Hiding Airport access from OD user

I have 40 iMac on APX (under 12 yrs old!) I have them obviously locked out of all sys prefs but they can still turn off the airport from the top of the screen, can I prevent this?

are these managed clients?
do you use os x server/OD for logins, and which version?
i'd recommend using mcx to disable the airport menu bar item for managed accounts. also be sure to disallow access to the network diagnostic utility in /System/Library/CoreServices, as that can be used to enable airport even if the menu item is missing.
i just had to do this for a client and used this approach with a launchd item to disable airport power on login or restart. enabling airport requires admin account access, in this case.

Similar Messages

Hiding specific Roles from specific users

Dear All,
Is there any way in the database that can hide a role from a user. For instance, if I create a role, then this role can be viewed by all the users defined in the database and then these users can grant priviliges of their own objects to such role. I want to create a Role where certain users can not see and should not be allowed to grant any priviliges for this Role...
is this possible....
Thanks
Bil

For instance, if I create a role, then this role can be viewed by all the users defined in the database no, I do not think so. Roles are only "visible" to powerful users that have access to the dictionary
SQL> create role SECRETROLE123;
Role created.
SQL> grant create session to SECRETROLE123;
Grant succeeded.
SQL> grant select on scott.emp to SECRETROLE123;
Grant succeeded.
SQL> grant recovery_catalog_owner to SECRETROLE123;
Grant succeeded.
SQL> grant update (sal) on scott.emp to SECRETROLE123;
Grant succeeded.
SQL> conn blake/paper
Connected.
SQL> select * from dba_roles;
select * from dba_roles
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> select * from role_tab_privs;
no rows selected
SQL> select * from role_sys_privs;
no rows selected
SQL> select * from role_role_privs;
no rows selectedHowever, you cannot that easily prevent an user from granting a table privilege on its own table to a role
SQL> grant all on t to secretrole123;
Grant succeeded.
SQL> select distinct grantee from user_tab_privs;
GRANTEE
SECRETROLE123Perhaps you can setup a database trigger
Message was edited by:
Laurent Schneider

MS Office Program Accessibility from Different Users

I have OS 10.8.4 and am running MS Word 12.3.6. I can access all the MS programs just fine with my user account. My wife and son can no longer access the MS programs with their user accounts. Every time they try to open any MS program they get the registration program. We try to register and it tells us we don't have to do that but it will still not open the programs. Anyone?
Thank you.

Have you contacted Microsoft? They have help forums at http://www.microsoft.com/mac

Hiding Document versions from End user

Hi
I am in EP6 SP2 Patch 4 Hotfix 7 and CM Patch 4 Hotfix 4.
We are utilising the "Version Management" feature within Content Management.
After enabling "versioning" feature for the folder, I am able to upload multiple versions of the same document as a Content Owner/Administrator.
I am also able to see the different versions of the same document by clicking on to the Settings - Versions of the document.
However an enduser who has only "read" rights for a folder is also able to go into the document details and see the versions. I need to prevent this since he should be only restricted to see the latest version of the
document.
How can I control this ?
Regards,
Rajan.K

Hi Rajan,
When you activate the state management on that folder, you should get the desired behaviour. It is sufficient to activate the workflow without assigning approval steps.
If this doesn't work, you should verify, if the corresponding repository manager has the services state management and feedback assigned.
And be aware that you probably have to modify the service permissions of that folder as well, because normally everybody has full control. Change it to subscription only and check, if this works.
Hope that helps,
Stefan

How do i set up my airport extreme to access from my work windows based PC

How do I set up my airport extreme to access from my work windows based pc?

To mount the AirPort Disk in Windows 7 or Vista:
Open the Network browser by double-clicking Network on the Windows Desktop.
The AirPort Extreme base station name should appear in the browswer.
Double-click the name and you should get a login prompt.
Now depending on how you set up disk access:
In the Name field, either enter the user account name or for base station/disk access, leave this field blank.
In the Password field, enter the base station, disk, or user account password.
Select the volume(s) you want to mount, and then, click OK.

How to access a Portal User Info from a J2EE application?

Hi,
I have deployed a j2ee application in portal and its running fine.
from that application i need to assign some roles to some users.i have the user id.
so my doubt is can i access the portal user info from this j2ee application?i have some servlets in the j2ee application....can i get the portal user info from this servlet?
plz help me
regards,
Visweswar

Hi,
Please check out this to get the portal user information from Java -
WdClientUser class/Interface to aciehve this.
Please check out these links on the same -
WDClientUser.getClientUser IUser
help needed
Regards
Lekha

On MacBook Pro, in iCloud cannot access Apple ID username to change it, from previous user. Can you help?

On MacBook Pro, in iCloud I cannot access Apple ID username to change it, from previous user. Can anyone help?

In System Preferences>iCloud: Sign Out, reboot and then Sign In with your ID and password.
If Find My Mac is switched on you will be unable to sign out without the previous owners password.

How do I access my encrypted User Account files from my Back Up hard drive? Time Machine was used to create the back up disk; File Vault was used to encrypt the files.

How do I access my encrypted User Account files from my Back Up hard drive? Time Machine was used to create the back up disk; File Vault was used to encrypt the files.

Thanks. I will try going through TM. Since my Simpletech is on the way out, I'll be plugging in a new external hard drive (other than the back-up drive) and trying to restore the library to the new drive. Any advice or warning if this is NOT the right thing to do?
Meanwhile, that is a great tip to do an alternate back-up using a different means. It's been tough to figure out how to "preserve access" to digital images and files for posterity, knowing the hardware will always fail/obsolesce sooner or later, and that "clouds" are only as good as their consistent and reliable accessibility. Upping the odds with redundancy will help dull the edge of my "access anxiety", though logically, it can never relieve it. Will look into
Carbon Copy Cloner.

Hiding a document library from specific users or groups.

Just FYI I am far from a SharePoint but have able to accomplish a lot from everyone's help on the forums, so thank you in advace.
Now, Is it possible to hide a document library from specific users or groups? Here is what I am trying to accomplish.
We have a Document library that we want the whole company to view, we will call this Company Share. We then want to have a separate library/app that
is only visible to the Finance department. Then another library that is only visible to the shipping dept.
So when Linda from finance logs into the SharePoint site under Site Contents she should only be able to see 2 items, Company share and Finance.
Tom from shipping will only see Company Share and Shipping. Administrators and Management will see Company share, finance and shipping.
I was able to hide the library using sharepoint designer by checking the box "Hide from Browser" which worked but now none of the users can view the library.
They are only able to access it via a direct URLl link.
Any help is appreciated.

Hi 3s1k,
What did you mean that "management does not want the actual folder library they are in to be visible"?
Please give more information about your requirement?
Best Regards,
Wendy
Wendy Li
TechNet Community Support

How to 'Remove' user access from deleted dual boot system's users in existing operating system's folders and files?

I have Windows 7 Enterprise Professional, accessed earlier from (now deleted) other dual boot operating system (User folder), which shows it's users as unknowns for folder properties in Windows 7 Enterprise Professional's "C:\Users\Aniruddha",
which causes system not responding, how to 'Remove' these unknown users from folder properties of "C:\Users\Aniruddha"?
Also "C:\Users\Aniruddha\Application Data" creates many of own folders within eachselfs end folder ("C:\Users\Aniruddha\Application Data" creates a "C:\Users\Aniruddha\Application Data\Application Data", "C:\Users\Aniruddha\Application
Data\Application Data" creates a "C:\Users\Aniruddha\Application Data\Application Data\Application Data" and many) because of which system stops responding randomly, starts responding only for "ctrl+alt+del", why such self
creation begins?
Whether a standby user with same file structure copied from a user would dynamically link it's shortcut folders with Windows user from whom these folders were copied or whether there would be no link and for above said problem I would restore User's file structre
back to normal just by copying from standby user?

It seems your PC is infected with some malware. Use a trusted antivirus software with the latest definition updates installed to scan and remove the malware.
Balaji Kundalam

Airport Disk access from the internet via Windows Vista

I have an Air Port Extreme base station and am sharing an external hard disk connected to it by the USB port. Local network connections work well with both mac's and windows machines. I am able to connect to the airport disk from the internet with my mac's fine. afp://ip address. How can I connect to this same air port disk from the internet with my PC's which run Vista? There must be a way? I have tried endlessly for many hours. any help would be appreciated.

This works fine from local network, but not from a remote location from the internet. Maybe my syntax is incorrect. My workgroup name in the Airport Utility is "Apple"
Connected locally "\\APPLE1\My Book 500GB" works and makes a connection from the map network drive windows pane. \\Apple1\my book 500gb also connects if entered from IE, again locally. What would be the correct syntax to access it from the web?
From my mac on the web afp://"ip address/ Works!!
Syntax I've tried from remote or internet: smb://??.204.218.??/apple ,smb://??.204.218.??/apple1 ,
smb://??.204.218.??/my book 500gb. IP address used is my external ip address.
I'm still missing something??

Can't access one user on mac....one user is OK although it runs very slow..lots of beach ball action...tried using shift to access user and no use...I ran a disk check from good user and it checks out OK...what do I need to do

I cannot access one of two users on my mac..i have tried using the shift key but no luck...the one user that I can access runs very slowly, I get a lot of beach balls from **** action...also the message "unapproved caller" keeps popping up...I ran disk check from good user and it shows OK...Disk usage shows ~267gb used out of 360gb disk

Spinning Beach Ball
Spinning Beach ball (2)
Spinning Beach ball (3)
Spinning Beach ball (4)

Airport USB Disk - access from PC?

I have set up my USB disk in my Airport utility, trying all three options (accounts, disk password, and device password). I cannot find it in Windows Explorer or Internet Explorer to access it.
What is the trick?
Thanks,

There are a number of posts related to accessing AirPort Disks from Windows Vista / 7 PCs. Two potential solutions being forwarded are: 1) Changing the LAN Manager authentication level, and/or 2) Disabling the Windows Search feature.
To change the LAN Manager authentication level:
From the Windows Vista / 7 desktop, click Start
Search for: security
Click 'Local Security Policy'
Goto Local Policies > Security Options
Under Policy, double-click 'Network security: LAN Manager authentication level'
Change level to: Send LM & NTLM responses
Under Policy, double-click 'Network security: Minimum session security for NTLM SSP based (including RPC) clients'
De-select 'Require 128-bit encryption'
Click OK
To disable Windows Search:
Start > Control Panel > Programs > Programs & Features
On the right-hand side, click "Turn Windows features on/off"
Scroll down, and de-select "Windows Search".
Press OK, close all windows and restart.
A third "solution," that has worked for me, is verify that both the AirPort base station and the Win7 PC are using the exact same Workgroup Name. In my case, I use "WORKGROUP" (without the quote marks) for this name.
From the AirPort Utility, you would enter this value on the Disks > File Sharing tab.
On Win7, Start > Control Panel > System and Security > System > Change Settings > Change > Workgroup

RAR: Risk resolution options , Remove access from user is disabled

Hi All,
In RAR , After risk analysis, if we click on risk description 3 Risk resolution options are there.
Mitigate Risk
Remove access from user
Delimit access for user
In these options mitigate risk only working.I am using GRC SP 5.
How about other two options , save button is disabled.How to enable this?
can we remove/delimit access to user using these options? any body tested these options?
Thanks n Regards,
Joseph

Joseph,
These functionalities do not exist in the tool and these buttons have been in the RAR for past 2 years. SAP wants clients to use CUP for removing or delemiting access so I highly doubt this will ever work.
Alpesh

Removed user from group, user no longer has access to documents even though user is owner of documents

I'm running a server 2012 std domain and I'm in the process of rebuilding our fileserver after we had some pretty serious permission issues. Bad permissions (Everyone had full access to user documents share) were migrated when we move to the new server and
then by some strange Monday morning freak out all users lost access to their documents. I restored from backups, redirected everyone's folders back to local computer and started to reconfigure the share permissions. I moved our administration group back to
the server after securing proper permissions for folder redirection (permissions copied from https://technet.microsoft.com/en-us/library/jj649078.aspx?f=255&MSPPError=-2147217396 table 1, only difference is instead of creating a new security group
for redirection users, I used the everyone group) to test and everything went perfectly. The GPO created the users folders under the root and redirection was good to go. Along with that, other users cannot access other users documents anymore which was the
intended outcome.
Last night I was looking at security groups and see that our administration group (back office group: accounting, HR, etc..) was a member of the domain admins. I removed them from the domain admins group and added them to the administrators group (they do
need regular admin access) then went on like normal. This morning, all users in that group can no longer access their documents on the server. I immediately think that permissions were broken again and started to get angry, but then realize that all the files
are still accessible on the server (no lost permissions like before) and the user is still shown as the owner with full permissions, but the files are inaccessible to those users. I re-added them to the domain admins group, logged out, logged back in and documents
are back and accessible by the user. Remove them from the domain admins group, log out, log back in and the documents are inaccessible again. Re-add to the domain admins group and back to normal.
Which leads me to now. If the users are part of the domain admins group, they have access to their files. If they are removed from the domain admins group, they lose access. When they lose access, they are still the owners of the files/folders with full
permissions, yet they can't access their documents. Also, just to add, the domain admins group has no specified permissions on the files or folders. See screenshots below..
Here is the root share.
And the user's desktop folder. The folder is owned by the user with full permissions. This is the folder the redirection GPO created.
Any ideas why removing the group from domain admins would drop access to their files? They are still the owners of the files and should have full access but they don't. Is there something I'm not seeing here?

Effective Access shows the user has full control of the Desktop folder
This is a problem with the Effective Access tab when using CREATOR OWNER. As you have noticed, the user doesn't really have the access that the tab says it does. This is because of how CREATOR OWNER works.
CREATOR OWNER is only evaluated when a file/folder is created.
IF a user can create a file/folder, then the permissions assigned to CREATOR OWNER are copied to a new permissions entry for that user.
To see this:
Logon as an administrator and create a file in the Desktop folder in your screenshot.
Examine the permissions of the new file.
You'll see that there is a new entry for the account you logged on with.
CREATOR OWNER is gone. CREATOR OWNER would still be there if you created a folder (because of "subfolders and files").
In the Desktop folder (in your screenshot), only SYSTEM and Administrator can create/access files.
To fix this, you need to grant the users the ability to list the directory contents and create new files/folders. This corresponds with the suggestion of Table 1 in the document you found.
I see what you're saying about Administrators domain group. I'll just add them as local admins via GPO and that should solve that issue.
No, scary! This will grant those users administrative permission on your server. They will be able to see any file anywhere on that server.
If your goal is to provide a place that is private for each user, then the simplest approach is to grant each user permission to their own folder. Like this for Test User:
Notes for above:
I set the user's permission to Modify because there is no good reason why the user should change these permissions
The owner of this folder is unimportant. I leave it set to Administrators
You can, and I do, remove CREATOR OWNER. It adds no value in this situation and just causes confusion.
As for the second screen shot, the *-Admins folder is the root to which Everyone has special permissions on and can create folders. The folder for M* was created by the GPO, which makes M* the owner to which they have Full control of subfolders and files.
The GPO also created the Desktop folder, giving owner full permissions of subfolders and files. Inside the Desktop folder, permissions remain Full control for owner for subfolders and files. Even if it was the case that they only had permissions on subfolders
and files, wouldn't each subfolder under that one be considered a subfolder and file of the top folder?
If this works as you say, then Yes, it should work. But, I don't see the entries for use M*. Remember, there should be entries for the M* user that is a duplicate of CREATOR OWNER.
I suspect that Group Policy is creating the directories (elevated) and then changing the owner to M* afterward. This does not duplicate the CREATOR OWNER entries as needed. If this is the case, I consider it a flaw because your permissions do
not allow user M* to create files/folders, and group policy shouldn't bypass security.
I'm not saying your wrong, I'm just curious why the technet article would advise Creator/Owner giving full control of subfolders and files only if that were not correct. I can add the permissions for the users easily, I just don't see why I need to give
explicit permissions to access something when the GPO created those folders for me, which Microsoft recommends you allow. If the GPO can create folders and the folders are owned by the user, then the user can obviously add/create/modify/view those files and
folders.
When I restored the data, no permission were reset. Permissions were restored to the wonky version where the Everyone group has full access to everything. Ownership of the files/folders remained the same.
A couple things:
The article instructed the use of Folder Redirection Users group that had permissions to create files. Your examples didn't have that. Because of this, your user could create new files.
The article assumes that the directories you are creating will be empty. Existing files will be unreadable to everyone except Admins.
If you follow the directions in the article, then anyone in the Folder Redirection Users group can write files to anyone else's directory.
One benefit of the document's approach is that all the users could be redirected to the same folder using the article, and it would work. A benefit, I guess.
But, I like my user's separate and unable to see each other's files -- at all. This is why I recommend replacing CREATOR OWNER with the specific user.
I believe this document is a "how to get it done" document, not necessarily a best practices document. I see it as a starting point, and that's why I didn't follow it exactly.
Lastly, CREATOR OWNER permissions are useful but confusing. I avoid them unless I have the rare circumstance where they are perfect.
When I restored the data, no permission were reset. Permissions were restored to the wonky version where the Everyone group has full access to everything. Ownership of the files/folders remained the same.
To summarize:
In the user's directory, you need to provide permission to list and create new files/folders, and you need grant the user permission to the existing files.
-Tony

Hiding Airport access from OD user

Similar Messages

Maybe you are looking for