Creating user accounts through ARD3 on client machines

Hello. I am trying to create a secondary local admin account on some machines that are running ARD3/OS X 10.4.8. Right now, I am using only one machine as a test before attempting this on the several hundred machines I need to do this on.
I used this old thread as a reference:
http://discussions.apple.com/thread.jspa?messageID=1112351&#1112351
Using these instructions, I am able to connect to the ARD client machines and send them the UNIX commands as root. Here are the commands I am using in order:
echo 'admin2::512:512::0:0:admin2:/Users/admin2:/bin/bash' | niload -v passwd /
echo 'admin2:*:512:admin2' | niload -v group /
niutil -appendprop / /groups/admin users admin2
Using these commands, I can successfully create a user account named "admin2", with no password, create a group named admin2, and also make user admin2 a member of the admin group.
The problem I am having is using the passwd command through ARD. The passwd username command requires you to type the password in twice and you get the following output:
New password:
Changing password for admin2.
Password unchanged.
I have also attempted to add the password in the first command that is sent in Field 2, like so:
echo 'admin2:password:512:512::0:0:admin2:/Users/admin2:/bin/bash' | niload -v passwd /
However, when I try to login, it will not let me login using the pasword I specified the above command. The only way this works is if I execute the passwd command.
Is there any way in ARD that I can change a user password on another machine -or- is there a syntax for the passwd command that I can use to change the password without entering it twice?
Any help would be greatly appreciated. I would email the author of the solution "shayaan", but an email address is not listed and the original thread is locked.
Thanks,
Jason

found answer in another thread.

Similar Messages

  • Access Denied creating user accounts through vba

    Hello,
    I have a MS-Access application that runs on a Windows 2012 server. My customer logs into the server using RDP. The MS-Access application is started up automatically by means of the environment variable in the user settings. The customer needs to be able
    to create new windows users for this application, simply by clicking a button.  
    The VBA script to create users works, because when I start up the MS-Access application with my own logged on Administrators account, the new users get created. If my customer tries it, he gets 'Access Denied' error. I have added his user account to
    the Power Users group, but that did not solve the problem. I also tried to make him member of the DCOM Users Group, the 'Access Denied' error remains...
    I do not want to give him administrator priviliges, because he is 'just a customer'...
    What do I need to do for this setup to work? I tried altering some DCom settings, but frankly I do not have enough knowledge to feel comfortable with this. Hope anybody can help me out here...
    best regards, Rob

    Is this a standalone server? Only administrators can create user accounts, so there is no work around for that. You could look at something that has the administrator account/password stored and launch PSEXEC or something else in an elevated session behind
    the scenes but that is a security volunerability because the credentials are stored.
    If the account is being created in an Active Directory environment you could delegate permissions to the appropriate OU for your customer.
    Mark B. Cooper, President and Founder of PKI Solutions Inc., former Microsoft Senior Engineer and subject matter expert for Microsoft Active Directory Certificate Services (ADCS). Known as “The PKI Guy” at Microsoft for 10 years.

  • Creating windows user account through java

    Hi,
    Is it possible to manage(create/edit/delete) windows user account through java.
    Where in the java program is used to create windows accouunt on the same machine.....
    I did that with the net command and running the net command in java.... is there any better approch to this problem
    Regds
    sandy

    I have heard something about the JDesktop, will it be
    possible if i use the JDesktop,How would I know, it's not a standard library. Go and have a look at it.

  • Help , how to auto create user account

    Hi, guys,
    i wanna to know how to auto create user account after use the suppliers' api to create supplier.
    i didn't find out how to auto create user account by use ap_vendor_pub_pkg.create_vendor_contact procedure.
    how to auto create the user account ?
    if you know ,tell me ,pls
    best Regards !
    Edited by: wanjin on 2013-4-15 下午11:50

    Hi Gareth,
    I wanna create an Oracle E-business Suite use account ,but how to use fnd_user_pkg.createuser procedure to relation the AP suppliers , not employee suppliers.
    the result like N:Purchasing Super User -->supplier-->Contact Directory --> create user
    then use "Create User Account for this Contact" to create user account
    Regards,
    Wanjin

  • Creating user accounts with OIDDAS and use them from the OS

    Hi,
    I have a customer that is experiencing an error creating user accounts from OIDDAS, and use that user accounts from the operating system.
    My customer is using OID/OAS4OS 10.1.4.2.0, and that version is not longer available to download, then, I will try in my own environment
    with OID/OAS4OS 10.1.4.3.0.
    And the question is the following: is supported to create user accounts with OIDDAS and expect that users can work with OAS4OS and be
    able to authenticate in the operating system?
    For the reference, SR# 7222351.993:
    Thanks,
    Luis Vivero.
    Edited by: LV in ORCL on Dec 11, 2008 6:47 AM

    Hi Jacco,
    I didn't see your post before.
    Nop, unfortulately I don't have a document with that. I just received that answer
    from development (related to the plugin for AD that is not certified, and DAS is
    not intended to work with OAS4OS).
    Anyway, about the plugin to work with AD, this is working for me; at least I tested
    it by configuring the plugin, I configured synchronization, the mapping file, I did
    the bootstrap, and the accounts that were bootstraped now shows the OS attributes
    on DAS.
    Regards,
    Luis Vivero.

  • Creating User Accounts So I Can Set Parental Controls?

    My nine year old son loves to use YouTube to watch video game videos and apparently there are NO parental controls or any kind of filters on YouTube. The majority of the ones he finds are ok but there's about 15% that are just plain shocking even to me. Its pretty sad the things that people put up there. I hate to have him never be able to get online again so I want to set some sort of filter where I can block content according to keyword but I just cant figure it out at all. So I tried to set controls over the whole MacBook but it tells me that as administrator I cannot. I cant figure out how to create non-admin users though. Searched all the forums and guides, etc. but no answer.
    Thanks, so in summary, I just want to know how to create user accounts if thats the right term.
    I am using a MacBook, running Mac OSX version 10.4.11.

    Hi
    Apple menu (top left hand corner) > System Preferences > Accounts. Click the lock to authenticate. Just above the lock are two icons; a 'plus' and 'minus'. Click the 'plus' icon. Enter the name of your son, tab down into the next field and that should autofill for you with the information you placed in the name field; tab down again and enter a password; tab again to key in the password again; don't tick the box that says "allow user to administer this computer"; click 'Create Account'. You should be prompted with a window asking if you want to leave automatic login on or if you want to turn it off - turn it off. You'll see why later on. What you should see after this has finished is in the left hand window at the top your account details with your name and underneath it should 'Admin' and below your account details will be your son's. Underneath his name it should say 'Standard'.
    Click on his name to select it and now click on the Parental Controls tab on the right hand side of that window. You should now have the option to enable and configure control for the 5 applications listed there: Mail, Finder & System, iChat, Safari and Dictionary. Explore and configure to your hearts content from there. When you are happy quit out of System Preferences and select Log out from the Apple Menu. You should now be presented with the Login Window displaying not only your account but also the newly created one for your son. Log in s your son and test to see if what you've set as a control has worked. Keep going backwards and forwards between the two accounts until you are happy.
    Bear in mind there is only so much you can do.
    It's virtually impossible to block everything potentially morally harmful without basically stopping your son from having any access at all. You could look at supplementing Parental Controls with the built-in filters in your router - if you have one? If you don't then consider getting one. I'm struggling to think of a router for residential use that does not have some sort of built-in web filter?
    The tab button is the key immediately to the left of the 'Q' key. It will have an arrow going from left to right printed on it.
    Tony

  • What do you use to create user accounts?

    I have used Passenger to create my school's user accounts in the past. Since upgrading to Mavericks Server 3 I can't import the user accounts from Passenger. Does anyone know of a program that will create user accounts for 10.9?

    I downloaded the Passenger 4.2 beta and was able to export a user list that included passwords that I could import into Workgroup Manager 10.9. The format of the export file has changed for 10.9.
    The old format:
    0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Users 39 dsAttrTypeStandard:RecordName dsAttrTypeStandard:AuthMethod dsAttrTypeStandard:Password dsAttrTypeStandard:UniqueID dsAttrTypeStandard:PrimaryGroupID  dsAttrTypeStandard:Comment dsAttrTypeStandard:Expire dsAttrTypeStandard:Change dsAttrTypeStandard:RealName dsAttrTypeStandard:NFSHomeDirectory dsAttrTypeStandard:UserShell dsAttrTypeStandard:PrintServiceInfoXML dsAttrTypeStandard:HomeDirectory dsAttrTypeStandard:HomeDirectoryQuota dsAttrTypeStandard:MailAttribute dsAttrTypeStandard:Keywords dsAttrTypeStandard:FirstName dsAttrTypeStandard:LastName dsAttrTypeStandard:JobTitle dsAttrTypeStandard:OrganizationName dsAttrTypeStandard:Department dsAttrTypeStandard:Building dsAttrTypeStandard:PhoneNumber dsAttrTypeStandard:MobileNumber dsAttrTypeStandard:FAXNumber dsAttrTypeStandard:PagerNumber dsAttrTypeStandard:EMailAddress dsAttrTypeStandard:Street dsAttrTypeStandard:City dsAttrTypeStandard:State dsAttrTypeStandard:Country dsAttrTypeStandard:PostalCode dsAttrTypeStandard:Picture dsAttrTypeStandard:SMBHome dsAttrTypeStandard:SMBHomeDrive dsAttrTypeStandard:SMBProfilePath dsAttrTypeStandard:SMBScriptPath dsAttrTypeStandard:WeblogURI dsAttrTypeStandard:IMHandle
    ppiper:dsAuthMethodStandard\:dsAuthClearText:123456:2200:1026::::Peter Piper::::::::Peter:Piper:::::::::::::::::::::
    The new format:
    0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Users 46 dsAttrTypeStandard:RecordName dsAttrTypeStandard:GeneratedUID dsAttrTypeStandard:AuthMethod dsAttrTypeStandard:Password dsAttrTypeStandard:PasswordPolicyOptions dsAttrTypeStandard:UniqueID dsAttrTypeStandard:PrimaryGroupID dsAttrTypeStandard:Comment dsAttrTypeStandard:Expire dsAttrTypeStandard:Change dsAttrTypeStandard:RealName dsAttrTypeStandard:NFSHomeDirectory dsAttrTypeStandard:HomeDirectoryQuota dsAttrTypeStandard:UserShell dsAttrTypeStandard:PrintServiceUserData dsAttrTypeStandard:HomeDirectory dsAttrTypeStandard:MailAttribute dsAttrTypeStandard:MCXSettings dsAttrTypeStandard:Keywords dsAttrTypeStandard:Picture dsAttrTypeStandard:MCXFlags dsAttrTypeStandard:SMBHome dsAttrTypeStandard:SMBHomeDrive dsAttrTypeStandard:SMBProfilePath dsAttrTypeStandard:SMBScriptPath dsAttrTypeStandard:FirstName dsAttrTypeStandard:LastName dsAttrTypeStandard:Street dsAttrTypeStandard:City dsAttrTypeStandard:State dsAttrTypeStandard:PostalCode dsAttrTypeStandard:Country dsAttrTypeStandard:WeblogURI dsAttrTypeStandard:EMailAddress dsAttrTypeStandard:PhoneNumber dsAttrTypeStandard:MobileNumber dsAttrTypeStandard:FAXNumber dsAttrTypeStandard:PagerNumber dsAttrTypeStandard:IMHandle dsAttrTypeStandard:ServicesLocator dsAttrTypeStandard:URL dsAttrTypeStandard:JobTitle dsAttrTypeStandard:OrganizationName dsAttrTypeStandard:Department dsAttrTypeStandard:Building dsAttrTypeStandard:Company
    ppiper:::123456::2220:1026::::Peter Piper:::::::::::::::Peter:Piper::::::::::::::::::::

  • Suspect Adobe ARM creating user account

    Hello
    I was helping a user with a problem about 2 days ago. The problem is that everytime Windows reboots the netbook shows a newly created User Account called icsokern.
    The user has a Samsung netbook, Windows 7 Starter & Service Pack 1 as well as ESET AV.
    Trying to delete the account doesn't make any difference as the account is recreated after a reboot. However, securing the account I put in a password as well as changed the login time access to 0. When I try to change the applications that the user account can access I see only Adobe ARM as ticked. No other application is ticked. This leads me to believe that Adobe ARM could be creating this account, but there is no logical explanation why?
    Checking for a malware reveals no alerts. No quarantined files and Windows' Event Viewer shows no alerts regarding system or application errors.
    Having said the above I decided to ask on the Adobe forum to see if anyone else has had this experience and if so what did they do to fix this?
    w

    Latest Adobe ARM installs task in the Windows Task Scheduler.
    If you see this task, can you try to disable it and check if new User account gets created?
    If new account no longer created after task is disabled, you can conclude that Task Scheduler does it for some reason, which will need to be investigated.

  • Create user account in Child Domain

    Dear all.
    Kindly, i have Forest contain two domain Root domain, child domain.
    in the child domain i can create a user account using the root domain.
    i want to stop this. i want the IT Department there create users for there domain only?
    thanks
    Ashraf Hilal

    Hi Ashraf,
    Your query is not clear. Do you want to restrict enterprise administrators from creating user accounts in child domain?
    By default, Enterprise Admins group is part of Builtin Administrators group in the child domain.
    When child domain is introduced, by default Enterprise Admins group is added to Child Domain\Administrators group (Builtin local Security group).
    How to Restrict Enterprise Admins From Child Domain
    http://social.technet.microsoft.com/wiki/contents/articles/16919.how-to-restrict-enterprise-admins-from-child-domain.aspx
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/a72dc036-3375-4124-9ef7-d30af104451a/enterprise-administrator-and-child-domain?forum=winserverDS
    Regards,
    Rafic
    If you found this post helpful, please give it a "Helpful" vote.
    If it answered your question, remember to mark it as an "Answer".
    This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

  • HT4889 Apple Store changed hard disc - created user account ("User"). I ran migration assistant / time machine. All files migrated but on "User" I can't open them. Help!

    I changed my Seagate 1 Tb hard disc under the Apple Exchange Program.I received the iMac and the Apple Store created a new account on my iMac ("User"). I connected the Time Machine and ran the migration assistant. All files etc. have migrated. I can see the Macintosh HD and my old user account but am not allowed to open them. How can I get back to my old settings etc.?

    what is the message that you get when you try to open a file?
    1.  You can try to change the permissions to see if they will allow you to write to the file(s).
    2.  Naviagte to your Home folder Macintosh HD-->Users-->Username and press command+i to get info and on the bottom of the screen click on the lock and unlock the security check, remove your current username and then re-add it and next to the minus symbol click and select apply to enclosed folders

  • When i start up imac it goes through set up creates a new user account then starts over againj, when i start up imac it goes through set up create user account then starts over again over and over

    when i start imac it goes through set up gets to creating new user account then it re boots and does it all  again and again and again

    Apple may still supply the original restore CDs/DVDs for a nominal fee.  Have a your serial number and model information available when you call them.
    AppleCare Support Phone Number: 1-800-275-2273
    open 6am to 6pm Pacific Time
    Apple Phone Sales 1-800-692-7753
    International Technical Support Numbers
    http://www.apple.com/support/contact/phone_contacts.html
    "You have to call Apple & likely ask for a Product Specialist to get it (Leopard), if they still have it... helps if you tell them you have a new iPhone (iPad) that needs it!"
    BDAqua
    Requirements for Mac OS X v10.5
    http://support.apple.com/kb/HT3759
    Query by serial number "A serial number is a unique, identifying number or group of numbers and letters assigned to an individual piece of hardware or software. It's used for various things depending on the product / brand but what is your Mac's serial number for and more importantly... what is it hiding and what can it do for you ?"
    http://www.appleserialnumberinfo.com/Desktop/index.php or

  • I'm having a problem with logging into a FileVault-protected user account after restoring from Time Machine backup.

    Hi all,
    My computer had been running really slowly for a while, so I decided to erase the whole hard drive and reinstall the operating system, and then I was going to restore the files I cared about from Time Machine. The main account, which had all my documents and photos, was FileVault-protected. The last thing I did before erasing the hard drive was to run one last Time Machine backup. As far as I remember, I always ran Time Machine backups with the FileVaulted user logged in.
    I don't remember whether I was using FileVault 1 or 2. I had been using FileVault 1, but I installed Lion as soon as it came out and I thought I had migrated to FileVault 2 at that point.
    Once I erased the hard drive and reinstalled the operating system, I browsed the Time Machine disk and, within the Users folder, there was no folder for the main user account. When I tried to reinstall everything by restoring from Time Machine backup, I'd get the option for all the user accounts, but when I tried to log in with the main one I'd get the dreaded "You are unable to log in to the FileVault user account "User" at this time. Log in failed because an error occurred." Finally, when attempting to restore from the Time Machine backup again, I noticed something strange: After the computer got to about 10% done restoring, it declared itself completed successfully and rebooted.
    I've tried a number of tips that came up from questions about similar issues on the Apple support forum, but had no luck. Is there any way to get these files back? Did they ever even get backed up?
    Thanks.

    Hroodbwai wrote:
    I can't find it! not sure what's going on but the only folder shown is the " Shared" folder.
    Did you have only the one user account? If there were others, they should also be in the "Users" folder. You probably won't have access to the files inside them, but they should be there.
    From what can make out, it looks like it's not backed up any of the files for the filevault account. Can't see user folder when looking through previous backups in Time Machine galaxy view.
    Are you doing that from a Finder window set to your internal HD, or your computer name? It should look something like this (with the Finder in List view):
    |
    |
    I'd been logging out and backing up manually on a regular basis.
    Scheduled backups should run normally; but they won't back up the File Vault sparse bundle, nor will any run manually.
    The only time it's backed-up is when you actually log out.
    You should have seen this window on logout:
    |
    |
    followed by this one:
    |
    |
    If you didn't see the second one, or cancelled it, the account wasn't backed-up.

  • Restore a user account backed up by time machine to a replacement macbook?

    I've searched the forum without finding an answer to this situation, so here's my question:
    I setup Time Machine to only backup a teacher's user account on her MacBook because the capacity of the external drive used for her backup was not very large. I excluded all files on the drive, with the exception of her user's home directory. *Her laptop was stolen.*
    I just received a replacement laptop, which is the same model, but it is running 10.6.2. The stolen MacBook was running 10.5.8. During initial setup, I attached the drive and attempted to "Restore from TIme Machine backup," but it would not recognize the time machine backup on the attached drive. I also tried renaming the computer to match the name of the stolen MacBook, and tried restoring using the Migration Assistant, which was also unsuccessful.
    *Is there anyway that I will be able to restore her user account from the Time Machine backup to her new MacBook?* It doesn't matter if reinstalling 10.5 is the answer, or if I need some 3rd-party software. Is there detailed Time Machine documentation that covers this type of scenario? If there is, I haven't been able to find it.
    I also considered allowing the new MacBook to consider the external drive that has the stolen MacBook's backup as its own Time Machine backup (as automatically prompted when plugging the drive into the new MacBook), but I didn't want to futz around and mess things up.
    Thank you in advance for helpful replies!

    Nova wrote:
    I've searched the forum without finding an answer to this situation, so here's my question:
    I setup Time Machine to only backup a teacher's user account on her MacBook because the capacity of the external drive used for her backup was not very large. I excluded all files on the drive, with the exception of her user's home directory. *Her laptop was stolen.*
    I just received a replacement laptop, which is the same model, but it is running 10.6.2. The stolen MacBook was running 10.5.8. During initial setup, I attached the drive and attempted to "Restore from TIme Machine backup," but it would not recognize the time machine backup on the attached drive. I also tried renaming the computer to match the name of the stolen MacBook, and tried restoring using the Migration Assistant, which was also unsuccessful.
    this is because you excluded all the other things from backups. this precludes any kind of automated migration.
    *Is there anyway that I will be able to restore her user account from the Time Machine backup to her new MacBook?*
    yes, it's possible but you'll have to do it manually. First, make sure that there is no account by the same name already exists on the new mac. this is important.
    next, control-click on TM in the dock and select "browse other TM disks". this will let you browse the old TM backups. in the backups select the old home directory in /Users. click on the "gears" action button in the toolbar and select "restore to". choose to restore to the folder /users on your main hard drive. once the restore is complete go to system preferences->accounts and create an account with the same short user name as the name of the home directory you just restored. it will say that a home directory by that name already exists and ask if you want to use it. say "yes".

  • Creating User Accounts

    I installed HTML DB yesterday and everything looks OK in the "install.lst" file. I am able to login as admin/<pass>. According to the HTML DB Users Guide on page 11-2, Creating New User Accounts, I am supposed to select the Administration tab -> Manage Users -> Create New User. Well I don't have an Administration tab nor do I see Manage Users or Create New User on any of the tabs. Here are the tabs I do have, Home, Service Administration, Workspace Administration and Monitoring. Can someone give me an idea where to look for the Administration tab? BTW, all of my objects (packages, procedures, etc.) are valid.
    Thanks,
    PAThomas

    PAThomas,
    Please read page 14-6 in the Users Guide - Creating a Workspace without a Request. This will step you through the process of creating a workspace.
    Once you create your workspace, you can log into it, and then you will be able to create workspace users, as outlinesd on page 11-6.
    Thanks,
    - Scott -

  • Setup assistant for 10.3.9 - can't complete process to create user account

    After much searching, I find myself still looking for a solution and hope that someone here might be able to help me.
    I just purchased a used iBook G3 (white), 800 mhz. The seller did a complete reinstall of OS X 10.3.9.
    I turned the laptop on for the first time, the movie/setup assistant appeared, and I began to enter the requested information. So far so good. However, once I reached the "Create Your Account" page.... I entered my desired password and it won't let me go past that point. (If I hit Tab after entering my password hint, it just cycles back to the 'Name' field.) I cannot select a user picture/icon (in fact, no pictures appear at all) and the "continue" button at the bottom of the page is grayed out so I can't proceed.
    I am completely baffled. What could be causing this problem and how can I fix it? I want to play with my new toy. I have gone through the previous pages and looked at the information entered, and I can't see anything that could present a problem. Restarting didn't help either. And to answer the question someone is bound to ask... no, I don't have the install disks. (The seller installed the OS.)
    Thank you in advance for any assistance you may be able to provide!

    One of the choices to consider would be to get retail OS X install disc(s)
    of your own so you can go back and totally reinstall and test a System.
    This may involve more than it seems; and the computer should have
    included some OS X or other system software. The original software set
    which shipped with the computer, including the Apple Hardware Test, as
    a bare minimum. Since the computer itself could support Tiger 10.4.11,
    if properly upgraded (RAM and adequate capacity hard disk drive) and
    that system is less obsolete than Panther 10.3.9, you may have to get it.
    {Sometimes, depending on the chosen password, if characters not valid
    to be used in a password are put into the window-box, they may not work.
    However most numbers, and common letters are safe bets; as are random
    choices using combinations so long as they don't contain incorrect ones.}
    If you are in contact with the seller of that computer, perhaps you could
    deal with them in regard to this odd matter; and see about getting a set
    of installer discs for the computer. Was the seller a retailer, or private?
    New computers shipped with adequate software to run, test & repair them
    and the discs included at that time were intended to accompany the Mac.
    Also, an installation without the discs is not a legal installation. The best
    tool to find out what's going on would be the retail installer disc, and the
    original Apple Hardware Test for the specific computer model. Harder to get.
    Good luck & happy computing!

Maybe you are looking for