File permissions - how to edit a user account

file permissions - how to edit a user account that is creating files with permissions that are not wanted anymore.
i understand how to reset permissions on files or folders, but i do not understand how to reset the permissions a user is "creating".
ie, each time this user creates a file, the file needs to be manually edited for its permissions. so i need to edit the user's settings, but i can't find where to do that.
this is a home office setup. we have two users with admin privileges. our imac is acting as a server of sorts - it holds common files that need to be edited by both users. the other user is typically working on shared files from a macbook over wifi.
osx 10.6.8
any help is greatly appreciated - thanks up front!
adam

Király wrote:
Changing the umask does not produce reliable results. Many apps, including Apple's own Finder, will override any custom umask setting and apply the OS X standard set of read and write for the creator, and read only for group and others. This is true even in Snow Leopard
I cannot argue with you, because I've never tried or tested it myself. However, this KB article
<http://support.apple.com/kb/HT2202>
states the opposite:
"In Mac OS X v10.5.3 and later, you can create the file /etc/launchd-user.conf with the contents "umask nnn". […]
This will set the user's umask for all applications they launch, such as Finder, TextEdit, or Final Cut Pro, and control the permissions set on new files created by any of these applications."

Similar Messages

  • TS3981 After migration files are now shared between two user accounts. How can I combine them into one account?

    After migration, from PC, files are now shared between two user accounts.I have to switch users to access files. How can I combine them into one account?

    See Pondini's  Transferring files from one User Account to another, for starters

  • Can not edit a User Account

    Hello,
    i have a Problem with the Server APP on my MacMini. I had to renew my Domain Name. Everything works good (DNS, Open Directory). But now i can not edit a User Account, or apply a new User on my Server.
    The Plus / Minus Button is grey, and it is not possible for me to edit something under this service.
    I need Help, Please

    Same problem here on an Intel iMac running Mac OS X 10.4.11 - would like to delete an outdated user account (standard), but would like to keep a safety copy of all files before deleting.
    When using Accounts in System Preferences - and choosing "save contents of user's home folder to folder 'deleted users' " ... all I get is the endlessly spinning wheel along with the spinning beach ball instead of the mouse curser.
    Very annoying...
    Is there any way around the Delete Immediately solution ?

  • Help , how to auto create user account

    Hi, guys,
    i wanna to know how to auto create user account after use the suppliers' api to create supplier.
    i didn't find out how to auto create user account by use ap_vendor_pub_pkg.create_vendor_contact procedure.
    how to auto create the user account ?
    if you know ,tell me ,pls
    best Regards !
    Edited by: wanjin on 2013-4-15 下午11:50

    Hi Gareth,
    I wanna create an Oracle E-business Suite use account ,but how to use fnd_user_pkg.createuser procedure to relation the AP suppliers , not employee suppliers.
    the result like N:Purchasing Super User -->supplier-->Contact Directory --> create user
    then use "Create User Account for this Contact" to create user account
    Regards,
    Wanjin

  • How to create a user account by mirroring another account in PowerShell (Trying to learn to use Powshell for some daily AD tasks intead of the GUI)

    Hi,
    I am trying to create user accounts via PowerShell instead of the Gui in server 2008 R2 (PowerShell 2.0).
    I know how to create a user account with the following Power Shell command below is one from a dummy domain I created to practice.
    PS C:\Users\Administrator> New-ADUser -SamAccountName "TestOut" -UserPrincipalNa
    me "[email protected]" -GivenName "Test" -Surname "out" -DisplayName "Testou
    t" -Name "Testout" -Enabled $true -Path "CN=users,DC=bwcat,DC=net,DC=int" -Accou
    ntPassword (Read-Host -AsSecureString "Enter Account Password") 
    However when doing day to day tasks where I work normally we have a new hire, they contact IT and ask that a user account is created.   I will ask who they would like to mirror.
    I then would go into the gui pull up the user that they want to mirror right click him and choose copy.  This would create a new user account that I would then fill out.
    I am wondering if its possible to do this same thing via PowerShell, or  if its not an option because it takes more work type up everything than it does to go into the gui and do it.
    Anyway thanks for the help.

    Hi Wilder, hi Mark,
    first of all: The tutorial sources Mark posted - especially the book "Powershell 3 in A month of lunches" - are good to get a baseline start. A really great reference, especially when you try to learn it while still dealing with your daily business.
    On another note, Wilder: While I fully agree that learning things sequentially is usually the best, I too jumped right in instead of learning how to walk first (though it's been some time now. Fewer years than you'd think, but still ...). So I thought I'd
    give you a little aid with that function husk, so you could just stuff interesting bits into an available structure, making use of the fun tools in a useful context (It's fun fiddling around with the commands, but if you have to type in all of them manually
    each time, using the GUI is often just faster. Doing fun things and being efficient with it feels even better though ...). So ... while I
    do agree with yourself, learn it the Correct & Proper Way, I also do
    intend to finish this little explanation about the husk, all the way to the end.
    Everything below this paragraph is part of this.
    function Copy-ADUser
    <#
    .SYNOPSIS
    A brief description of the Copy-ADUser function.
    .DESCRIPTION
    A detailed description of the Copy-ADUser function.
    .PARAMETER GivenName
    A description of the GivenName parameter.
    .PARAMETER Surname
    A description of the Surname parameter.
    .PARAMETER Template
    A description of the Template parameter.
    .EXAMPLE
    PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
    .NOTES
    Additional information about the function.
    #>
    [CmdletBinding()]
    Param (
    [Parameter(Mandatory = $true)]
    [string]
    $Surname,
    [Parameter(Mandatory = $true)]
    [string]
    $GivenName,
    [Parameter(Mandatory = $true)]
    [string]
    $Template
    ) # Create finished Strings
    $JoinedName = $GivenName + "." + $Surname
    # Create new User
    $NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName $JoinedName -Name "$Surename, $GivenName" -PassThru
    # Copy from old User
    $NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
    # Do Whatever else you feel like doing
    This is again the same function husk I posted earlier. Only this time, I filled a little logic (the pieces that were already posted in this thread). This time, I'll not only go over each part again ... I'll do it by reposting the segments and trying to show
    some examples on how to modify the parts. Thus some of it will be repetitive, but this way all the info is in one spot.
    Segment: Comment Based Help
    <#
    .SYNOPSIS
    A brief description of the Copy-ADUser function.
    .DESCRIPTION
    A detailed description of the Copy-ADUser function.
    .PARAMETER GivenName
    A description of the GivenName parameter.
    .PARAMETER Surname
    A description of the Surname parameter.
    .PARAMETER Template
    A description of the Template parameter.
    .EXAMPLE
    PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
    .NOTES
    Additional information about the function.
    #>
    That's the premier documentation part of a function, that teaches a user what the function does and how to use it. It's what's shown when using the Get-Help cmdlet.
    Comment texts are not restricted to single lines however. For example you could replace ...
    .EXAMPLE
    PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
    ... with ...
    .EXAMPLE
    PS C:\> Copy-ADUser -GivenName "Max" -Surname "Mustermann" -Template "Jonny.Normal"
    Creates a new user named Max Mustermann and copies the group memberships of the already existing user Jonny Normal to this new User
    ... and get an explanation on what the example does when using Get-Help with the
    -Detailed parameter (Explaining examples is always a good idea).
    Segment: Parameter
    [CmdletBinding()]
    Param (
    [Parameter(Mandatory = $true)]
    [string]
    $Surname,
    [Parameter(Mandatory = $true)]
    [string]
    $GivenName,
    [Parameter(Mandatory = $true)]
    [string]
    $Template
    This is the segment that tells Powershell what input your function accepts. Each parameter of Copy-ADUser you set will be available in the next segment as a variable of the same name. You can add additional parameters if you need more information for your
    logic. For example, let's add a parameter that allows you to specify what Organization the new user should belong to:
    [CmdletBinding()]
    Param (
    [Parameter(Mandatory = $true)]
    [string]
    $Surname,
    [Parameter(Mandatory = $true)]
    [string]
    $GivenName,
    [string]
    $Organization,
    [Parameter(Mandatory = $true)]
    [string]
    $Template
    That's how that would look like. You may notice that I didn't add the line with
    "[Parameter(Mandatory = $true)] this time. This means you
    may add the Organization parameter when calling Copy-ADUser, but you need not.
    Segment: Logic
    # Create new User
    $NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -PassThru
    # Copy from old User
    $NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
    # Do Whatever else you feel like doing
    This is the part of the function that does the actual work. Compared to the first husk I posted, this time there are two commands in it (and some comments). First, I create a new user, using the information passed into
    the parameters -Surname and -GivenName. Then I Copy the group memberships of the user identified by the information given by the
    -Template parameter.
    So, let's modify it!
    # Tell the user you are starting
    Write-Host "Starting to create the user account for $GivenName $Surname"
    # Create new User
    $NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -PassThru
    # Tell the user you are copying Group Memberships
    Write-Host "Copying the group-memberhips of $Template to $GivenName $Surname"
    # Copy from old User
    $NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
    # Do Whatever else you feel like doing
    Now after adding a few lines, the logic will tell us what it's doing (and do so before it
    is taking action)!
    Hm ... didn't we create a change in the Parameter Segment to add an -Organization parameter? Let's use it!
    # If the -Organization parameter was set, the $Organization variable will be longer than 0. Thus do ...
    if ($Organization.Length -gt 0)
    # Tell the user you are starting
    Write-Host "Starting to create the user account for $GivenName $Surname in the Organization $Organization"
    # Create new User
    $NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -Organization $Organization -PassThru
    # If the -Organization parameter was NOT set, the $Organization variable will have a length of 0. Thus the if-condition does not apply, thus we do the else block
    else
    # Tell the user you are starting
    Write-Host "Starting to create the user account for $GivenName $Surname"
    # Create new User
    $NewUser = New-ADUser -Surname $Surname -GivenName $GivenName -DisplayName "$Surname, $GivenName" -SamAccountName "$GivenName.$Surename" -Name "$Surename, $GivenName" -PassThru
    # Tell the user you are copying Group Memberships
    Write-Host "Copying the group-memberhips of $Template to $GivenName $Surname"
    # Copy from old User
    $NewUser | Add-ADPrincipalGroupMembership -MemberOf (Get-ADPrincipalGroupMembership $Template | Where { $_.Name -ne 'Domain Users' })
    # Do Whatever else you feel like doing
    There! Now we first check whether the -Organization parameter was set (it's not mandatory after all, so you can skip it). If it
    was set, do whatever is in the curly braces after if (...). However, if it wasn't set, do whatever is in the curly braces after
    else.
    And that concludes my "minor" (and hopefully helpful) tutorial on how to use the function husk I posted :)
    With this, whenever you find another cool command that helps you in the user creation process, you can simply add it, similar to what I did in these examples.
    And if it all didn't make much sense, go through the tutorials in proper order and come back - it'll make much more sense then.
    Cheers and good luck with PowerShell,
    Fred
    There's no place like 127.0.0.1

  • How to set up user account in Windows 7/Premiere Elements 8.0/8.0.1?

    At the present time I have only the Windows XP Professional SP3 32 bit operating system which works from a User Account with Adminstrative Privileges when it comes to using Premiere Elements.
    I have read that in Windows 7, the default user account is one with standard rights. My first question is, when using Premiere Elements 8.0/8.0.1 in general in a Windows 7 32 or 64 bit environment, do you have to elevate the user account to one with adminstrative rights and, if so, how?
    My second question is, is there anything in the Windows 7 user account setup that would specifically target the Premiere Elements Project Archiver/Archiver "Trimmed" as well as Copy options to abort with the message "no user privileges to perform this operation"? The rest of the program performs OK. Supposedly inadequate hard drive space is not a factor.
    Thanks for any insights into these two questions.
    ATR

    SG
    Just an update to the question that I presented when I started this thread.
    You really never did say what type of a User Account you are using in your Premiere Elements 8.0/8.0.1 on Windows 7? But based on the information provided by several users, User Account with Administrative Rights seems to be the way to go since all of them were using it and had systems that were running well. I would have expected that based on the Premiere Elements Windows XP requirements. I have yet to have someone come forward to say that they are using Premiere Elements 8.0/8.0.1 on Windows 7 with a User Account with Standard Rights and the program is running well. Will you be that one?
    Besides me switching from Windows XP to Windows 7 in the near future, what motivated this line of questioning was the report that I had seen of a user with Premiere Elements 8.0/8.0.1on Windows 7 who was reporting "permission" error messages when trying to archive a project with the Project Archiver (Archiver "Trimmed" and Copy options). Further questioning brought out that the problem extended to the AutoSave feature as well. The user claimed to be saving to an external hard drive (formatted NTFS) with about 800 MB free space. And still further questioning brought out that the error message included a free space and/or permissions error. Yes, there were extremely large file sizes involved here (way over 4 GB)
    The story had a happy ending where the remedies were:
    1. User Account with Administrative Rights
    and the major
    2. Formatting the thought to be NTFS external hard drive from FAT32 to NTFS.
    ATR

  • File permissions: how do they work?

    Hi everybody,
    I've noticed a few posts on the forum here about file permissions, and it's made me quite curious. I'd really like to know how that works, and I have a few questions I hope somebody can answer.
    1. When you set a file's permission, say, canRead() is false, does that mean a human can't read it, the system can't read it, the JVM can't read it, or some combination of those options?
    2. Is it possible to set canRead() to false for a file contained in a jar so only the JVM can read it? (I guess that's kind of an offshoot of the first question)
    3. Are the canRead() and canWrite() functions some kind of lock on the file, like a password, and can they be overridden by a user?
    I think that's everything. If I think of anything else I'll probably post it, but for now if anyone can answer these 3 questions (or even one of them), I'd really appreciate it.
    Thanks!
    Jezzica85
    Message was edited by:
    jezzica85

    http://java.sun.com/j2se/1.5.0/docs/api/java/io/File.html
    Read the descriptions for canRead() and canWrite() for yourself. If I tell you you'll know what I said if you read it for yourself you'll know.
    PS.

  • How to set up user account and share folders

    We are a family of four sharing our first iMac. I would like to set up one account for my wife and I and one account for my kids on which I plan to enable Parental Controls.
    I have struggled with setting up my kids user account. After setting up a Standard account for the kids - I noticed none of our music or files were visible in the kids accounts. I spent 20 min on the phone with Apple and the tech was clueless. He had me copying my music folder all over the computer until I had about 6 copies of the same folder. I did figure out how to move the music library to SHARED folder and redirect iTunes source folder to the same shared folder.
    My problem now - when I copy my documents to the SHARED folder my kids can see the files and open them, but they can not save them. How do I give the kids account read write privileges?
    Should I set up a GROUP account instead?
    I need the best way to have two or three users who can access all data on the same iMac, while giving me the ability to enable Parental Controls on the accounts.

    Do this:
    Here's how to set it up by using ACLs:
    1. Create a new folder in /Users/Shared. Call it "Sharefolder".
    2. Log in to an Admin account, open Terminal and paste in all of this at the same time:
    chmod -R +a "everyone allow delete,chown,list,search,add_file,\
    addsubdirectory,delete_child,file_inherit,directoryinherit" \
    /Users/Shared/Sharefolder
    That will automatically make everything copied or created to the sharefolder writable by all users. Note: After setting this up, if you have existing files that you want to move to the sharefolder, hold down the option key when dragging them in. That will make new copies of them in the sharefolder. Dragging existing files in (i.e. simply moving them there) won't cause the ACL to inherit properly and they won't be writable by all users. Files that are copied or +newly created+ in the sharefolder shouldn't have this problem.
    Make sure you keep good backups. One user accidentally deleting a shared file will affect everybody else who uses it.

  • PowerPoint file won't open under one user account, but does under another account

    Hello,
    I have a 10.9.5 macbook pro here that will not open a Powerpoint file under one user account. It is up-to-date with Software updates and Office 2008 is up-to-date as well. When I try to open the PowerPoint file, I get the message, "PowerPoint closed unexpectedly" and I can choose to Reopen (which opens a blank presentation) or OK (which closes PowrPoint). I have tried double-clicking the file from the Desktop where is resides, File --> Open from within PowerPoint and also saved it to a flash drive and tried opening from there. It does open under the admin account on the same machine and it will also open on other machines. Other PowerPoint files are opening fine...it's just a problem with the one file. The user has Read & Write privilege to the file. I tried Repairing Disk Permissions, I have tried deleting microsoft plist files, and lastly, have re-installed Office 2008. At this point, I can only think to try deleting the user account and re-adding it, but wanted to see if anyone had any ideas before I go that route.
    Thanks in advance for any suggestions!

    Back up all data before proceeding.
    This procedure will unlock all your user files (not system files) and reset their ownership, permissions, and access controls to the default. If you've intentionally set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it, but you do need to follow the instructions below.
    Start up in Recovery mode. When the OS X Utilities screen appears, select
              Utilities ▹ Terminal
    from the menu bar. A Terminal window will open. In that window, type this:
    res
    Press the tab key. The partial command you typed will automatically be completed to this:
    resetpassword
    Press return. A Reset Password window will open. You’re not going to reset a password.
    Select your startup volume ("Macintosh HD," unless you gave it a different name) if not already selected.
    Select your username from the menu labeled Select the user account if not already selected.
    Under Reset Home Directory Permissions and ACLs, click the Reset button.
    Select
               ▹ Restart
    from the menu bar.

  • How to retrieve guest user account backup

    I have an iMac and a time capsule.  A large number of pictures were loaded into I Photo in the guest account of my iMac.  I cannot now find these pictures as I understand that guest accounts are wiped clean each time the guest account is lodged out from.
    Given that we did not log out from the quest account for a couple of days, i am hopeful that the guest account was backed up by time capsule.  I cannot find the guest account on the backed up time capsule.  Does anyone have any suggestions whether TC backs up the guest account and if so, how can I locate it in TC.
    Thanks very much.  David

    Did you have the main account logged in as well as guest at the time? Do you have TM setup in the guest account?
    It is very unlikely TM backed it up. If it did simply mount the sparsebundle in finder and go through all the folders until you find the guest user account and check if there is anything there. If not sorry it was never backed up.
    The only solution I can see if to use a recovery software for the camera. Whatever source of the photos was.. stop using the memory card in that camera now.. use the recovery software as the files will be there until overwritten for the next lot of pictures.
    Pondini has all the info for recovery of files from TM.
    See Q15 here. http://pondini.org/TM/FAQ.html
    There is a section for iphoto.. but IMHO it won't be backed up.

  • How to merge two user accounts?

    I have two user accounts I would like to merge into one. What would be the easiest way to go about doing this? I am mostly concerned about moving files, including preferences files, handling the mail accounts and browers bookmarks shouldn't be too troublesome for me.
    Thanks

    My favourite way to move files from Account A to Account B:
    1) Log in to the A account.
    2) Locate all the files you want to move. Move them to /Users/A/Public. Note: Don't move any System-created top-level folders, like Documents, Pictures, Music, Movies, etc. Just move their contents.
    3) Log in to the B account.
    4) Navigate with Finder to /Users/A/Public. Drag the files to the Desktop. This will make new copies of them that will have the correct permissions for User B.
    5) Put the new copies of the files away in the appropriate places in B's home folder.
    6) Delete the A user account if it is no longer needed.
    Doing it this way will ensure that there are no permissions headaches with the files after they are moved.
    Also, make sure that you BACK UP all of your data before starting.

  • How to move my user account to new SSD?

    I just received my new mid-2011 27" iMac with the 1TB HDD and the 256GB SSD.  It came from the factory with the /Users directory on the SSD, which is not a good idea (at least for me) due to the size of my iTunes library, movies, documents and other stuff.  Can I move /User/"myUserAccount" from /Volumes/Macintosh HD to /Volumes/Macintosh HD 2 (as the HD is named)?  Surely this is possible, but I don't know the correct way to do this.  Any help would be appreciated.  And if anyone has general advice on how to properly use the SSD I would appreciate that too. (Stuff like what to put where, etc.)
    Thanks!

    Leave your user account's alone!!!!!! All you need to move are the data files. What takes up a lot of space is music, photos & movies. If you move those libraries to your internal HD that will take care of things for you. Here are Apples instructions for moving them to external HD's however you can use your internal HD the same way.
    iTunes: library on EHD
    iPhoto: How to move the Library to EHD
    Roger

  • After using migration assistant, how do i consolidate user accounts?

    After I transferred my data from my old pc, I now have two users accounts set up.  How do i consolidate all the data into one account?

    Transferring files from one User Account to another

  • How do I remove user account with UID=0 (except of root)

    Macbook Pro 13; I have Parallels software and did not realize I needed to upgrade to version 10 before upgrading to OS X Yosemite.  I get an error stating Parallels 10 cannot be installed because there is a user account other than root that has UID=0.  I checked UIDs in Terminal Utilities and there is one other username with UID=0  How do I remove username peggy?
    MacBook-Pro:~ pmcvicar$ dscl . -list /Users UniqueID
    _amavisd                83
    _appleevents            55
    _appowner               87
    _appserver              79
    _ard                    67
    _assetcache             235
    _astris                 245
    _atsserver              97
    _avbdeviced             229
    _calendar               93
    _ces                    32
    _clamav                 82
    _coreaudiod             202
    _coremediaiod           236
    _cvmsroot               212
    _cvs                    72
    _cyrus                  77
    _devdocs                59
    _devicemgr              220
    _displaypolicyd         244
    _distnote               241
    _dovecot                214
    _dovenull               227
    _dpaudio                215
    _eppc                   71
    _ftp                    98
    _geod                   56
    _iconservices           240
    _installassistant       25
    _installer              96
    _jabber                 84
    _kadmin_admin           218
    _kadmin_changepw        219
    _krb_anonymous          234
    _krb_changepw           232
    _krb_kadmin             231
    _krb_kerberos           233
    _krb_krbtgt             230
    _krbfast                246
    _krbtgt                 217
    _launchservicesd        239
    _lda                    211
    _locationd              205
    _lp                     26
    _mailman                78
    _mcxalr                 54
    _mdnsresponder          65
    _mysql                  74
    _netbios                222
    _netstatistics          228
    _networkd               24
    _nsurlsessiond          242
    _nsurlstoraged          243
    _pcastagent             55
    _pcastlibrary           225
    _pcastserver            56
    _postfix                27
    _postgres               216
    _qtss                   76
    _sandbox                60
    _screensaver            203
    _scsd                   31
    _securityagent          92
    _serialnumberd          58
    _softwareupdate         200
    _spotlight              89
    _sshd                   75
    _svn                    73
    _taskgated              13
    _teamsserver            94
    _timezone               210
    _tokend                 91
    _trustevaluationagent   208
    _unknown                99
    _update_sharing         95
    _usbmuxd                213
    _uucp                   4
    _warmd                  224
    _webauthserver          221
    _windowserver           88
    _www                    70
    _xcsbuildagent          237
    _xcscredserver          238
    _xgridagent             86
    _xgridcontroller        85
    daemon                  1
    deputydebi              504
    Guest                   201
    nobody                  -2
    peggy                   0
    pmcvicar                501
    root                    0
    MacBook-Pro:~ pmcvicar$

    BobM53, That would be needed regardless of what front end my users log in with, in my case I was looking for them to access the DIT via the DSCC/DCC, which is not possible.  Regardless, thank you for your reply, it is reassuring to know I am headed in the right direction.
    I am now looking towards installing something else like Apache Directory Studio, or some other GUI for users to manage the directory. 
    I will most likely create one or more ACI's to build groups, adding members to those groups as needed; each group being allowed to perform functions such as create users, lockout users, add/modify hosts, etc.
    I will most likely follow the steps outlined in:
    Directory Server Groups, Roles, and CoS - 11g Release 1 (11.1.1.7.0)
    Slightly OT, does anyone have a suitable and similar proven method to "lockdown" root accounts, and who has root access?
    Thank you

  • How to copy a user account from one Mac to another

    If I have a main user (admin) account on one Mac, and want to copy its Home Folder over to another Mac that already has user accounts on it, what is the best way to do it?
    For example, if I boot the source Mac in Target Disk Mode then connect it to the other Mac, can I just drag and drop from its Users folder into the Users folder on the other Mac? And would that then appear in SysPref/Accounts, complete with names and passwords etc, or is it not that simple?
    (Actually, I just checked by launching Migration Assistant, and it seems to indicate I can use it to copy User Accounts from a different Mac - is this all I need? How would I connect the two Macs for this to work?)

    Slightly confusing, that article - it talks about using Migration Assistant in Lion or Mountain Lion, but in my case both computers have used Snow Leopard. Does it still apply?
    (One other observation - don't you find it confusing the way Apple defines "Target Disk Mode"? It's pretty much always the case that a computer booted in this way becomes the Source computer, while the Target computer is the one it's connected to!!)

Maybe you are looking for

  • FILES FROM MULTIPLE DIRECTORIES

    Hi Experts,                 I got a doubt here plz clarify it     1.How can we pick files from multiple directories ? and all the files will have different  names?                 Plz clarify this, good explanations willbe rewarded .                 

  • Variables in BO designer

    Hello my dear SDN Friends . Please help with this Integration BO from BI . I have a field employee Name which comes from BI Table i just want to create a variable for employee name so that user can put the emp name as mandatory. Can u exactly tell me

  • Lost settings icon on upgrade

    I lost my settings icon when I upgraded my new I phone 4. I was not at home, I did not back up on my computer. I do not have any search options. I have checked every folder multiple times, it no longer exists. Is there somewhere online I can reinstal

  • Error in Verifying Livecycle Server in LCM

    Hi I am getting the following error while I try to verify the Livecycle server settings. Please help me in this regard. ALC-LCM-200-001 Failed to connect to LiveCycle ES service container. Service container information or login information may be inv

  • Firefox Adobe Acrobat 10.1.13.16 to Adobe DC Problem

    Hi All, Im using firefox with Adobe 10.1.3.16 and Firefox is telling me that, that plug in is out of date, vulnerable and needs to be updated. I have uninstalled version Adobe Reader X 10.1.13 and have been brought to a adobe acrobat reader DC downlo