File Sharing to Non Admin Users ?

I would like to share directories on an external Firewire drive to other Apple network users. Normally only users with admin privileges can 'see' external drives. My unix is pretty rusty but I've been told that you can set the ownership to 'everyone' ? and allow non admin access to the external drives (directories). Can anyone confirm this ?

Yes, but a safer bet is to use Sharepoints, which sets the file permissions in a far more controlled manner.
Matt

Similar Messages

Allow Non-Admin Users Update Software Installed In Their Computers

Hello All;
At our location, we have several users who are not always in the office. In some instances, the imac or macbook pro ask for several updates such as Office 2011, and Adobe CS 5 and 6. And, the second issue, these users are not part of the administrator group or ever will be the administrator of their computers.
Is it possible to adjust the authorization file to allow non-admin users to run these sort of updates?
or
Is there a product on the market that can push updates to all these different programs?
Thanks Kindly

Is there a product on the market that can push updates to all these different programs?
Apple Remote Desktop, for one.

Permission Error when copy files into cmsdk using NFS with non admin user

Hi All,
We are using CMSDK with NFS protocol and we have created different users with ACL to control different access for users.
When we copy files into cmsdk folders using one of the admin user this works fine, even a multiple copy works fine. But when we use any non admin user , some time copy commands works but some time it throw a permission deny error. and this is happening very intermittently.
when we use ftp protocol and ftp file it's all works fine for the both admin & non admin user. Is there any limitation in using CMSDK NFS protocol
Did any one encouter any similar issue. Any pointers would be of great help.
Thanks in advance
Regards,
Navin

Hi All,
We are using CMSDK with NFS protocol and we have created different users with ACL to control different access for users.
When we copy files into cmsdk folders using one of the admin user this works fine, even a multiple copy works fine. But when we use any non admin user , some time copy commands works but some time it throw a permission deny error. and this is happening very intermittently.
when we use ftp protocol and ftp file it's all works fine for the both admin & non admin user. Is there any limitation in using CMSDK NFS protocol
Did any one encouter any similar issue. Any pointers would be of great help.
Thanks in advance
Regards,
Navin

Using mms.cfg file to enable Autoupdate for non-Admin users

I need help in getting this to work. So far it does not.
Adobe Flash for windows 17.0.0.23
Windows 7 Enterprise - 5000 systems
Users are not administrators on systems.
The Non admin user gets prompted with a screen ( we do not want any prompts)
Then the install fails because they are not an administrator.
My mms.cfg file:
AutoUpdateDisable=0
AutoUpdateInterval=1
SilentAutoUpdateEnable=1
How do I use this or any other method to have Adobe Flash update automaticly for all users including non-admins
and give no prompts?
What are the next steps. Is there an enterprise support site or method to use for mass distributions for Flash?
Please Get back to me today before 12:00 EDT 13 Apr 2015.
Gary Pearson
401-233-6898

Hi garyp81126656,
The current mms.cfg file configuration will perform either a notification update or a background update. There are a few options to update non-admin users:
Host the background update resources locally. When using the Adobe servers for background updates there is no way to disable notification updates. By hosting the background update resources locally users will never be prompted to update.
Disable updates and deploy Flash Player updates via SCUP, SMS, or Group Policy.
You can find the various deployment options are listed in Chapter 3 of the Flash Player Administrator's Guide. The Admin Guide also contains information to license Flash Player for distribution within your organization, which is a requirement for any of the deployment methods described in the Admin Guide. Additional information is available at An outline of Flash Runtime installation options
Maria

Multi-user system, non-admin-users get "error 46" when downloading quicktim

Thanks in advance if you have some idea about where the root cause is.
Error message:
"Error 46: Could not load or find the QuickTime ActiveX control."
Context:
- WinXP SP2 fully patched (as of 06/20/2006)
- Multiple users: 1-Admin, all others a member of the Users group
- Simple File Sharing is enabled (this problem does not change when this option is disabled)
- iTunes 4.9.x and QuickTime 7.1 installed
- Programs have been uninstalled and reinstalled several times, with no change
Symptoms:
- All system users can view quicktime movies when they are embedded in web pages.
- Administrator can launch quicktime and view *.mov files, all others get Error 46 (see above) when attempting to launch quicktime or double-clicking on .mov files
- File association properties (under Contorl Panel | Folder Options | File Types) shows .mov opens with QuickTime Player (deselecting this displays WMP as the application)
- Users Browsing to a directory where .mov files are located, displays the WMP icon instead of quicktime (as under folder options)
This all used to work. It appears that this became broken in the last month or two, after either patching XP, or installing QuickTime 7.1 to gain H.264 codec functionality.
Is there a guaranteed way to force system wide file assoc that is reliable?
Is there a tool that parses the registry and displays what activeX controls are in use for a particular system operation?
Thank you!
Windows XP Pro
Windows XP Pro

Fixed this using http://www.sysinternals.com/Utilities/Regmon.html and regedit.exe.
On my system, found that non-admin users were being denied access to these registry keys:
HKEYCLASSESROOT\QTOControl.QTControl
HKEYCLASSESROOT\QTOControl.QTControl.1
fix (both): add group users: read
That's because the non-admin accounts are members of the "users" group on my system. You may need to adjust this to match what is on your system.
Regedit can modify these permissions (but don't do it unless you are confident you can recover if you cause a problem). An easy fix, once the problem is identified. Some of you have already figured this out already.
Use regmon to get comfortable with how it works, make sure you grok the filtering, it's your friend.
Modifying the registry at your own risk. Remember to use a registry backup utility! I used http://www.fixregistry.com/download.htm "Registry Healer"
All non-admin users are operational at this time. I did not have to update iTunes and H.264 content works!
So it looks like this is a bug in the QuickTime 7.1 installer? Anyone have any insight about why this is happening with some regularity (at least according to the message board posts I'm seeing this month...)
Maybe the info is some help,
gwG
Windows XP Pro

A Solution for Enabling Sandbox activation by non admin users for testing (OIM 11gr2 PS2)

I just wanted to post what i came up with as a solution the the problem of not being able to Test the effects of sandbox changes for non admin level users prior to their publication. We are constantly making changes to the UI through sandboxes, the problem is rolling a sandbox back isn't easy, and we cannot be sure of the effects they will have on non administrative users until they are published, since the out of the box sandbox link isn't available to non Sysadmin level users.
To allow these non admin user accounts to test the effects of sandbox changes in our development environment, I did the following (as always, follow at your own risk):
Create and activate a new sandbox.
Close all open tabs (including the Home and Sandbox tabs) and click the "Customize" link.
Click the view -> source drop down in the upper left.
After the source is visible, click the Accessibility or Sandbox link to find the area that you will add the new "UserSandboxTest" (call it whatever you want) link.
Add a new commandImageLink directly in the panelGroupLayout: horizontal item before the "switcher" item (see the UserSandboxLink in my screen shot below):
Edit the Link you just inserted, Entering whatever you want the link to display as in your browser in the "Text" field.
Export the sandbox.
Unzip the exported sandbox and navigate to the IdmShellV2.jspx.xml (path should be: \templates\mdssys\cust\site\site).
Edit the IdmShellV2.jspx.xml file and find the new item you added in step 5.
Add the following to the commandImageLink xml item: actionListener="#{pageFlowScope.uiShell.context.launchSandboxes}" rendered="#{oimcontext.currentUser.roles['SANDBOX_USER'] != null}". Note: I used a new custom enterprise role, SANDBOX_USER, to control the display of the new link, You should substitute whatever EL conditions you need in the rendered property.
Save your IdmShellV2.jspx.xml file and zip the contents back up, just like you would for any other customization.
Import your newly edited sandbox back into the target environment.
Publish the sandbox.
This seems to work great for allowing us to test other sandbox changes effects on different types of users.

On step 10, adding the check to determine if the user should have access to the role ended up breaking access to the unauthenticated pages like the self registration page and the forgot userid/user login pages. Non-authenticated users cannot execute the method to return the role, so that fails which leaves the page not loading. To correct this I changed the rendered property to rendered="#{securityContext.authenticated}". This prevents the link from displaying on non authenticated pages, but displays for anyone else who's logged on. We only plan on using this in our development environment where no one but developers and system admins have access anyway, so it's not an issue that everyone will see the link. I wouldn't recommend putting this in an environment where end users will be logging in and testing without developing a method (or finding another way to limit the display) that can be called by unauthenticated users to prevent them from seeing the link.

Is there any way to prevent non-admin user accounts to receive software update prompts?

I am the admin account user on our MacBook Pro, and there is one standard user account on it as well. Generally we are both logged on so we can quickly switch between user accounts and 'spin the desktop'.
For some reason, all the software update notifications seem to be received when the standard user account is the active one.
I know that the standard user cannot actually update without my account password and my Apple ID, but a) The notifications confuse the non-admin user, and she gets flustered, and b) Even if she manages to cancel them from the notification area, she then has to remember to tell me verbally that she had had one.
Is there any way to stop her receiving the update notifications altogether?
Running OS X 10.8.2 on MacBook Pro.
Thanks in advance.

You should be able to do this by unchecking the software update service in the system preferences to prevent the system from running the check as the "_softwareupate" user and passing it to the notification service that broadcasts to all user accounts. Then you can check for the software update in an admin account using the following Terminal line:
/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck -Check YES
This line can be scripted via Terminal services to run on a schedule (ie, every few hours), and if there are found updates it will launch the App Store for that account and present them. Granted this approach circumvents the notification service, but should work. To try this, open TextEdit on your computer and in a new document choose "Make Plain Text" from the Format menu.
Then copy and paste the following text into the new document:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
          <key>Label</key>
          <string>local.softwareupdatecheck</string>
          <key>ProgramArguments</key>
          <array>
                    <string>/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck</string>
                    <string>-Check</string>
                    <string>YES</string>
          </array>
          <key>StartInterval</key>
          <integer>21600</integer>
</dict>
</plist>
When done, save the document to your desktop as "softwareupdatecheck.plist" or anything as long as it ends with ".plist." Then get information on the file in the Finder to ensure its name ends with plist and not anything else like "plist.txt" (rename it accordingly in the Info window's "Name & Extension" section.
With the file name appropriate, hold the Option key and choose the "Library" option in the Finder's "Go" menu. Then locate the folder called "Launch Agents" in the library and drag the text file to this folder. Then log out and log back into your account.
This text file is a launch agent script that instructs the system to run the program arguments every 21600 seconds (6 hours) whenever the user is logged in. The program arguments here are simply those to check for software updates for the system. You can change this time interval to be any number of seconds you would like, but there are other options to use besides the "StartInterval" key for scheduling the task. This approach simply has it repeat every number of seconds, but you can use other options to have it only run on specific hours or days, or only have it run once when you log in, etc.
If this works for you, then if you'd like to explore these other options write back here and we can go over them for you.

JDK 1.6 u12 installation on Windows XP as non-admin user

I am working on a machine which does not grant my user the admin rights. I had wanted to use JDK with Netbeans. The Netbeans was available as ZIP file, but it required pre-installed JDK. I am not able to install JDK (latest version 1.6 u12) as non-admin user. Is this even possible and how?
Operating System : Windows XP (SP3)
JDK Version : 1.6 update 12
User : Non-Administrator
Thanks,
Akbar.

Contact your admin and ask him to install or to give you local admin rights.

Not able to install ActiveX (OCX) on Non-Admin user in Windows 7 ( internet Explorer 8/9)

I need the solution to install ActiveX controls throught CAB file (Micorsoft Cabinet) for non-admin users. Our solution is working for user accounts with adminstrator rights but not for nonadmin users.
So far we have tried solution given here: http://msdn.microsoft.com/en-us/library/dd433049(v=vs.85).aspx
and here:
http://blogs.msdn.com/b/askie/archive/2012/09/27/guidlines-on-implementing-activex-installer-service-axis.aspx
But we could not succeed. Pls Help !

Hi,
Apologize for the late reply and the misunderstanding about the ActiveX download location, we could change the location through the below registries:
Use Registry Editor to change the "ActiveXCache" value to the location you want in the following registry key:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Use Registry Editor to change the "0" value to the location you want in the following registry key:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ActiveX Cache
   NOTE: The values you enter in steps 1 and 2 must match.
More information, please check
How to Change the Download Location for ActiveX Files (registries exists in IE11).
Regarding the urls that download the cab files into user profile directory, would you mind to share the URL?
And here is some information regarding inf files:
About INF File Architecture
We may check the value of DestDir, DestDir can be set to 10 to place the file into the \Windows directory or to 11 to place the file into the \Windows\System directory. If no value is specified, the file is placed into the \Cache directory.
Best regards
Michael Shao
TechNet Community Support

Majority of reports missing for non admin users

I have followed the instructions here (SCCM 2012–Reporting in console for non-admins (Reporting User Role) v2) to allow non admin users the ability to view
reports in the console. So far, so good. However, when viewing the reports with the non admin user, only about 100 of the 400+ reports appear.
Am I missing something here?

The custom reporting one in the link I provided, and also modified versions of the following:
OS Deployment manager (removed rights to All driver related items (drivers and driver packages), Boot image packages (except read access), Operating system installation packages).
Application Administrator (removed Application>Approve; Distribition Point>Set Security Scope; Distribution Point Group>Set Security Scope; Global Condition>Set Security Scope)
The reports missing we care about primarily are Software ones (companies and products and files).

Borland C++ Delphi application is not able to connect to SQL Server as Non Admin user

Hi,
I am working on a Borland C++ and Delphi application. This application connects to SQL Server and returns database queries results. Once we migrated to windows Server 2003 we have started facing an issue.
1. IF we login to client application as admin user then this connects properly with SQL Server and returns database queries.But if we connect using Non- Admin users then application is not able to connect SQL Server.
SQL Server 2008
Windows Server 2003.
Can anybody help on this.
Thanks in Advance.
Rakesh

This application is written in Borland C++ and Delphi running on Windows 2003 Server. This is a Windows GUI based small tool. Basic functionality of the tool is : 1) Once we invoke the tool it connects to DB(SQL Server 2005) and populates a list of
all the tables present in DB. 2) If we select any table from the list populated in step (1) and provide query parameters, this will return results from Database.
Issue: IF we login to the Windows machine as Administrator this application runs perfectly .This application populates the DB tables correctly and returns results from database when queries executed as in step (2)
But if we login as some other user (like hubapp) then this populates some different set of table which are not from the same database instance .Also the queries does not return any results. In the logs we get following error message : (TiltData is the instance
name for our Database)
Msg:Application Exception : Cannot locate or connect to SQL server.Unable to connect: SQL Server is unavailable or does not exist. Specified SQL
server not found.Alias:
TiltData1 occurred in main thread.
As for the connection string
'DATABASE NAME=tiltdata'
'SERVER NAME=SDV3'
'USER NAME=sa'
'OPEN MODE=READ ONLY'
'SCHEMA CACHE SIZE=8'
'BLOB EDIT LOGGING='
'LANGDRIVER='
'SQLQRYMODE=SERVER'
'SQLPASSTHRU MODE=NOT SHARED'
'DATE MODE=0'
'SCHEMA CACHE TIME=-1'
'MAX QUERY TIME=300'
'MAX ROWS=-1'
'BATCH COUNT=612'
'ENABLE SCHEMA CACHE=FALSE'
'SCHEMA CACHE DIR='
'HOST NAME='
'APPLICATION NAME=QueryTool'
'NATIONAL LANG NAME='
'ENABLE BCD=FALSE'
'TDS PACKET SIZE=65535'
'BLOBS TO CACHE=64'
'BLOB SIZE=32'
'PASSWORD=jstart')
Any help is appreciated. I have spent a lot of time on this issue with no results.
Regards
Rakesh

Rights of a non-admin user

When I install an application being an administrator, is the non-admin user able to modify anything in the new program folder?
Vice-Versa: When I install an application which needs authentication being a non-admin user. Is this non-admin able to modify the program folder after installation with no authentication?
To what security risks may I be exposed to when I always use a non-admin account? What can a script or application do?
Can it cause code injactions or change my startup folder or anything unwated else(like hijacking my Safari or log my passwords)?
Regards, Clemens

the /Applications folder is only writable by administrators. Anything put inside cannot be modified by a non-administrator unless that non-administrator has been specifically given write access.
To what security risks may I be exposed to when I
always use a non-admin account? What can a script or
application do?
A script or application running under non-admin can only modify files that are writable by that user; i.e. the contents of the user's home folder and not much else.
Can it cause code injactions or change my startup
folder or anything unwated else(like hijacking my
Safari or log my passwords)?
Most of what you have listed are admin tasks; they can only be accomplished with an admin account, or from a non-admin account after admin authentication.
As far as password logging, a malware running under a non-admin account could theoretically install a keyboard logging app inside your home folder, and transmit your keystrokes out without your knowledge. That's why it's important to practice safe computing even when running as non-admin.
OTOH, a malware running under a non-admin account couldn't modify any existing applications to do this, whereas the same malware running under an admin account could. This is one more reason to save your admin account for tasks that need it and do everything else from a non-admin account.

How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

Hi all,
I have a company (+150 users) and I would like to allow users to update Java, FLASH and Adobe Reader only.
These software are already installed in the hosts, but there are updates of the program every week and it needs to be updated.
How can I give permissions to every user in the domain to do that? Just "Java, FLASH and Adobe Reader"
Remember that I dont want distribute software because they were installed.
I tried to enable "Enable user to patch evelated products" directive but it didn't work at my domain.
is it possible?

I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself. To automate flash player, I created a Policy and added the following:
Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
I used notepad to edit the mms.cfg, and used the following in the body:
AutoUpdateDisable=0
SilentAutoUpdateEnable=1
AutoUpdateInterval=0
My non-admin users now update flash in the background silently and automatically.

Allowing non-admin users to use certain programs without authenticating

I would like to allow certain programs to be run by non-admin users without forcing them to authenticate as an admin. Here is my example: I'm running Parallels Desktop with a VM to Windows. I want to allow my children to use this VM to access Windows programs. But, when starting a VM, the Mac OS requires an administrator to authenticate. Needless to say, I don't want my children to be administrators on the machine. I've been assured that this is not an issue related to how Parallels works (from the support team at Parallels). Instead, this is an issue with the Mac. i'm not sure one way or the other, but it seams useful to be able to (in general) allow non-admin users to use certain programs without forcing them to authenicate as administrators.
There is only one summary in the Mac help on allowing non-admin users to change the time zone settings by directly editing the /etc/authorization file. Does anybody know if this procedure would work for other programs?
Thanks!

If you know what the requested right is, that procedure can be applied to any right in an application with a graphic interface by duplicating and modifying entries. The contents of that file don't control usage of sudo in the Terminal.
(25922)

We have non admin users on Windows 7. They change the homepage and it works for that session. When they close the browser, and restart it again the default homepage is shown.

Windows 7 Sp3. Using Firefox 7.01
Non admin users.
Can change homepage to whatever they like and it will work.
BUT when they close firefox and open it again the home page goes back to default setting

Update.
This looks to be a mozilla.cfg setting. If I take out the pref("browser.startup.homepage","ourwebpage");
it loads the basic firefox "FirstPage"
How do I get around adding a default homepage that can be changed by the user?
I have tried adding
defaultPref.. .. then the webpage info.. BUT it retrurns a Failed to read the configuration file. Please contact your system administrator.
Do I need to create a prefs.js file?
And if I do how do I get it to work for each new user that logs into that machine?

File Sharing to Non Admin Users ?

Similar Messages

Maybe you are looking for