Home directory creation for local user accounts using powershell

Through Computer Management when I create a user, a home directory is created for the same user in the folder C:\Users.I am creating a user through powershell in a remote machine.I am using the following script to create user 
$comp = [ADSI]'WinNT://localhost,computer';
$user = $comp.Create('User', 'account7');
$user.SetPassword('Welcome1');
$user.SetInfo();
The account is getting created. But no home directory is created for this user. How to create a home directory for a user using powershell? Also the user created through GUI is a member of the group 'Users' by default. How to add the user created to the
'Users'  Group.

Hi Cmm user,
Thanks for your posting.
To set the attribute of homedirectory for a user in powershell, please also try the cmdlet set-aduser:
import-module activedirectory
$HomeDrive=’Z:’
$UserRoot=’\\CONTOSO-FPS\Users$\’
$HomeDirectory=$UserRoot+$AccountName
SET-ADUSER $AccountName –HomeDrive $HomeDrive –HomeDirectory $HomeDirectory
I hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

  • Add shared calendar to another users account using powershell

    Hi,
    I am trying to add a calendar to another using account using powershell as it will be easier to make a script than logging in to each user and adding the calendar. Has anyone done this before or know how to do it.
    Thanks

    Are you asking about Outlook or about Exchange?
    In Exchange you can likely do this via EWS.
    Here is how to do this in Access but has to be done under user account:\
    http://www.outlookcode.com/threads.aspx?forumid=2&messageid=27088
    Under EWS it is similar but can be done by impersonation.
    ¯\_(ツ)_/¯

  • Wrong home directory permissions for new users

    Hi everyone.
    I reinstalled my laptop the other day and ran into a rather strange problem: after a system update new users had their permissions totally screwed. It took me 3-4 reinstalls to notice, as i was also playing with lvm2 &co. Anyway, on fresh installations from either 2008.06 or 2009.02, everything works fine. As soon as i update to the latest package versions (including 2.6.29 kernel) and create a new user, permissions on the new home directory are screwed up to the point where the user can't access it.
    Old directory permissions:
    drwx------ 33 jasn users 4,0K 17. Apr 13:21 jasn
    drwx------ 2 root root 16K 17. Apr 12:15 lost+found
    New directory permissions:
    drw-rw--w- 2 jasm users 4,0K 17. Apr 13:43 jasm
    drwx------ 33 jasn users 4,0K 17. Apr 13:21 jasn
    drwx------ 2 root root 16K 17. Apr 12:15 lost+found
    Logging in to "jasm" results in
    No directory, logging in with HOME=/
    [jasm@host /]$
    The whole mess can be fixed by changing the permissions on the home directory, but all that can't be on purpose, can it? I also don't know which package update (if it even was caused by one) causes this behaviour and if this only happens to me, so i didn't file a bug report.
    Has anyone already seen this? I solved it after 1.5 days of puzzled (and strangely unsuccessful) googling and reinstalling, so perhaps someone who runs into the same problem can use this to fix it.
    Last edited by JASN (2009-04-17 17:09:34)

    umask is not really the correct thing to do in this case, as this resets the permissions for every file the user creates. Afaik, the umask setting has to be installed on every machine via the launchd-user.conf file (to contain simply: umask 002) (or whatever is appropriate for your facility), as umask is a property of the process, not the connection.
    What might work better for your problem is make the homedirs world and group non-readable. That way the user creates files within their homedirs and anywhere below, but everyone else can't read them regardless of the files' permissions because the directory itself is unreadable.

  • Migrating local user accounts/home directories to network user accounts

    Hi,
    I am planning on moving the user accounts from several Mac OS X client machines to a new Mac OS X Server machine (Quad core Xeon MacPro). I am very familiar with OS X client in a support environment, but do not have extensive experience with Server.
    I read over the instructions in this article
    http://docs.info.apple.com/article.html?path=ServerAdmin/10.4/en/c6um3.html
    and it appears to be fairly straight forward, although I do have some questions regarding the existing data (home folders) and how to set the clients to log in to the network account.
    Previously, in the event that I have needed to move a person's home directory to a new computer or recover from a corrupt OS (and Archive&install was not an option), in OS X client I would:
    1) Back up the home directory.
    2) Erase/reinstall OS X client.
    3) Log in as Root.
    4) Go into "Accounts" pref pane and create user with same short name as original/backed-up home directory.
    5) Replace the newly created home directory with the backed-up home directory.
    6) Go into Terminal and chown/chgrp the home directory to username/staff, respectively.
    This would result in a perfectly migrated user account. All settings and files working just as they did on the previous system/install of OS X.
    First Question: Could I employee a similar method to retain the content and settings from the local user accounts on the server as I migrate them to network users? Moving the user accounts to the server as described, then running terminal to set proper ownership...
    Second Question: What do I do on each client system to tell it to recognize the networked home directory for each user? Do I just change the user's home folder path in Netinfo Manager to the automount location?
    Thanks in advance for any help you can offer,
    -David
    MacPro 2.66 Quad Core (MA356LL/A)     Mac OS X Server 10.4.8

    A network account is really existing only on the server but if you use "portable homefolders" (Tiger client and server) you could "migrate" the local account to a "server" one by:
    Login locally as another user with administrative rights.
    Change the name of the old account folder in /Users.
    Remove the "old" account locally (woun't remove the "old" folder as you changed the name) only Netinfo data.
    Login using the serveraccount login/password thus creating a homefolder on the server.
    Logout and back in, enable portable homefolder.
    Logout and then in as a local admin and remove the new user folder.
    Change the name on the old userfolder to what the new one had.
    I'm not a 100% sure Netinfo has the server account UID now (added by logging in and creating the portable account?) but if it does:
    (http://forums.macosxhints.com/archive/index.php/t-12077.html)
    "Finding and changing UIDs across the filesystem is a one-liner command:
    sudo find / -user UID -exec chown userName {} \;
    (replace UID with the old UID number and userName with the new user name to associate file ownership.)"
    (A portable account must have got some "kind" of UID?)
    Let the machine "sync" with the server account.
    If you want an "on network only" account I don't know what you need to remove locally afterwards.
    HTH

  • What is involved in going from local user accounts to active directory accounts with CCM 9.1.2?

    We are currently using local user accounts with CUCM 9.1.2 and are looking at integrating it into the active directory structure.
    We do utilize the same structure for user ID's.
    I am looking to find out what the changeover will entail and if anything else needs to be done prior to the integration.
    We also have Unity syncing up with CUCM for users as well as Contact Center sync'ed up for our ACD system.
    Thanks
    Mike

    Hey Mike,
    The process is pretty straight forward.  CUCM 9.X supports the coexistence of AD integrated users and local users so you don't have to worry about local accounts disappearing if they don't have an AD account.  The biggest thing to watch out for is that if you decide to revert back for whatever reason then the accounts that were in AD will be marked for deletion (from the CUCM, not AD) and will be removed after approximately 24 hours.  
    I recommend the following if you'd like to move to AD.
    Run a DRS backup of CUCM.  This is not necessary for the integration but is good practice in my opinion.  I'd also do a full export of your users using the BAT so you can reimport users to how they were before the integration should you decide to revert for any reason.
    Determine if you want to put the user's extensions in the telephonenumber field or ipPhone field in AD.  Once you make a decision, I recommend populating that information in AD so it is available when you do the integration.  
    Make sure your local CUCM user accounts usernames are exactly the same as your domain accounts.  That way when you do the integration the local users become AD users and keep all of their phone associations, group memberships, etc.  If you need to change the usernames then be sure to notify your users ahead of time so they can start logging into UCCX or UCM user pages, etc. using their new username. 
    Create an account in AD that has read-only rights to your directory.  Set the password to never expire.  You will use this account later for the integration.  
    In CUCM, go into Serviceability and make sure the "Cisco DirSync" service is activated on the Publisher server.
    Also in CUCM, navigate to the administration page and do the following:
    Go to System > LDAP > LDAP System and Check the box to enable Synchronizing.  Confirm the LDAP server type and attribute for User ID is accurate.  This is typically Microsoft Active Directory and sAMAccountName respectively.
    Go to System > LDAP > LDAP Directory
    Click Add New
    Give it a name (whatever you want).
    Put in the Distinguished Name of the AD integration account you created earlier. For example, if you created an account called ciscoldap in the Service Accounts OU in the abc.com domain then it would look something like this... CN=ciscoldap,OU=Service Accounts,DC=abc,DC=com
    Enter the password for the account.
    Enter the search base.  This can be a specific OU where your users exist, a parent OU which contains other OUs which contain all of your users or the entire domain.  If you do the entire domain then in the abc.com example you would specify DC=abc,DC=com.
    Select the option to perform a sync with AD on periodic intervals.  The lowest interval you can set is every 6 hours.
    Select either the telephonenumber or ipPhone field to be used for the user's extensions.  This will be whatever you decided and populated in AD in an earlier step.
    Add your primary and any backup domain controllers and ports.  If they are just domain controllers and you are not using SSL then specify port 389.  If they are also global catalog servers then you can do port 3268.
    Click Save and Click the "Perform Full Sync Now" button.
    I recommend that you also use LDAP for authentication as well so you only have one username and password to remember which is all controlled by AD.  To add this do the following:Go to System > LDAP > LDAP Authentication.
    Click Add New
    Check the box to use LDAP Authentication
    Add the same Distinguished name, passwords and user seach base that you used for your integration account earlier under the synchronization section.  Also add the same primary and secondary LDAP servers and ports you used earlier.  
    Click Save
    You can go a step further and create a filter to only pull in the users within the search base you specified and apply that.  For example, maybe only pull in users that have their ipPhone field populated.  Let me know if you have any questions on that or any of the above.
    I hope this helps!

  • Two user accounts using the same home folder

    This may sound like a silly or goofy question, but I was wondering if anyone knows how to use two different user accounts, but with each using the same home folder?
    I was wondering because there are many different settings I would like to use for different settings. Kind of like a "Spaces on Steroids." When I'm at school, I'd like to use one Network Settings, one desktop and icons, one Dock, etc. And when at home, a different set of each, but still using the same home folder.
    Any help or suggestions would be most appreciated.

    ZooCrewMan wrote:
    So, I figured the easiest was would be seperate user accounts, "Home" "School" "Work" etc., and all have different settings, but still point to the same Home Folder.
    The problem is, most of those settings are kept in the home folder.
    You could probably do what Softwater suggests, with an AppleScript, or perhaps an Automator workflow, but it's not without some serious downsides.  You'd need one for each setup.
    At least one complication would be, any change you wanted to make to each setup would have to be done to that script; you couldn't just drag something into (or out of) the Dock.
    Another theoretical possiblility would be to have separate user accounts, but use the special Shared user folder for your data.  You'd have to select it as a souce or destination for each app you use, but many will remember that from use to use. 
    The complication would be permissions.  When you save a document there, the user that saved it is the owner, with read & write rights.  All other users have read-only rights, so could view and open them, but not update them.  You'd probably want to create one or more sub-folders in the Shared account (for various types of files), and you could probably set a Folder Action on each to grant read & write permissions to anything created in them.
    Then you could set up the desired network location, Dock, and Desktop for each user account.

  • Use 1 itunes library for multiple user accounts

    Is there a way to use 1 library for multi-user accounts on mac osx? I have 4 iphones and was previously using the main account only. I'm getting tired of having everyones contact lists downloaded into my main phone. I can't seem to figure out how to sync the music to the same library.

    Hi There,
    I sync 2 iphones with the same library, and to stop the other iphones contacts adding to mine I have two groups in the address book, one has my contacts in and the other my friends. I then just sync the appropriate address book in the info pane when the iphone is plugged in.
    Hope this helps.

  • Impact on roaming profile accounts if we Change User logon Name to Employee Number format in Active Directory for all User accounts

    I want to understand if we change User logon Name to Employee Number format in Active Directory for all User accounts, then what would be the impact on existing profile. Whether we need to change it manualy or it will connect to same profiles in terminal
    session.
    As i observed it create new profile after logon name changed to employee number where existing users profile settings get fails to load and prompt for new settings (such as outlook reconfiguration, share drive mapping etc.).
    Kindly let me know the proper process to overcome with this, how to connect same existing roaming profile with employee number format change.

    Hi,
    What if we change the user name of user account, will it have impact on roaming profiles.
    Yes, it will affect roaming profiles. Please rename the roaming profile folder as the new user account name, in addition, change the profile path in ADUC.
    Here is an related article below for you:
    How to Rename a Windows 7 User Account and Related Profile Folder
    http://social.technet.microsoft.com/wiki/contents/articles/19834.how-to-rename-a-windows-7-user-account-and-related-profile-folder.aspx
    Best Regards,
    Amy

  • Pushing Out User Account Using ARD

    Does anyone know if it is possible to push an entire user account from the administrative computer to a client computer? I am trying to come up with an easy way to create a new user account on 35 student computers in a lab setting. Thanks

    Hi
    You should be able to achieve this using the command line? The commands that follow need to be run as root. As an example let's use one of Apple's 'favourite' test users - Howie Doitt.
    Create a new entry in the local domain under the category /Users
    dscl . -create /Users/howiedoitt
    Create and set the shell property
    dscl . -create /Users/howiedoitt UserShell /bin/bash
    Create and set the user’s full name
    dscl . -create /Users/howiedoitt RealName "Howie Doitt"
    Create and set the user’s ID (assuming only one account?)
    dscl . -create /Users/howiedoitt UniqueID 510
    Create and set the user’s group ID (the default staff group)
    dscl . -create /Users/howiedoitt PrimaryGroupID 20
    Create and set the user home directory
    dscl . -create /Users/howiedoitt NFSHomeDirectory /Local/Users/howiedoitt
    Set the password - if desired?
    dscl . -passwd /Users/howiedoitt whateverpasswordyouwant
    If you would like howiedoitt to be able to perform administrative duties
    dscl . -append /Groups/admin GroupMembership howiedoitt
    Restart the workstation(s) or log out the current user and log in again as the new user for changes to take effect. If there was no home folder created it will be created on successful login with the appropriate POSIX permissions set. You could pre-create the home folder in /Users using the mkdir command making sure you define that folder's name as the created user's shortname.
    There are a number of ways of doing the above using ARD. You could do it command by command applied to a selected list of computers. Or combine the whole lot into a script and run the script. You could even schedule when the script can be run.
    Tony

  • How to disable a local user account ?

    Does someone know that ?
    Thanks in advance,
    p.a

    Hey p.a., thanks for the info. I did a little research myself and found two documents by Apple which deal, besides others, with this. Just want to share these info for future reference: 1) [Mac OS X Server User Management|http://images.apple.com/euro/server/macosx/docs/UserManagementv10.5.mnl.pdf] and 2) [Mac OS X Server Command-Line Administration|http://images.apple.com/server/macosx/docs/CommandLine_Adminv10.5.pdf].
    I quote from the first (p.60).
    *Disabling a User Account*
    To disable a user account, you can:
    --> Deselect the “User can access account” option in the Basic pane in Workgroup Manager.
    --> Delete the account.
    --> Change the user’s password to an unknown value.
    --> Set password options to disable login. This applies to user accounts with the password type Open Directory or Shadow Password.
    From the Command Line
    You can also disable a user account using the dscl and pwpolicy commands in Terminal. For more information, see the users and groups chapter of Command-Line Administration.
    I prefer the method via Workgroup Manager as part of the [Server Admin Tools|http://www.apple.com/support/downloads/serveradmintools1053.html]. There was some disagreement on whether the Workgroup Manager works on a client version machine some time ago, but I can confirm that it works really well on clients, too. (Hint: To start the Workgroup Manager for a local computer, type "localhost" as address - without the quotation marks.)
    And again, the guide for Command-Line Administration states (p.106):
    *Preventing a User from Logging In*
    Sometimes it is necessary to revoke a user’s ability to access the computer. This involves preventing the user from logging in and then terminating the user’s processes. The latter can be done by forcing the user to log out and then killing remaining processes, or by just killing the user’s processes.
    To prevent a user from logging in:
    Disable the user account by entering the following command:
    $ pwpolicy -a diradmin -u ajohnson -setpolicy “isDisabled=1”
    Replace ajohnson with the short name of the user account and replace diradmin with the short name of your domain administrator account.
    Note: The pwpolicy command only works for LDAP/Password server users. For a local user, use Workgroup Manager or the Accounts pane of System Preferences.
    Regards,
    floba
    (MN428)
    Message was edited by: floba

  • Local user account is trying to autenticating against domain controller

    Hi all.  I am seeing a weird user logon issue on one of my laptop and on another user's PC.  Both of the laptop and the PC is a member of our domain.  However, on this particular laptop and PC, we are not login with a domain user account,
    rather we've created a local user account, grant it the local admin access, and login with this local user account.  Now, on my domain controller, I am seeing a bunch of account login failure message, which happens few times per minute and filling up
    the domain controller security log.  For the laptop, this is a clean build, with fresh Windows 7 installation, alone with MS Office 2010 and few third party application (eg: Adobe Reader, 7-ZIP, etc).  I've checked all group policy to ensure there
    are no service or connection that requires domain credential access that have applied to this laptop (or the PC).  I am not sure why this local user is trying to authenticating to our domain controller.  This user account doesn't exist in our domain. 
    The only thing I can think of is Microsoft Outlook 2010 might doing back ground authentication against the domain controller by using the current login user account, I just can't confirm this.  Did anyone encountered this issue in their environment? 
    Thank you.
    Below is a copy of the event.
    Log Name:      Security
    Source:        Microsoft-Windows-Security-Auditing
    Date:          13/06/2014 8:56:27 AM
    Event ID:      4625
    Task Category: Logon
    Level:         Information
    Keywords:      Audit Failure
    User:          N/A
    Computer:      domaincontroller.mydomain.local
    Description:
    An account failed to log on.
    Subject:
        Security ID:        NULL SID
        Account Name:        -
        Account Domain:        -
        Logon ID:        0x0
    Logon Type:            3
    Account For Which Logon Failed:
        Security ID:        NULL SID
        Account Name:        dummy
        Account Domain:        l-sparet400sc
    Failure Information:
        Failure Reason:        Unknown user name or bad password.
        Status:            0xc000006d
        Sub Status:        0xc0000064
    Process Information:
        Caller Process ID:    0x0
        Caller Process Name:    -
    Network Information:
        Workstation Name:    L-SPARET400SC
        Source Network Address:    192.168.2.181
        Source Port:        60720
    Detailed Authentication Information:
        Logon Process:        NtLmSsp
        Authentication Package:    NTLM
        Transited Services:    -
        Package Name (NTLM only):    -
        Key Length:        0
    This event is generated when a logon request fails. It is generated on the computer where access was attempted.
    The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
    The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
    The Process Information fields indicate which account and process on the system requested the logon.
    The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
    The authentication information fields provide detailed information about this specific logon request.
        - Transited services indicate which intermediate services have participated in this logon request.
        - Package name indicates which sub-protocol was used among the NTLM protocols.
        - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
        <EventID>4625</EventID>
        <Version>0</Version>
        <Level>0</Level>
        <Task>12544</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8010000000000000</Keywords>
        <TimeCreated SystemTime="2014-06-13T12:56:27.263546000Z" />
        <EventRecordID>299829083</EventRecordID>
        <Correlation />
        <Execution ProcessID="488" ThreadID="640" />
        <Channel>Security</Channel>
        <Computer>domaincontroller.mydomain.local</Computer>
        <Security />
      </System>
      <EventData>
        <Data Name="SubjectUserSid">S-1-0-0</Data>
        <Data Name="SubjectUserName">-</Data>
        <Data Name="SubjectDomainName">-</Data>
        <Data Name="SubjectLogonId">0x0</Data>
        <Data Name="TargetUserSid">S-1-0-0</Data>
        <Data Name="TargetUserName">dummy</Data>
        <Data Name="TargetDomainName">l-sparet400sc</Data>
        <Data Name="Status">0xc000006d</Data>
        <Data Name="FailureReason">%%2313</Data>
        <Data Name="SubStatus">0xc0000064</Data>
        <Data Name="LogonType">3</Data>
        <Data Name="LogonProcessName">NtLmSsp </Data>
        <Data Name="AuthenticationPackageName">NTLM</Data>
        <Data Name="WorkstationName">L-SPARET400SC</Data>
        <Data Name="TransmittedServices">-</Data>
        <Data Name="LmPackageName">-</Data>
        <Data Name="KeyLength">0</Data>
        <Data Name="ProcessId">0x0</Data>
        <Data Name="ProcessName">-</Data>
        <Data Name="IpAddress">192.168.2.181</Data>
        <Data Name="IpPort">60720</Data>
      </EventData>
    </Event>

    its the service which is using the account info and authenticating against the DC to obtain service ticket and fails
    Interesting log section is NULL SID which doesn't corresponds to any account name.
    Security ID:        NULL SID
        Account Name:        -
        Account Domain:        -
        Logon ID:        0x0
    and the below section explains , the request is made over network, which is most of the times by the service
    Detailed Authentication Information:
        Logon Process:        NtLmSsp
        Authentication Package:    NTLM
        Transited Services:    -
        Package Name (NTLM only):    -
        Key Length:        0
    The below is assumed to be performed on a client which does not run mission critical production applications which has zero impact when you perform the below actions,
    can you disable
    a) Server service
    b) Workstation service
    c) Disable RPC dependent service and services which depend on RPC and test
    Question:
    What is the level of DC hardening you have in your environment ?

  • Mail not working for local users

    I have sunOS 5.9 running on sun sparc
    mail is not working on this system even for local users.
    I have tried from the command prompt
    mail username
    Test email
    ^D
    nothing happens after control D, I don't get command prompt.
    I also tried
    mail username
    Test email
    nothing happens
    sendmail daemon is not running on this system but my understanding is that sendmail is not required. I need mail to work only for local users to receive emails for failed cron jobs etc, it is not required for this system to send or receive emails to/from outside world.
    Can someone guide or point in right direction to fix mail functionlality for local users?

    Actually, with recent versions of sendmail, you do need sendmail running to be able to send mail.
    You never used to, but since they made sendmail no longer setuid root, you do.
    Sendmail has essentially been split into 2 daemons a local queue runner with handles sending sent by local users.
    And a listener daemon with listens for remote connections.
    If you want to be able to send mails but not have sendmail listening, you have a couple of options.
    You can either run only the local queue runner and not run the listener. In this case you have to configure the local queue runner to send mails onto a external mail host for processing. This requires editing /etc/mail/submit.cf
    Alternately, you need to configure the local listener to only bind to the localhost port so it can't be contacted from external sources.
    This requires editing sendmail.mc and regenerating a new sendmail.cf
    I tend to favour the latter option as the former limits your ability to do things like local aliases of root: [email protected] to send all your root mail to a central account.
    This is the sendmail.mc you will need
    divert(0)dnl
    VERSIONID(`@(#)main.mc 1.5 (Sun) 08/10/00')
    OSTYPE(`solaris8')dnl
    DOMAIN(`solaris-generic')dnl
    DAEMON_OPTIONS(``Port=smtp, Addr=127.0.0.1, Name=MTA'')dnl
    FEATURE(`no_default_msa')dnl
    MAILER(`local')dnl
    MAILER(`smtp')dnl

  • Bug When Converting (Back) To Local User Account

    I am using Windows 8.1 Pro and began by setting up a local user account, which is the Administrator account. I then successfully switched the account to a Microsoft account, with the same user name.
    As a test, I then decided to switch back to a local user account.
    The bug is that I was not permitted to use the same user name. I had to select a different user name. This defeats the purpose of transparently switching a from a Microsoft account to a local account.
    Fortunately (for me) I had anticipated that something might go wrong and had performed a full system backup to a external USB drive before I began this switching test.
    L.M.Cohen

    While Windows 8.1 (Pro) allows you to create new User accounts, it is set up to "convince" you to create Microsoft-type user accounts, rather than local user accounts.
    And if you try to convert a Microsoft-type account to a local user account,
    with the same user name, it will not yet you do it. However it will allow you to convert in the opposite  direction,
    with the same user name.
    So I started all over and carefully read the small print -- to learn that you can initially set up a local user account. But this is discouraged, but if you persist, it can be done -- even though it is implied that "the sky might fall."
    This is disingenuous.
    However now that I understand the dynamics, I have no more problems.
    Regards,
    L.M.Cohen
    L.M.Cohen

  • A conflicting local user account as indicated was found on the identified nodes Oracle 12c GRID runclufy check

    Dear Team,
    Oracle 12c GRID Runclufy check failing with below error. Even After Changing Local Built in Administrator User Name also same failure reporting. Kindly help to resolve this Issue and Provide steps to Avoid this conflict.
    Windows user account consistency check across nodes - Checks consistency of Windows user account across nodes  Error:
    PRVG-11818 : Windows user "MDCCOMMONLDAP\Administrator" is a domain user but a conflicting local user account was found on nodes "sep03vvm-401,sep03vvm-402"  -
    Cause:  A conflicting local user account as indicated was found on the identified nodes.  - Action:  Ensure that the Windows user account used for Oracle installation and configuration is defined as a domain user on all nodes or as a local user on all nodes, but not a mixture of the two.
    Check Failed on Nodes: [sep03vvm-402,  sep03vvm-401]
    c:\Oracle12c_software\Oracle12c_grid\grid>runcluvfy.bat stage -pre crsinst -verbose -n SEP03VVM-401,SEP03VVM-402
    Performing pre-checks for cluster services setup
    Checking node reachability...
    Check: Node reachability from node "sep03vvm-401"
      Destination Node                      Reachable?
      sep03vvm-401                          yes
      sep03vvm-402                          yes
    Result: Node reachability check passed from node "sep03vvm-401"
    Checking user equivalence...
    Check: User equivalence for user "Administrator"
      Node Name                             Status
      sep03vvm-402                          passed
      sep03vvm-401                          passed
    Result: User equivalence check passed for user "Administrator"
    Checking node connectivity...
    Interface information for node "sep03vvm-402"
    Name   IP Address      Subnet          Gateway         Def. Gateway    HW Addre
    ss        MTU
    PublicLAN 153.71.45.202   153.71.45.0     On-link         153.71.45.254   00:50
    :56:91:05:30 1500
    PrivateLAN 10.10.10.15     10.10.10.0      On-link         153.71.45.254   00:5
    0:56:91:75:1B 1500
    6TO4 Adapter 2002:9947:2dca::9947:2dca 2002::
            00:00:00:00:00:00 1280
    Interface information for node "sep03vvm-401"
    Name   IP Address      Subnet          Gateway         Def. Gateway    HW Addre
    ss        MTU
    PublicLAN 153.71.45.201   153.71.45.0     On-link         153.71.45.254   00:50
    :56:91:56:B6 1500
    PrivateLAN 10.10.10.14     10.10.10.0      On-link         153.71.45.254   00:5
    0:56:91:60:99 1500
    6TO4 Adapter 2002:9947:2dc9::9947:2dc9 2002::
            00:00:00:00:00:00 1280
    Check: Node connectivity of subnet "153.71.45.0"
      Source                          Destination                     Connected?
      sep03vvm-402[153.71.45.202]     sep03vvm-401[153.71.45.201]     yes
    Result: Node connectivity passed for subnet "153.71.45.0" with node(s) sep03vvm-
    402,sep03vvm-401
    Check: TCP connectivity of subnet "153.71.45.0"
      Source                          Destination                     Connected?
      sep03vvm-402 : 153.71.45.202    sep03vvm-402 : 153.71.45.202    passed
      sep03vvm-401 : 153.71.45.201    sep03vvm-402 : 153.71.45.202    passed
      sep03vvm-402 : 153.71.45.202    sep03vvm-401 : 153.71.45.201    passed
      sep03vvm-401 : 153.71.45.201    sep03vvm-401 : 153.71.45.201    passed
    Result: TCP connectivity check passed for subnet "153.71.45.0"
    Check: Node connectivity of subnet "10.10.10.0"
      Source                          Destination                     Connected?
      sep03vvm-402[10.10.10.15]       sep03vvm-401[10.10.10.14]       yes
    Result: Node connectivity passed for subnet "10.10.10.0" with node(s) sep03vvm-4
    02,sep03vvm-401
    Check: TCP connectivity of subnet "10.10.10.0"
      Source                          Destination                     Connected?
      sep03vvm-402 : 10.10.10.15      sep03vvm-402 : 10.10.10.15      passed
      sep03vvm-401 : 10.10.10.14      sep03vvm-402 : 10.10.10.15      passed
      sep03vvm-402 : 10.10.10.15      sep03vvm-401 : 10.10.10.14      passed
      sep03vvm-401 : 10.10.10.14      sep03vvm-401 : 10.10.10.14      passed
    Result: TCP connectivity check passed for subnet "10.10.10.0"
    Check: Node connectivity of subnet "2002::"
      Source                          Destination                     Connected?
      sep03vvm-402[2002:9947:2dca::9947:2dca]  sep03vvm-401[2002:9947:2dc9::9947:2dc
    9]  yes
    Result: Node connectivity passed for subnet "2002::" with node(s) sep03vvm-402,s
    ep03vvm-401
    Check: TCP connectivity of subnet "2002::"
      Source                          Destination                     Connected?
      sep03vvm-402 : 2002:9947:2dca::9947:2dca  sep03vvm-402 : 2002:9947:2dca::9947:
    2dca  passed
      sep03vvm-401 : 2002:9947:2dc9::9947:2dc9  sep03vvm-402 : 2002:9947:2dca::9947:
    2dca  passed
      sep03vvm-402 : 2002:9947:2dca::9947:2dca  sep03vvm-401 : 2002:9947:2dc9::9947:
    2dc9  passed
      sep03vvm-401 : 2002:9947:2dc9::9947:2dc9  sep03vvm-401 : 2002:9947:2dc9::9947:
    2dc9  passed
    Result: TCP connectivity check passed for subnet "2002::"
    Interfaces found on subnet "153.71.45.0" that are likely candidates for VIP are:
    sep03vvm-402 PublicLAN:153.71.45.202
    sep03vvm-401 PublicLAN:153.71.45.201
    Interfaces found on subnet "2002::" that are likely candidates for VIP are:
    sep03vvm-402 6TO4 Adapter:2002:9947:2dca::9947:2dca
    sep03vvm-401 6TO4 Adapter:2002:9947:2dc9::9947:2dc9
    Interfaces found on subnet "10.10.10.0" that are likely candidates for a private
    interconnect are:
    sep03vvm-402 PrivateLAN:10.10.10.15
    sep03vvm-401 PrivateLAN:10.10.10.14
    Checking subnet mask consistency...
    Subnet mask consistency check passed for subnet "153.71.45.0".
    Subnet mask consistency check passed for subnet "10.10.10.0".
    Subnet mask consistency check passed for subnet "2002::".
    Subnet mask consistency check passed.
    Result: Node connectivity check passed
    Checking multicast communication...
    Checking subnet "153.71.45.0" for multicast communication with multicast group "
    224.0.0.251"...
    Check of subnet "153.71.45.0" for multicast communication with multicast group "
    224.0.0.251" passed.
    Check of multicast communication passed.
    Checking the status of Windows firewall
      Node Name     Enabled?                  Comment
      sep03vvm-402  no                        passed
      sep03vvm-401  no                        passed
    Result: Windows firewall verification check passed
    Check: Total memory
      Node Name     Available                 Required                  Status
      sep03vvm-402  4.9996GB (5242420.0KB)    4GB (4194304.0KB)         passed
      sep03vvm-401  4.9996GB (5242420.0KB)    4GB (4194304.0KB)         passed
    Result: Total memory check passed
    Check: Available memory
      Node Name     Available                 Required                  Status
      sep03vvm-402  3.6612GB (3839028.0KB)    50MB (51200.0KB)          passed
      sep03vvm-401  3.3152GB (3476244.0KB)    50MB (51200.0KB)          passed
    Result: Available memory check passed
    Check: Swap space
      Node Name     Available                 Required                  Status
      sep03vvm-402  5.8121GB (6094388.0KB)    4.9996GB (5242420.0KB)    passed
      sep03vvm-401  5.8121GB (6094388.0KB)    4.9996GB (5242420.0KB)    passed
    Result: Swap space check passed
    Check: Free disk space for "sep03vvm-402:C:\Windows\temp"
      Path              Node Name     Mount point   Available     Required      Stat
    us
      C:\Windows\temp   sep03vvm-402  C             82.6484GB     1GB           pass
    ed
    Result: Free disk space check passed for "sep03vvm-402:C:\Windows\temp"
    Check: Free disk space for "sep03vvm-401:C:\Windows\temp"
      Path              Node Name     Mount point   Available     Required      Stat
    us
      C:\Windows\temp   sep03vvm-401  C             82.6112GB     1GB           pass
    ed
    Result: Free disk space check passed for "sep03vvm-401:C:\Windows\temp"
    Check: System architecture
      Node Name     Available                 Required                  Status
      sep03vvm-402  64-bit                    64-bit                    passed
      sep03vvm-401  64-bit                    64-bit                    passed
    Result: System architecture check passed
    Checking length of value of environment variable "PATH"
    Check: Length of value of environment variable "PATH"
      Node Name         Set?          Maximum Length  Actual Length  Comment
      sep03vvm-402      yes           5119          100           passed
      sep03vvm-401      yes           5119          129           passed
    Result: Check for length of value of environment variable "PATH" passed.
    Checking availability of ports "6200,6100" required for component "Oracle Notifi
    cation Service (ONS)"
      Node Name         Port Number   Protocol      Available     Status
      sep03vvm-402      6200          TCP           yes           successful
      sep03vvm-401      6200          TCP           yes           successful
      sep03vvm-402      6100          TCP           yes           successful
      sep03vvm-401      6100          TCP           yes           successful
    Result: Port availability check passed for ports "6200,6100"
    Starting Clock synchronization checks using Network Time Protocol(NTP)...
    Checking daemon liveness...
    Check: Liveness for "W32Time"
      Node Name                             Running?
      sep03vvm-402                          yes
      sep03vvm-401                          yes
    Result: Liveness check passed for "W32Time"
    Check for NTP daemon or service alive passed on all nodes
    Result: Clock synchronization check using Network Time Protocol(NTP) passed
    Checking if current user is a domain user...
    Check: If user "Administrator" is a domain user
    Result: User "MDCCOMMONLDAP\Administrator" is a part of the domain "MDCCOMMONLDA
    P"
    Check: Time zone consistency
    Result: Time zone consistency check passed
    Checking for status of Automount feature
      Node Name     Enabled?                  Comment
      sep03vvm-402  yes                       passed
      sep03vvm-401  yes                       passed
    Result: Check for status of Automount feature passed
    Checking consistency of current Windows user account across all nodes
    PRVG-11818 : Windows user "MDCCOMMONLDAP\Administrator" is a domain user but a c
    conflicting local user account was found on nodes "sep03vvm-402"
    Result: Check for Windows user account "MDCCOMMONLDAP\Administrator" consistency
    failed
    Pre-check for cluster services setup was unsuccessful.
    Checks did not pass for the following node(s):
            sep03vvm-402

    SEVERE: [FATAL] [INS-30131] Initial setup required for the execution of installer validations failed.
       CAUSE: Failed to access the temporary location.
       ACTION: Ensure that the current user has required permissions to access the temporary location.
    Are you using a supported OS version (listed in the Install Doc) and following all of the steps in the Install Doc ?
    HTH
    Srini

  • Is it possible to setup a different language for the user account?

    Hi,
    My server is in English but many of my users will use French.
    Can I setup in WGM a different language (international) for the user?

    The settings are changed in at least three locations for a user account. Changes are made to ~/Library/Preferences/.GlobalPreferences, ~/Library/Preferences/com.apple.HIToolBox.plist, and ~/Library/Preferences/ByHost/com.apple.HIToolBox.<MACAddress>.plist. There are a lot of keys in there that get changed and might vary between 10.4.x and 10.5.x -if you have a mixed OS environment. So while you you may be able to import the first two into WGM, the last one might be the most trouble as it's machine specific.
    If you gave access to the 'International' System Prefpane, it wouldn't affect anything but the student account since their prefs are saved to a network location or to their local PHD account. Changes would revert to whatever the system default preferences were on logout. Those would be the prefs in /Library/Preferences.
    The 'International' System Prefpane has many listings for the other language choices that are installed on the system which could be a source of confusion for student users. Removing those resources, using certain tools like MonoLingual, can make certain software behave badly or even make the system unusable. Use with caution.

Maybe you are looking for

  • Report Server Internal Error

    While using 9iAS Report Server, we encounter HTTP500: Internal Server Error problem. Looking into the Apache error_log, we found the following error:- [Tue Oct  9 19:29:58 2001] [error] [client 128.1.0.1] Premature end of script headers: /export/home

  • New iPod TV out resolution

    Do the new iPods output video at the newly supported 640x480 resolution or do they output the scaled version of the video that they display on their own screens? Same question for the old 5G iPods with the updated firmware. Thanks.

  • Using submit button in jsp to set a boolean value

    Hello, any help would be much appreciated. I have put the following submit button in jsp: <TR> <TD ALIGN=CENTER><INPUT TYPE="SUBMIT" NAME="next" VALUE="Next"></TD> </TR> I have then put the following java code in: <% boolean next = (request.getParame

  • System scalability issue

    Hi, We are in the process of developing one application which will be used to upload several feed files (Excel and CSV format). These files will be processed at the application server side using POI (to read excel format) and than after certain proce

  • When fully implemented work with *svg format in adobe muse?

    I apologize for the curve English, I write with a translator Google. When developers implement import free work with graphics in * swg? I am a designer and I find this vector format very promising, especially in the construction sites.