How do I disable a user on a specific date in 10.8.5 server?

Hi,
We are currently upgrading our servers to 10.8.5. We have many temp employess, in 10.7.5 I could set the user to expire on a specific date. In 10.8.5 I only see that option as a 'Global' option. Does anyone know where I can set this option on a per user basis?
Thanks much
Jeff

Hmm.  I am going to speculate looking into pwpolicy (man pwpolicy).  You can get a users policy by using:
sudo pwpolicy -u username -getpolicy
(replace username with an actual user's shortname)  However, I will admit that I've not attempted to set policy on an individual in a long time.  I do know that in 10.9 any attempts to mess with individual policy bricks the account until you remove the settings.  In 10.8 I have not tried.  10.6 is probably the last time I've explored this (but back then there was a UI for it).
I would suggest a test account or even an entire test server.  You are clearly going off the reservation with this attempt.
R-
Apple Consultants Network
Apple Professional Services
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

Similar Messages

  • How do I disable future iOS updates till later date to prevent problems with non iOS compliant Apps?

    Hello first time post here so excuse me if my posting etiquette is off and this seems lengthy.
    I am a beginning tech (4 months) in a school district that has started the 1 to 1 initiative with iPads (iPad 2).
    There is a huge learning curve I am facing as I don't know hardly anything about the new piece of software - apple Configurator. (A side note I was issued my very first iPad in the same time working for the district. BTW liking the iPad a lot).
    I am looking for friendly beginning user info on how to operate the Apple Configurator - suggestions? At this time I have only served in an observer capacity as it assigned to someone else in the district to do. However I know this person would appreciate another mind to help out  around the problem so I need to get up to speed.
    This a story of bumps and scrapes and bruises on the 1-1 initiative in the district and its 4 major hiccups have occurred (that I observed).
    I am hoping others have discovered these problems and figured out a way to handle them or avoid them and would be willing to share what you did.
    Here goes...
    The district started the 1-1 initiative roughly 3 years ago. They had a person in the middle school (way before me) in charge of the iPads. They used the IPhone Configurator device to manage the iPads. My understanding was this was very slow. That person was finally able to retire and took their knowledge they had of the iPhone Configurator utility that they used with them.The district chose to start using the Apple Configurator software this year for iPad management.
    We have a brand new person that has been put in charge of this. The person did not know the software either (nor did anyone else in the district).This person has made great strides to learn the software. However there has been some issues along the way:
            1. The school where the iPad 1-1 initiative is a middle school. The students are assigned the same iPad for all three years. As 6th graders come in they are issued an iPad. As the 8th grade finishes up, they head on to high school and the iPads gets recycled to the next 6th graders walking in the door. Each grade level has there own set of apps, so the (finished) 8th graders iPads get reset for the next 6th graders walking in.
    The issue is (my understanding) is that the volume purchase apps did not always revert back to the Apple Configurator/App store spread sheets before the iPads were reset. It took an act of congress with Apple to refund these apps because they were lost. Mind you we have 400 iPads in just this school alone so you can see why it was important to get these Volume Purchase Apps refunded to put on the new 6th graders iPads. $$$
             2. When the iPads were given to the students, the Apps would not work and all they would do is shake for a second. The iPads were recollected and redone. Time away from the students and classes.
            3. The iPads were refinished (with all the apps reinstalled) and given to the students. Then the students were given instructions in class how to manually setup their exchange email accounts on their iPads. Turns out the restrictions on the iPads (from the apple Configurator) were set up so the email info they put in could not verify with the exchange server. They wouldn't send or receive. So the iPads were all recalled back (time away from students and their classes again) and redone with the restrictions/ apps reinstalled.
            4. Most recent problem... iOS6 came out and all of a sudden we find out that two of our biggest 3rd party Apps were having problems with it. So it made the Apps at that point worthless. (These are paid for - expensive, most used by the school Apps).  Well there was no way to prevent the students from updating to IOS6 on their own (mind you they can't get to the App Store) but they can do the iOS6 update whenever they want. Before the problem was discovered, students were prompted by their iPads and they started doing the iOS6 update. I discovered this and immediately had the secretary send out emails to everyone do not download this thing because it was making problems for existing installed Apps. Of course there are were a few more students that were like "this don't apply to me right?" and they downloaded it anyways.
    So after 3 weeks of these apps not working, App update/releases were finally given and they are working again. So far we have only fixed some of iOS6 kids that are in need of those two broken apps.
    Now we are at a crossroad with the other 95 installed apps to consider ... if we let the students update to iOS6 to fix the two broken apps will it interfere with the other 93 apps that are working under iOS5.1...
    This iOS update thing would be better considered in the summer time for us (for future iOS updates).
    So I need to know is there away to prevent this in the future? Is there away to hold off the iOS updates till summer? I've seen people say control it by blocking it through the network but it doesn't prevent them from doing this at home. Where in the apple Configurator can we control this?
    Thanks for reading.

    You will not be able to block IOS 6.  You can try blocking it with a webfilter or firewall but if the students take these home or connect to another network or iTunes they can get it that way.   You will find that the vast majority of all apps will work with 6 or have been updated to work with it by now.

  • How to create a Domain user in a Specific OU using System Center 2012 R2 Orchestrator and Service Manager

    Dear All,
    I have a simple Runbook with the following details:
    Initialize Data: (First Name, Last Name, Login Name, Deparment Name) --> Create User: Name:(Domain), Common Name, Display Name, First, Last Name, SAM Account Name (From Initialize Data) --> Enable
    User: Distinguished Name --> Add User to Group: Group Distinguished Name, User Distinguished Name 
    Active Directory Management Pack in place and the Prerequisites Configurations are added Too (Configuration User Name, Configuration Password, Configuration DC, Configuration Default OU.
    The Runbook is Synched with Service Manager, Request Offering/Service Offering and published to the portal.
    When I filled the 4 required values (First Name, Last Name, Login Name, Deparment Name), the Runbook will kick off and the user is created in Active Directory.
    The user is placed in the Default OU which is predefined in AD Prerequisites Configurations in Orchestrator.
    I need to add another Required Value to my Request Offering (SR) called User Level Enum List (Low, Medium, High).
    I need to place the user in a Specific OU based on the Level entered from SSPortal, If the user is Low, then Create the user in this OU, if the user is Medium then create it in this OU, etc...
    How can I do this in Orchestrator? What I want to modify in my runbook to accomplish this task?
    Thank you,

    I AM TRYING TO USER/MAILBOX CREATION PROCESS, FOLLOWING IS THE BUSINESS REQUIREMENT
    GET THE USER FROM ERP SYSTEM (SQL)
    CREATE USER IN SPECIFIC OU
    ENABLE THE MAILBOX IN SPECIFIC DATABASE BASED UPON USER ROLE
    CREATE A USER IN NAVISION SYSTEM WHICH IS AGAIN JUST CREATING SQL LOGIN.
    PLEASE ADVISE ME THE PROCESS AND PROCEDURE ILLUSTRATION IF IT ALL POSSIBLE IN SINGLE RUNBOOK.
    I AM ABLE TO CREATE USER/MAILBOX BUT STRUGGLING TO CREATE IN SPECIFIC OU/MAILBOX DB AND SQL LOGIN.
    FARRUKH
    [email protected]
    Farrukh Anwar

  • How do I prompt a user to enter numeric data while a vi is running?

    I am writing a Labview vi that to calibrate angle sensors. I need to prompt the user to enter numeric or string data for the low and high angle points so the vi can then calculate the span based on these values and the a/d output differences at these two points. I can't use preset points because the angle data is resolute to 0.1 degrees, and having the user raise or lower a boom to a predefined point is not within reasonable expectation. I would be much obliged for any help that is offered.

    Build a subVI that has two numeric controls for the user to input the data (name them something appropriate like "High Angle" and "Low Angle").
    Add and "Enter" button to the front panel.
    Set the subVI preferences to include Open Front Panel When Called and Close Afterwards if Originally Closed. these are in Windows Appearance, Customize.
    Put a delay (say 50 ms) and a while loop on the block diagram to wait until someone presses the button.
    Connect your front panel controls to outputs on the connector pane.
    This will pop up a dialog type of window when you need the user to input data. And make the dialog window disappear when done. You can also add valid data checking to the subVI and whatever else you need.
    Rob

  • How to get no.of users in a specific client

    HI,
       I need to find the no of users in a specific client , but i don't have accounts to all the clients.  I tried from one client where i have the account and executed SE16N and table usr02  got only client specific users list. And as per my understanding USR02 is a client speicific table.
      What is the best to find the no of  users for all the clients  , is it possible from SQL query lik select count(*)from usr02 where mandt etc.. ? or is there any best way ?
    Regards
    Veeramalla.

    Hi venkatesh,
    Incase you can access the database you can take the dump of user count in all the clients using the below mentioned queries
    Select count(bname) from <schema>.usr02 where mandt='xxx';
    You need to run this for each client.
    Another alternative is to create an aBAP program in the client for which u have access to get the details.
    Code could have the following lines
    data: number(6); clientno(3);
    parameters: clientlist like t000-mandt;  //fill in this clientlist parameter with the list of clients u have in ur system
    clientno= 1
    loop
    if clientno < 40
       Select count(bname) into number from <schema>.usr02 where mandt= clientlist(clientno);
        clientno = clientno + 1
        clear number;
    else
      exit;
    endloop.

  • How can I disable automatic spell checking for specific websites?

    I'd like to disable automatic spell-checking for specific domains, such as programming-oriented forums. Is there a way to do this in about:config?

    See:
    *https://developer.mozilla.org/en/Controlling_spell_checking_in_HTML_forms
    You could create a Greasemonkey script to add a spellcheck="false" attribute or create a bookmarklet to add the attribute.

  • In CQ 5.4 how to read search trends(keywords) with in specific date (like last week, 30 days...)?

    I have a requirement to display popular search key words with in specific date range. Like search key words searched in last week/ in last 30days/in 90 days.
    how to get date range searched keywords from Search Trends?? is there any other way to get these??

    Issue was due to a syntax error. Case closed.
    Thanks!
    -OS

  • How do I disable root user? Code failed in terminal!

    Hi,
    I've had numerous problems with my laptop ever since taking it in for repair to change the logic board middle of last year. Since then I've had problems with the RAM (both sticks have had to be changed twice), the logic board changed a second time AND the battery changed. The amount of trips I've had to take to apple stores are ridiculous.
    To top it off I noticed that in the activity monitor there are numerous users other than myself running. The majority of users are root followed by _windowserver, _usbmuxd and _netbois. As about 50% of the users are root I decided to take a trip to an apple 'genius' bar to try and turn all users back to admin, the guy didn't have a clue what the root user was and said that it was fine...his answer was to reboot my laptop however my lacie hard drive recently broke and have no where to save my work.
    So far ive tried two options to fix this myself but i am getting no where. Ive tried adding the code on the terminal via utilities but it says that its failed (https://discussions.apple.com/thread/1636445) And theres no disable option via directory utility. (http://support.apple.com/kb/HT1528?viewlocale=en_US&locale=en_US)
    Is there any other way I can fix this?
    Thanks.

    It's normal to have a fair number of processes owned by root.
    I should leave them alone if I were you.

  • How do i disable a user from editing history

    i want to be able to (as administrator on workstations in my small business) disable users from editing history in firefox. this is vital in a business environment. if there is a solution for this please advise. i have windows xp and 7 machines that run firefox as default browser. any help is appreciated.

    Hmm.  I am going to speculate looking into pwpolicy (man pwpolicy).  You can get a users policy by using:
    sudo pwpolicy -u username -getpolicy
    (replace username with an actual user's shortname)  However, I will admit that I've not attempted to set policy on an individual in a long time.  I do know that in 10.9 any attempts to mess with individual policy bricks the account until you remove the settings.  In 10.8 I have not tried.  10.6 is probably the last time I've explored this (but back then there was a UI for it).
    I would suggest a test account or even an entire test server.  You are clearly going off the reservation with this attempt.
    R-
    Apple Consultants Network
    Apple Professional Services
    Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

  • How to restrict a VPN user with a specific anyconnect profile?

    I need to assign to anyconnect users different profiles. This is done easily with IPSec, with the group policy configured in the client. With anyconnect I have two options:
    - Allow the user to select the connect profile: The problem here is the user can select any profile and connect with the rules and permissions configured in this profile. I do not how to force one specific profile for each user.
    - Use  the DefaultWebVPNGroup as connection profile for everybody combined with DAP. This what I am doing now. Everybody connect with the default anyconnect profile and I use DAP to assign each user the network ACL's, Bookmarks, etc. The problem here is that I can not use other options that are included in the profiles or in the policies, like split tunneling or user authentication method.
    I have seen some answers about this point but none of them is clear enough. I am using ASA 5540 with 8.4(6) and Windows IAS radius.
    Thanks.

    Thanks Elias. This works. Easy to configure. When I connect using the client it takes de group policy from the radius attribute 25 and apply it.
    Just one little problem. This doesn't work with bookmarks when the user connect with WebVPN. In the logs I can see the connection taking the correct group policy but the bookmarks from that policy are not applied. Any idea?

  • How can I disable ALL public access to profile dat...

    I don't know how you Micro-shunts manage to do it, but ever since the forced migration to the Micro-shunt version of the Skype client, it is getting prgressively worse with every iteration. I'd been a very happy Skyper until the enslavement -- sorry, forced migration. ALL of my profile information (what little there was) was 100% private, I only gave my contact details to people I wanted to have it. I was never plagued by spam, never bothered by block-avoiding boojums. Since allowing the current horror onto my Mac, I get over a dozen complete randoms -- all of them with dubious female names from far-away lands -- with contact requests per week, and in the space of the six hours I mistakenly had my mobile phone on my profile, I received four spam SMSes, all of which I was charged to receive. I soon put a block on those so-called premium SMS services. So far, Microsoft, you have taken away much of what makde Skype, and given nothing but frustration (and windows three times larger but holding a quarter of the information) since you took over. Now, please tell me, dear Micro-machines, how the BLEEDIN' 'ECK do I turn off ALL my private information that you are currently putting up on public display? I DO NOT want to be searchable. I DO NOT want to be pestered. Please restore the option for this. The paid offer of a VPN to the Chinese MSN network is looking more appealing by the day, and I'd rather spend money so I don't get hassled than put up with the torture of the past three months.

    Hi, Hyram, and welcome to the Community,
    I am a PC, so this is how I would accomplish your goal (I recommend performing these procedures via a computer rather than a mobile device):
    Access your profile from your account (where the Contact list is), and you should be able to remove all information which defaults to public view, leaving the choices as "blank" or "not specified."
    Check your privacy settings to ensure they indicate you receive audio calls, video calls, and private messages from people on your contact list only.  Remember to Save your changes.
    You must contact Skype Customer Service to request your account name be removed from the search directory.  Here is a link to the instruction on how to contact Skype Customer Service via their secure portal: Contact Customer Service   As you know you wish to contact Customer Service, skip past Step 2 of the instruction where you will see various FAQ articles and other information to review and proceed to Step 3, Continue Support Request.   I find it easier to sign on to the Skype website and then go through the contacting Customer Service routine.
    I still receive random, occasional, unsolicited contact invitation requests, however far fewer than previously.
    Best regards,
    Elaine
    Was your question answered? Please click on the Accept as a Solution link so everyone can quickly find what works! Like a post or want to say, "Thank You" - ?? Click on the Kudos button!
    Trustworthy information: Brian Krebs: 3 Basic Rules for Online Safety and Consumer Reports: Guide to Internet Security Online Safety Tip: Change your passwords often!

  • How do you make a user input countdown to date timer in xcode???

    I am making an app that needs a countdown to date timer that the user inputs.  Does anyone know a good tutorial or could they make one?? THANK YOU ALL IN ADVANCE
    -Emet

    By the way...  I am on xcode 5

  • How to get the weekends days for a specific date range

    I want to select list of only weekend dates from a given date range. Is it possible in SQL?
    For example if the range is '08/01/2011' and '08/30/2011'
    I want a list
    08/06/2011
    08/07/2011
    08/13/2011
    08/14/2011
    08/20/2011
    08/21/2011
    08/27/2011
    08/28/2011Thank You, Naveen email:[email protected]

    First and easy to do is having a Calendar table, which over there you can have those information.
    http://arbibaghdanian.blogspot.com/2011/05/calendar-table.html
    Declare @beginDate Date, @EndDate Date
    Select @beginDate = '08/01/2011', @EndDate = '08/31/2011'
    Declare @Calendar Table
    (CalendarDate Date Primary key, IsWeekend Bit, YearNo SmallInt, QuarterNo TinyInt, MonthNo TinyInt, DayOfYearNo SmallInt, DayNo TinyInt, WeekNo TinyInt, WeekDayNo TinyInt)
    While @beginDate <= @endDate
    Begin
    Insert Into @Calendar
    Select
    @beginDate As CalendarDate
    ,(Case When DATEPART(Weekday, @beginDate) In (7, 1) Then 1 Else 0 End) As IsWeekend
    ,DATEPART(Year, @beginDate) As YearNo
    ,DATEPART(QUARTER, @beginDate) As QuarterNo
    ,DATEPART(MONTH, @beginDate) As MonthNo
    ,DATEPART(DayOfYear, @beginDate) As DayOfYearNo
    ,DATEPART(Day, @beginDate) As DayNo
    ,DATEPART(Week, @beginDate) As WeekNo
    ,DATEPART(WEEKDAY, @beginDate) As WeekDayNo
    Set @beginDate = DateAdd(Day, 1, @beginDate)
    End
    Select * From @Calendar Where IsWeekend = 1
    Best Wishes, Arbi --- MCC 2011; Please vote if you find this posting was helpful or Mark it as answered.

  • BW 3.5 - How can I select TADIR objects in a specific date range?

    Hi everybody,
    I have the necessity to obtain a list of BW objects in a specific date range. I have observed that using TADIR table it is impossible because a timestamp is not present. I have also the necessity to group the BW objects using the object type of the TADIR table (e.g. PROG for Program).
    Any idea?
    Many thanks in advance for your kind support.
    Regards,
       Giovanni

    Hi Giovanni
    I would suggest you try put table TADIR in SE11 and generating a "Where-Used List (CtrlShiftF5)" Also you should try double click on data element SOBJ_NAME in the database view of TADIR and generate a Where-Used List on that field, then you can see the relationships of the table/field.
    I hope this works for you
    Good Luck
    Ben
    Please Assign Points if Useful

  • How to Configure TAB style reports based on specific Data?

    Hi All,
    I am new to Business Objects.
    I have an existing BO report and configured to display certain specific data in TAB sheets based on a kind of rule.
    Where is this exactly Configured in Desktop Intelligence? I need to modify this to add new TAB's as well as change some of the existing ones.
    I am being able to Run my UNIVERSE properly and retrieving all the required data (let's say I am getting 10 different Products, I need to display the associated data of specific Products on Seperate TAB sheets and some others in One TAB) but now my report displayed only part of the data (some of the products).
    Your help is much appreciated.
    Regards,
    Baz

    Hi Sneha,
    The only logic, i guess, that could be used is either defining the join fields or some restriction put in the selection conditions tab of the view. for e.g. if the view should only return Doc type XYZ, the same could be implemented in selection conditions tab. for transaction to check the view, it was already posted above.

Maybe you are looking for

  • White window shows up on all adobe programs just a strip window overlay...

    When I open adobe reader or Elements a white window opens with a ryb buttons on the top left. It well go on and off it I indicate a command  and preferences. It hides the preferences unless I drag it on the top left corner.  It is aways there..can an

  • Need to get data for specific user logged in

    Hi All, I need some pointers for the sql query. I have a query that extracts approval history information along with current status of person who submitted for changes of his direct reportee. what I need is to get the only the approval data of logged

  • How do I save a document without it saving the text/object box outlines?

    Is it because I'm using the trial that I can't save a document without it showing the outline of every text/object box? I've not selected all, but that's what the saved document looks like...

  • Duplicate enties getting attached in the email excel

    HI,   When am trying to send the details in the excel duplicate entries are getting attached in the excel though the internal table has the correc value.The list is displaying the contents such as 1-255 are correct entries and 256-511 are the duplica

  • My iPod Touch 2G doesn't rotate in Safari

    I have resetted the iPod compeltely. I have resetted the settings. It still won't rotate. And I can't double tap home to bring up the multitasking bar because I don't have one! I don't know how to fix this and it's driving me crazy!