Delegate Ad users only installation rights on client Machines

Hi Everyone,
I want to delegate a Ad user to only install/ Uninstall rights?... Is is possible?
Please help....
Thanks and Regards
Prasad kambar

Hi,
To solve your requirement, you can add that AD user to "Power Users" group in a client machine for allowing software installation.
Regards,
Gopi
JiJi
Technologies

Similar Messages

Creating user accounts through ARD3 on client machines

Hello. I am trying to create a secondary local admin account on some machines that are running ARD3/OS X 10.4.8. Right now, I am using only one machine as a test before attempting this on the several hundred machines I need to do this on.
I used this old thread as a reference:
http://discussions.apple.com/thread.jspa?messageID=1112351&#1112351
Using these instructions, I am able to connect to the ARD client machines and send them the UNIX commands as root. Here are the commands I am using in order:
echo 'admin2::512:512::0:0:admin2:/Users/admin2:/bin/bash' | niload -v passwd /
echo 'admin2:*:512:admin2' | niload -v group /
niutil -appendprop / /groups/admin users admin2
Using these commands, I can successfully create a user account named "admin2", with no password, create a group named admin2, and also make user admin2 a member of the admin group.
The problem I am having is using the passwd command through ARD. The passwd username command requires you to type the password in twice and you get the following output:
New password:
Changing password for admin2.
Password unchanged.
I have also attempted to add the password in the first command that is sent in Field 2, like so:
echo 'admin2:password:512:512::0:0:admin2:/Users/admin2:/bin/bash' | niload -v passwd /
However, when I try to login, it will not let me login using the pasword I specified the above command. The only way this works is if I execute the passwd command.
Is there any way in ARD that I can change a user password on another machine -or- is there a syntax for the passwd command that I can use to change the password without entering it twice?
Any help would be greatly appreciated. I would email the author of the solution "shayaan", but an email address is not listed and the original thread is locked.
Thanks,
Jason

found answer in another thread.

Multiple OD users simultaneously logged in to one client machine?

I'd like to be able to have multiple OD network home folder users logged into a single client machine at a time. They would switch between themselves using Fast User Switching. I can't figure out how to make this work. Is this simply not possible or am I missing a configuration setting somewhere that allows this to happen?

The first thing that comes to mind is that the share point hosting the user's network home directory is already mounted as another user which would cause it to fail. When I try this the Login Window says the user is unable to log in- makes sense.
Next I tried creating another automount share point on the server (/Shared Items/More Users) and assigning the 2nd user to use that share point (so the homes are on different share points) and that appears to work. Not sure exactly how 'supported' this configuration is but it appears to work (in other words, your mileage may vary). Here are the mount command results from the client:
mount
/dev/disk0s3 on / (hfs, local, journaled)
devfs on /dev (devfs, local, nobrowse)
/dev/disk0s2 on /Volumes/Loki (hfs, local, journaled)
map -hosts on /net (autofs, nosuid, automounted, nobrowse)
map auto_home on /home (autofs, automounted, nobrowse)
map -fstab on /Network/Servers (autofs, automounted, nobrowse)
trigger on /Network/Servers/server.domain.com/Users (autofs, automounted, nobrowse)
trigger on /Network/Servers/server.domain.com/Shared Items (autofs, automounted, nobrowse)
trigger on /Network/Servers/server.domain.com/Shared Items/More Users (autofs, automounted, nobrowse)
afp_3a2gxv44sbgc0lNAhO1lX1fO-1.2d000007 on /Network/Servers/server.domain.com/Shared Items/More Users (afpfs, nodev, nosuid, automounted, nobrowse, mounted by jupeman)
afp_3a2gxv44sbgc0lNAhO1lX1fO-1.2d000008 on /Volumes/Public (afpfs, nodev, nosuid, nobrowse, mounted by jupeman)
afp_3a2gxv44sbgc0lNAhO1lX1fO-1.2d000009 on /Network/Servers/server.domain.com/Users (afpfs, nodev, nosuid, automounted, nobrowse, mounted by rick)
afp_3a2gxv44sbgc0lNAhO1lX1fO-1.2d00000a on /Volumes/Public-1 (afpfs, nodev, nosuid, nobrowse, mounted by rick)
As you can see, jupeman has mounted /Network/Servers/server.domain.com/Shared Items/More Users and rick has mounted /Network/Servers/server.domain.com/Users
Best of luck!

Unable to connect to Server at servername . enter a different URL and try again (only on client machine)

Hello All,
We are getting "Unable to connect to Server at <<servername>>. enter a different URL and try again" error, if we are trying to connect to report server in report builder.
This issue is appearing only on 2-3 client machines only. Rest on other client machines and server URL is working fine.
Please suggest
Thanks in Advanace
-Regards
-Kumud Vaish

I would suggest looking at what might be different between those clients and the others that work. Do they run the same antivirus version? Did they receive any recent updates (windows or AV)? Are they potentially on a different network
(sometimes a wireless network is configured to be different from the wired)? Are they getting any different group policies?
We've seen the antivirus web control block access before in my environment.

How to verify that trust relationship has been set up successfully at client machine ?

Hello,
There is trust set up with domain group.Would you please let me know how can I verify that trust relationship has been set up correctly in such a way that i can see the users of trusted group on client machine ?
Any idea?
Note :I do not have access on Domain Controller.
Thanks and Regards,
Dipti
Dipti Chhatrapati

Hi
As far as I know, trust certificates that have been exchanged between the SharePoint farm and external systems should be visible by going to the Central Admin->Security->Manage Trusts page.
Kind Regards
Bjoern
http://www.sharepointviking.com
Twitter: Follow @bjoern_rapp

How to set time zone for a session in Client Only installation

Environment:
OS : Unix (HP-UX 11.0)
Oracle DB : Ver 8.0.5
Developer : Ver 1.6 ( Client only Installation)
Developer also on Unix.
RDBMS and Developer Installed on different
home directories.
Our development is Forms 4.5 on X windows.
Runtime is forms character mode.
Probelm Description:
To run the application I am using TWO_TASK to connect to the database. In our application we have to take care of time zones. For that in previous versions(NO TWO_TASK used) I used TZ unix environment variable, to get time zone dependent time wherever sysdate is used.
Now because I am using TWO_TASK, oracle is no more using users TZ settings.
Question : Is there any way I can make oracle to use the TZ environment setting

Thanks for replying Johnny!
What you are referring to is adding a city. I need to know how to set the time zone in settings -> Date & Time -> Timezone. Unless & untill this is set properly the iPod will never show me the right time. Please help me with it.
I will definately use your advice on the second query.
Thanks once again!
Windows XP Pro

How can i create a new user with only read rights ?

How can i create a new user with only read rights ?

You are asking about a Database User I hope.
You can look into the Oracle 8i Documentation and find various privillages listed.
In particular, you may find:
Chapter 27 Privileges, Roles, and Security Policies
an intresting chapter.
You may want to do this with the various tools included with 8i - including the
Oracle DBA Studio - expand the Security node and you can create USERS and ROLES.
Or use SQL*Plus. To create a
user / password named John / Smith, you would login to SQL*Plus as System/manager (or other) and type in:
Create user John identified by Smith;
Grant CONNECT to John;
Grant SELECT ANY TABLE to John;
commit;
There is much more you can do
depending on your needs.
Please read the documentation.
-John
null

How to make an user to have right to approve only one specific STS?

In our BPS STS, we assign user A both on the highest level of one STS hierarchy B and on the lower level of another STS hierarchy C. And because in our real business planning process, A should only have right to approve STS B and can be approved by others in STS C, so we grant authorization "R_STS_SUP" to this user A, but then he has all the authorizations for approving or rejecting plans in both B and C. How to make this user only have authorization to approve STS B? Is there someone can kindly solve this problem? Thank you very much.

Try to modify tunguska BSP application, OnInitialization handler for page frame.htm contains next code:
AUTHORITY-CHECK OBJECT 'R_STS_SUP'
           ID 'ACTVT' FIELD '16'.
IF sy-subrc NE 0.
    application->with_tree = ''.
ELSE.
    application->with_tree = 'X'.
ENDIF
Try to add check for subplan/planning session here and in the case of B and C hierarchy set application->with_tree to blank value.

Flash installer asks user to close the Dashboard client, but provides no information on how to do so

When installing Flash Player on a Mac, the installer asks the user to close the Dashboard client. However, no explanation is given by the installer on what the Dashboard client is, or how to close it. There is no information on this on the installation help information at adobe.com. There is apparently no direct mechanism to close "dashboardclient" provided by Apple either.
Installer: Version 3.3.9.0 (3.3.9.0)
MacOS 10.7.5

Mike,
That's a solution that would work, but the average user should not have to jump through hoops just to install a plug-in. Force quiting processes in any OS can have dangerous and unintended consequences and should not be attempted, unless you know what you are doing.
I have installed countless Flash updates over the years, and this is the first time this has happened. So, if I've been running the "dashboardclient" for years, this tells me Adobe dropped the ball on this installer.
Bottom line: The end-user should have an installer that doesn't require monkeying around with user processes. If a process has to be stopped, most installers will require a restart and take care of it through the installer. Many others do this, Adobe should as well.
(P.S.: Deleting the "Flash Player.plugin" (HD>Library>Internet Plug-Ins) will allow for an install, without quitting the Dashboard processes,)

Want to configure a GPO "Stop (domain) users [having admin rights] from installing software"

Want to configure a GPO "Stop (domain) users [having admin rights for some particular users] from installing/uninstalling software"
Requirements :-
1. Domain user should not be allowed to install/uninstall any software's. Rest all the actions can be performed by the user like an administrator can do.
Please suggest if possible then how can I implement the same.

Hi Amar Chand,
You can do so by using certain Group Policy settings to control the behavior of the Windows Installer, prevent certain programs from running or restrict via the Registry Editor. The Windows Installer, msiexec.exe, previously known as Microsoft Installer,
is an engine for the installation, maintenance, and removal of software on modern Microsoft Windows systems.
You can try the following method to resolve this issue:
Method 1: Disable or restrict the use of Windows Installer via Group Policy
Open “GPMC”, create a GPO linked to the correct scope. You can refer to this article
Create a new Group Policy object.
Right-click it, click Edit, and then navigate to
Computer Configuration/Policies/Windows Components/Windows Installer.
In RHS pane double-click on Disable windows installer.
Click Enable and configure the option as required. "Always "option indicates that Windows Installer is disabled.
This setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs.
Click Apply to save this configuration.
Run gpupdate /force on the clients.
For your information, please refer to the following article to get more help:
Managing options for computers through Group Policy
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_wininstall_group_policy_computers.mspx?mfr=true
Method 2: Restrict Programs from being installed via Registry Editor
Open Registry Editor and navigate to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun
Create String value with any name, like 1 and set its value to the program’s EXE file.
e.g., If you want to restrict msiexec, then create a String value
1 and set its value to msiexec.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program’s exe.
Note: You may have to restart your computer.
In addition, if you choose this method, you could deploy the registry configuration via GPO. Please refer to the following article:
Configure a Registry Item
http://technet.microsoft.com/en-us/library/cc753092.aspx
Regards,
Lany Zhnag

Unable to do BPC for Office Installation via BPC Client software

Hi,
I am trying to install "BPC for Office Installation" via the client software center. I get an error "You do not have authority to install the BPC for Office.".
I am on Windows 7 Home premium. My username is the only name on the computer and has admin rights.
I did browse through a few threads in this forum and as per the suggestions, I installed .NET 1.1 and service pack for it.
I also modified the "hosts" file in system32\drivers\etc to include the lines I need.
IT STILL DOESNT WORK !
PLEASE HELP!
Regards,
Tagz

Thanks for your response Patrick!
I enable the Intranet option as per the note and added the website to my zone in the browser security option.
I get case 2 error as per the note. I tried going to the next step. Now it says "Not enough memory. A minimum of 64 MB of memory is required.". My computer though has 4GB memory.
Please advice!
Thanks,
Tagz

GPO Deployement of Blackberry Desktop Software 6.1 fail with the following error: user cancelled installation

Hello everybody,
I get an issue when i try to deploy the latest version of Blackberry Desktop Software using a Group Policy Objetc.
The package tries to install a the computer's startup but i can't find the product installed.
On the event viewer and after a rsop.msc i get the following error: User cancelled installation
I worked threw this link http://supportforums.blackberry.com/t5/Desktop-Software-for-PC/Unable-to-install-Blackberry-Desktop-... and i installed vcredist_x86 and msxml6 on the client computer but the problem is still the same.
Could anyone help me for this issue.
Over simple way to solve my problem would be to let me know where i can download an older version of Blackberry Desktop Software because there is a link on the website but it doesn't work.

Well folks. I've had enough.
The 9780 is a great phone, it's easy to use, practical and dependable. However, the Desktop Manager software has been giving me too many sleepless nights. On two occassions I must add: once at the end of last year when I bought it and only managed to solve it by myself after 4 weeks of trawling through online forums, blogs and other BB help sites and the recent one was last week when I tried to install it on my new Windows 7 notebook.
I know this is not entirely the fault of RIM, Microsoft also has a part to play. But considering the state of technology these days, it shouldn't have to be so difficult. I want a phone and software that makes my life easier and not have to be a slave to it by trying days and nights to solve its problems.
Hence, I have officially decom my phone and gotten an iPhone 4 instead. The switch ain't that difficult for me as I have always been platform neutral. As long it fits my needs, does it job well and doesn't give me too much headache, I'm cool with it.
Ciao folks!

Defautl user has no rights to load or extract data

Hi,
i just provisioned a new user with default and other rights. In windows client he can load or extract data etc. But it doesn't work in workspace. There's no drop down list under "Task", like load Task or extract Task etc. According to the HFM admin guide, user with default right should have standard rights like load or extract task. Did I something wrong?
Has anyone some idea?
thansk in advance
kind regards,
Hoi

Hi,
Please try right-clicking on the Firefox installation file and '''Run as administrator''' to install.

Change postalsoft user to admin rights

How do we enable a current Postalsoft user with admin rights? Currently, she doesn't have upgrade rights, some print options are greyed out... The originally installed Postalsoft is under a ex employee logon.
Is there a simple way to change over the rights?
Appreciate any help with this. Thanks. jb

JB,
It still sounds like there is a permission issue. Some settings are stored in the registry, and some of the printing options are stored in the Windows Printers folder. So when you say that they have Read/Write Administrative rights are you sure that all the folders were changed? As for the Presort options being gray it could be that the database is set to Read Only. To check that you can open a job and go to File > Properties > Document. Click on the Database Permissions tab. Make sure that Other's Rights are set to None and Your Rights are set to Read/Write. If this does not fix it please log a message for us in Support.
Below are the steps to log a message for support -
1. Go to http://service.sap.com/bosap-support.
2. Click on "Create a message / Contact technical support".
3. Under System Search, click the drop down arrow next to your installation and choose your system, and click Search and then click on the BOB link.
4. When creating a SAP message it is required to search for Notes. (Knowledge Base articles) to see if you can find an answer to your question without having to log the message for support. In the Search Terms area, type your question and click Continue.
5. If you do not see any Notes pertaining to your question click on Create Message.
6. Choose the correct Component for the product you are creating the message for. The component is the support Q that your call will go into so the correct team can assist you. To do this click on the icon next to the icon next to the Component window to see a drop down list.
7. Click the arrow by BOJ-EIM to see a more detailed list. By each component the names of the u201Cproductsu201D you are using are listed. Choosing the correct component will get your Message logged for the correct support team.
For example:
a. BOJ-EIM-COR is used for ACE, DataRight IQ, Match/Consolidate, IACE, and FirstPrep products.
b. BOJ-EIM-COM is used for DeskTop Mailer, Business Edition, Presort, PrintForm, Label Studio
c. BOJ-EIM-DEP is used for DQXI, Data Insight, eDQ Infa, SAP Siebel, PSFT, Oracle, Rapid Library
8. After choosing the component, fill in any remaining required/optional items. **Required fields under Problem Details are flagged with a red asterisk.
u2022 In the Short Text box, enter a brief description of the question or issue.
u2022 In the Long Text box, you can go into further detail about what you are seeing or questioning.
u2022 click Send Message.
Thanks,
Melissa

Has the ODI same installable for both Client & Server?

Has the ODI same installable for both Client & Server?
i.e. Team with multiple developers is concurrently working on ODI project. Repository is very much same. They just need the Designer Module in their desktop.
Is there separate installable for development IDE for ODI (Designer Module) instead of complete ODI which may include the server also?
Thanks In Advance
priyadarshi.

Hi ,
You can install only the client in multiple machine if multiple user are going use/share the same repository ... and you should be having the same
snps_login_work.xml
snps_login_security.xml
in all your client installations....so that you can have multiple users created and share the same repositroy ...
hope this helps
Thanks
Ananda

Delegate Ad users only installation rights on client Machines

Similar Messages

Maybe you are looking for