Delgate or give administrative athority to a user for simple client software installation

I have a new Server 2012 R2 machine. It contains a single domain with an Active Directory Domain Services configured. Currently there are 10 users been served by this server: roaming profiles, sharing of a printer, and sharing of some files. The setup is
very simple as you can see.
The client machines connected to the server all run a simple mapping software. From time to time, the software vendor that supplies the mapping software puts out patches and updates. From time to time, a user will want to install a peice of his or her
own software (examples: Google Earth; Yahoo Messanger).
The users are all responsible adults. I don't need to worry about them messing up their machines with malware. But I'm not available to the users all the time. Rignt now, I have to logon to the client machine each time to run the .exe file as myself (the
Administrator) to perform a software installation.
I don't want to give out my Administrator password. Is it possible to create a user (or allow an existing user) of the domain to have the right to install a peice of software on their own but without allowing this user to make other changes to the domain
or the server?
I appricate you taking the time to read my question. Please let me know if there's anything unclear in my inquiry.

Additionally, it is not at all uncommon to grant users local administrative privileges on their own machines. This does not involve granting them administrative permissions on the domain - just on their machine. As Domain Administrator, you would
still have local administrative access to each machine (Domain Admins are automatically added to the local administrators group).
I would suggest that you create a separate account for them on their machines that would be joined to the local administrator's group and that they only use that account when they need to install a patch or some allowed software. All other work should
be done under their regular, non-privileged account.
.:|:.:|:. tim

Similar Messages

How can I give access to a new user for WebView Reporting Log In //IPCC Enterprise

Hi All,
How can I give access to a new user for the WebView Reporting Log In ?
I have IPCC Enterpise 7
Thanks
Andres

Two options: 1. In configuration manager on the AW, use the user list tool to add the users domain account and select Webview access permissions. 2. Using standard Microsoft Active Directory tools or the Cisco Domain Manager tool, add the desired AD user account into one of the "WebView" security groups created within the Cisco OU.

Create users for other clients from client 000

Hello!
I have the following question:
What is the Tcode allows me to see all created users (perhaps wuth their password) in all clients from e.g. client 000?
Is it possible to create new users for other clients from client 000?
Thank you very much!
regards
Thom

<b>SU10 User Mass Maintenance</b>
SCUA Central User Administration
SCUM Central User Administration
SCUG Copy users
SU01/SUCOMP User Maintenance/User company address maintenance
SU01D User Display
SCUL Central User Management Log

Add user for mobile client

Dear All,
I'm trying to add a new user into my site definition in transaction SMOEAC. Already 3 employees are associated to this site; I want to add a new one.
I know that I should create a new subscription with Publication type User by employee, but when the wizard starts, I can't find the publication "User by employee" in my available list.
My user is already created and associated to a BP employee; it exists in the table SMOUSERS in CRM server, but not in my laptop. How is possible to update only this table in my laptop data base with the CRM one?
Could you help me, please?
Thanks.
BR,
Andrea.

Hi,
how and when did you create the existing 3 user subscriptions for this site?
Is the user publication still in standard version or has it been changed to bulk replication mode?
Is there any other (intelligent) publication missing in the wizard list?
Regards,
Wolfhard

How can I give administration permissions to a specific user+group on wiki?

How do I give administration capabilities to a specific user for only ONE specific group on my wiki server, not all of them.
Anyone know the simplest way to do this?

Really all I'm looking to do is to keep my web site exactly the same but limit the reading and writing capabilities of some users on specific groups/wiki pages/blogs but still allow them to read and write to other specific ones that somehow I would designate.
For example: I'm setting up a group for multiple users (about 15), and they each have their own page within that group, however i want to give them very limited administration capabilities on the site, all I want them to be able to do is to edit their own page, NOTHING else in the group
there's gotta be a way to do this without 3rd party software installation that seems complicated enough on it's own, isn't administration capabilities a fundamental part of wikis?
Someone has to have gone through something similar, any help?

Getting error "Administrator has temporarily disabled user commands"

Hi ,
I am getting the error "Administrator has temporarily disabled user commands" while executing the report script. I have tried creating a new script and getting the same error. We are on 11.1.1.3
Appreciate any help..
Regards,
Mahesh

It is worth having a read of the following article on "My Oracle Support" - Error "1013009 - Administrator Has Temporarily Disabled User Commands" [ID 1216053.1]
It gives some examples of what can cause the issue and some bugs, ignore the 9.3.1 patch part.
Cheers
John
http://john-goodwin.blogspot.com/

AnyConnect error " User not authorized for AnyConnect Client access, contact your administrator"

Hi everyone,
it's probably just me but I have tried real hard to get a simple AnyConnect setup working in a lab environment on my ASA 5505 at home, without luck. When I connect with the AnyConnect client I get the error message "User not authorized for AnyConnect Client access, contact your administrator". I have searched for this error and tried some of the few solutions out there, but to no avail. I also updated the ASA from 8.4.4(1) to 9.1(1) and ASDM from 6.4(9) to 7.1(1) but still the same problem. The setup of the ASA is straight forward, directly connected to the Internet with a 10.0.1.0 / 24 subnet on the inside and an address pool of 10.0.2.0 / 24 to assign to the VPN clients. Please note that due to ISP restrictions, I'm using port 44455 instead of 443. I had AnyConnect working with the SSL portal, but IKEv2 IPsec is giving me a headache. I have stripped down certificate authentication which I had running before just to eliminate this as a potential cause of the issue. When running debugging, I do not get any error messages - the handshake completes successfully and the local authentication works fine as well.
Please find the current config and debugging output below. I appreciate any pointers as to what might be wrong here.
: Saved
ASA Version 9.1(1)
hostname ASA
domain-name ingo.local
enable password ... encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd ... encrypted
names
name 10.0.1.0 LAN-10-0-1-x
dns-guard
ip local pool VPNPool 10.0.2.1-10.0.2.10 mask 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif Internal
security-level 100
ip address 10.0.1.254 255.255.255.0
interface Vlan2
nameif External
security-level 0
ip address dhcp setroute
regex BlockFacebook "facebook.com"
banner login This is a monitored system. Unauthorized access is prohibited.
boot system disk0:/asa911-k8.bin
ftp mode passive
clock timezone PST -8
clock summer-time PDT recurring
dns domain-lookup Internal
dns domain-lookup External
dns server-group DefaultDNS
name-server 10.0.1.11
name-server 75.153.176.1
name-server 75.153.176.9
domain-name ingo.local
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network LAN-10-0-1-x
subnet 10.0.1.0 255.255.255.0
object network Company-IP1
host xxx.xxx.xxx.xxx
object network Company-IP2
host xxx.xxx.xxx.xxx
object network HYPER-V-DUAL-IP
range 10.0.1.1 10.0.1.2
object network LAN-10-0-1-X
access-list 100 extended permit tcp any4 object HYPER-V-DUAL-IP eq 3389 inactive
access-list 100 extended permit tcp object Company-IP1 object HYPER-V-DUAL-IP eq 3389
access-list 100 extended permit tcp object Company-IP2 object HYPER-V-DUAL-IP eq 3389
tcp-map Normalizer
check-retransmission
checksum-verification
no pager
logging enable
logging timestamp
logging list Threats message 106023
logging list Threats message 106100
logging list Threats message 106015
logging list Threats message 106021
logging list Threats message 401004
logging buffered errors
logging trap Threats
logging asdm debugging
logging device-id hostname
logging host Internal 10.0.1.11 format emblem
logging ftp-bufferwrap
logging ftp-server 10.0.1.11 / asa *****
logging permit-hostdown
mtu Internal 1500
mtu External 1500
ip verify reverse-path interface Internal
ip verify reverse-path interface External
icmp unreachable rate-limit 1 burst-size 1
icmp deny any echo External
asdm image disk0:/asdm-711.bin
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
object network obj_any
nat (Internal,External) dynamic interface
object network LAN-10-0-1-x
nat (Internal,External) dynamic interface
object network HYPER-V-DUAL-IP
nat (Internal,External) static interface service tcp 3389 3389
access-group 100 in interface External
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server radius protocol radius
aaa-server radius (Internal) host 10.0.1.11
key *****
radius-common-pw *****
user-identity default-domain LOCAL
aaa authentication ssh console radius LOCAL
http server enable
http LAN-10-0-1-x 255.255.255.0 Internal
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec security-association pmtu-aging infinite
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
crypto map External_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map External_map interface External
crypto ca trustpoint srv01_trustpoint
enrollment terminal
crl configure
crypto ca trustpoint asa_cert_trustpoint
keypair asa_cert_trustpoint
crl configure
crypto ca trustpoint LOCAL-CA-SERVER
keypair LOCAL-CA-SERVER
crl configure
crypto ca trustpool policy
crypto ca server
cdp-url http://.../+CSCOCA+/asa_ca.crl:44435
issuer-name CN=...
database path disk0:/LOCAL_CA_SERVER/
smtp from-address ...
publish-crl External 44436
crypto ca certificate chain srv01_trustpoint
certificate <output omitted>
quit
crypto ca certificate chain asa_cert_trustpoint
certificate <output omitted>
quit
crypto ca certificate chain LOCAL-CA-SERVER
certificate <output omitted>
quit
crypto ikev2 policy 1
encryption aes-256
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 10
encryption aes-192
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable External client-services port 44455
crypto ikev2 remote-access trustpoint asa_cert_trustpoint
telnet timeout 5
ssh LAN-10-0-1-x 255.255.255.0 Internal
ssh xxx.xxx.xxx.xxx 255.255.255.255 External
ssh xxx.xxx.xxx.xxx 255.255.255.255 External
ssh timeout 5
ssh version 2
console timeout 0
no vpn-addr-assign aaa
no ipv6-vpn-addr-assign aaa
no ipv6-vpn-addr-assign local
dhcpd dns 75.153.176.9 75.153.176.1
dhcpd domain ingo.local
dhcpd option 3 ip 10.0.1.254
dhcpd address 10.0.1.50-10.0.1.81 Internal
dhcpd enable Internal
threat-detection basic-threat
threat-detection scanning-threat shun except ip-address LAN-10-0-1-x 255.255.255.0
threat-detection statistics access-list
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
dynamic-filter use-database
dynamic-filter enable interface Internal
dynamic-filter enable interface External
dynamic-filter drop blacklist interface Internal
dynamic-filter drop blacklist interface External
ntp server 128.233.3.101 source External
ntp server 128.233.3.100 source External prefer
ntp server 204.152.184.72 source External
ntp server 192.6.38.127 source External
ssl encryption aes256-sha1 aes128-sha1 3des-sha1
ssl trust-point asa_cert_trustpoint External
webvpn
port 44433
enable External
dtls port 44433
anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1
anyconnect profiles profile1 disk0:/profile1.xml
anyconnect enable
smart-tunnel list SmartTunnelList1 mstsc mstsc.exe platform windows
smart-tunnel list SmartTunnelList1 putty putty.exe platform windows
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
webvpn
anyconnect profiles value profile1 type user
username write.ingo password ... encrypted
username ingo password ... encrypted privilege 15
username tom.tucker password ... encrypted
class-map TCP
match port tcp range 1 65535
class-map type regex match-any BlockFacebook
match regex BlockFacebook
class-map type inspect http match-all BlockDomains
match request header host regex class BlockFacebook
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 1500
id-randomization
policy-map TCP
class TCP
set connection conn-max 1000 embryonic-conn-max 1000 per-client-max 250 per-client-embryonic-max 250
set connection timeout dcd
set connection advanced-options Normalizer
set connection decrement-ttl
policy-map type inspect http HTTP
parameters
protocol-violation action drop-connection log
class BlockDomains
policy-map global_policy
class inspection_default
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect dns preset_dns_map dynamic-filter-snoop
inspect http HTTP
service-policy global_policy global
service-policy TCP interface External
smtp-server 199.185.220.249
privilege cmd level 3 mode exec command perfmon
privilege cmd level 3 mode exec command ping
privilege cmd level 3 mode exec command who
privilege cmd level 3 mode exec command logging
privilege cmd level 3 mode exec command failover
privilege cmd level 3 mode exec command vpn-sessiondb
privilege cmd level 3 mode exec command packet-tracer
privilege show level 5 mode exec command import
privilege show level 5 mode exec command running-config
privilege show level 3 mode exec command reload
privilege show level 3 mode exec command mode
privilege show level 3 mode exec command firewall
privilege show level 3 mode exec command asp
privilege show level 3 mode exec command cpu
privilege show level 3 mode exec command interface
privilege show level 3 mode exec command clock
privilege show level 3 mode exec command dns-hosts
privilege show level 3 mode exec command access-list
privilege show level 3 mode exec command logging
privilege show level 3 mode exec command vlan
privilege show level 3 mode exec command ip
privilege show level 3 mode exec command failover
privilege show level 3 mode exec command asdm
privilege show level 3 mode exec command arp
privilege show level 3 mode exec command ipv6
privilege show level 3 mode exec command route
privilege show level 3 mode exec command ospf
privilege show level 3 mode exec command aaa-server
privilege show level 3 mode exec command aaa
privilege show level 3 mode exec command eigrp
privilege show level 3 mode exec command crypto
privilege show level 3 mode exec command ssh
privilege show level 3 mode exec command vpn-sessiondb
privilege show level 3 mode exec command vpnclient
privilege show level 3 mode exec command vpn
privilege show level 3 mode exec command dhcpd
privilege show level 3 mode exec command blocks
privilege show level 3 mode exec command wccp
privilege show level 3 mode exec command dynamic-filter
privilege show level 3 mode exec command webvpn
privilege show level 3 mode exec command service-policy
privilege show level 3 mode exec command module
privilege show level 3 mode exec command uauth
privilege show level 3 mode exec command compression
privilege show level 3 mode configure command interface
privilege show level 3 mode configure command clock
privilege show level 3 mode configure command access-list
privilege show level 3 mode configure command logging
privilege show level 3 mode configure command ip
privilege show level 3 mode configure command failover
privilege show level 5 mode configure command asdm
privilege show level 3 mode configure command arp
privilege show level 3 mode configure command route
privilege show level 3 mode configure command aaa-server
privilege show level 3 mode configure command aaa
privilege show level 3 mode configure command crypto
privilege show level 3 mode configure command ssh
privilege show level 3 mode configure command dhcpd
privilege show level 5 mode configure command privilege
privilege clear level 3 mode exec command dns-hosts
privilege clear level 3 mode exec command logging
privilege clear level 3 mode exec command arp
privilege clear level 3 mode exec command aaa-server
privilege clear level 3 mode exec command crypto
privilege clear level 3 mode exec command dynamic-filter
privilege cmd level 3 mode configure command failover
privilege clear level 3 mode configure command logging
privilege clear level 3 mode configure command arp
privilege clear level 3 mode configure command crypto
privilege clear level 3 mode configure command aaa-server
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:41a021a28f73c647a2f550ba932bed1a
: end
Many thanks,
Ingo

Hi Jose,
here is what I got now:
ASA(config)# sh run | begin tunnel-group
tunnel-group DefaultWEBVPNGroup general-attributes
address-pool VPNPool
authorization-required
and DAP debugging still the same:
ASA(config)# DAP_TRACE: DAP_open: CDC45080
DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
DAP_TRACE: Username: tom.tucker, DAP_add_AC:
endpoint.anyconnect.clientversion="3.1.02026";
endpoint.anyconnect.platform="win";
DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
Thanks,
Ingo

Getting error "1013009 Administrator Has Temporarily Disabled User Commands

Hi All,
I am getting the error"1013009 Administrator Has Temporarily Disabled User Commands" while executing a report script in Essbase 11.1.1.3
Appreciate any help..
Thanks
Mahesh

Mahesh wrote:
Hi All,
I am getting the error"1013009 Administrator Has Temporarily Disabled User Commands" while executing a report script in Essbase 11.1.1.3
Appreciate any help..
Thanks
Mahesh
Possible Cause
When a database is being restructured or any application/database on the server is being copied, you can get this message.
or
When a cube is being restructured, commands are restricted because the integrity of the cube has to be stable and no one is allowed to access it.
or
Copying an application requires that the Essbase security file be in read/write mode and therefore other applications are not accessible until the process is completed.
Possible Solution
In Application Settings, verify that the Allow Commands or Allow Updates options are not selected.
If not selected select those..and try
Regards,
Prabhas
Edited by: P on Apr 7, 2011 3:36 PM
Edited by: P on Apr 7, 2011 3:38 PM

Report/FM/RFC that gives a list of Locked users

Is there a Report/FM/RFC/BAPI that gives a list of Locked users please?

Hi Hruser,
There are two options two get the locked users.
1. Execute TCode SA38 and run the ABAP Report RSUSR200.
2. Execute Tcode EWZ5.
Thanks
Lokendra Kumar

Need to give access to users for report painter query without GR55

Hi,
I need to create a transaction code for a query created using report painter. We do not want to give access to user for GR55.
Please help us in achieveing this one or any other way to execute report without GR55 access.
Regds,
Servesh
Moderator: Please, search before posting - it has been answered several times

Hi,
You can create the transaction the same using SE93 transaction code.
Also see the below link for detailed rocess:-
[http://home4sap.com/Blog/2009/08/how-to-create-a-transaction-code-for-report-painter-reports/]
Regards,
Gaurav

Delete the previous administrator and make a user account for myself on my iMac G4

delete the previous administrator and make a user account for myself on my iMac G4

Open the Accounts pane of System Preferences, create the new account, log in with it, and delete the existing one. If the computer's one you've recently purchased, you may want to erase the drive and install a new OS; do this only if you have the computer's original disks or a retail package compatible with it.
(64808)

Essbase Error 1013009 - Administrator Has Temporarily Disabled User Command

Hi guys,
I'm trying to load an outline from one server to another server. But during the restructuring process, I encountered the error "Essbase Error 1013009 - Administrator Has Temporarily Disabled User Commands". What does this error mean?
How can I possibly resolve this error? I'm also researching on this error right now.
Your reply is greatly appreciated.
By the way I'm using Essbase 6.5
Cheers!

So what do you see in the application log? Essbase.log?
Are other databases locked as well?
But during the restructuring process,^^^ I'm a little confused by this -- what restructure? If I copy a .otl file from server A to server B, Essbase has to save onto server B, but there isn't a restructure, I think, unless the act of saving forces that?
Regards,
Cameron Lackpour

Error(1013009) Administrator Has Temporarily Disabled User Commands

We have several applications that are encountering this error when running business rules or calcs:
Cannot calculate. Essbase Error(1023040): msg from remote site [[Tue Sep 27 17:49:47 2011]mdcless.loe.corp/UVMUnit/Ef/planadmin/Error(1013009) Administrator Has Temporarily Disabled User Commands]
The local admin is not restructuring the application/database at the time of the error and no data exports are running either. What else could be the cause of this message?
on 11.1.1.3
windows server 2003 64 bit
essbase 64 bit
Thanks
Jeff

Have you had a read of the following article on my oracle support to see if it relates to the issue you are experiencing - "Error "1013009 - Administrator Has Temporarily Disabled User Commands" [ID 1216053.1]"
I do seem to remember this being a bug though I can't remember whether or when it was fixed.
Cheers
John
http://john-goodwin.blogspot.com/

1013009 - Administrator Has Temporarily Disabled User Commands

I feel lucky. I got one quirky problem answered today so here is another.
I have a large report running on 11.1.1.3 Essbase. The os is 64 bit linux. Occasionally we get the following messages:
ERROR - 1013009 - Administrator Has Temporarily Disabled User Commands.
ERROR - 1241101 - Unexpected Essbase error 1013009.
there is no xcp generated.
To make sure that the application is not in archive mode or that user commands are disabled, I've bookended the report with GETAPPSTATE. When the report fails, the subsequent GETAPPSTATE reports that the app is accepting commands.
This same report has run successfully in 9.3.1 for months.
Has anyone else seen this?
Regards,
Dave

Sabrina,
I'm not ruling anything out at the moment. My suspicion is that it is related to some user action. I think that my next step is to seach the app & br logs near the failed event.
Dave

User dose not have Administrative rights, however the user is set as admin

Just did an Archive & Install of a MacBook Pro 3.1, upgraded from Tiger to Leopard , original thread (http://discussions.apple.com/thread.jspa?threadID=2309825&tstart=0). I did all available updates, added it to an active directory and set all network admins to be administrators (did in root admin account). I even had the user log in and manually set their account to be administrator. Yet the user tried to update their Itunes and was prompted to submit account information, the machine didn't take their info nor did it take mine, i had to use the root admin account to upgrade the software. Is there something i'm missing here? Open to any suggestions.

no one posted to this thread
i ended up making the user a new profile and manually pulling over the users documents and files

Delgate or give administrative athority to a user for simple client software installation

Similar Messages

Maybe you are looking for