Enable firewall with GP but allow users to disable....
I'm wondering how I can enable the firewall in group policy but allow a user to disable it if they have to. I see that it says "settings are controlled by group policy" when I go to try to turn it off on a vista machine. Thanks.
Hi,
GPOs do not provide this functionality unless you are using the special group policy preferences settings which do not include control over the firewall. You best bet is probably to simply deploy the OS with the default setting of the firewall being
active and this would allow any local administrator to change the configuration.
Alternatively, you could dig down and determine the registry keys to control the firewall and change those with group policy preferences.
Thanks,
Guy
Similar Messages
-
Not allow users to disable startup script
I have written a User Login script for indesign and have successfully implemented in Indesign CS3. However, anyone can disable the login script that I have put in the Startup script by modifying the Preference setting of the Indesign. I would be very grateful if any one there could suggest me on how to not allow the users to disable the login script put inside the Startup Script folder.
Thanks,
Limbu, KesharThank you very much for you response. But, it is not about the user right permission. There is a selection options in the Perference setting of Indesign. If you untick that option, Indesign will run bypassing the scripts in the startup scripts folder. Is there any way to not allow the users to not select this option so that the startup scripts does not get bypassed?
In the above preference setting the last check box is not selected hence Indesign will bypass all startup scripts. Only if this last option is selected the startup scritps will run.
Thanks
Limbu Keshar -
Fix Array Front Panel Dimension but Allow User to Change Array Size
Hi
I know there's a few other posts on array and scroll bars but mine is a bit different. I want to have the physical dimension of the array control fixed and allow the user to vary the size of the array as needed and a scroll bar if the number of elements exceeds the physical dimension specified. I would not mind if at the end of the scroll bar the user sees an un-initialized element.
Thanks very much
Solved!
Go to Solution.Hi
Sorry but I didn't mean that there was a problem with the property node, just that it wasn't doing what I wanted. I think by changing the Number of Rows property node, the number of visible rows changes such that the scroll bar is never needed. Based on what I did it seems that when the Number of Rows changed, the scroll bar never appears and the array just gets bigger on the front panel even though I enabled the scroll bar both in the control and block diagrams but I could have likely made an error if this wasn't suppose to happen. The way I did it works for what I need so I didn't look into this further.
But I am interested in learning what I did wrong if you could point it out for future references.
Thanks very much
Attachments:
Untitled 5.vi 11 KB -
Restrict Form & Reports Pages but allow users to Save their Records
Hi
I have a database with Forms & editable Reports pages.
I have also created a table with certain 'Admin Levels' of access so that users with the 'ADMIN_LEVEL' = 1 cannot access the editable reports pages.
I find that applying the below restriction stops those users from accessing the reports but also won't allow those users to save any records.
select USER_ID
from USERS
where USER_ID=:APP_USER
and ADMIN_LEVEL > 1
I then thought I could create a new page of the report but make it uneditable & use the 'Create' button to save the record to the table, but this doesn't work.
My question is, how can I restrict access to a reports page but still allow records from restricted users to be saved?
ThanksHi,
Firstly, you should look into Authorization Schemes: [http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/sec.htm#BABCAGAB]
I would suggest you create a scheme to identify admin users called, say, ADMIN_USER. This could be an EXISTS SQL query scheme of something like:
SELECT 1
FROM USERS
WHERE UPPER(USER_ID) = UPPER(v('APP_USER'))
AND ADMIN_LEVEL = 1Then, on any item within your application, you have an Authorization Scheme setting. You can then set this to either "ADMIN_USER" or "{not}ADMIN_USER" to determine which user can have access to that item. "{not}ADMIN_USER" is any user where the above query would return no records.
Using this, you could grant access to a page, but stop access to a button and/or process. You don't, for example, have to set a scheme for the page itself (you can leave the setting as "- No Authorization Required -", so everyone can get to the page), but you can then set a Scheme for a button on that page. If the user is an ADMIN_USER and you have set a button for {not}ADMIN_USER, that user won't get the button on the page (you should also make the same setting on any process that this button triggers).
But, if you set the page's Scheme to {not}ADMIN_USER, any ADMIN_USER will not even be able to get to the page.
Andy -
Windows 10 - wont enable bitlocker with AD but Windows 8 does
Have you tried a clean install of 10 after the upgrade? I wonder if it's a 10 issue or just related to the in-place upgrade.
Ok, 2008 R2 domain.
Windows 8 systems, via GPO have it set that if they dont have a TPM, bitlocker still works. Password ID is configured to be stored in AD - works ( triple tested it just now)
If I upgrade a Windows 8 system to Windows 10 that was never bitlockered, I cannot enable bitlocker, get error "there is no such object on the server" but it works for Windows 8 systems
Any ideas?
This topic first appeared in the Spiceworks Community -
Hi All,
I purchased iPhone 5s from Kuwait. There FaceTime worked pretty fine. But after i reached India, I could not find FaceTime in "Settings" nor make any FaceTime calls. I contacted Apple support several times, and these are the solutions they suggested,
1. Restore iphone as New : After restoration, issue persists
2. Contact carrier and get the settings: I contacted Airtel, my service provider, and they confirmed no such update available ( Also i can use FaceTime in iPhone 4S with same carrier )
After so many calls and chats with Apple support, i don't have any answer for this. I want to make clear "FACETIAE IS AVAILABLE IN BOTH THE REGIONS".
Still, i can't use the FaceTime in India. Because of this, i can't also make/recieve calls in my Macbook .
Please help!Note- FaceTime may not be available, or may become unavailable, on devices purchased or used in certain countries, including Saudi Arabia and the United Arab Emirates. Check your device's region of purchase for more information. http-//support.apple.com/kb/HT1937.
Try inserting your old Sim Card to see if FaceTime comes back. If it does, it is the carrier that is "removing" the feature. -
Hi all,
I need your help on the below scenario.
I have to stop user to copy and paste the data into the field. But allowing user to enter the data in that field.
Please suggest.
Thanks and Regards,
Thiru.Hi thiru
It sounds like you want a to write a PJC component to extend a forms text item that will capture and eliminate the key strokes and mouse actions used to copy and past thus preventing a user from performing this action. There are many examples on the interent of how this can be written e.g. the Oracle Forms PJCs/Java Beans web site. You will need to have jdeveloper to write thise bit of code. Oracle forms also has a tutorial on how to plug the JAR file you generate into your for sessions.
Regards
Quintin -
Anyway to Restrict Editing and Allow Users to Highlight/Bold?
Hello Everyone,
I was wondering if there was a way that I could restrict editing on my 2013 MS Word document but allow users to highlight and bold the text. I have looked up many forums and have not found a thing!
Thank you,
Kimmi131Unfortunately, there is no way to apply true highlighting in a protected document. But note that you can assign a keyboard shortcut to apply your custom character style, which simplifies the task.
Also, character styles are applied on top of the current paragraph style, so you only need one. Hmm, if you need multiple highlighting colors, then you may have to create more styles, yes.
Stefan Blom, Microsoft Word MVP -
SQL content database is locking when a user is disabled in Active Directory.
We have an issue, first of all we are running custom code in C# within a visual web part to "Offboard Users". In essence it disables their AD account and moves it to another OU using the ActiveDirectoryServiceClient.
Sometimes it works seamlessly, other times it causes a lock in the SQL content DB. The list ID that always comes up with the error is the User Information List. I have researched that SharePoint will update the UserInfo table with tp_Deleted when a
user is Disabled. Would this also update the AllUserData table with a corresponding int value due to the foreign key relationships between these two tables? If so could this update be causing the SQL lock? Is there anything we can do to expedite the
process, it runs really long, goes to critical, locks the DB, proceeds to completion successfully, but meanwhile users cannot interact with the site. The list is indexed on user name and work email. It is close to 4,000 list items, but broken into views. However
I don't think this has anything to do with the list itself as the Profile Service should be updating the list, the code does not.
We have separate DB for each site collection and all are within / under the 100GB limit.
How is the AllUserData table updated from the UserInfo table?
Thank You,
Crjangel
Frances GarlandI wouldn't have expected such a problem, but there you are :-(. Luckily you can analyze further by issuing a SQL DMV query providing details about existing locks, for instance using this one:
http://www.toadworld.com/platforms/sql-server/b/weblog/archive/2013/08/11/dmv-13-finding-locking-amp-blocking-sys-dm-tran-locks.aspx
Kind regards,
Margriet Bruggeman
Lois & Clark IT Services
web site: http://www.loisandclark.eu
blog: http://www.sharepointdragons.com -
How to not allow users to check or uncheck Enable Protected Mode
I know how to change the HKLM\Software\Policies\Adobe\Adobe Reader\10.0\FeatureLockDown\bProtectedMode to '1' to set the 'Enable Protected Mode at startup', but how do you disable to checkbox altogether so that users cannot change it?
From AIM (Administrator's Information Manager) Administrator's Information Manager
Top > Privileged > Protected Mode > bProtectedMode
Data type
boolean: DWORD value > REG_DWORD
Default
1
Since Ver. #
10.0
Path
Privileged
Lock Path
HKLM\SOFTWARE\Policies\Adobe\(product name)\(version)\FeatureLockdown
Summary
Enables Protected Mode and thereby sandboxes Reader processes.
Details
Protected Mode is one of the application's most advanced security features and should be enabled to protect user systems and data. Possible values include:
0: Don't enable protected mode.
1: Do enable protected mode.
GUI mapping
Edit > Preferences > General > Enable Protected Mode at startup -
How to allow user to select pdf file on local machine and populate field with file name only
Folks,
I have a project requirement that I am stumped on. I am admittedly a novice, so forgive questions that may seem obvious.
My requirement is a form running on a client system where the user can click a button and select a PDF file name from a PDF on their local machine and then populate a form field with that file path & filename. The file names vary between all machines, so there is no static list. Note that the PDF is not embedded, nothing is executed, I simply need the file name.
There are several of these on a form (20+), so manual name entry is too error prone. I would like to use a 'browse' type dialog, but can not figure out how to implement it.
I've looked at app.browseForFile, but the users can not install a javascript file in their adobe folder or any other files; the functionality has to be integral with the original PDF.
Functionally, this is no different from the image object file browse, except that I need a PDF instead of an image file, so there doesn't seem like there should be a security issue that is any different from those surrounding the image object.
I've been stumped on this for the entire week, and I have a deadline rapidly approaching, so any examples or suggestions (please remember I'm a novice) would be greatly appreciated!Thanks for the reply Paul - do you have any sample code of how to attach the PDF? Or how the user can select a PDF to open? I might be able to attach it, retrieve the file name, and then un-attach it.
Alternatively, do you know how to retrieve the file name from the imagePath object? It will let you select PDF files, but I can't find info on how to retrieve the file name. It should be the way you would retrieve the file name for an image.
As a novice in this, thanks for your help and patience! -
Allow user to fill in a fillable pdf but disallow adding comments and annotation
Hi there. I have a fillable pdf created by livecycle designer. I want to let users fill in the form but prevant them adding comments and annotatons to the form. I cannot reset the above requirements in form property - form security if I have already set a password and allowed user to fill in the form. Can I user javascript to that effect during the document loading?
Thanks.Hi,
If you save the form as a Dynamic XML Form in the save-as dialogue, then the user will not be able to apply comments. They can only do this in flat or static PDF forms.
See here: http://assure.ly/gYyYc2
Previous post exploring annotating forms:
Drawing field?
Hope that helps,
Niall -
I want to open a domain.site2 file outside the default folder (User/Library/Application Support/iWeb) with iWeb11, but iWeb only opens the domain file in the default folder. If I delete the default domain file, iWeb wants to create a new site. Does anyone have the same problem or know how to fix it?
In Lion the Finder folder is now invisible. To make it permanetely visible enter the following in the Terminal applicaiton window: chflags nohidden ~/Library and hit the Enter button - 10.7: Un-hide the User Library folder.
For opening your domain file in Lion for the first time or to switch between multiple domain files Cyclosaurus has provided us with the following script that you can make into an Applescript application with Script Editor. Open Script Editor, copy and paste the script below into Script Editor's window and save as an applicaiton.
Just launch the applicaiton, find and select the domain file you want to open and it will open with iWeb. It modifies the iWeb preference file each time it's launched so one can switch between domain files.
do shell script "/usr/bin/defaults write com.apple.iWeb iWebDefaultsDocumentPath -boolean no"delay 1
tell application "iWeb" to activate
OT -
On an iPad, how do I :
Allow User To Enter Custom Text
(Dropdown only) Enables users to enter a value other than the ones in the list.'?Are you using the built-in Currency option under the Format tab? If so,
what you're describing should not happen. -
Deny user from seeing/selecting from tables but allow access to certain view
Need some assistance. I have a database on SQL Server 2008 R2. Using windows authentication and a custom group, I control who can access the database and serve up the data via a web application.
I now have a requirement to allow users to connect to the data using Power Pivot, but do not want to allow users to see all tables/views, I want explicitly control what they see.
How do I lock everything down so that users can still view the data from a defined view but limit access to the other tables and views ?
In essence, my users should not be able to see/select from any of the tables or views except for a specific view that I want them to have access to.
ThanksIf the View and the Table are in the same database and have the same owner, then a user who has SELECT permission on the View does not require any permissions on the table.
See
Ownership Chains
David
David http://blogs.msdn.com/b/dbrowne/
http://blogs.msdn.com/b/dbrowne/
Maybe you are looking for
-
Subscription and push notifications - Name or password is incorrect (repeat logon)
Hi , while trying to execute the Push notification scenario,while executing I facing error as Incorrect user name and password, but user name and password are same . By following the below thread i found that i have to assign S_BGRFC role to the user
-
I just got a new iphone 5c this is my first smart phone. I have an Ipad so thought it would be easy. I downloaded the new software don't know if this changed anything. I have only had phone for 4 days but now the light won't shut off. I have to turn
-
Pages 5: Insert File Name
How do I insert the File Name? How do I update an old File Name that was previously inserted? It's common practice to insert the document name in the footer of document, so people reading the document know what version the file was printed from. This
-
Adobe app and photoshop CC HELP!
I have gone through the Adobe help and they cant help me so maybe someone on here can. I have a subscription for the photography CC plan. And photoshop wont work! I have paid for the subscription for three months. About once a month this happens wher
-
Downloaded latest icloud update and now get this "apple outlook dav config has stopped working"
Downloaded latest icloud software update on my PC and now icloud does not work with Outlook. It wiped out my contacts list. During numerous attempts to set up icloud get this error message "apple outlook dav config has stopped working" Apart from th