Controlling network access for user accounts

Can anyone suggest a way to control airport access to a wireless network?
I have an iMac G4 with AirPort running Tiger that I'd like to set up for a young teen to practice doing some video editing. I'd like to have network access disabled under normal circumstances, but be able to enable it easily during times when there is supervision.
Ideally, I'd like to have the airport icon in the menubar and select a network to join causing a prompt for an administrator password. I can't seem to get anywhere close to that. Any help would be appreciated.
Thanks.

Thank you for your quick response.
5. Click the checkbox under Require Administrator
password to:
The two choices I have are:
- when changing networks
- when creating a computer-to-computer network
The first almost gets me what I want, there are two problems with this as I see it.
1. when the computer comes up and automatically logs in, the user is greeted by authentication dialogs. (AirPort trying to connect?) I'd like to configure AirPort not to automatically try to connect and therefore not produce these dialogs.
2. once approved, the network stays approved until the next reboot. I'd like to not be forced to reboot just to "lock down" the network again.
Any help on those two points?

Similar Messages

Root/admin access for user account

I'm not sure the best way to explain this, but, I want my user account to be able to write/read ANY file on my HDD. How do I enable that in Lion? I've already added my user to the admin group, but, to no avail. Essentially I want to do $> sudo chmod -R a+rwx /, but, without having to do that.
Yes, I understand that your everyday account shouldn't have this type of access and you should only elevate privleges when necessary. W/ that in mind, I'd really appreciate answers (or links) detailing how to do this and not explaining why I shouldn't do this.
Thanks, and let me know if I should explain what I need in more detail.
- Matt

The top level of the hard drive has always been an admin-only area. In 10.6 and earlier, the admin group could write there. Now in 10.7, only root can write there. It was changed for security reasons. Apple realized that not many people are following their security guidelines and are running as admin users all the time, and so they have tightened up security in Lion.
User files should not be put there. Put them in your home folder or in /Users/Shared if you wish multiple users to access them.

TC with Access via User Accounts

Hi all folks,
I start using a new TC (2TB with 7.5.1) with access via User Accounts switched on, but it confuses me a little. In general I'm interesting in storing some more data to the TC, also I'm interesting in using seperate folder/mountpoints.
I add some User Accounts (I used the short names from my Mac, for example lutz, test, work, gast and admin) and every User can logon/connect to the TC, with a User Folder and a "Data" Folder, but admin can't connect to the User Folder.
All the time I try to logon/connect with the admin User, I can mount the "Data" Folder, but I can't mount the "admin" Folder (but the folder is shown).
In the Mac Syslog I find,
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder[111]:
NetworkNode::handleMountCallBack returned -6602
I got a box with,
The operation cannot be completed because the original item for "admin" cannot be found.
And in the TC Syslog I find,
Syslog Protocol 6 - All Information
Nov 18 00:16:54 Gewichtung: 5 AFP login OK from [email protected].
Nov 18 00:16:57 Gewichtung: 5 AFP session from [email protected] closing.
Nov 18 00:16:58 Gewichtung: 5 AFP login OK from [email protected].
Nov 18 00:18:03 Gewichtung: 3 No Address for NTP server time.euro.apple.com.
I got folders like this, "lutz" and "Data" and both are empty.
From the admin Point of view the "Data" Folder looks like this and the "admin" folder can't connect too.
"Data"
"Data/Shared"
"Data/Users"
"Data/Users/lutz"
"Data/Users/test"
"Data/Users/gast"
"Data/Users/work"
"Data/MacBook.sparesbundle"
"Data/PowerBook.sparesbundle"
My question, is "admin" an TC internal User too?
What's the reason I can't mount the "admin" Folder and why I got a complete view to the TC filesystem with the "admin" User only?
It's nice to see this, but what's the reason!
How to add some more Shared folder for data exchange?!
Any idea what's happend,
thanks for any help, I can't find any information about this behavior,
Lutz
p.s.
The password from the User Account definitions are ignored for the "admin" user, the TC Password is used all the time.
p.s.
I read "http://web.me.com/pondini/Time_Machine/FAQ.html", too.

Hi all folks,
anyone who spend some time to add an User Account named "admin" to a TC and try to logon/connect to the TC with this user.
If someone try to do this, don't use the same password for "admin" and the TC itself, but try to logon/connect with "admin" to the TC with the defined passwords, both. I can connect "admin" to the TC with the TC password only, not with the password defined via User Account.
Thanks for any help,
Lutz

Cannot access primary user account - even with Install CD

I’ve been racking my brain trying to figure out how to solve a OSX problem for a friend that ran into some problems on his iMac. For some reason, he wasn’t able to log onto his user account – the only one on this computer. He didn’t try to change his password, but something strange must have happened.
We tried to reset the password with an OS X install disc, but I couldn’t even find, much less access his user account. Thanks to the help of some folks at the Genius Bar of an Apple store, we were able to log onto the Root account and create a new account. I tried t recreate the original user account, but the computer wouldn’t allow it, as that account was already being used. If that user account was still active, why wasn’t I able to reset it with an install disc?
I’ve rebuilt the volumes with Disk Warrior, and repaired permissions with Disk Utilities. I’m at a loss on how to deal with accessing the original user account, which has a lot of important data. I’ve copied the user data to an external drive, and I’m thinking I might be able to import various files – email data, photographs, and various documents, but I’m hoping there be an alternative to what seems like a tedious route. Other than using an install disc to reset the password to the user account it can’t seem to recognize, are there any other ways to gain access to this account?
My friend’s computer is a G4 iMac running, I believe, 10.3.9.

There are several possibilities as to why a user account may
not be correctly available or a password to it reset to fix it.
One of them may be, if the short name of the computer or of
an account was changed by the user; and later the system
may appear different or changed, with some of the user acct
settings or preferences no longer as they were prior to that.
There is a way to create a new admin level user account and
then move the older user info into the new account; then go
in and delete the other one. I am not certain as to how to do
this; but the topic has come up in these discussions, and the
general path is about the same from Panther through Leopard.
A few details may be named different, but similar as things go.
• Mac OS X: *How to change user short name* or home directory name:
http://support.apple.com/kb/ht1428
• How do I change owner's name in my Mac:
http://www.askdavetaylor.com/howto_change_owners_name_applemac.html
While these kinds of details may not be behind the exact problem in
the computer in question, directory and user account issues do often
have similar causes. Often, they are user-caused events. If the general
Directory of information on the hard disk drive has a problem, the use
of a third-party disk tool such as Disk Warrior is usually advised. If that
were needed, usually more evidence across the system would appear.
There may be a way to use a Setup Assistant to recreate a new user
experience and start over with a new admin account and user name.
Then go into the system to ferret out the old user info.
+Sorry I can't be of more help; as I am being distracted by an elderly+
+person who can't figure out why I am online or what it means to be.+
Good luck & happy computing!

Unable to provision Business Rules access for users

Hi all,
Our analytic server is properly configured in Shared Services : we can correctly create users, provision Essbase access for those users, change password, etc...
An application business rules is visible in the left pane of shared services, but we are not able to provision Business rules access for users.
When we try to provision access for a user, we have only access to the Analytic properties.
What's going wrong ?

It sounds like the user you login to HSS with hasn't been assigned with "Provisioning Mgr" rights to business rules.
Get the HSS admin user to grant you these rights and you should then be able to provision users to use Business RUles.
Gee

How to force password policy requirements on password resets for user accounts reset by the Administrator?

OS: Windows Server 2008 R2 Enterprise
Domain Level: 2008
Forest Level: 2000
We have Domain Administrators in our domain that reset passwords for user accounts, and the passwords the Administrators set them to are not being enforced follow our default domain password policy. For example, I log on the domain controller, as an administrator
and can reset a password for a user account to be blank.
Is there a reason Domain Administrator password resets for user accounts are not enforced by our default domain password policy? Is there a way to enforce this on password resets by Domain Admins?

Do you have fine grant password policy? If not ; by default all the usrs are effected by domain level password policy even domain admins,
Regards~Biswajit
Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights.
MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
MY BLOG
Domain Controllers inventory-Quest Powershell
Generate Report for Bulk Servers-LastBootUpTime,SerialNumber,InstallDate
Generate a Report for installed Hotfix for Bulk Servers

Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORREC

Hello
I am installing Java add In in Solution manager 4.0, Central Instance. The process stops in this step:
Mar 12, 2007 10:56:58... Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Mar 12, 2007 10:56:58... Info: Connected to backend system SMD client 200 as user DDIC
Mar 12, 2007 10:57:02... Info: Called for user SLDDSUSERSMD
Mar 12, 2007 10:57:05... Info: Formal password check successful
Mar 12, 2007 10:57:05... Info: Will create user SLDDSUSERSMD
Mar 12, 2007 10:58:52... Info: Created user SLDDSUSERSMD of type A with reference user <none>
Mar 12, 2007 10:58:52... Info: Verification of status for user SLDDSUSERSMD
Mar 12, 2007 10:58:52... Info: User SLDDSUSERSMD exists
Mar 12, 2007 10:58:53... Error: Verification of status for user SLDDSUSERSMD failed. Task not successfully executed. Details following.
Mar 12, 2007 10:58:53... Warning: Error during creation of user SLDDSUSERSMD. Will remove user again to ensure clean exit state
Mar 12, 2007 10:59:44... Error: Exception during execution of the operation
Mar 12, 2007 10:59:44... Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$UserLogonException: Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORRECT)
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:833)
     at com.sap.security.tools.UserCheck.createUser(UserCheck.java:1904)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:289)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Mar 12, 2007 10:59:44... Info: Leaving with return code 2
Reserved 1610612736 (0x60000000) bytes before loading DLLs.
INFO       2007-03-12 10:59:45 [synxcfile.cpp:177]
           CSyFileImpl::remove()
Removing file C:\Program Files\sapinst_instdir\SOLMAN\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\dev_UserCheck.
TRACE      [iaxxejsexp.cpp:188]
           EJS_Installer::writeTraceToLogBook()
NWException thrown: nw.ume.userError:
Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORRECT)
ERROR      2007-03-12 10:59:45
           CJSlibModule::writeError_impl()
CJS-30196 Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORRECT)
TRACE      [iaxxejsbas.hpp:460]
           EJS_Base::dispatchFunctionCall()
JS Callback has thrown unknown exception. Rethrowing.
ERROR      2007-03-12 10:59:45
FCO-00011 The step createSLDDSUser with step key |NW_Addin_CI|ind|ind|ind|ind|0|0|SAP_Software_Features_Configuration|ind|ind|ind|ind|12|0|NW_Usage_Types_Configuration_AS|ind|ind|ind|ind|0|0|NW_CONFIG_SLD|ind|ind|ind|ind|0|0|createSLDDSUser was executed with status ERROR .
User doesnt exist in SU01 - I cannot find it. When I try to create it manually, I have the same error
Some help?
Thanks in advanced

At the end I have created the user
Thanks

Duplicate SPN for user accounts

Hi Support,
I get an error on the system log like the below - but is bringing up a user account rather tham for a computer account; for duplicate SPN:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is username. (of type -17). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate
entries for username in Active Directory.
Steps in the article KB321044 is for computer accounts and not for user accounts; is there any relevant steps for user accounts having duplicate SPNS ?
Thanks,
Arun

I've followed the above steps and does not seem to resolve my issue and the below error on system log repeats:
Log Name: System
Source: Microsoft-Windows-Kerberos-Key-Distribution-Center
Date: 20/08/2014 10:29:49
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxxxxxx.xxxxxxx.internal
Description:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is [email protected] (of type -17). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate entries for [email protected] in Active Directory.
* Setspn -x command on Server does not list any duplicate SPNs
* Followed http://support.microsoft.com/kb/321044 , but output does not give any duplicate SPNs
* Referred this article and SPN shows only one value and no duplicates:
http://blogs.technet.com/b/qzaidi/archive/2010/10/12/quickly-explained-service-principal-name-registration-duplication.aspx
* Tried re-registering SPN for the account sphilpot as per this article - which :
http://msdn.microsoft.com/en-IN/library/ms191153.aspx#Manual
Not sure this will fix the issue.
{ Noticed Disk error on System event log noticed: " The driver detected a controller error on
\Device\Harddisk1\DR1 "
For which asked to remove/format the Expansion S drive and test }

Error connecting SQL Azure - Network access for Distributed Transaction Manager (MSDTC) has been disabled

Sometimes I have an error connecting SQL Azure. The error occurs in an asp.net application and in a windows service running on VM in Azure. Error details:
System.Data.Entity.Core.EntityException: The underlying provider failed on Open. ---> System.Transactions.TransactionManagerCommunicationException: Network access for Distributed Transaction Manager (MSDTC) has been disabled. Please enable DTC for network
access in the security configuration for MSDTC using the Component Services Administrative tool. ---> System.Runtime.InteropServices.COMException: The transaction manager has disabled its support for remote/network transactions. (Exception from HRESULT:
0x8004D024)
   at System.Transactions.Oletx.IDtcProxyShimFactory.ReceiveTransaction(UInt32 propgationTokenSize, Byte[] propgationToken, IntPtr managedIdentifier, Guid& transactionIdentifier, OletxTransactionIsolationLevel& isolationLevel,
ITransactionShim& transactionShim)
   at System.Transactions.TransactionInterop.GetOletxTransactionFromTransmitterPropigationToken(Byte[] propagationToken)
   --- End of inner exception stack trace ---
   at System.Transactions.Oletx.OletxTransactionManager.ProxyException(COMException comException)
   at System.Transactions.TransactionInterop.GetOletxTransactionFromTransmitterPropigationToken(Byte[] propagationToken)
   at System.Transactions.TransactionStatePSPEOperation.PSPEPromote(InternalTransaction tx)
   at System.Transactions.TransactionStateDelegatedBase.EnterState(InternalTransaction tx)
   at System.Transactions.EnlistableStates.Promote(InternalTransaction tx)
   at System.Transactions.Transaction.Promote()
   at System.Transactions.TransactionInterop.ConvertToOletxTransaction(Transaction transaction)
   at System.Transactions.TransactionInterop.GetExportCookie(Transaction transaction, Byte[] whereabouts)
   at System.Data.SqlClient.SqlInternalConnection.EnlistNonNull(Transaction tx)
   at System.Data.ProviderBase.DbConnectionPool.PrepareConnection(DbConnection owningObject, DbConnectionInternal obj, Transaction transaction)
   at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal&
connection)
   at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
   at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
   at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
   at System.Data.SqlClient.SqlConnection.Open()
   at System.Data.Entity.SqlServer.DefaultSqlExecutionStrategy.<>c__DisplayClass1.<Execute>b__0()
   at System.Data.Entity.SqlServer.DefaultSqlExecutionStrategy.Execute[TResult](Func`1 operation)
   at System.Data.Entity.Core.EntityClient.EntityConnection.Open()
   --- End of inner exception stack trace ---
   at System.Data.Entity.Core.EntityClient.EntityConnection.Open()
   at System.Data.Entity.Core.Objects.ObjectContext.EnsureConnection()
   at System.Data.Entity.Core.Objects.ObjectContext.ExecuteInTransaction[T](Func`1 func, IDbExecutionStrategy executionStrategy, Boolean startLocalTransaction, Boolean releaseConnectionOnSuccess)
   at System.Data.Entity.Core.Objects.ObjectQuery`1.<>c__DisplayClassb.<GetResults>b__9()
   at System.Data.Entity.SqlServer.DefaultSqlExecutionStrategy.Execute[TResult](Func`1 operation)
   at System.Data.Entity.Core.Objects.ObjectQuery`1.GetResults(Nullable`1 forMergeOption)
   at System.Data.Entity.Core.Objects.DataClasses.EntityReference`1.Load(MergeOption mergeOption)
   at System.Data.Entity.Core.Objects.DataClasses.RelatedEnd.DeferredLoad()
   at System.Data.Entity.Core.Objects.Internal.LazyLoadBehavior.LoadProperty[TItem](TItem propertyValue, String relationshipName, String targetRoleName, Boolean mustBeNull, Object wrapperObject)
   at System.Data.Entity.Core.Objects.Internal.LazyLoadBehavior.<>c__DisplayClass7`2.<GetInterceptorDelegate>b__2(TProxy proxy, TItem item)

Hello,
I am not an expert in MSDTC but as we know,SQL Azure Database does not support
distributed transactions. This means that SQL Azure doesn’t allow Microsoft Distributed Transaction Coordinator (MS DTC) to delegate distributed transaction handling.
One common cause of MSDTC getting involved in Entity Framework applications is the fact that we close and reopen the same connection as needed (i.e. for each query that is executed).To avoid the stack from opening and closing the connection multiple times,
you can simply open the connection explicitly and run the queries in the same connectio.
The following thread is about a similar issue, please refer to:
http://answers.flyppdevportal.com/categories/azure/sqlazure.aspx?ID=d705a8cf-cba4-494c-96f6-96a136bd29e3
What's more, you can also try the workaround that involves setting the Enlist option of the SQL Azure connection to false. For the detail explanation, please refer to:Entity
FrameWork and SQL Azure
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

HT2518 I've migrated from PC to IMAC, but it has created new users. I can't access these user accounts even though I've set up passwords for them as administrator. Can you assist?

I have transferred files from PC to IMac using Migration assistant. This has automatically set-up new users on the IMac and I can't access these. As administrator, I have set-up passwords for these new users, but when i try to acces these new users usung those passwords, the screen shakes as if the passwords are incorrect. Any suggestions?

fungec wrote:
I can see these in my user groups, and I can change the passwords on both as often as I like. But when I then try to logon, the screen just shakes and nothing happens.
I don't do Windoze, so haven't been able to test migrating from a PC.
There have been a few similar posts here. Are you trying to log on to the new user account(s) via Fast User Switching? If so, apparently that doesn't work. You need to turn that off (via System Preferences > Users & Groups > Login Options. Remove the check from the Show fast user switching .... box.
Then log out of all accounts, restart, select the new account from the login screen and you should be prompted to set the password.
I'm not sure a screenshot will help (and to be honest I'm not sure how to do screenshots on the IMac - I've been a PC man for over a decade!).
In most places, Shift+Cmd+3 will print the entire screen; Shift+Cmd+4 will produce a "target" you can drag over a portion of the screen.
EDIT: by "most places" I mean after you're logged-on, and OSX knows your preferences about how & where to put the screenshot. So it won't work on the login screen itself.
Message was edited by: Pondini

Ssrs security access for users on a different domain

Hi
We are using ssrs 2008 r2 and have added a new domain to our network as we are working with another company.
Our original domain was say "DomainA" which can access all our reports, how do we give access to the new domain "DomainB" access to our reports?
We are unable to add DomainB users to our AD security groups so I have created a windows groups called SSRS_DomainB_Users and given them access to our parent folder and also added them into site settings as a system user.
What is the best way to deal with this?
Users in DomainB will eventually be added to DomainA and DomainB will then be deleted.
One of the users I am testing with gets an error message :
User 'Domain name/user' does not have the required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
Thanks

Hi Nasa1999,
According to your description, you want your reports can be accessed by user from different domain. Right?
In this scenario, we should do Internet Deployment for your reports so that users from different domain can access the reports. Please the articles below:
Planning for Extranet or Internet Deployment
Using Reporting Services in an Internet/Extranet Environment
SQL Server 2008 Reporting Services
for Internet deployment
Reference:
SSRS reports
global access
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Very Slow Network access for some computers

This has me baffled, I'll try my best to explain.
We have an xserve g5 conected to xserve RAID, the xserve has gigabit ethernet.
All Client computers are also on Gigabit ethernet.
Users are all on network homes on the Server.
Most users are getting descent speeds, transfering a file from the RAID to their (network) desktop takes around 40 seconds for a 1Gb file.
However two users noticed transfer was much slower, 20 mins for the same file.
I've ruled out cable problems and hardware problems because if I transfer to the local computer harddrive the speed is up to around 1 minute.
But I've also ruled out a problem with the user account, because if the same user logs onto another mac the speeds are around 40 seconds.
I tried logging other users into the problem macs and all users drop to 20 minutes.
The only thing I can thing it could be is some problem with how those computers are binding with the server, I tried unbinding and resetting up directory access but that made no difference.
What else can I try other than re-installing?

I went ahead and did a fresh install, but this did NOT fix the problem.. I really can't think what else I can do!
Noticed in Network utility there are a lot of received errors when copying a file.
I replaced all the cables but again I don't think its can be a hardware problem because transfer rates are fine from local harddrive to server, but very slow between 2 network disks (unusually slow, considering all other computers are fast transfering the same file to the same place) HELP!

Aaa network access limit user session

Hi, I'd like to limit a user to one authenticated session in aaa network access, with ASA and ACS.
Is tacacs+ accounting necessary ?
thank you in advance
RS

I have never done it with Cisco ACS so I can not offer much support on this.
However, I've done it many times on Cisco Freeware TACACS+ and it is very easy.
1- in Cisco Freeware tacacs, include "max-session = 1" under either the user
profile or group file definition.
2- in the router itself, you need to enable "ip finger". This will allow the
TACACS+ server to querry the router everytime there is a new attempt to loggin.
If you already have a session to the router, TACACS+ server will see this and
reject a new session for that same user. If the login ID is different than what
is already connected to the router, it will then be accepted:
C7140#who
Line User Host(s) Idle Location
0 con 0 idle 11w2d
* 2 vty 0 cciesec idle 00:00:00 192.168.15.9
Interface User Mode Idle Peer Address
C7140#
Now if user "cciesec" tries to login again through another session, it will
be rejected by the TACACS server:
[root@LinuxES-lab1 root]# finger @192.168.15.1
Line User Host(s) Idle Location
0 con 0 idle 11w2d
2 vty 0 cciesec idle 00:04:00 192.168.15.9
* 3 vty 1 idle 00:00:00 192.168.128.100
Interface User Mode Idle Peer Address
[root@LinuxES-lab1 root]#
Easy right?

Delete (-) for user account dimmed.

I had created a “Guest Account” that I would now like to delete, however I cannot. When I log into my administrator account, go to System Preferences and unlock the lock to allow changes and then select the guest account, the delete [-] for the guest account is dimmed. How do I get rid of this account?

Within the guest account, was there any higher privilege given to make it
equal to your main Admin account? In those cases where a secondary
account was given high privilege, that would have to be revoked prior to
being able to simply remove the account from the system.
Some access from the guest account may be holding up the delete process.
(This is an area where I have only read several things about; however I did
add a link and quote to this reply which may be of help if nothing else works.
But it has a limited answer, too; the main command is dimmed out, inviting
you to try other advanced or even routine maintenance on your computer.)
An account access permissions issue may likely only be a maintenance matter.
But check the settings used to create and maintain the Guest user accounts.
*See this topic:* "How do I completely disable the Guest Account in Leopard?"
http://www.askdavetaylor.com/completelydisable_guest_account_mac_os_xleopard.html
Sometimes, issues within accounts, users and privileges go odd; it may
be you would need to repair disk and disk permissions from the booted
Installer's Disk Utility version. Also, check and repair anything in the OS
that may have been lacking. There are times where general maintenance
is a way to fix odd issues that otherwise have no explanation.
Have you started the computer into SafeBoot, and when then in the admin
account, see about removing the guest or other user; or at least try to make
the settings function? Some extensions and system bits are inactive when
the computer system is booted into SafeBoot Mode, but you can use this to
an advantage since it does a basic repair on startup. Then run Disk Utility,
and its 'repair disk permissions' then when done, quit D.U. & restart normally.
There are several Support documents on the topic of user accounts and how
to manage them; some troubleshooting of them involves reading up on the
variable and ways you can change the settings. I'd use caution since there is
a way to Delete a Guest User Account that involves the terminal or root level
and fair attention to detail is required so as to not affect more than the one item.
A post in this Discussion tread tells of how to delete a guest user account:
http://discussions.info.apple.com/thread.jspa?threadID=1521487
From May 14, 2008 as contributed by V.K. to resolve another user's problem:
+"From an admin account uncheck the option enabling Guest account in accounts+
+system preferences and then enter the following command in terminal.+
*sudo dscl . delete /users/Guest*
+Please just copy and paste the above. That's very important, you don't want+
+to delete a wrong thing here. You'll have to enter your admin password which+
+you won't see (that's normal).+
*This command will delete the Guest user.*
+Now go to the accounts preferences and enable Guest. This should create+
+Guest user afresh and hopefully resolve the password issue. Restart and+
+try the guest user again. Double check and make sure that it's enabled."+
{This last part, should you need to re-create a guest user again.}
While I have not tried this, nor have I ever created a Guest User account in
any of my dozens of Macs, (prefer to create Standard user for daily use; or
try the Parental Controls to minimize damages an inexperienced user may
create in the process of over-reaching their grasp) I can see it may be handy.
Hopefully some of the above may be helpful. Usually if a system function is
acting oddly, sticks, or won't work correctly, some systematic maintenance
is likely behind the situation. To have and run AppleJack from single user or
perform other preventative actions to head off possible issues, are ideas, too.
Since I don't use AppleJack, and seldom need to run in the command line or
single user or terminal mode, some of that is out of my range. I've found most
of the issues I've read about can be prevented. However, if a user gets into the
OS and can move things around, trash or misplace important parts, etc; odd
things can happen. Unfriendly or careless/unwanted user access can mess it up.
Usually about once a month whether or not the computer needs it, I run OnyX
and have it complete all items check-marked in Automation, and have it set to
restart the computer when that group is finished. There are other tools in it, too.
Perhaps the combination of things can help; or just what Dave Taylor said.
Good luck & happy computing!
+{ edited to add more confusion }+

How to change the thread number for user account

I remember that for each user account, we can limit the maximum thread number it can create for a user process. But how to change this number?
Thanks,
Iris

Hi ,
I do not think that there is a way to control the number of "threads per user".
Are you referring to "thread id" ? Please elaborate on your requirement.
You may want to take a look at the complete list of process sizing tunables
at:
http://docs.sun.com/ab2/coll.707.1/SOLTUNEPARAMREF/@Ab2PageView/idmatch(CHAPTER2-4)?Ab2Lang=C&Ab2Enc=iso-8859-1#CHAPTER2-4
The link can also be accessed as:
http://docs.sun.com
Collection Titles
Solaris Tunable Parameters Collection
Solaris Tunable Parameters Reference Manual HTH
Gopinath.
Developer Technical Support
Sun Microsystems Inc

Controlling network access for user accounts

Similar Messages

Maybe you are looking for