Configuration Manager Connector User account
Hello All,
Is there any problem if I create configuration Manager connector with one user that has sysadmin permitions in SCCM database?
Regards,
Hi,
The user account that you specify as the Run As account must be a member of the smsdbrole_extract and the db_datareader groups for the Configuration Manager site database. If user is sysadmin that's ok.
Remy BOVI
Similar Messages
-
I wonder if it is possible to use 1 Computer (Macbook Pro)
- configured with 2 (ore even more) user accounts (i.e. me + my kid)
- and each user account has a different Apple-ID (account) for iTunes purchases & iTunes authorization ?
I woud think that is fine in terms of the underlying license agreement refereing to re-download purchased movies, shows, apps, etc.
However, it seams that there is that miraculous 90 days restriction, which I don't understand, and which allows me only to "authorise" the Computer under one or the other account. The switch is unfortunatelly only possible every 90 days ?!?
Thanks anybody for help
OliverThe 90 day association doesn't stop you authorising an account, it only stops you from using another account for iTunes Match or automatic downloads or redownloading its past purchases : http://support.apple.com/kb/HT4627
There are a few methods listed on this page for how you could do it e.g. multiple user acounts, same iTunes but you having separate playlists, separate iTunes libraries : http://support.apple.com/kb/HT1495 -
Power Management with User Account
On my T43p, I have the newest power management version installed and XP SP3. In the power management, I cannot change power profiles from within a user account. I can however change the power profile in the Windows control panel (this only after I changed the power policy registry keys). Is there a way to make power management do this?
Hi,
I have discovered a workaround to this problem, but it's not a definitive solution. When you log in as a 'not administrator' user, you have to use the 'Run As' command of WinXP on the file (right button mouse click on it):
"C:\Program Files\TOSHIBA\Power Management\CePMTray.exe"
And then, you have to insert username and password of an administrator user. You have to do the same thing to the
file:
"C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe"
if you want to use the function key too, to change power profiles.
The problem is that you have to do this each time you log in as limited user. If it was an Unix O.S. you could set a flag SUID in the files to execute them always as administrator. But this is Windows and I don't know if there is a way to do this!
Anyway, there is another possibility. You can use SpeedSwitchXP tool (http://www.diefer.de/speedswitchxp), instead of the toshiba power management tool. This software is a power management tool that works from a limited user too, but you have to give write access at all users to the following reg keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Controls Folder\PowerCfg\GlobalPowerPolicy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Controls Folder\PowerCfg\PowerPolicies
These keys are necessary in order to modify power schemas. You can give write access to these reg keys with the standard tool 'regedit'. -
Hello, I am getting error while publishing the 2013 workflow via designer. Also, under sharepoint designer if I try to delete any workflow then the page just refreshes and the workflow does not get deleted.
I checked the services.msc and found that the workflow backend service was stopped. (this happened as the password of the user under which this serivce was running had changed).
So, the network admin changed the service user to LOCAL SYSTEM and started the service.
Now, the workflow backend service is started. We have run the iisreset also.
However, I am still getting the same error:-
System.IO.InvalidDataException: A response was returned that did not come from the Workflow Manager. Status code = 503:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Service Unavailable</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Service Unavailable</h2>
<hr><p>HTTP Error 503. The service is unavailable.</p>
</BODY></HTML>
Client ActivityId : ee94689c-4e08-b055-fe9c-268d7a94
Please find attached snapshot.
Is the error as a result of the change in service user? Can you tell me what priviledges should the account running the workflow backend service must have?
UPDATE 1:-
We have set the workflow service backend account user as farm admin and also tried to set it to site admin. The service is re-started. Now, for a new web application,
I can delete workflows. However, for existing site, I am not able to delete the existing workflows.. Also, I am not able to publish workflows (present under new and previous sites) and the error is same as described earlier.Hi Nachiket,
According to your description, my understanding is that you got an error while publishing the 2013 workflow via SharePoint 2013 Designer.
As you have changed the password of this service. Please open IIS and make sure identify of the WorkflowMgmtPool is correct, you can re-type the identify. Then make this pool is started.
Open Services, find Service Bus Message Broker service and Windows Fabric Host Service. Make sure they are running. If not, firstly, start Windows Fabric Host Service, then start Service Bus Message Broker service. If Service Bus Message Broker service is
started, stop and re-start it.
Here are some similar posts for you to take a look at:
http://developers.de/blogs/damir_dobric/archive/2012/10/23/deploying-sharepoint-workflows.aspx
http://developers.de/blogs/damir_dobric/archive/2012/09/18/servicebus-message-broker-service-is-starting-and-starting.aspx
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support -
Best way to manage oracle users account
I have around 300 databases with a total of 2000 users defined with password. I have to activate the password expiration and I would like to know if there is a nice tool or method to manage password reset from a central place or can be linked to any LDAP or Active Directory.
ThanksYa ok, sometime my question are a bit strange reason is I'm not a DBA and my knowledge on oracle product and feature are very limited but I would like to have a bit of information to challenge my DBA here. So far they always give me all kind of weird reason. Now regarding OID (oracle internet directory) is there a fee for that? One of my DBA told me that a centralize authentication method is 500K$ minimum.
We use Solaris binded on AD (using LDAPS).
Also is it a better idea to use, instead, the authentication by the operating system?...
Thanks -
Configuration Manager console Mix accounts rights
Hi,
I have two accounts with differents rights on SCCM console :
- X account has Full Administrator rights
- Y account has just a few rights.
When I log on the console with Y account on a computer that I logged before with X account, it's giving me full Administrator rights. But when it's on another computer, that works fine.
I tried to restart computer, change AD groups, change rights on SCCM, nothing worked..
Do you know if there is a cache somewhere that I can clean or what is causing that ?
Thanks !@jasonsandys : Hi, this wasn't happening before, it's seems to happen only on a few computer. I don't know
what is CSS
@Fernsantos: Hi, I checked the task manager and it's run on the right account. I removed all the rights
on Y account but I can modify all objects like if I where on X account.
@Daniel JiSun: I tried to use RBA Viewer, it's working well for X account (full Admin) and for Y account I don't see any rights on it because I had remove them. But Y account still have full admin rights
Thanks for the answers ! -
After installing the reportservice/database i cannot use the Configuration Manager Console 2012 anymore with my own AD account. (The accounts of my colleagues are stil working)
When i login i get the following message:
The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database. The account must belong to a security role in Configuration Manager. The account must also have
the Windows Server Distributed Component Object Model (DCOM) Remote Activation permission for the computer running the Configuration Manager site server and the SMS Provider.
I checked the following:
I am a administrative user in SCCM (Full Administrator)
I am a member of the administrator group on the server
Deleted HKEY_CURRENT_USER\Software\Microsoft\ConfigMgr10
I tried to start it on multiple workstations and deleted my roaming profile
Any more suggestions?Hi,
Maybe you could have a look on the below blog.
http://blog.nimbo.com/how-to-disable-user-account-control-in-windows-server-2012/
(Note: Microsoft provides third-party contact information to help you find technical support. This contact information
may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.)
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
User accounts corrupted - how to fix
So my Mac locked up the other day when the babysitter decided to put it to sleep. The fan was on full and it was unresponsive. I force-powered it off and then on again. When it came back, almost everything was fine except for my wife's account. It had switched to sort of my son's account. What I mean is that my son is running the restricted finder, and when my wife logged in, it was using the restricted finder and the "My Applications" folders, etc. were pointing to my son's directories. Everything else was normal, so when you select full finder, it's running from my wife's account (has her desktop files, etc.), but the dock was still the messed up one. Going into Accounts as me, it shows her as an admin and doesn't show that she is running the restricted finder.
I'm quite comfortable with Unix sys admin activities, but OS-X doesn't run things the same way as normal Unix systems. Can anybody help me figure out what's gotten messed up and how to fix?
Thanks.
AndrewWith a full or otherwise marginalized hard disk drive with possible damages
to files or directory (or corruption, lost data, or files lost due to meddling) the
advice to make a full backup of the computer's contents to an external HDD
in a suitable enclosure for use with your computer, is the best first step to
not loose any more data. Clone utilities help do this while retaining what is
left of the correct and original file structure which would be otherwise lost.
For other ideas about user accounts and their place in OS X systems, you
can take a look at how they work and how the topic is addressed in these
selected web page links. User accounts are the basis of keeping a system
secure and help keep the contents organized and protected. If someone
who has no business in an Admin account had this access, they could be
responsible for a considerable degree of damage. And the blame does not
necessarily fall on the last person to unknowingly mess it up. The owner
has to be accountable for learning how to best protect their investment and
the contents of the computer, and other users, from loss or harm.
There are several articles & documents to help manage accounts.
• Mac OS X: How to manage user access to applications, system ...
Aug 5, 2008 ... Mac OS X 10.2 reintroduced this level of Admin user control
over local users via the "Capabilities" function of the Accounts preference pane ...
http://support.apple.com/kb/HT2400
• Managing User Accounts - XvsXP.com, Mac OS X vs. Windows XP, OS X
has five main types of user accounts: Root; Administrator; Standard... acct
available under OS X. Root has absolute power and control over the system
Fewer types of user accounts limit access options. No easy way to limit ...
http://www.xvsxp.com/system/users_configuring.php
• Mac OS X 10.5: Working with user accounts and Accounts preferences
Dec 8, 2008 ... You can use Accounts preferences to configure or delete user
accounts in Mac OS X. Each account can have its own log in, password, ...
http://support.apple.com/kb/HT3309
• Mac OS X: Changing or resetting an account password
Learn how to change or reset an account password in Mac OS X, including the
original administrator account password... From the Apple menu choose System
Preferences. Select the user name of your original administrator account.
http://support.apple.com/kb/HT1274
• Mac OS X 10.5 Help: Creating a new user account
You should create individual user accounts for each person who regularly...
http://docs.info.apple.com/article.html?path=Mac/10.5/en/8235.html
• Mac OS X 10.5 Help: Creating a guest user account
When the log in window is appears the user can just click Guest Account...
http://docs.info.apple.com/article.html?path=Mac/10.5/en/15600.html
• Mac 101 - File Sharing:
http://support.apple.com/kb/HT1549
These links cover OS X in general, and the newer more common later ones.
Some of the ideas and processes can be applied, and knowing how the
basics work, should help in looking for more applicable information for 10.3.9.
To take charge of security and account management when more than one
person uses a computer (or even just one admin-owner account user) is a
preventative action. The later OS X systems are even more elaborately made
and there are some very in-depth articles and documents for management of
system accounts, user access, security and so on, for Leopard. These are
often pro-level documents and some of them are 3MB downloads.
In the meantime, damage control requires a different path be taken to recover
from the problems at hand; while looking into how to prevent them.
{Do you have a backup computer?}
Good luck & happy computing! -
ISE Internal User Accounts Deactivated
Hi
I noticed this morning that rather than the regular minimum number of overnight users on our wireless network of around 200 we had 68. The missing clients were Hospira infusion pumps that were configured with local user accounts on the system so I looked at the accounts. Most of the accounts for the hospira pumps were deactivated though not all and no other accounts were deactivated other than a few that are no longer needed and were deactivated by me.
What could cause multiple accounts to deactivate without manual intervention?
Thanks
MartinMartin,
Can you check the settings for the user password policy, there is a default setting to disable the user account after 60 days. See if you can shut this off.
Thanks,
Tarik Admani
*Please rate helpful posts* -
Cannot create or rename a user account in Windows 7 HP x64
Hi. I have Windows 7 Home Premium x64 with one single account with Administrator rights (it's been set up in the computer shop).
It turned out that I cannot create a new user account with it. I try to create one from Control Panel / User accounts menu / Manage other user account. It asks me to enter a name of the account and its kind, after it is done and Create button is pressed
it returns to the User accounts list, which stays blanc (no account created). No error messages or warnings.
I cannot even just change the name of my exsisting account, it looks almost the same: it asks for a new name and when the the name is typed in and Rename button is pressed it returns to the previuos screen where I can see that the name remains unrenamed.
The only thing I can do with my account is to change its image for Logon screen. :)
Please help me to fix this issue.Hi.... I have the same problem with my laptop and my netbook. Same OS in my laptop and Win7 Starter in my netbook.
The only way I found to address this issue was as following:
- Start your computer in 'Safe Mode'
- Logon as 'Administrator' (preferred, but also works with all local users)
- Go to control panel and 'User Accounts'
- Create the new user with administrator rights
- Then close Admin session
- Logon as the new user
- Once logged on, and desktop and icons shows up for you, is done.
- Then, close new user session or restart your computer normally
This started to happen to me after a Windows 7 update for 'Service Pack 1'.
It seems to be an error in this update because the normal process to create a new user only creates the name in the list but no folders and other files necessary to start sessions. The profile is not fully created by the normal process. Then you need to
start the process in SAFE MODE, because it only loads the very basic functions for the OS, no drivers, no services, no antivirus....
Hope this can help...!
Thanks.
A.V. -
User account disable on ACS 5.X
Hi,
I'm working with the new ACS version 5.X, and i have a question. Is possible configure a local user account to disable it automatically, as in the 4.2 ACS version. When I create an local user account there isn't this option, and I don't know how to implement it.
Thanks a lot and kind regards.I am attaching an example of how to create both temporary and permanent accounts within the internal user database. It achieves the requirements above although maybe with a different approach. It uses two new capabilities in ACS 5.3
- Attribute to attribute comparison in the authorization policy
- Leverages a new System attributed called "NumberOfHoursSinceUserCreation"
I am also including a summary of the steps below
- Create two identity attributes for internal users
-Define an identity attribute for the user type. Can use an integer where 1 indicates a permanent account and 2 a temporary one
- Define an identity attribute for user lifetime. Use an integer. Defines the user lifetime in hours
- Create a rule in a compound condition in the the authorization policy to deny access to users where Number Of Hours Since User Creation exceeds the lifetime. Eg (Internal Users:User Type = 2 And System:NumberOfHoursSinceUserCreation > Internal Users:UserLifetime) then DenyAccess
Note, I used an integer attribute type for the user type. This is because of issues displaying the enumerated values of an attribute in a compound condition. However, if install patch 1 for ACS 5.3 it may be possible to use an enumerated attribute instead of an integer one (which will be clearer) since the following CDETS is resolved in patch 1
CSCtg51846 Enum values are not shown in compound conditions in rule
I have not tested with patch 1 -
Change user account in snow leopard server??
Trying to change a user account picture in snow leopard server. Have couple computers that are on snow leopard and it uses the the network server that has all the login in. I can't change the user icon within system prefernces. Please help me!
There are server user accounts and computer user accounts. System Preferences is for creating and managing computer user accounts. Server Preferences and Workgroup Manager are for creating and managing server user accounts. If you created the account in System Preferences, you won't be able to manage it with Server Preferences or Workgroup Manager.
-
OIM - EBusiness User Management Connector
Hello there,
Can anybody please tell me within the Ebusiness connector i.e. provided in 9.1 version connector pack, which one needs to be installed? there are 3 different categories within the same -
1.) For the User Management connector:
Oracle EBS User Management 9.1.0.0
2.) For the User Management with HR Foundation connector:
Oracle EBS HR Foundation User Management 9.1.0.0
3.) For the User Management with TCA Foundation connector:
Oracle EBS TCA Foundation User Management 9.1.0.
I don't know which one resembles to which operations that OIM can perform. Can anybody please throw some light and explain which connector does what?
thanks,
- oidm.An FND_USER record represents an Oracle E-Business Suite account. This record is the main component of the account data whose management is enabled by the connector. *(Oracle EBS User Management 9.1.0.0)*
Depending on your configuration of the target system, there may be other user data components that must be managed by the connector:
Some applications in Oracle E-Business Suite require a user to have a person record in Oracle E-Business HRMS. *(Oracle EBS HR Foundation User Management 9.1.0.0)*
These users are either full-time employees of the organization or users (such as contract or part-time employees) who have been provided with access that is similar to the access provided to full-time employees. iExpense is an example of an application that requires users to have person (HRMS) records.
Some applications in the Oracle E-Business Suite require a user to have a record in Oracle E-Business TCA. *(Oracle EBS TCA Foundation User Management 9.1.0.)*
Typically, these users are representatives or employees of customers and vendors of your organization. iStore and iProcurement are examples of applications that require users to have TCA records.
For more info
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11203/intro.htm#CHDJCHDC
Thanks
Suren -
I am trying to determine the best way to set up our imac so each user account can access the same media (songs, movies etc.) through itunes and also back up and manage their personal devices under their own personal user account. There are 4 users on our iMac. Me, my wife, and our 2 children. We have built an extensive library of music/media together using the same iTunes store account. I would like to establish a seperate apple id and iTunes store account for each of us going forward but have the ability for each of us to share our purchases. What is the best way to configure our system and devices in order to allow shared access to media and at the same time allow for individual management of devices including contacts, apps, photos, etc. Please help, I would like to do this once!
Thank you in advance!OK, seeing as no-one replied (presumably because a lot of this information is on the forums in bits elsewhere) here's how I've got on so far.
Applications - just went through them. About the only one I needed was my media server app. Just downloaded and re-installed, had a quick look back though my email to find the license key and it all went on fine. Installation never seemed quite right on my old machine so solved that problem too.
Movies - New iMovies just copied across the clips and projects into their respective folders. Seems to have worked but haven't checked it all that thoroughly. Some duplicate footage here but I can trim this out at some point when I get a chance to go through here.
Documents - Just copied these across.
Photos - used an app called iPhoto Library Manager. You can download for free but have to pay to use the part that consolidates your libraries. Possibly if I was willing to spend a bit more time I could have got away without using this but given I didn't know the state of my different libraries and just how many duplicates I had this was too much of a convenience to ignore. Also got my library into a state where I can now spend a few hours organising it a bit better with Faces / Events etc.
Not attempted Music or iPhone sync yet as been stuck trying to solve a problem with my power adapter. -
HOW TO CONFIGURE MANAGER or APPROVER USER IN ACCESS REQUEST MANAGEMENT TO APPROVE OR REJECT REQUEST
hi sap gurus,
i configured grc 10 system successfully. I created one user: GR_AR_APP001 and assign following roles:
SAP_GRAC_ACCESS_APPROVER
SAP_GRAC_ACCESS_REQUEST_ADMIN
SAP_GRC_FN_BASE
SAP_GRC_FN_NUSINESS_USER
and I maintained GR_AR_APP001 in access control owners as "POINT OF CONTACT", "SECURITY LEAD" and "WORKFLOW ADMINISTRATOR"
but when i am creating access request for new user and defining MANAGER under user details tab as GR_AR_APP001.
the user GR_AR_APP001 is not receiving any request for APPROVE or REJECT in his WORK INBOX.
can u please guide me how to configure APPROVER or MANAGER to approve or reject request.
I will be very much thankful if you guide me successfully.Hi Colleen,
thanks a lot for your time.
PIC1: I created one user: GR_AR_APP001
and assigned all the GRC ROLES.
PIC2: I assigned owner type to GR_AR_APP001 user : POINT OF CONTACT, SECURITY LEAD and WORKFLOW ADMINISTRATOR in NWBC ACCESS CONTROL OWNERS
PIC3: I created one EUP 980 (copied from default EUP)
PIC4: I maintained default manager as GR_AR_APP001 user in 980 EUP
PIC5: I selected SAP_GRAC_ACCESS_REQUEST process id
PIC6: I created one agent id as ZGRAC_MANAGER11 in which I added approver user id: GR_AR_APP001
PIC7: I saved agent id
PIC8: I added agent id as ZGRAC_MANAGER11 in stage5 in manager stage.
PIC9: I saved
PIC10: I maintained EUP 980 (in which I configured manager as GR_AR_APP001 user) in stage 5 task settings
PIC11: Maintain Route Mapping, I clicked on next
PIC12 and PIC13: I saved and activated.
After this process I created one request for new account and selected the manager as GR_AR_APP001 and one request is created with request no 9000000030.
now I logged into system by user GR_AR_APP001 and checked, there is no request under his work inbox.
please guide me at least one procedure, how to receive request in approver work inbox so that I can learn other procedures to configure approver as per our organization requirement.
thanks for your support Colleen.
Maybe you are looking for
-
Report to show breakdown of a particular WBS number
Hi SAP Experts, Is there any report in SAP that I could see a breakdown of costs posted against a particular WBS number. So in other words, I have a WBS number refering to a project and I want to run a report to show me what invoices have been posted
-
Can we use concatenate in where clause of a select query
I have a select query as follows.... SELECT ebeln ebelp belnr vgabe bwart DMBTR FROM ekbe INTO TABLE i_ekbe FOR ALL ENTRIES IN i_blck
-
Javac bug database still being maintained?
After the Oracle acquisition, is the javac bug database still being maintained? I submitted a bug report on 04/20/2010 and received an e-mail response back confirming it was a new bug on 04/22/2010. The e-mail said it would be posted in the external
-
I'm trying to copy and paste a graph into InDesign and when I do it won't paste the legend. What am I doing wrong?
-
I HAVE A FIRST GEN NANO, WITH THE NEW UPDATE TO ITUNE PROGRAM I AM UNABLE TO PURCHASE MUSIC. I DO NOT REMEMBER SECURITY QUESTIONS. I HAD ONLY 3 CARS, LIVED IN ONLY 2 PLACES AND HAD ONLY 3 JOBS. THE SERIAL NUMBER IS NOT ON FILE AND WAS TOLD THAT I HA