File Vault Useless when Other User Has Full Admin Rights?

Question:
I'm about to send my MacBook Pro in for service. I've backed it up to a bootable clone, but I'd still rather not erase all my stuff, in case they send it back as-is (they do sometimes do that if they don't have to reinstall OSX).
So, I've given the guest user account full admin privileges on this machine and created it without a password so the AppleCare boys can do what they need to do.
My question is, is my account secure if it is password protected and encrypted with File Vault?
Or, if somebody was feeling malicious, couldn't they just reset the password for my account in the guest account preferences or create a new master password for the machine, since the guest account has full admin rights?
Thanks for any quick answers!

Hi bscepter;
If you are that paranoid about your data, the best
thing for you to do is to remove it off of the
machine before you send it in.
Allan
I'm not "that paranoid" about my data. I was merely curious if File Vault would protect my data should somebody with another admin account want to access or delete it. I mentioned this in my initial post.
But thanks, anyway.

Similar Messages

Diffculty downloading JRE version if user has no admin rights on the box...

If you try to load in your own JRE version using the j2se tag in the JNLP file, and you dont have Admin Rights on the computer, java webstart client will give you the following error:
The application has requested a version of the JRE (version xxxx) that currently is not locally installed. Java Web Start is unable to automatically download and install the requested version. This JRE must be installed manually.
The underlying reason for this, is because the user doesnt have admin rights, the Java Control Panel->Advanced->JRE Autodownload option is set to Never AutoDownload, where as with a user with admin rights this option is set to Always AutoDownload. Once you switch this to Always AutoDownload, the JRE version is loaded correctly as specified by the j2se tag in the JNLP file.
Is there any way to set this option programmatically, or via the JNLP API? Any other suggestions on how this can be done?
Thanks,
Amado

odama94 wrote:
..Is there any way to set this option programmatically, or via the JNLP API? If there was a way, it would be a security bug.
.. Any other suggestions on how this can be done?Talk to your System Administrator.

User has system admin rights but...

hi
i have given another user System Administrator rights, but he cant view other users requests when he try to find requests, except his own
EBS 12.1.3 (2 nodes)
Windows 2008 Server Enterprise SP2 on both nodes
Regards

plz see notes by Hussein Sawwan
profile option is obsolete in R12

How do I sign my VB / VS 2010 based shared COM add-in for Excel so it loads when the user has checked "Require application add-ins to be signed by a trusted publisher"?

My COM add-in is developed using VS 2010 and VB. It's a shared COM add-in (not VSTO) and it works with Excel 2007 - 2013. My installer is signed with a code signing certificate but it would appear that my add-in's .dll should also be signed if the user has
checked the "Require application add-ins to be signed by a trusted publisher" option.
The "Sign the assembly" option is checked in my add-in's VB -> My Project -> Signing. I have a .snk file selected which I seem to recall generating 6 or 7 years ago when I ported the COM add-in from VB6 to .NET.
I have an up-to-date Comodo code signing certificate (a pfx file called MyCompanyCodeSigningCertificatePrivateKey.pfx) which I purchased to use with the installer and was wondering if and how I could use this.
I tried selecting my pfx file in the My Project -> Signing -> "Choose a strong name key file" dialog. It made a copy of the pfx file in my project folder but when I tried to build the project, I got the following error:
Error 1 Cannot import the following key file: MyCompanyCodeSigningCertificatePrivateKey.pfx. The key file may be password protected. To correct this, try to import the certificate again or manually install the certificate to the Strong Name CSP with the
following key container name: VS_KEY_C0B6F251F0FB6016
After a little research, I found out I might be able to use signtool to sign the dll in a post-build step.
I added the following command to the post-build event, before the command I use to regasm the assembly.
"path to signtool\signtool" sign /f "MyCompanyCodeSigningCertificatePrivateKey.pfx" /p "xxxx" /v "$(TargetPath)"
When I built the project, the dll appeared to get signed (the output window showed a bunch of confirming text as well as "Successfully signed: c:\MyAddIn\bin\Release\MyAddIn.dll") but the next step in the post-build (regasm myaddin.dll /codebase)
issued a warning RA0000 (see below) but reported "Types registered successfully".
Here's the message I get from regasm, even though the output window says the dll was sucessfully signed:
RegAsm : warning RA0000: Registering an unsigned assembly with /codebase can cause your assembly to interfere with other applications that may be installed on the same computer. The /codebase switch is intended to be used only with signed assemblies. Please give your assembly a strong name and re-register it.
Types registered successfully
I'm not using a shim if that makes a difference.
How do I sign my add-in so it loads when the user has checked "Require application add-ins to be signed by a trusted publisher"?
Any tips would be appreciated.

Hello,
Why do you need to use the regasm utility from the post-build action?
There is a difference between signing the assembly with a strong name and digital signature. The
How to: Sign an Assembly with a Strong Name article in MSDN explains how to sign an assembly with a strong name (.snk). See
How to digitally sign a strong named assembly for adding a digital signature.
You may also find the
What's the Difference, Part Five: certificate signing vs strong naming article helpful.

Identify when a user has change value in USEREXIT_CHECK_VBAP before saving

I originally posted and closed this question, but I am still struggling with the code.
The req is now to also update the value of VBAP-LPRIO, so I now have to use the Exit : USEREXIT_CHECK_VBAP.
The issue is that my solution must take into account when a user manually overwrites a value and not replace it with a value determined in the user exit.
My problem is that the user might do the following
1 - Create a sales order and enter a new item line, press enter
2 - The user exit is triggered, and I check that XVBAP-UPDKZ = I (user add a new line)
3 - The user-exit determines the new value and populates the field
4- the user then click on the item line, and then manually changes the value of VBAP-LPRIO
5- The user-exit is triggered again, and because XVBAP-UPDKZ = I , my code is triggered and updates the field.
What I want is to identify that a user has manually changed the value and not overwritte the value.
1 - I have check YVBAP and it is blank, as the user has not saved the sales order.
2- The values of VBAP and XVBAP are the same..
3 - I cannot re-read the database (KNVV) table as the user could have populate the value with the same value.
What I need is how to identify when a user has made a change to a field before they save the sales item, as YVBAP is never filled.
Previous post----
Hello,
I am writing a bit of code that will overwrite the payment terms in a sales order item based on a number of factors. (ship-to, incoterms, document type, etc)
I am using the following program MV45AFZB at Exit : USEREXIT_CHECK_VBAP. I am using this exit as the users need to see the payment terms after an item has been entered into the sales order and not have the value determined at sales order save.
I am not using USEREXIT_MOVE_FIELD_TO_VBAP as it is only triggered once at the time of creation and not when I change the document. I need it in USEREXIT_CHECK_VBAP as users could change the incoterms in VA02, so the code must be redetermined.
My code is working as expected, however, I have a problem when a user enters a sales order item line and then manually changes the payment terms, as my code then is over writes the users values.
The flow is as follows
As user creates a sales order
They populate the sales order header
They populate material number and qty
User exit USEREXIT_CHECK_VBAP is triggered and correctly determines the payment terms
The user then double clicks on the sales order item and decides to overwrite the payment terms.
My user-exit is retriggered and check to see if XVBAP-UPDKZ = I (insert)
As it is still an insert, my code triggers.
I have tried to check YVBAP, but no entry exist as it stills is seen as in insert? What I really need to know that while it is still an insert, the user has change the field value and my code should not over write the users value.

When do you need to update LPRIO ? When user makes the change at the Payment terms on line item?
Regards,
Naimesh Patel

How to Find mailboxes a specific user has full access to

Hi,
I have been searching all the threads but all i am getting is user mailbox is accessible to following users. I run this command:
Get-Mailbox -resultsize unlimited | Get-MailboxPermission | Where {(!$_.isinherited) -and ($_.user.SecurityIdentifier -ne "S-1-5-10") -and ($_.accessrights -contains "fullaccess") } | Select Identity,User
It is taking so much time as we have 20K mailboxes. Then i tried this:
Get-Mailbox -server exdm01 -resultsize unlimited | Get-MailboxPermission | Where {(!$_.isinherited) -and ($_.user.SecurityIdentifier -ne "S-1-5-10") -and ($_.accessrights -contains "fullaccess") } | Select Identity,User
It gives me list of those users who have access to mailboxes. But what if i want to see user_A is accessing which mailboxes. we
need to find out which mailboxes user has FULL MAILBOX ACCESS to NOT which users can access this user's mailbox. I hope you will understand, i DONT want the list which MANAGE FULL ACCESS PERMISSION option gives in GUI, but i WANT vice-versa.
We migrated 100 users to different domain, now i want to know these users' association with others' mailboxes.
Hasan

Please check with this
Get-Mailbox -Server "SERVERNAME" -resultsize "Unlimited" | Get-MailboxPermission | where { ($_.AccessRights -eq "FullAccess") -and ($_.User -like "DOMAIN\TESTUSER") -and ($_.IsInherited -eq $false) -and -not ($_.User -like "NT AUTHORITY\SELF") } | ft User, @{Name="Identity";expression={($_.Identity -split "/")[-1]}} -Autosize
Replace "DOMAIN\TESTUSER" with "Yourdomain\Yourusername" to check, which will list the users which testuser has FullAccessPermission on.
@Amit
Apologize for the duplicate posting.
Thanks, MAS
Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

How to find the date when the users has been created in Hyperion Essbase

Please let me know, if there is any option or way to find the date when the users has been created in Hyperion.
Essbase - 9.3.1.0.0
Sun Solaris SPARC (32-bit) - 5.8
If not in Hyperion, could you please let me know if it gets stored in the repository. If yes, please let me know the table name in Oracle.

I don't know of a way of getting this information from Shared Services via the standard web UI. However you can see when a native user was created in openLDAP. If your users are all native then you can use an ldap browser to view the CreateTimestamp.
Port: 58089
User DN:CN=911,ou=People,dc=css,dc=hyperion,dc=com
Password: Your shared services admin user password
You should see each new native user under the ou=People and each CN will have a create timestamp.
I can't help if all you users are external or your using the old Essbase native security.
Gee

Applying filter to 'Other Users' has stopped working (v1.0.0.15.57)

With no apparant reason (or changes to my workstation), the apply filter feature to limit 'Other Users' has stopped working. The problem began on the day that SQLDev failed to display the navigation frame.
I've got the nav frame back, but the filter on 'Other Users' still doesn't work.
Can anyone tell me where the filter entries are stored?
Oh, what's worse, the initial display of 'Other Users' does not include the entire list. Today the 'Show more/All users' failed to expand the list to all users. One of the users not initially displayed owns files to which I need access. (The solution was to stop and restart SQLDev - but that is a pain is the a$$.)

Editing preference files is not supported. Doing so can corrupt the settings and cause SQL Developer to run improperly.
Okay, having gotten that out of the way, let me see if I can help you get this sorted out. The filters are stored inside the preferences.xml file, located under jdev\system\oracle.onlinedb.11.0.0.37.42.
The first step is to back up this file. Once you have done that, you can try to remove the filter info. The preferences in the file are stored as keys and values. Search for the key with the text 'ConnectionOptions'. Under the value element associated with this key, there should be a filterMap element. This element contains all of the navigator filters. Each filter will look like this:
<Item>
<Key><others>@local</Key>
<Value class="oracle.jdeveloper.cm.dt.browser.SchemaFolderFilter">
<filter>
<Item>FOO</Item>
<Item>SYS</Item>
<Item>SYSTEM</Item>
</filter>
<visibleObjectsOnly>false</visibleObjectsOnly>
</Value>
</Item>
In this case, this is a filter on the Other Users folder. To clear the filter, remove the entire item element (that is, delete everything between and including the <item> and </item>.
This should restore the navigator filter back to its initial state (that is, no filter).
Let me know if this doesn't work, and I'll come up with some other things to try.
John McGinnis
SQL Developer Team

BUG: Installer of Internet Explorer 9 breaks Active Setup, if first user logging on has no admin rights

Hello,
I just stumbled across an issue when deploying the Internet Explorer 9 on Microsoft Windows 7 SP1, like many others before me. See here for example:
http://www.butsch.ch/post/Internet-Explorer-9-Setup-Breaks-Active-Setup-of-further-MSI-Packages.aspx
The Internet Explorer 9 setup creates the REG_SZ "NoIE4StubProcessing" with the value "Y" under HKLM\Software\Microsoft\Active Setup\Installed Components. This blocks all Active Setup components from being executed, when a user logs on. This seems to
be part of the preparation for the reboot during the IE 9 setup and is supposed to be reversed afterwards.
To re-enable the Active Setup processing, the IE 9 installer places a command in the RunOnce-Key under HKLM. This command is also labeled "NoIE4StubProcessing" and contains the following command line:
reg.exe DELETE "HKLM\Software\Microsoft\Active Setup\Installed Components\NoIE4StubProcessing" /f
In theory, this command will be executed as soon as the first user logs back on, remove the registry entry blocking the Active Setup process and thus enable it again.
However, this only works, if the first user has local admin priviledges on the machine. If an unpriviledged user logs on, the command is still executed and the entry under "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" is
removed, but the "NoIE4StubProcessing" entry under "HKLM\Software\Microsoft\Active Setup\Installed Components" remains - resulting in a permantely disabled Active Setup on the machine.
I am not sure, that this is a bug of the IE 9 installer or the way the commands under "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" are executed. Nevertheless, a fix for the problem would be great instead of shitty workarounds, that may
break other things.
Due to other means of contacting the developers / program managers in charge, could some moderator pass the issue along? - Please!
----------------------- Greetings from Germany, Martin

Hi Martin,
all feedback/issue reports for IE(10) go through a formal issue tracking portal that MS use. http://connect.microsoft.com/ie
you may appreciate that this helps ensure the issue is formally documented and that resources can be allocated to its resolution.
I have posted your feedback there on your behalf...
https://connect.microsoft.com/IE/feedback/details/754350/ie9-installer-registry-key-switches-flaw-reported-on-technet
Rob^_^

Firefox 3.6.15 is not downloading on MAC OSX, not via software update nor via manual download. It claims i do not have full admin rights which is not true.

If I do a manual download via FF website, it starts to install, asking if I want to replace an older version of FF. If I then continue, it says that it cannot process as I do not have access to 'certain components'????
I have full admin rights, it is f... my computer. I am running a Macbook Pro on OSX 10.6.6.
FF is giving me more problems lately, a.o. not showing certain flash elements (have latets flashplayer). Anyone else getting annoyed with FF?

I eventually did an archive and install to get 10.4.7 installed on my MBP the last time around. Now 10.4.8 is doing the same thing. Neither via Software Update nor manual downloads of Intel delta or combo updaters will apply. Arg!
Has anyone else seeen this? I've tried applying the update while booted regularly and also in safe boot to no avail.
Mike

User with no admin rights can not authenticate on wikis or blogs

I just set up my OD and proceeded to add users in the workgroup manager. I create an account for myself and gave it full admin rights under the privileges tab (in work group manager). I then created a test user account and gave it no privileges. My admin account can log on to wiki's and create blogs but my test account can not, It wont let me log in to any of the wiki's it's assigned to or set up a blog. I set the test account to have full privileges and then I was able to do these things.
I had this set up correctly before the 10.5.2 update came out and crashed my server, I had to re-install the OS and start from scratch again.
Any thoughts on what's wrong?
Thank You,
Message was edited by: pixelmnky

Are the users and groups local or in an OD master?

Are full admin rights required to generate webhelp in RH8?

My team has used RoboHelp for the past 10+ years, upgrading as needed. We were granted full admin rights on our PCs by our IT department several years ago so that our HTML webhelp would generate properly using RH5. We have now upgraded to RH8 but the IT department is going to take away our full admin rights.
Do we still need full admin rights on our PCs to generate HTML webhelp projects in RH8? The Installing and Activating RoboHelp topic on www.grainge.org is not clear on this.
We typically copy the entire RH8 project to our C drive, work and generate there and then move them back to our company network drive for deployment.
If someone can help claify for us it would be great.

The answer is no, admin rights are not required to generate webhelp or any other output. They are required to install RoboHelp but are not required thereafter. You do of course need write permissions for the folder to which you are generating but that should be on your hard disk and therefore automatic.
Your IT department can check your permissions.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

Resetting the Registry so other Users have full access to Flash Player 9

Does anyone have a solution for fixing the registry after
installing FP9, so all users can have full access to it.
I found this site
http://www.donglefree.com/toppage1.htm
to fix the installation problem, (and it worked perfectly),
but now all other users have limited access to the Flash Player.
(Some sites still say Flash needs to be installed).
Operating System: Windows XP Home Edition, SP1, Internet.
Exp. Version 6.0.2800.1106.xpsp2.050301-1526
Any help would be appriciated.

Has anyone tried this to fix the registry problem?
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=tn_19148

Any existing function to validate an item when other item has been changed?

Any existing function to validate an item when another item has been changed? Because these 2 fields are related. When one filed is changed, the other one should be blank and let the user to input again. I am using oracle custom.pll library.
Any ideas?
Amy

Hi Vikram,
Thanks for posting your issue,
You can switch of alerts and set E-Mail Notification to Yes under your Workflow Tasks list > Settings > Advanced Settings. By doing so user specified in AssignedTo will receive e-mail notification when task is created and if task ownership is not changed
during your workflow this will be the only mail sent by system.
Since you are already using SharePoint designer you also have option to include Send an Email action in your workflow (after task is created). This option is better if you want to send some specific info to user.
Also, browse the below mentioned URLs to create workflow step by step
http://sharepointsolutions.com/sharepoint-help/blog/2010/03/create-a-detailed-custom-task-notification-with-a-sharepoint-designer-workflow/
http://sharepoint-community.net/forum/topics/configure-email-notification-for-discussion-board-activity
I hope this is helpful to you, mark it as Helpful.
If this works, Please mark it as Answered.
Regards,
Dharmendra Singh (MCPD-EA | MCTS)
Blog : http://sharepoint-community.net/profile/DharmendraSingh

How to refresh ViewObject from database when another user has changed data?

Hello, I use oracle database server 9.0.2 and JDeveloper 9.0.3 and I am developing a JClient application. I have JTable which is bound to a certain view object based on one entity and this is shared between many users. If a user inserts or updates a row in the viewobject (using for example the table) and commits changes, another user can not see the the inserted row while the underlying viewobject executeQuery() call.
What I need is to refresh data for all users if one of them inserts or updates date. Is it possible?
What I was able to think of was to use timer and executeQuery in certain period of time. Is there any better way? I mean kind of event which is fired when underlaying data has been changed?
Thank you in advance!

So you're saying there is no way for a client application to receive notice from the database that a table has been updated? It seems like this would be a valuable feature, and in fact I could very much use such a feature right now.

File Vault Useless when Other User Has Full Admin Rights?

Similar Messages

Maybe you are looking for