Directory Console with user accounts.

Hellos,
Is it possible for me to create an "admin" user with just add/modify/update rights in a specific subtree but can view ALL attributes on Edit.
I have tried using Access Permissions. I can set the user and rights and subtree OK.
My problem is that when I open the Console and login as my user...
I can only see 2 tabs.. Servers/Applications and Users/Groups.
When I seach Users I can only see the 3 action buttons: Edit Delete Create
Edit only allows me to edit certain common attributes...
How do I get the Advanced Edit features which shows ALL attributes a user has, e.g. lastmodified title etc etc...
Any hints accepted. I have trawled the manuals.
Is advanced edit (or generic editor) only a "true" administrator user (Directory Manager) feature?

I think I have solved my own problem - On the user accounts page there is a link to "change the way user accounts log on or off". When I clicked on this I got a message saying settings could not be changed because of an offline page setting. When I changed this setting, I was able to select the types of user switching, and my other user accounts became available.

Similar Messages

Impact on roaming profile accounts if we Change User logon Name to Employee Number format in Active Directory for all User accounts

I want to understand if we change User logon Name to Employee Number format in Active Directory for all User accounts, then what would be the impact on existing profile. Whether we need to change it manualy or it will connect to same profiles in terminal
session.
As i observed it create new profile after logon name changed to employee number where existing users profile settings get fails to load and prompt for new settings (such as outlook reconfiguration, share drive mapping etc.).
Kindly let me know the proper process to overcome with this, how to connect same existing roaming profile with employee number format change.

Hi,
What if we change the user name of user account, will it have impact on roaming profiles.
Yes, it will affect roaming profiles. Please rename the roaming profile folder as the new user account name, in addition, change the profile path in ADUC.
Here is an related article below for you:
How to Rename a Windows 7 User Account and Related Profile Folder
http://social.technet.microsoft.com/wiki/contents/articles/19834.how-to-rename-a-windows-7-user-account-and-related-profile-folder.aspx
Best Regards,
Amy

Help with User account on seperate drive please...

Hello... need a little help please...
I'm running 10.5.6. My boot drive is the fast, 64GB outer partition of a 5th drive on my MacPro. I used the Advanced Options in the Account pref pane in Leopard to move my Home Directory to an ultrafast 4 drive internal RAID. So far, so good.
In the past (before this bifurcated system) when I hit the road (I'm a photographer) I would just clone my boot drive which contained my User account to the MBP and go.
However now my System and User accounts are on seperate drives. I cloned the system to the MBP, but when I tried booting, it said it was unable to continue as it couldnt find the User Account. This is understandable as the User account was pointed to another drive, but the boot sequence didnt even give me a choice to create a new user account, or point the system to an existing user account on the MBP.
Seems I've got two choices. Either figure out a way to clone my System and my Home directory to the MBP, and have them recognize each other. Or give up this experiment and bring my Home directory back onto the boot drive.
Of course I could just keep a seperate system on the MBP, but find it much easier to clone the entire thing over from the MP with all my apps, settings, etc.
I'm not a UNIX junkie, but can follow instructions for using the terminal.
Can someone shed some light on this for me?
Thank you !!!!

I don't keep large files in my Home Directory. They live in another partition on the fast RAID.
But I do have lots of little ones. I'm now thinking that this is too much hassle for the small speed gain.
I'll move my home directory back to the boot drive and symlink folders if needed.
Thank you both.

Use port 50013 (Management Console) with User/password

Hello,
I have a problem. We had a security auditory of SAP systems. They have seen that the port 50013 (Management Console) has not any security with user /password.
Is there a way to put a security before the information?
Best Regards.
Pablo Mortera.

Hi Pablo
The SAP Managment Console is a UI (Applet) to access the functionality of the sapstartsrv process, This process is used for montioring and administration of SAP instances and listens on port 5nn13 (or 5nn14 for https)
It is expected that you can access the UI without authentication but to carry out administrative functions (which are sapstartsrv webservice method calls) , such as shutting down an instance for example, authentication is required.
By default only the most critical of these web service methods require authentication but the list of protected webmethods can be modified. Please see note 927637 for more details

Problems with user account on external HD

I'm on a mac mini (Early 2009) running OS 10.9.5. Quite some time ago I moved my user account to an external disk named, let's say "My Disk" and things were running fine. Recently, however, I logged into my account but could not access any of my files. I logged through another account, checked the home directory in Preferences/Users & Groups, and found it to be in the right place, "/Volumes/My Disk/my_home_folder". I then manually navigated to my home folder, and when I selected it, it showed up as "/Volumes/My Disk 1/my_home_folder" (notice the numeral 1 after the name of the disk). This fixed the problem and I can now log on to my account, but:
This is the second time within a few days that the OS renamed the external HD spontaneously by adding a numeral
This numeral does not show on the disk image on the desktop, nor in disk utilities
I can rename the external disk to a different name without a numeral and repoint my account, but if I want to change the name back to it "My Disk", the OS will attach the numeral to it, when viewed in Preferences/Users & Groups.
Is there a fix other than deleting the user account, or re-installing OS?
tm

Answering my own question, this looks like a permissions issue. After repairing permissions the external disk was identified by its proper name (no numerals) and all functions were restored.

Problems with User Accounts connecting to the server

I created couple of user accounts but the users can not connect to their accounts from the computer lab. i want to know how properly set the accounts to login to any computer in the lab.

Welcome to the forums. You need to:
1. Bind your desktop machines to your Open Directory master
2. Create groups and user accounts in WorkGroup Manager which allow your users to log into those computers
You will find the User Admin documents here useful:
http://www.apple.com/server/documentation/
hth,
b.

Problems With User Account? Try Resolving Font Conflicts!

After installing SL as an upgrade, one of my user accounts could not install software, switch to the other account, or do anything where the system would ask for the account password.
I tried resolving this by doing several things like remove all other language keyboards, deleting all files in the user/library/preferences folder, removing the user/lib/pref/byhost files, and the standard repair permisssions, etc.
I then remembered a message which said something about font conflict when first logging into that user account after the SL upgrade.
So, I went into Font Book and noticed that most of the fonts in the user category had the yellow triangle indicating duplicate copies of those fonts.
I resolved it by deleting all fonts in the user/library/font file. Those fonts were available in the computer anyway so I hope I'm not missing anything. Even still, a missing font is better than the alternative of not being able to install software and make other admin changes from the account.
I hope this helps.

I have a similar issue with both my user accounts.
Spent about 3 hours with Apple customer support and still have the issue with installing updates and everything requiering authentication.
I noticed no conflict message as you did though...

Password Problems with User Account

I have attempted several times to use my admin account to set up a user account on my G4 desktop. I can always manage to set up the user and password, but whenever I log in as the new user, the password doesn't work. I've tried this several times using different user names and different passwords, but no luck. Can someone tell me what I'm doing wrong?
G4 Tower Mac OS X (10.4.6)

I was having a similar problem to yours. Running 10.4.6 on an old PowerBook G4 Titanium 400Mhz, and when I tried to create a new regular user account last week, the login window wouldn't accept my new password for the user account, even though I'd just created it. It just shook/shuddered to indicate typing the wrong password, even though I knew I was typing it right!
I tried lots of troubleshooting steps to no avail. Downloaded and installed the newest 10.4.8 full updater. Ran disk utility to repair permissions, and checked the disk for problems. Still no go on logging into the new regular user account. Deleted and recreated the account a few times with no luck.
Then I went into the security control panel and set a new "Master Password" for my computer. When I created a new account, and then tried to log in, it rejected the password, but after typing the "right" password four times, the computer gave me an opportunity to type the Master Password, and then "reset" the new user's password, after which it logged in just fine!
I definitely recommend trying this procedure before going through a whole reinstall process for the operating system!
-Nate

Power Management with User Account

On my T43p, I have the newest power management version installed and XP SP3. In the power management, I cannot change power profiles from within a user account. I can however change the power profile in the Windows control panel (this only after I changed the power policy registry keys). Is there a way to make power management do this?

Hi,
I have discovered a workaround to this problem, but it's not a definitive solution. When you log in as a 'not administrator' user, you have to use the 'Run As' command of WinXP on the file (right button mouse click on it):
"C:\Program Files\TOSHIBA\Power Management\CePMTray.exe"
And then, you have to insert username and password of an administrator user. You have to do the same thing to the
file:
"C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe"
if you want to use the function key too, to change power profiles.
The problem is that you have to do this each time you log in as limited user. If it was an Unix O.S. you could set a flag SUID in the files to execute them always as administrator. But this is Windows and I don't know if there is a way to do this!
Anyway, there is another possibility. You can use SpeedSwitchXP tool (http://www.diefer.de/speedswitchxp), instead of the toshiba power management tool. This software is a power management tool that works from a limited user too, but you have to give write access at all users to the following reg keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Controls Folder\PowerCfg\GlobalPowerPolicy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Controls Folder\PowerCfg\PowerPolicies
These keys are necessary in order to modify power schemas. You can give write access to these reg keys with the standard tool 'regedit'.

Help please with User Accounts in Windows on X61 Tablet PC

I kept getting the "Blue Screen of Death" and so I decided I would reformat the Hard Disk and reinstall everything. During the installation process, the User "Administrator" and my user account are both on the Welcome screen. Under User accounts, under "Administrator User" it says quote "The administrator account is only visible on the Welcome screen when no other user accounts exist (except the quest account), or when you start your computer in Safe Mode". This still is showing regardless that I have my name as a User and as administrator. Any help on getting this to not show would be great. I have a netbook with Windows XP and it just shows my name as a user and under user accounts just my name and guest. Thanks for the help.
G

You are right, can only have one open. You have to log out of a user before logging in to another user to use iTunes. Do not use the fast user switching ability of Windows.

Having issues with users accounts

When I log in , any application that I try to log into, I have to right click on it and select RUN AS ADMINISTRATOR, this doesn't matter what account I am in. I also just got locked out of my administrator account. It told me user profile
not available.
How can I fix this?

Hi Jcc1128,
When did the issue start to occur ?Have you made any modifications to the machine ?
Have you tried to create another administrator account and login with it to have a check ?
Please open an administrator command line and run the following command line to enable the built-in administrator account .Then login with this account to have a check .
"net user administrator /active:yes"
If the issue has gone ,the present account profile may have corrupted .Please refer to the following link to fix the corrupted user profiles .
Fix a corrupted user profile
http://windows.microsoft.com/en-hk/windows/fix-corrupted-user-profile#1TC=windows-7
After we resolved the issue ,please run "net user administrator /active:no" to disable the built-in account .
If there is something wrong with the built-in account profile ,the isssue may be worse.We can run "sfc /scannow" to have a check of the system files` health firstly. Just as S.Sengupta suggested , we also can try a system restore .
Best regards
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Setting up a sysprepped image with user account customisations

I'm trying to create a sysprepped image of a Windows installation for cloning (basically, as a VM template I can clone to create throwaway test environments quickly). I'm using a new build of Windows 8.1, going into audit mode and configuring my environment,
then using sysprep to generalise the image for cloning (sysprep /generalize /oobe /shutdown /unattend:C:\MyUnattendFile.xml).
I have customised the default account by setting things up the way I want in audit mode (under the administrator account that audit mode defaults to). My unattend.xml file has CopyProfile set to true (in the specialize phase, the only one I can set it in
IIRC). I also have my local account configured for creation in the OOBE phase in the unattend.xml file.
When I boot a copy of the sysprepped image, it starts up fine, exactly as I'd expect. But when it gets to the OOBE phase, it goes into the "Setting up a few things" sequence, and when I get the login screen and log in, I see a clean account (default
start page and taskbar, Windows theme is the default, etc). It's as if the default profile I set up hasn't been applied.
I can't tell what I am doing wrong - I saw a note somewhere (via google) that I need to set CopyProfile in the unattend file I boot from, not the one I sysprep with, but that can't be right as in this case I'm not incorporating the image into a setup process
- it's just a VM disk image that I boot normally.
I'm new to all this, and I'm a developer rather than a deployment specialist, so the discussion around images, PE boot disks, custom install disks, etc, is very confusing to me. If I'm doing something wrong, I'd appreciate any explanation someone can give
as to how to achieve what I want relatively simply.
Many thanks in advance,
Paul

I checked the log file, and I see "CopyProfileDirectory from C:\Users\Administrator succeeded. CopyProfile succeeded."
So it looks like the default profile was set up properly.
The desktop background is set correctly on the account, it's just the start page and taskbar, so the blog entry you mentioned seems like it's relevant. The problem is, there's no solution given in there :-(
From what I can see, the issue appears to be that when I initially log onto the user account created in the unattended startup, it runs the "first login" process - "Hi... We're setting things up for you... Installing your apps". So I
guess the key question is how I stop it from running that process, which is messing up the customisations I already made.
From the articles you mention, it seems like there isn't a particularly straightforward way to script the start page/taskbar changes I want. I didn't see anything that suggested I could make the changes once, then back up some data from the registry and/or
some user config files, and then set up a postinstall script to restore them (that probably still wouldn't work, as the "Hi... We're setting things up" process would probably still overwrite them :-(
If it's not possible to do things this way, maybe I'm going to have to go down the route of making a custom install disk. Is there a simple tutorial that assumes no deployment experience, and walks through the process of creating a custom install disk that
includes:
Setting the product key, the default language/locale etc (a fully unattended install)
Selecting to overwrite the whole disk, no dialog about disk partitions, etc
Create a local user account
Install various items of software (7-zip, conemu, virtualbox guest additions, chrome, probably a few others)
Pre-configure the local account with a custom start page, taskbar items, program settings like Internet Explorer home page and search providers and conemu defaults, desktop background
Set up a few other configurations (such as enabling WinRM) that can be done from an automated postinstall Powershell script.
I'm assuming this must be possible somehow, as I can't imagine corporate deployments will use the default start page. It's just how to do this as a home user. I just have a single PC, plus I can set up any VirtualBox VMs I need on it, so approaches
that talk about setting up a lab of machines and deployment servers and shares are probably out of my reach :-(
Thanks,
Paul

NetRestore Mavericks install with user account

So we have OS X Server 3 and mavericks
We have netrestore and netinstall images of 10.6, 10.7 and 10.8 working great on our server
we can netboot into a NetRestore image and it will erase the drive and install a fresh copy of 10.8.5 with an Admin Account and we're ready to go
Having a tough time doing the same thing with Mavericks. only thing it wants to create is a Recovery netBoot image where it shows the same process as holding Command R down.
We'd like to create a netrestore image to have it where it will install a clean copy of Mavericks and user account.
as well as a netinstall image to upgrade users from 10.8 to 10.9 (we have netinstall images to upgrade users from 10.7 to 10.8 etc).
any ideas?
thanks!

So you have a working NetRestore image of 10.9.
Will it not allow you to create a NetInstall image of 10.9?
You should have three options. NetBoot, NetInstall, and NetRestore.
NetRestore will wipe the clients hard disk and restore the image, you should NOT use this to install mavericks! This is for restoring a pre-existing OS installation (as in an actual hard drive image)
NetInstall is the type of image you want to create, it can do clean or upgrade installs. It does upgrade by default, but you can wipe the hdd in disk utilty.
NetBoot will boot the image directly, it will have similar effect to NetInstall in this case.

Problems with user account / losing preferences

Hallo!
Recently, my iBook is doing strange things. Suddenly, all my preferences (bookmarks, themes, wallpaper etc) disappear, i don´t know why. I have to reinstall everything, and then (some time later) it all starts from the beginning (disappearing).
I think this might be due to the presence of other user accounts (i bought the iBook from a friend), but it is impossible to delete them.
And there is my question: what about a complete re-installing of the iBook? I have the 2 installing CDs, that should be ok, shouldn´t it?
As i am totally new on apple, i need your opinion:
what will disappear when re-installing the iBook? Will NeoOffice still be there?
Is it - in your point of view - a good idea to do that reinstalling?
Thank you very much for your advice!

Hi there, It sounds like the account/shortname/home folder was renamed at one time.
Have you tried making a new Admin account yet in System Preferences>Accounts?
I have the 2 installing CDs, that should be ok, shouldn´t it?
If they are the right ones, that may do it, what are the 2z-***-***-A numbers on them and the info on your iBook...
At the Apple Icon at top left>About this Mac.
Then click on More Info>Hardware and report this upto *but not including the Serial#*...
Hardware Overview:
Machine Name: Power Mac G5 Quad
Machine Model: PowerMac11,2
CPU Type: PowerPC G5 (1.1)
Number Of CPUs: 4
CPU Speed: 2.5 GHz
L2 Cache (per CPU): 1 MB
Memory: 10 GB
Bus Speed: 1.25 GHz
Boot ROM Version: 5.2.7f1
what will disappear when re-installing the iBook? Will NeoOffice still be there?
With an Erase & Install, everything will be erased and you start out with only what the iBook originally came with. An Archive & Install will just replace the OS files.

Unix Guru to help with User Account re-install.

I have a glitch in my main Administrator account which prevents Adobe Photoshop CS2 opening or importing files of any kind from any file.
A dialogue box tells me “Could not complete your request because of a program error.”
Adobe refers to Tech Note 331307 item 2, which offers tests and options most of which I have tried. When I establish a new User Account I am able to use Photoshop fine which suggests the Admin User Account is corrupted.
According to the tech note, my only remaining option is to re-initialize the disk and rebuild system completely. That is a very big task which I seek to avoid.
I have:
1. Run Disk Doctor over all Fonts in all folders and fixed or deleted damaged Fonts.
2. Run Disk Warrior and re-run Permissions with Xupport.
3. Opened as Single user, run fsck -f. remounted disk, moved and replaced db/netinfo and replaced AppleSetupDone. All confirmed OK but glitch remained for Photoshop CS2.
Can any Guru offer a Unix solution - or any solution, which avoids
re-formatting and building my complete system?
Alternatively, given I have many addresses and bookmarks to preserve in three browsers as well as my Mail and Address book, what is the best method by which to establish a new account and delete the old one.
Many Thanks
Mezolithic.

Hi Tony
Yes I can confirm that this doesn't wipe out address book details and Internet set-up prefs and bookmarks.
In fact putil cannot wipe out anything. It's purpose is to check the syntax of plist files or convert a plist file to another format. No conversion is taking pace here. The -s option means output is supressed, so if you don't see anything, it means there are no errors to report.
The * character means "all" , in this case all plist files.
Eg. If you wanted to list all of the document files ending in .doc, in say a Documents folder but not .txt files, you could specify *.doc. Similarly if you wanted to list all documents named reports, regardless of the extension, you would use reports.*
So that is the usage of *.
If you found this information helpful, please consider awarding stars. It is entirely up to you.
regards roam

Directory Console with user accounts.

Similar Messages

Maybe you are looking for