FCS administration rights issue

Hi all,
I'd like to create an admin user that would have less rights as the "big" administrator.
For instance, that user would see the Administration panel but without the "Devices" or "Preferences" tabs.
I cloned the admin group from the Permissions set, but each time I modified some of its Trait or Device permissions, it lost all its admin rights (the administration panel went off).
I am not even sure I can create such an user?
Thanks for your help.
Philippe.

Same basic problem. Every morning I get the "Administration rights are required to complete Adobe Add-ons installation or removal" notice and it pops up everytime an Adobe CC 2014 app opens.

Similar Messages

User with Farm Administrator rights, but NOT in Farm Administrators Group

I have an account that we recently discovered has Farm Administrator rights and was used to access Central Admin and cause some harm. When I use the "Check Permissions" on the Central Admin site, it says that account has Full Control via
the Farm Administrators Group. However, that account is not in the Farm Adminstrators group.
There is an entry in the Farm Administrators group for "BUILTIN\Administrators" and this account is in the Local Admin group on this server. However, there are other accounts in the Local Admin group too, and when I "Check Permissions"
for them, it returns 'None'.
I am confused as to how this one account has Farm Administration level access, while others in Local Admin do not, and how can I remove this accounts Farm Administration rights if it is NOT in the Farm Adminstrators Group?
What are the potential problems/issues if I remove the "BUILTIN\Administrators" entry from the Farm Adminstrators Group?
Thanks in advance for any feedback/help.

If you have BUILTIN\Administrators as part of the Farm Admins, any user that is a Local Administrator will have Farm Admin rights. SharePoint doesn't enumerate groups when checking permissions, so the behavior you're seeing is correct. If you do not want
Local Admins to have Farm Admin rights, remove BUILTIN\Administrators from the Farm Admins group in SharePoint.
There should not be any issue with removing the group from Farm Admins, only that users will need both rights to fully manage SharePoint.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

HT1923 I had to reinstall Itunes due to "runtime error" and the instructions said to run as administrator. I did that but I'm getting a message about administrator rights to my mobile device and it won't load. What do I do now?

Having issues reinstalling ITunes. I ran as administrator but getting message that I do not have administrator rights for mobile device. Any suggestions.

See this User Tip by turingtest2
https://discussions.apple.com/docs/DOC-6562

ActiveSync requiring administrative rights to synchronize data with Windows Communication apps

We are currently testing W8.1 Update 1 in our corporate environment and have run into an issue when attempting to synchronize the corporate exchange accounts with the Windows Communication apps (Mail, Calendar, People). The first problem we encountered was
the requirement for each user to log into a Microsoft account just to access the Communication apps, this was handled through GPO by enabling the "Allow Microsoft accounts to be optional" policy. We could then launch the application, were prompted
for exchange server information, but then upon attempting to synchronize received an error message stating that "To sync this account, you first need to make your Windows user account an administrator." Obviously we have no desire to make all of
our users administrators, but for the purpose of testing we added the user account to the administrators group. The same error message appears! A quick search revealed that changing the UAC to a lower setting would resolve the problem, and sure enough we then
received a prompt to Enforce Policies and synchronization completed.
This can't possibly be the intention, that every Windows 8 user using ActiveSync is required to be an administrator and has to lower the UAC. We did determine that once synchronization has been configured, the administrative rights can be removed and UAC
can be increased once again, but this is a ridiculous option.
I would really appreciate an explaination of the reasoning if this is infact the intended setup, and if it is not, then what we are doing wrong. Thank you.

Hi,
In following article, you will see that the admin permission is required to do so:
Activesync Working But Only For Some Users On Exchange 2007 / 2010
http://alanhardisty.wordpress.com/2010/03/05/activesync-not-working-on-exchange-2010-when-inherit-permissions-not-set/
Also, Microsoft's recommendation and best practice is that if you are a domain administrator that you have 2 accounts. One for your everyday user which is restricted in the same way that every other user is and a second for your administration role.
Kate Li
TechNet Community Support

Deploying msi via group policy without administrative rights

We are having a problem with flash player not working without
Administrative right on the machine. We thought we could get around
this by using the flash_player_active_x.msi and installing through
group policy. The install during a computer reboot (if assigning to
a computer) or during a user sign on (if assigned to a user) seems
to work fine.
However, when you actually try to load a webpage with flash,
nothing. The component doesn't actually get installed into the
browser. As soon as you log on with a privilaged account, and
browse to a flash enabled page, the install finishes, the active x
control is loaded and now all users can see it.
However, I'd really prefer not to have to go around to each
computer and log on with the administrator account - kind of
defeats the purpose of group policy.
All computers are Win XP sp2 with IE 7. The active directory
server is a Win2k server.
Any thoughts would be appreciated.

I am having this issue also. Has anyone found a solution?
I found this reference on this website, but there is no
solution given:
I
have installed Adobe Flash Player but still don't see any Flash
content. What is wrong?
quote:
Restricted User accounts are unable to display Flash Player
content
After successful installation under the Windows Administrator
account, Restricted User accounts are unable to display Flash
Player content. This issue has been reported on Microsoft Windows
XP Service Pack 2 systems and occurs sporadically. It may also
affect other versions of Windows, such as Windows 2000.
If you installed Flash Player 8.0.24.0 prior to April 6,
2006, then you must remove it using the Flash Player uninstaller
released on May 11, 2006. Remove Flash Player using the
instructions in How to uninstall the Adobe Flash Player (TechNote
14157).

Business Objects XI 3.1 Administrator rights

Hi:
Could someone tell me or point in the right direction for determining if any, or which Business Objects desktop application may require the user to be part of the sytem administrator group? Currently running BO 6.5 Supervisor and Recipient Manager modules, among others but we will soon be upgrading to Business Objects XI 3.1 - I know we need administrator rights to install so I'm onl asking about running the applications - thanks

Hi Darlynn,
administrator rights (on OS side) are not required in order to run most BOBJ dekstop applications (e.g Universe Designer, rich WebI client, DeskI client). Still you have to take care eventually of firewall issues if you have a firewall between your server and your clients.
Please make also sure that the users have write access to the temp directories used by the tools e.g. Universe designer.
You may have some issues with the Import Wizard though since it requires write access to it's installation directory (this is where its temp directory resides). That was at least the case in XI R2.
The Import Wizard is not every user's tool though.
Regards,
Stratos

Installing DSL software and administrative rights

I am trying to install my Verizon DSL software but it says I can't because I don't have system administrative rights. I am the administrator and I am logged into my account. It won't pull up the password box it just ends my installation. Is there a way to sign in with administrative rights before I click the installation button? Or a way to turn off the installation password box...so that I don't need it? I really need this installed

Hello icemice:
I suggest you call the Verizon technical support people - they should be able to address your issues. Offhand, I cannot see why you would be blocked from installing software.
Barry

Can't deactivate to transfer - "activation requires administrative rights"

System info:
Late 2009 21.5" iMac w/8GB RAM running Windows 7 Ultimate (x86. x64 wouldn't install Acrobat PDF Printer so is pretty useless) on Bootcamp
I need to deactivate Adobe Acrobat Pro 7 (Windows) so i can re-install it elsewhere but just this morning it's started acting up - as soon as i open Acrobat i get a pop-up saying:
"Adobe Activation:
Activation requires that you have administrative rights on this computer.
Please log in as as administrator and try again, or contact you system administrator"
I've never had a problem before with this. I've tried logging in as the domain admin but still the message appears. It won't let me access anything at all in Acrobat except to click OK, on which Acrobat closes. I've just run a disk check as an Adobe support document suggested but no-go.
Anyone know how to fix this?
Thanks

Update
Phone support is a lost cause. God knows how long i was on hold yesterday morning. Tried Live Chat support again, got through to a different and very helpful chap who told me that my Acrobat 7 Professional serial number was already deactivated and i could go ahead and install it elsewhere. God knows how it managed to deactivate itself but i don't really care, having fretted over this issue for the best part of a working day. Happy camper.

Administrator rights required

Hello,
I installed the latest Flexbuilder 3 beta on my company
laptop. Installing went ok, which amazes me because normally you
need administrator rights.
But ones installed I found the same trouble back in the
debugger flash version. We do not have it installed, nor can I
install it because I do not have administrator rights. Is it
possible to somehow get a debugger up and running without the need
for administrator rights required.

How exactly does one give it those file permissions? I suspect this issue may (but may not) be related to switching from one kind of Adobe account to another, let me explain.
This is probably not a very common situation when it comes to the Adobe license. I work for a university, and my department paid for a CC teacher/student edition for me for about 2 years. The university I work for is one of 14 public universities in the Commonwealth of Pennsylvania that are united in something called PASSHE. PASSHE entered into a massive license agreement with Adobe, and so now I qualify for a CC license under this massive license to PASSHE, so I cancelled the individual account that my department had been paying for. Adobe gave me misinformation as to how to switch over my license, to make a long and miserable story short. So...when you say "file permissions" and "user account" are you talking about my user account on my computer, or the Adobe user account? And where, exactly, do I go to enter whichever credentials it wants?

How provide CrystalReports without administrator rights?

Post Author: vtortola
CA Forum: .NET
Hi!
I'm developing a SmartClient application that is deployed with ClickOnce from a web server. The application, use several crystal reports features and I need deploy the needed dlls with ClickOnce.
From my understanding, for install Crystal Reports runtime I need administrator rights, but this mean that the sysadmin must go to each computer and installs it, that isn't posible.
I need deploy the Crystal Reports assemblies or dlls in my application path and know how use it. How I can do it??
Thanks in advance.
Regards.

Thanks for the link, John. It takes me to customer support but they say I need technical support.
While I wait for their office to open, can you provide some details how you or others got around this issue? There are a few tertiary questions I hope to have answered if possible. And since you were te first to reply, I thought you would be best suited for them.
Wha that are your thoughts on the remaining questions?

Why does WD Lock / Unlocker require administration rights?

It's really bloody annoying. I purchased the WD My Passport 2TB Portable Hard Drive because it had hardware hardware encryption thus it shouldn't need a device driver like software hardware encryption programs do. I've been trying to get a decently sized fast portable usb powered hard drive with hardware encryption and password protection that i can use on any PC regardless of account permissions for years now and i am still struggling. Don't you hard drive companies understand that people wish to use their portable hds at work as well as at home? The only company i've found to include locking / unlocking software that doesn't require admin rights is by Intergral but they don't do portable usb powered hard drives, only memory sticks It's obvious it can be done, i don't just get why no one else is doing this? Basically i've got a super small and fast 2tb hard drive that i can't take advantage of the hardware encryption / password software because of this silly issue of requiring administration rights to access a drive when password protected. My work PC runs Windows XP and when plugging the drive in (without a password), it loads up without the the need for an admin account.

The Unlocker is poorly designed. When a standard Windows user account connects a locked drive and launches WD Drive Unlock.exe (prompt pops up in AutoPlay), UAC (User Access Control) elevation occurs and the administrator password is required. That is a the fault of the WD programmers - they should not require Admin permissions to do a simple drive unlock when the correct password is entered. The Unlocker should be rewritten to allow a Windows standard user account to enter the correct password and unlock the drive.

Administrator in parent domain has no administrator rights when logging into child domain systems.

We have a simple layout, parent domain in the office is foo.com, I've adding a child domain in the datacenter called prod.foo.com (we have machines with the same names in the office and production, not my doing :p) Prior to this all of our production
machines were standalone and various users just had the local administrator account, which has led to some problems.
Anyway, on to my issue;
I have a security group in foo.com called Production Logins that I've added myself to, and on the test windows 2003 server I've allowed FOO\Production Logins the ability to remote desktop, and I'm able to remote into the box web01.prod.foo.com
just fine, however; When I log into web01.prod.foo.com under my admin account in the parent domain, I only have basic user rights on that machine, not administrator rights. Shouldn't administrator rights carry over to the child domain for
my account? Is there something specific I need to do to allow that?

Hi,
To
do what
the friend
said
above you need
to configure
restricted groups
GPO
More
information:
http://www.windowsecurity.com/articles/Using-Restricted-Groups.htmlMCP, MCDST e MCSA 2003

Sharing administrator rights with a contact in a g...

I've set up a popular group chat used by lots of contacts at work. When I am on vacation, my boss wants to be able to add or delete people from this group chat. But I'm not sure how to share with him the rights to do this. How do you share group chat administrative rights with another contact?

Yes please - I'm having the same issue. How do I give another member administration rights?

Administration rights to install add-ons

Yesterday i updated the CC desktop app (MacOs 10.7.5). Today i had a crash. Now, every few seconds/minutes, a notification pops up, warning me that i need to "have Administration rights to install or uninstall Adobe Add-ons"

Hi Franck Payen,
Could you provide the following logs, so that we can debug this issue?
CoreSync log:
/Users/***/Library/Application Support/Adobe/CoreSync/CoreSync-*.log
ExchangePlugin log:
/Users/***/Library/Application Support/Adobe/Extension Manager CC/Log/ExManSync.log
ExMan Core Lib log:
/Users/***/Library/Application Support/Adobe/Extension Manager CC/Log/ExManCoreLibrary.log
Entitlement file:
/Library/Application Support/Adobe/Extension Manager CC/Configuration/Entitlement/*
ExMan Core Lib DB
/Library/Application Support/Adobe/Extension Manager CC/Configuration/DB/ExMan.db
Note:
To enable ExchangePlugin and Core Lib debug log, you need to create a file named “ExManCoreLibLog.YES” under “/Users/***/Library/Application Support/Adobe/Extension Manager CC/Log/” and restart CC desktop app.
Thanks,
Huiyong

Packagemaker 3.0.3. administration rights?!

Hello,
I have just finished implementing my new application and I am now aiming at making the installer look and feel nice. All the cosmetic features are clear and intuitive so I had no problem with them. What I do have problem with is setting the "administration rights". To be more clear: I would like to give the user a chance to install my application (/myAppFolder/myApp.app) anywhere on the harddisk he chooses. When the chosen destination is the user's home directory everything works just fine (the application is installed in /myAppFolder/myApp.app). However, if any other location is chosen only the folder '/myAppFolder/' is installed and nothing in it! I checked the option that requires the user to enter the administrator password, so that should not be the problem. I guess my problem is that I do not have the slightest clue how the UNIX user rights are distributed, so I spent 4 hours yesterday packing/unpacking and trying different combinations of rights for both 'myAppFolder/' and the application package itself(myApp.app). I even made them both and all of their subfolders and subfiles world readable/writeable but nothing changes the fact that if 'myAppFolder/' is anywhere else other than the current user's home directory nothing is installed in this folder. I am a little frustrated here, I have found many tutorials and read a great deal of them but nothing written there seems to help. Please, if anyone has a suggestion or a set of rules that should be satisfied in order to install something on a UNIX based OS, just post it here I will really appreciate it-.
Best Regards
- artOf...

artOf... wrote:
1). Open the PM, input my company name, input a title for the install setup.
2). In the configuration tab: Check all the check boxes named 'Install Destination:'
If you are installing an application, the only thing you want here is System Volume. I understand you want to give users as much flexibility as possible, but PackageMaker just can't handle it. If you have some preference or database that could go into either /Library or ~/Library, you can pick System Volume or User Home Directory. If you have "something else", you can choose Volume Selected by User. Applications should go into System Volume. PackageMaker just gets so confused on these options that you will never figure it out - at least I know I can't.
3). Edit Interface(cosmetic stuff)
I would put this off until last.
4). I have a folder 'MyAppFolder' and an application MyApp.app inside that folder, I issue the command 'sudo chown -R root:admin MyAppFolder' and just to be sure the same command on the MyApp.app package.
You don't have to do it twice. The "-R" option will do do that for you.
5). I drag and drop 'MyAppFolder' in the 'Contents' tab of my PM setup.(here I am not sure, I drag and drop the folder containing the application so I am assuming I don't have to drop the application separatedly.)
You can do either one, but you would have to change the Contents -> "Include root in package" setting.
6). Select the newly dragged folder and choose 'Configuration' for it. Check 'Allow custom location' and set the destination to '/Applications'.
Don't check that box. I've never gotten it to work. Plus it will conflict with the Volume settings from above. Just keep the destination as /Applications.
Set the 'Package Identifier' to an integer that I never used before.
An integer? That's not right. The package identifier should be something like "com.mycompany.ipodsyncscpt.pkg". The version is an integer.
7). On the 'Contents' tab I just check the checkbox called 'include in root package'.
This may or may not be correct. Build the installer and test it. If it doesn't install the top-level directory, then turn this option on.
8). Build(no warnings or errors), run(choosing 'Machintosh HD' for installation destination), go through all the rest of the steps(enter the admin password).
9). Check under 'Machintosh HD/Applications' for 'MyAppFolder'(it is there).
10). The folder is empty?!
Simplify you settings and try it again. Remember, you are working with stone tools here. You've got to keep it simple. In your installer, show the log and tell it to show everything. That might tell you something - and might not.

FCS administration rights issue

Similar Messages

Maybe you are looking for