Directory preferences in a locked down PC environment

How do I change:
ide.pref.dir
ide.pref.dir.base
ide.user.dir
ide.work.dir
ide.work.dir.base
user.home
so that they don't reference a windows path like \\<server>\<user>$, but <drive letter>:\Oracle\sqldeveloper instead
We use locked down PC's (with no access to the A: and C: drives) . And when we start SQLD we get 16 dialogue windows say that it cannot access the A: drive, to which we press the continue button. You also get the message when using the File navigator and the File->Open or File-Save functions.
On upgrade from 1.5.1 to 1.5.4 the number of dialogue windows dropped from 16 to 2.
We also always lose our connextions and have to reimport from a saved file every morning.
A response to thread Connections fail to load at startup by user user641239 at 1-sep-2008 0:59 seems to have the solution - except it requires access to regedit. We don't have that. It's much too painful to get SQLD part of the PC build at the customer, so we need to be able to configure without resorting to regedit.
Any help appreciated.
Nic
Edited by: Nic Atkin on 17-apr-2009 2:41
Edited by: Nic Atkin on 17-apr-2009 2:54

Hi FurryOne,
There is a way to hide both A: and C: - but you need Windows Administrator rights to do it. Not possible in a locked down PC, So I'll live with it for now.
I was also having the Configure File Type Associations at startup everytime problem (see
Re: Configure File Type Associations at startup everytime
So, my current solution looks like this:
AddVMOption -Dide.pref.dir.base=M:\Oracle\
AddVMOption -Dide.pref.dir=M:\Oracle\sqldeveloper
AddVMOption -Dide.user.dir.base=M:\Oracle\
AddVMOption -Dide.user.dir=M:\Oracle\sqldeveloper
AddVMOption -Dide.work.dir.base=M:\Oracle\
AddVMOption -Dide.work.dir=M:\Oracle\sqldeveloper
AddVMOption -Duser.home=M:\
AddVMOption -Dno.shell.integration=true

Similar Messages

Recommendation needed on: Locking Down BW Client / Object Changeability:

Hello Experts,
We recently had a problem on our production box and we found the need to lock down the environment with scc4.
We further used object changeability to control the environment and it has been hell ever since. Users have had difficulties running queries, etc.
In a typical BW production environment, what is the approach and what is the common practice?
(Please for each recommended approach include any command you mention)
For example, what transaction do we use to see various users and their authorizations, etc. Who made modification on which object, etc.
Thanks.

Hi Amanda,
In SCC4, you should maintain following values.
Under
>Changes and transport for client specific objects
no changes allowed
under
>Cross client object changes
no changes to repository and cross client customizing
objects
Under
> Protection : Client copier and comparison tool
Protection level 1: NO OVERWRITING
Regards
Sriram

Access Connections v4.52 - user rights in locked down environment

I'm currently working on a small project to deploy various Lenovo wireless drivers, Access Connections v4.52, Hotkey and Power Management drivers via SMS but have come across a slight issue with Access Connections that I can't seem to resolve.
I'm hoping to provide my locked down users with a selection of standard profiles that are copied to their machines on logon but would also like to give them the ability to create and modify new ones too - this is where I'm having problems.
Through Group Policy I have set:
Allow Windows users without administrator privileges to create and apply WLAN location profiles using Find Wireless Network function
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableCreateProfilewithFWN 1
Allow Windows users without administrator privileges to create and apply location profiles
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableUserMode 1
I have also manually set the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
I couldn't find a key for the 'EnableUserMode' option
Unfortunately, none of these give standard users access to create or modify profiles.
Have any of you come across this in your environment and if so did you manage to come up with a suitable solution?
Thanks in advance.

Hi,
the steps, that you performed are correct.
However I would not do the last step:
HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
This might cause confusiong.
I have just tested it in here and it's working fine with the 5.x version of AC
Cheers

How Creative Cloud working under locked down IT administration environment

We are existing CS6 and would like to sign for Creative Cloud. Just want to know how it works on the locked down user computers (without local administrator rights)?
DISCLAIMER The contents of this email and any attachments (together "this email") may contain information that is confidential to Breville Group Limited (and/or its associated entities) (together"BRG"). Information contained in this email is subject to copyright. If you are not the intended recipient, you cannot print, use, rely, or disseminate any part of this email. If you receive this email in error, please notify us immediately by return e-mail and erase all copies. If you are the intended recipient of this email you should not copy, disclose, or distribute this email without the authority of BRG. Any views expressed in this email are those of the individual sender, except where the sender specifically states them to be the views of BRG. If this email contains any defamatory comments expressed by the individual sender, these comments are made outside the scope of his/her authority. BRG does not accept liability in respect of such defamatory comments. BRG does not warrant that the integrity of this email has been maintained, or that this email is free of errors or viruses, and has not been intercepted or interfered with. It is your responsibility to scan this email for computer viruses and other defects. BRG does not accept liability for any loss or damage however caused, whether by negligence or otherwise, which may result directly or indirectly from this email. In any event, BRG's liability is limited to the cost of re-supplying this email. Please consider the environment before printing this email. ***************************************************************

The deployment is just the same like for the conventional suites and the same rules apply, so I'm not sure what you are asking.
Mylenium

"Locking Down" mail preferences?

To sync the mail on my home mac, my work mac and my iPhone, I run my work, .mac and one other account through gmail imap. I have gmail set up so that if I respond to an email, it uses the incoming address rather than my gmail address.
In my Mail preferences, I have all accounts enabled but only have the gmail imap check marked to check for new mail, so I won't pull down duplicates from the other servers.
Problem is, at random times Mail will undo my preferences and access the accounts I tell it not to.
Is there a way to "lock down" the Mail preferences so it doesn't do this?
Thanks...
Zach

when Mail checks for email in all accounts is the mail>preference>account>advanced, is the "include when automatically checking for new mail" checked when before it was unchecked? or is it that Mail overrides and checks anyways, or that you may have inadvertently gone to mailbox>get all mail or synchronize all accounts or the associated shortcut command?
hope this helps

Security - Locking Down Oracle 9i

Anyone,
I have been asked by our auditors to lock down my Oracle environment by disabling the default accounts that are not needed.
What User Accounts can I disable (Lock) and not break my Oracle environment?
I am looking at the following:
DBSNMP
OUTLN
WMSYS
Will I break anything if I disable these accounts?
Thanks in advance,
Miller

Hi
DBSNMP User:
For database event monitoring, it is recommended you use the pre-existing DBSNMP user account.The DBSNMP user is automatically created with each new database and is already used for basic monitoring such as checking database availability. When setting up the EM Event owner’s preferences for Preferred Credentials, specify DBSNMP as database credentials for all monitored databases. This account will be used by the agent for monitoring and historical data collection as well as by the OMS/Console for database browsing. The DBSNMP user has already been granted some basic privileges. However, if it is to be used for all database event monitoring, you will also need to grant:
SELECT_CATALOG_ROLE role.
OUTLN User:
This user is used while using TKPROF utility
select user# from sys.user$ where name = 'OUTLN'
WMSYS: Don't know about this user.
I suggest to remove only SCOTT user account, as this is a demo user account.
Hope this was useful.
Thank You

Locking down the sound

Hello fellow macers!
I have multiple accounts setup on my Apple Macs, and most things work well, though I am struggling to solve one little gripe:
The managed users can turn up or down the volume as much as they want. I would like to stop this function totally as it is disruptive to a classroom environment.
Any ideas? I have used the com.apple.dock.plist file rights before, I had a quick peak for a sound file but no joy. Maybe I looked in the wrong place or there is another method?
Cheers guys.
Rob

Give them pencils to tap on their desks instead. That'll stop their ability to distract you with the computer's volume button.
All kidding aside (or is it?), output volume preferences are stored in "/Library/Preferences/.GlobalPreferences.plist". I'm not completely sure if it's easily locked down without potential future headaches, but that's where the setting is stored.

Forward facing locked down machines... kiosk?

Hey everyone,
So I have done a lot of research on this topic, but have yet to find an end-all solution to my conundrum. I have many machines in my network that are forward facing and public use reference terminals that connect to a database of books and things. These
machines are not and should not be used to casual internet browsing so we have manually locked them down. These machines currently run IE10 Win7x32. The windows side locking down is no problem. But we are having a BIG issue with the current way we allow specific
sites and lock out all others.
In our system, we have an abundance of allowed sites for quick research purposes that these machines are allowed to access. Still technically reference information. For the sake of argument, we have about 25 sites including the main database site that should
be allowed through a proxy or other filtering system. Currently, we have this proxy based with exceptions built into IE... however, there is around a 255 char limit on that input box (for whatever reason).
So that brings me to my current solution that is not quite working correctly. I have configured a .PAC script and stored it on a server that these machines can access and an msi for IE10 branding using the IEAK for IE10. This .PAC script does not seem to
be working the way it should. I got the idea from a site I didn't save, but the basic idea is below:
function FindProxyForURL(url, host)
// variable strings to return
var proxy_yes = "PROXY 255.255.255.255:8080";
var proxy_no = "DIRECT";
if (shExpMatch(url, "*.google.com")) { return proxy_no; }
// Proxy anything else with yes
return proxy_yes;
So, my understanding is this would run when sites are accessed, if it matches the if statements it passes and if it doesn't, it defaults to proxy_yes which doesn't exist and thus doesn't load. The ADMX configures the proxy itself and everything should be
great.
My main question: is there a better way to allow sites through to a machine WITHOUT loading the pages first. A simple whitelist/blacklist doesn't necessarily work because it, as far as I understand, still loads the pages but does not display them. Currently,
it looks like IEAK is the only way to correctly manipulate these settings in internet explorer 10+, unless I'm getting that wrong. It doesn't seem like the list from our previous installation from GP is being overridden using this method, and it doesn't
apply to new machines connected to the policy. Of course, I know it is applying because other functions, like the content rating system that I accidentally left on, have caused some problems in the past.
We will be upgrading these machines to newer optiplex models and installing Windows 8, so if there is a more effective solution that only works in windows 8, I am willing to try it.
Thanks in advance for the help, you guys are always awesome!

Hi,
>>Currently, it looks like IEAK is the only way to correctly manipulate these settings in internet explorer 10+, unless I'm getting that wrong.
In addition to IEAK 10, to configure proxy for IE 10 on Windows 7, if our most up-to-date domain controller is Windows Server 2012 or R2, we can use Group Policy Preferences
Internet Settings extension to configure the proxy setting. Besides, we can also choose to install Remote Server Administrative Tools on a Windows 8 or 8.1 client and manage group policy settings from this client.
Moreover, another way is that we can try using Group Policy Preferences Registry extension to configure the proxy settings for IE10 on Windows 7.
Regarding this point, the following thread can be referred to as reference.
Proxy settings not applying to IE above 8
http://social.technet.microsoft.com/Forums/en-US/3b0f54d7-7293-49dc-9e3f-e8799c20265b/proxy-settings-not-applying-to-ie-above-8?forum=winserverGP
Best regards,
Frank Shen

Video in FP10 ActionScript 2 vs. ActionScript 3 on locked-down network

My company has an extremly locked-down network, and I'm having some issues getting Flash video to play when it is encoded with ActionScript 3 that I do not have with video encoded with ActionScript 2. What I am assuming is that there is a required external framework or library my network is blocking with regard to AS3 content, but I can't find any information about where that framework or library "lives". (I had a similar problem in an earlier project with the Text Layout Framework, but documentation on that was easy to find and I implimented a solution.) If someone can point me to that framework/library/other external source location I can get my networking guys to unlock it. (Note that I know the actual videos are encoded correctly, as I can get everything to work outside the corporate environment, and the videos are otherwise exactly the same but for their encoding [AS2 happy - which will play - vs. AS3 required - which won't].) This problem is boggling me...
As a company we use (and I have no power to change):
Windows XP Professional version 5.1.2600 Service Pack 3 Build 2600
IE 7.0.5730.13CO
Flash Player version 10,1,52,14
Thanks!
Chris, from the corporate world of locked-down systems.

My company has an extremly locked-down network, and I'm having some issues getting Flash video to play when it is encoded with ActionScript 3 that I do not have with video encoded with ActionScript 2. What I am assuming is that there is a required external framework or library my network is blocking with regard to AS3 content, but I can't find any information about where that framework or library "lives". (I had a similar problem in an earlier project with the Text Layout Framework, but documentation on that was easy to find and I implimented a solution.) If someone can point me to that framework/library/other external source location I can get my networking guys to unlock it. (Note that I know the actual videos are encoded correctly, as I can get everything to work outside the corporate environment, and the videos are otherwise exactly the same but for their encoding [AS2 happy - which will play - vs. AS3 required - which won't].) This problem is boggling me...
As a company we use (and I have no power to change):
Windows XP Professional version 5.1.2600 Service Pack 3 Build 2600
IE 7.0.5730.13CO
Flash Player version 10,1,52,14
Thanks!
Chris, from the corporate world of locked-down systems.

G4 10.4.11 System Preference Network settings lock up.

Having searched first, I found my problem:
"When I open System Preferences and then open Network, a box drops down that says "Your network settings have been changed by another application." If I click the blue OK button, the box disappears momentarily but continually reopens, thereby not allowing me to quit System. "
But no answers.
This stared after I attempted to add a windows machine,98, to our home network on a belkin 4 port router, via ethernet. This operation failed for unknown reasons. At one point I entered the router IP address in the Windows system and may have entered it wrong. I have since disconnected the windows machine from the network and I still have the lockup in System Preferences. My coonection still works though as I am posting from the affected G4.

joneeguitar, welcome to Apple Discussions.
Look at this link. http://discussions.apple.com/thread.jspa?messageID=9372513
I did BDAqua's suggestion
To stop the pop-up, Go to System Preferences: Security. Check the box next to "Require password to unlock each secure system preference." Then lock Security.
 Cheers, Tom

Solution for teachers (and others) to lock down the iPod

Hello all. I just have to share something I found yesterday. If you've seen other posts of mine, I am a teacher with a class set of iPod nanos. I have audiobooks on them so the students can listen to and read the book at the same time. My problem was that there are preinstalled games on the iPod nano that cannot be removed. After contacting my educational contact at Apple, she said they have sent it up the pipes, but as of yet there is no solution. Well I found one!
First off, it is not my solution. I attended FETC this year and went back to their website and found a partial solution. The person's name is Luis Perez. He has two websites: http://etc.usf.edu/te_mac/ for mac and http://etc.usf.edu/te_win/ for windows. So here is how you do it.
Create a text file in a text editor that has the following:
<meta name="NotesOnly" content="true">
save the file as preferences.txt
Create another text file with the following:
Name of link goes here
Here is my completed one:
Click for Audiobooks
Save this under whatever filename you want. I chose Audiobooks.txt
In iTunes make sure you have a playlist named whatever you put in the file. (NOTE: it must be a playlist, it wouldn't link to just audiobooks)
Sync the iPod in disk mode. Open the iPod in Finder or explorer and copy both files into the NOTES folder. Eject the iPod. Now the only thing the iPod will do is go to the notes folder. (it is in a sense 'locked down') Your other file should be listed. When you open that file (audiobooks.txt) it will say the name of your link. When you click that it will start with the first song/book in that playlist. You cannot go to any other thing on the iPod. When you hit menu, it goes right back to the notes folder.
PLEASE NOTE: if you want to 'unlock' the iPod, just trash the preferences.txt file you put on there.
I know it is rather long, but it is a solution I have been looking for. I am hoping other teachers or people who need to secure the iPod for whatever reason are helped by this. Let me know if you have questions.
<Edited by Moderator>

Bizarre, I can't figure out how to edit it. I can't figure out how to get it to show up right either! Anyway. 2 links showed up that aren't supposed to be there.
I can't figure out how to stop it from linking. <Edited by Moderator>
Message was edited by: Shoewee

I am using a Photoshop cs2, and I wonder if it is possible to keep the settings of the guidelines when closing an image, with the actual document ? It would be nice to have the guidelines locked down, I find it than when opening the same or another image,

I am using a Photoshop cs2, and I wonder if it is possible to keep the settings of the guidelines when closing an image, with the actual document ? It would be nice to have the guidelines locked down, I find it than when opening the same or another image, the guidelines are not locked, it is annoying to have to lock them down again. and it would actually be nice, to ba able to give specific directions when placing the guidelines. Thanks

Then why are the guides unlocked when I reopen a document that I saved with the guides locked ?
Thanks.

Lock down X140e BIOS

Hello!
I'm deploying 55 of the Thinkpad x140e to a school, and I want to be able to lock down the BIOS so the students won't be able to boot from other devices or make any other changes in the BIOS. I'm wondering if anyone knows of an application that allows me to lock down the BIOS without having to do it manually on every machine. I'm imaging them with the same image, so if there's an application that can be put on the image beforehand, that would be ideal. Anyone run into a similar situation or know of any solutions?
Thanks in advance for any help you can provide!
Solved!
Go to Solution.

Lenovo has some scripts (and accompanying documentation) for configuring the BIOS through WMI available here:
http://support.lenovo.com/us/en/documents/ht100612
The X140e isn't listed as a supported model, but it might be worth a try anyhow.
How are you deploying the image? If you're using something like MDT or SCCM you would create a task that runs the script as part of the imaging process.

How do you modify the web.xml to lock down the pages from a user role

how do you modify the web.xml to lock down the pages from a user role

I'll make a stab at your question:
The following is an example of where a URL is protected within a web.xml deployment descriptor. In this example, the URL /protectedA within the application is protected:

<security-constraint>
<web-resource-collection>
<web-resource-name>protectedA</web-resource-name>
<url-pattern>/protectedA</url-pattern>
</web-resource-collection>

<auth-constraint>
<role-name>sr_developer</role-name>
</auth-constraint>
</security-constraint>
Sun's explaination here:
http://java.sun.com/j2ee/1.4/docs/tutorial/doc/Security4.html

Problem with internet. When i open System preferences, Network, message drops down: 'your network settings have been changed by another application'. I click OK, but it drops a message again and again, preventing me to do anything about the setting.

Problem with internet. When i open System preferences, Network, message drops down: 'your network settings have been changed by another application'. I click OK, but it dropps the message again and again, preventing me to do anything about the setting.

A Fix for "Your network preferences have been changed by another application" Error
In the Library/Preferences/SystemConfiguration/ folder delete the following:
com.apple.airport.preferences.plist
NetworkInterfaces.plist
preferences.plist
com.apple.nat.plist
You will have to re-configure all your network settings since deleting.
(10.4.10)
Use Software Update to update your OS to last version of Tiger. Install all the other updates that goes along w/it.

Directory preferences in a locked down PC environment

Similar Messages

Maybe you are looking for