be edited. ICCs in the 2nd location could have copies made & the copies moved to another User's folder & Rights/Privileges changed accordingly.
#3. See what "Scope" Colorsync reports... I think it has to do whether all users was selected when installing drivers, not certain on that though.

Similar Messages

Newbie Question - application install/setup for admin and non-admin users

Hi,
I'm 100% new to the Mac environment and OS X and I'm a bit confused as to the environment and setting up applications and such for users.
I have a brand new Macbook Pro that I need to set-up.
USER Setup
- have a dedicated admin account called "Administrator"
- have a user account for my son, Joe.
- have a user account for me, Matt, so I can fool around on the machine to see if I like it enough to get one myself.
This is the account setup model I'm most accustomed to using under OpenVMS and Windows - an administrator account and separate lower privilege accounts for users.
I have managed to accomplish these three tasks ok. I also enabled File Vault on my account only.
APPLICATION Setup
We want to install the following applications but I'm having problems:
- Firefox, for use by all three accounts, but with separate bookmark files for each user. This is the browser we are familiar with and want to start with (sorry Safari, maybe as time goes by).
- Eudora for e-mail for just the two user (mine and Joe's) accounts, with separate user files for each account. It's the program we're familiar with.
- Microsoft Office for all three accounts.
- An architectural CAD program (ArchiCAD) for use only in my account.
- PGP for use only in my account.
My real issues appear to be with how to install apps the way I need them to be 'visible' to users.
I started by logging in as Administrator and downloading/installing Firefox.
It installed ok under the administrator account but I can't find/access Firefox when logged in via my or my son's account and I don't know what to do to give my/Joe's account access to it.
So,
1) How do I install an application once and make it available to all accounts (admin & user)?
2) How do I install an application and make it useable only by a subset of users
Thanks for any assistance.

matt212, welcome to Apple Discussions & the Mac community.
Suggest you buy the book by David Pogue - Mac OS X The Missing Manual Tiger Edition.
Includes everything you need to know about installing OS X, using OS X & maintaining OS X.
Look at these links for new users. They should give you an overview regardless of which version of OS X you are using.
Switch 101
http://www.apple.com/support/switch101/
Mac 101
http://www.apple.com/support/mac101/
Quick Assist
http://www.apple.com/support/quickassist/
A guide for switching to a Mac
http://lifehacker.com/software/mac/hack-attack-a-guide-for-switching-to a-mac-224674.php
Welcome to the Switch To A Mac Guides
http://switchtoamac.com/guides/
 Cheers, Tom

PE13 on Windows 8.1 and non-admin or UAC issues?

Before I try to evaluate Premiere Elements 13 64-bit, I want to ask if lingering problems related to UAC and non-admin user accounts were resolved since version 11.
It's good to see a 64-bit version of Elements come out since then.

Gordon Fecyk
On what computer operating system is your Premiere Elements 13 running? For now I will assume Windows 7, 8, or 8.1 64 bit.
Not sure what you mean by:
It's good to see a 64-bit version of Elements come out since then.
assume you mean version 11. So in that case....
Premiere Elements Windows 10, 11, 12, and 13 are 64 bit applications when installed and run on specifically on Windows 7, 8, or 8.1 64 bit. Other Windows versions are 32 bit applications in 32 bit system or 32 bit application running in the 32 bit compatibility mode of 64 bit system. On the Mac side of things, it is my recollection that Premiere Elements 11 Mac was the first to be a 64 bit application when run on Mac 64 bit system.
It is my understanding that nothing has changed over the versions with regard to Premiere Elements and the matter of "UAC and non-admin accounts". Probably Microsoft would be a good source on that. Recent threads seem to suggest that Premiere Elements is not working with Domain accounts.
This is not Adobe. Rather a user to user forum. If you want to contact Adobe about your feature requests, you could consider the Adobe Feature Request Bug Report Form.
https://www.adobe.com/cfusion/mmform/index.cfm?name=wishform&loc=en
When you have specific problems with aspects of your Premiere Elements 13 purchased or tryout, we would be glad for the opportunity to be of assistance. Definitely recommend tryout before purchase to assure the compatibility of your program with your specific computer environment and your project goals.
ATR

Non-admin users and Time Machine

We have a 1-1 laptop program with 7th and 8th grade students. The students are not admins of their own laptops.
This year we gave each student an external hard drive and had them use Time Machine to back-up their accounts. The problem was when a student needed to restore from Time Machine, we needed to enter the administrator's password.
We'll be switching to Lion over the summer, and by default, a non-admin user cannot even turn on Time Machine without an adminsitrator's password, which makes Time Machine useless. I don't want to have our students go back to manually dragging and dropping all of their school data (and movies and music) to back it all up (what a messy process).
Is there any way around the need for an admin password to use Time Machine?

Time Machine (the application) is already allowed. That's not the problem.
In order to set-up Time Machine the first time, users have to open the Time Machine Preference, and that is locked. When a user tries to unlock it, they need to enter an administrator's password, but our students are only standar users.
We don't want to have to enter that password for 250 machines each time students need to access that preference.
In addition, an administrator's password is needed to restore anything from a Time Machine drive, and we'd like a way around that too.

How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

Hi all,
I have a company (+150 users) and I would like to allow users to update Java, FLASH and Adobe Reader only.
These software are already installed in the hosts, but there are updates of the program every week and it needs to be updated.
How can I give permissions to every user in the domain to do that? Just "Java, FLASH and Adobe Reader"
Remember that I dont want distribute software because they were installed.
I tried to enable "Enable user to patch evelated products" directive but it didn't work at my domain.
is it possible?

I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself. To automate flash player, I created a Policy and added the following:
Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
I used notepad to edit the mms.cfg, and used the following in the body:
AutoUpdateDisable=0
SilentAutoUpdateEnable=1
AutoUpdateInterval=0
My non-admin users now update flash in the background silently and automatically.

We have non admin users on Windows 7. They change the homepage and it works for that session. When they close the browser, and restart it again the default homepage is shown.

Windows 7 Sp3. Using Firefox 7.01
Non admin users.
Can change homepage to whatever they like and it will work.
BUT when they close firefox and open it again the home page goes back to default setting

Update.
This looks to be a mozilla.cfg setting. If I take out the pref("browser.startup.homepage","ourwebpage");
it loads the basic firefox "FirstPage"
How do I get around adding a default homepage that can be changed by the user?
I have tried adding
defaultPref.. .. then the webpage info.. BUT it retrurns a Failed to read the configuration file. Please contact your system administrator.
Do I need to create a prefs.js file?
And if I do how do I get it to work for each new user that logs into that machine?

How to hide the page ribbon and quichlaunch for non admin users

HI
1 ) how to hide the ribbon in a page in sharepoint 2010 for non administrator users
2) how to hide quicklaunch also for non admin users
in quick lanuch i want to hide links for all site content also.
i used Document Center Template to create my web application.
adil

HI
i did not get how i use this control
<Sharepoint:SPSecurityTrimmedControl
runat="server"
PermissionsString="FullMask">
2
  <div>
3
    <SharePoint:SPLinkButton
id="idNavLinkViewAll"
runat="server"
NavigateUrl="~site/_layouts/viewlsts.aspx"
Text="<%$Resources:wss,quiklnch_allcontent%>" AccessKey="<%$Resources:wss,quiklnch_allcontent_AK%>"/>
4
  </div>
5
</SharePoint:SPSecurityTrimmedControl>
adil

Non admin user - changes not saved (Safari settings, system prefs, etc.)

iMac, 2 users, one is administrator and other is standard user. Recently, in the non-admin user account, it has become impossible to make any changes. For example, adding an application to the the Dock, after logging out and back in next time, the application is not in the Dock any more. Also, making changes to the prefs in Safari, changes are not saved.
I noticed this after installing FireFox v4. I installed it as admin whilst in the non-admin users account. However, I don't believe that the installation of FF has anything to do with the problem, it just highlighted it. I've checked the permissions for the various directories that hold prefs info such as user/libraries/application prefs/etc. etc. and also Safari prefs. Nothing I can see that has changed in system prefs.
Any ideas on what has caused the problem (kids are known to fiddle from within the non-admin account) and any ideas on how to fix it?
Thanks

Hi PPRuNe,
You could try making the standard user an Admin too. To do this, make sure you are logged in to the standard user, go to System Preferences > Accounts > Standard user (you may have to unlock the padlock) > Allow user to administer this computer
This will allow changes to be made without being prompted for a password all the time.
However, if you had Parental Controls on, they probably won't work on an admin account because as an admin you have complete control over a computer, so the computer thinks there is no point in having the controls turned on. And if the kids are known to "fiddle," just think carefully!
Hope this helps you.
Chris.

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

A Solution for Enabling Sandbox activation by non admin users for testing (OIM 11gr2 PS2)

I just wanted to post what i came up with as a solution the the problem of not being able to Test the effects of sandbox changes for non admin level users prior to their publication. We are constantly making changes to the UI through sandboxes, the problem is rolling a sandbox back isn't easy, and we cannot be sure of the effects they will have on non administrative users until they are published, since the out of the box sandbox link isn't available to non Sysadmin level users.
To allow these non admin user accounts to test the effects of sandbox changes in our development environment, I did the following (as always, follow at your own risk):
Create and activate a new sandbox.
Close all open tabs (including the Home and Sandbox tabs) and click the "Customize" link.
Click the view -> source drop down in the upper left.
After the source is visible, click the Accessibility or Sandbox link to find the area that you will add the new "UserSandboxTest" (call it whatever you want) link.
Add a new commandImageLink directly in the panelGroupLayout: horizontal item before the "switcher" item (see the UserSandboxLink in my screen shot below):
Edit the Link you just inserted, Entering whatever you want the link to display as in your browser in the "Text" field.
Export the sandbox.
Unzip the exported sandbox and navigate to the IdmShellV2.jspx.xml (path should be: \templates\mdssys\cust\site\site).
Edit the IdmShellV2.jspx.xml file and find the new item you added in step 5.
Add the following to the commandImageLink xml item: actionListener="#{pageFlowScope.uiShell.context.launchSandboxes}" rendered="#{oimcontext.currentUser.roles['SANDBOX_USER'] != null}". Note: I used a new custom enterprise role, SANDBOX_USER, to control the display of the new link, You should substitute whatever EL conditions you need in the rendered property.
Save your IdmShellV2.jspx.xml file and zip the contents back up, just like you would for any other customization.
Import your newly edited sandbox back into the target environment.
Publish the sandbox.
This seems to work great for allowing us to test other sandbox changes effects on different types of users.

On step 10, adding the check to determine if the user should have access to the role ended up breaking access to the unauthenticated pages like the self registration page and the forgot userid/user login pages. Non-authenticated users cannot execute the method to return the role, so that fails which leaves the page not loading. To correct this I changed the rendered property to rendered="#{securityContext.authenticated}". This prevents the link from displaying on non authenticated pages, but displays for anyone else who's logged on. We only plan on using this in our development environment where no one but developers and system admins have access anyway, so it's not an issue that everyone will see the link. I wouldn't recommend putting this in an environment where end users will be logging in and testing without developing a method (or finding another way to limit the display) that can be called by unauthenticated users to prevent them from seeing the link.

Reader 9.5.1 Crashes after a few seconds for non-Admin users

I have Adobe Reader 9.5.1 installed on some Citrix XenApp 5.0 servers that are Windows 2003. Any time a non-admin user launches Reader it is open for a matter of seconds and then crashes. It shows a Dr Watson crash in the error logs each time. If I logon as an Administrator, it works just fine. I've tried reinstalling/repairing the installation to no avail.
Has anybody run into this in the past or does anyone have any ideas on how to fix it?

My company is into same issue but thing is that I cannot uninstall the MS patch as it will be vulnerability for our servers and we have opened a case with MS and they have reveiwed the proc dump and now MS is asking to get this reviewed with Adobe. I'm not sure how to reach out to Adobe Support to get the fix from them. Any solution on this regard, it will be great help. Thanks, Sayed.

Is there any way to prevent non-admin user accounts to receive software update prompts?

I am the admin account user on our MacBook Pro, and there is one standard user account on it as well. Generally we are both logged on so we can quickly switch between user accounts and 'spin the desktop'.
For some reason, all the software update notifications seem to be received when the standard user account is the active one.
I know that the standard user cannot actually update without my account password and my Apple ID, but a) The notifications confuse the non-admin user, and she gets flustered, and b) Even if she manages to cancel them from the notification area, she then has to remember to tell me verbally that she had had one.
Is there any way to stop her receiving the update notifications altogether?
Running OS X 10.8.2 on MacBook Pro.
Thanks in advance.

You should be able to do this by unchecking the software update service in the system preferences to prevent the system from running the check as the "_softwareupate" user and passing it to the notification service that broadcasts to all user accounts. Then you can check for the software update in an admin account using the following Terminal line:
/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck -Check YES
This line can be scripted via Terminal services to run on a schedule (ie, every few hours), and if there are found updates it will launch the App Store for that account and present them. Granted this approach circumvents the notification service, but should work. To try this, open TextEdit on your computer and in a new document choose "Make Plain Text" from the Format menu.
Then copy and paste the following text into the new document:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
          <key>Label</key>
          <string>local.softwareupdatecheck</string>
          <key>ProgramArguments</key>
          <array>
                    <string>/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck</string>
                    <string>-Check</string>
                    <string>YES</string>
          </array>
          <key>StartInterval</key>
          <integer>21600</integer>
</dict>
</plist>
When done, save the document to your desktop as "softwareupdatecheck.plist" or anything as long as it ends with ".plist." Then get information on the file in the Finder to ensure its name ends with plist and not anything else like "plist.txt" (rename it accordingly in the Info window's "Name & Extension" section.
With the file name appropriate, hold the Option key and choose the "Library" option in the Finder's "Go" menu. Then locate the folder called "Launch Agents" in the library and drag the text file to this folder. Then log out and log back into your account.
This text file is a launch agent script that instructs the system to run the program arguments every 21600 seconds (6 hours) whenever the user is logged in. The program arguments here are simply those to check for software updates for the system. You can change this time interval to be any number of seconds you would like, but there are other options to use besides the "StartInterval" key for scheduling the task. This approach simply has it repeat every number of seconds, but you can use other options to have it only run on specific hours or days, or only have it run once when you log in, etc.
If this works for you, then if you'd like to explore these other options write back here and we can go over them for you.

Acrobat 7 requires admin password at every launch for non admin users?

acrobat 7 requires admin password at every launch for non admin users?
any one with a solution or similar problem?
thanks for any help.

I've been avidly following all of the threads regarding this issue...yet none of the solutions have worked for me. I've got 11 Mac users that do not use the Creative Suite..only Acrobat, Quark, etc. I've tried installing and re-installing through both Admin and User accounts, I've tried the AdobeBib XML change, I've tried enabling Root and installing, changing permission on the Acrobat folder, etc. all to no avail. I still get asked for Admin Authentication every time Acrobat and Distiller are opened (except on the Admin account side). This is happening on one particular Mac (G4, 1GB Ram, OS 10.4.3) for both Acrobat Standard 6 and 7 as well. The biggest issue that also happens in tandem with the Acrobat installs is the inability to print from Quark. I get the following error when printing: "The process "pictwpstops" terminated unexpectedly on signal 6." Because of the necessity to print Quark documents, I have uninstalled all Acrobat on the machines until we can get a fix. This resolves the printing problem with Quark. The only option left is to set up all users as Admin accounts - which I really do not want to do. Any other suggestions out there? I've got more information available if needed.

Generic Object Services - View Attachments disabled for non admin user

Hi,
I am using SAP 4.7 and the attachments created using table TOA01 - archive link are visible to an administrator user through Generic Object Services toolbox while same View Attachments option appears disabled for other non admin users.
Kindly help !

Hi Neha,
I'm sorry I don't have answer to your question but I wonder if you could help me.
I'm looking at OSS note 530792 to configure GOS 'create attachment' option to copy the attachments to the archive server. currently, these are written to the SAP office tables SOC3, SOFFCONT1, etc and I want to use the archivelink and SAPHTTP and copy to the archive storage.
Have you successfully managed to configure your system since you mentioned TOA01?
In the same GOS menu I've activated the 'Business document' option and can copy these to the archive server by correctly configuring OAC2 and OAC3.
I'll really appreciate of you could please share your knowledge.
Thanks.
Soyab

JDK 1.6 u12 installation on Windows XP as non-admin user

I am working on a machine which does not grant my user the admin rights. I had wanted to use JDK with Netbeans. The Netbeans was available as ZIP file, but it required pre-installed JDK. I am not able to install JDK (latest version 1.6 u12) as non-admin user. Is this even possible and how?
Operating System : Windows XP (SP3)
JDK Version : 1.6 update 12
User : Non-Administrator
Thanks,
Akbar.

Contact your admin and ask him to install or to give you local admin rights.

ColorSync and non-admin users

Similar Messages

Maybe you are looking for