How to enable a disabled admin account?

I was testing the pwpolicy on a newly upgraded Yosemite. After rebooting, I found my local admin account was disabled.
I ran the pwpolicy on a non-server version of Yosemite and the only support article I could find is OS X Server (Yosemite): Global policies can lock out Admin accounts - Apple Support. I tried to follow the steps in the article to clear the account policies for local admin, but once I entered "/usr/bin/pwpolicy -n /Local/Default clearaccountpolicies", the system seemed hanging there and the local admin account was still disabled. Any ideas?
Actually once I used launchctl to load the com.apple.opendirectoryd.plist, the system started to show signs not working properly, such as some basic commands like ps, dscl, man, nano, or even ls stopping to bring up any results. However, "launchctl list" showed the daemon was launched with a number of 78.
I tried to create new admin user account by rm /var/db/.AppleSetupDone, but the new admin account was disabled possibly immediately after birth because of the global policy settings.
Any suggestions?

Thanks, Linc!
But now the issues become:
1. How to load the launchDaemons or launchAgent in the single user mode?
I got the status code 78 when loading the opendirectoryd.plist. While in the system log, there was an opendirectoryd error: "Bug in libdispatch: 14B25 -2004 - 0x5". This is not related to pwpolicy at all, because all my Yosemite 10.10.1 machines show the same things with or without setting the pwpolicy. Any ideas?
2. The SUM used to be very handy and powerful in the past for troubleshooting startup issues, but now, even "passwd" generates an error saying: "The daemon encountered an error processing request." It makes me feel like running a car with the idle gear on, but I just don't know where Apple has moved the drive gear. Is there a document somewhere for using the single use mode of Yosemite?

Similar Messages

How to enable my disabled I pad

How to enable my disabled iPad

If you cannot remember the passcode, you will need to restore your device using the computer with which you last synced it. This allows you to reset your passcode and resync the data from the device (or restore from a backup).
If you restore on a different computer that was never synced with the device, you will be able to unlock the device for use and remove the passcode, but your data will not be present.
You may have to force iPad/iPod into Recovery Mode
http://support.apple.com/kb/ht4097

SL:How do I give the Admin account premissions to access other accounts?

How do I give the Admin account the permissions needed to read and write the folders desired in the other account(s)?

hassiman wrote:
I have a MacPro running Tiger and for whatever reason when I am logged into the machine with my user account which has Admin privilages I can open/drag and drop etc. from my desktop to my wife's account ( which I set up as limited with parental restriction to only what she needs to access and use.)
a parental controlled account for your wife. you must have an interesting relationship...
I am setting up a Mac Mini running SL for my 90 year old in-laws and it was my intention to give them a STANDARD user account so that they can not download and install anything nasty which they did all the time on the Windoze machine the Mini is replacing. I have set up an Admin account on the machine so I can install stuff and perform maintenance functions VIA VNC connection from San Dieg to them in NYC... But I was surprised when I could not access any folders on their account... specifically their desktop where I tried to drop a file.
Not sure why it's no biggie on Tiger but Leopard's throwing a fit. Any ideas?
this is quite normal and is the default in all versions of OS X. a user has write access too their own home directory but not to any other users home directories. being an admin user does not change that. as an admin user you can give yourself write writes to it as discussed earlier but that won't happen by default. the best thing to do in the situation you describe is to log in as your in-laws once you vnc into their computer. then you can copy what you need to the desktop. it's of course possible to do it from the admin account by giving it write access to their desktop as you were intending but that will give you extra problems later because their users won't have write privileges to anything you copy that way.

How Do I create an Admin account?

Hi
This sounds silly but.... How do I set up an administrator account ?
I am using DW CS3 and ADDT and PHPMYADMIN
I can create a table with a level_user field and al the other usual fields
I can use the login wizard and / or the ADDT control panel to set and add user levels so I have added user and admin levels and I can figure out the rest I think but h I have read many tutorials and I still can't figure out how to create an admin account? I have thought I have to create a temp form with a level field just to upload my admin level into the user_level field in my database table, say level "1" and then creat another form with no user level field for users to upload their info and have their level set by the default value in the login wizard say level "2"
Does this sound like the correct way to go about thing?
Is there a better more logical way to do this?
I have asked this question in the nonrmal dreamweaver and I was told to
"Use a frontend like PHPMyAdmin to construct the db and set one of the account's user levels to something like "admin" instead of "y" or whatever and then filter on "admin."
I really don't understand this as I only want to set acces levels to one table so that I can delete records as administrator and so that noone else can access certain pages
Anyone got any ideas?
Any help would be more than helpful
Have a nice day

Hi Charis,
I have asked this question in the nonrmal dreamweaver and I was told to
"Use a frontend like PHPMyAdmin to construct the db and set one of the account's user levels to something like "admin" instead of "y" or whatever and then filter on "admin."
folks in the regular DW forums don´t necessarily know how ADDT handles the "user levels", so here´s my suggestion:
a) create the ADDT "login" table with PhpMyAdmin, add one default record
(probably your own account) and set its "level_usr" column´s value to "1"
b) add this very column to ADDT´s array of session variables within the Control Panel and name it, say "kt_level"
I really don't understand this as I only want to set acces levels to one table so that I can delete records as administrator and so that noone else can access certain pages
once you have the additional session variable "kt_level" defined, you can always filter against this one -- for example...
a) in a "Show If Conditional Region"
(for hiding certain page elements)
b) in a "Restrict Access To Page" behaviour
(to prevent access to a whole page)
and then creat another form with no user level field for users to upload their info and have their level set by the default value in the login wizard say level "2"
that´s a good approach :-)
Cheers,
Günter Schenk
Adobe Community Expert, Dreamweaver

How to enable execute-disable bit and other hidden settings on Lenovo 3000 N200 model 0769!

2008-11-16: I have posted some more settings, scroll down to message 19 in this thread to read them.
Hi,
Here's some good news for anyone with a Lenovo 3000 N200 model 0769, who is disappointed and frustrated with the lack of options in the BIOS setup menu. (I had a moan about that in this thread.)
This is a long post but I hope you'll find it worthwhile. Here are the features/settings which I will explain how to enable:
The BIOS disables the execute-disable bit function of the CPU, with no way to turn it on. You can enable it.
You can set VGA and VESA graphics modes to not be stretched to fill the whole screen (sharper graphics with no distorted aspect ratio).
Speed up the POST display by skipping the memory test
Disable various features (if you don't use them, that might save some power): the HD audio controller, WLAN card, on-board LAN, shadowing of the video BIOS
Enable beep before booting the OS
Enable key click sound (only in DOS, not Windows or Linux)
I'm still working on this, and hope to figure out more hidden settings soon, e.g. to disable the DVD drive and trackpad, and to change the video output from NTSC to PAL.
The information below applies to the Lenovo 3000 N200 model 0769 with BIOS version 3.03. My N200 has Nvidia graphics. For some background on the general principles/research required to figure this out, please see this thread at Wimsbios.com.
To change the settings, you need to create a bootable DOS floppy disk or USB drive. Download SYMCMOS.EXE (Google for it) and put it on the bootable disk. Boot the disk and run SYMCMOS to back up your current CMOS settings: SYMCMOS -Lsettings.txt
Next load the settings.txt into a text editor. It will begin like this:
( SYMBOLIC CMOS EDITOR - Version 643710-035 )
CRC = 3EDD
(0000) [0001]
(0003) [0001]
Your CRC value may differ. Each line after the CRC contains a token number, followed by the value of that token. You can start with the settings.txt you created and edit any tokens you want to change, or delete all token lines and just include the tokens you want to change. Then use SYMCMOS.EXE to apply the new file: SYMCMOS -V2 -Uupdate.txt
After running that command you can reset, and hopefully notice the new settings in action. (For certain settings, such as re-enabling the execute-disable bit, you need to turn the computer off then on again.)
Here are some specific tokens you can change:
Token Default New Description
(0000) [0001] [0000] Disable the HD audio controller
(0042) [0001] [0000] Disable LCD panel graphics scaling/stretching
(004B) [0000] [0001] Beep before booting the OS
(0267) [0001] [0000] Enable support for the CPU execute-disable bit
(028E) [0000] [0001] Enable key click (only works in DOS and BIOS setup)
(02A3) [0001] Set to 0 for slower memory test, or 2 (or 3?) to skip
test for faster booting, especially with 4GB RAM
(046E) [0001] [0000] Disable video BIOS shadowing. (Best to leave enabled.)
(0471) [0000] [0001] Enable 1MB memory hole at 15MB. (Best leave disabled.)
(0486) [0001] [0000] Disable PCI Express ports 1-6. This takes precedence
over the individual port bits below, and disables the
LAN, WLAN and (probably) ExpressCard port.
(0489) [0001] [0000] Disable PCI Express port 2 (WLAN card)
(048C) [0001] [0000] Disable PCI Express port 3 (maybe ExpressCard?)
(048F) [0001] [0000] Disable PCI Express port 4 (LAN)
For example, if you want to disable LCD panel scaling and enable the execute-disable bit, you would create a text file like this:
CRC = 3EDD
(0042) [0000]
(0267) [0001]
Some final points:
Loading the default settings in the BIOS setup menu will overwrite any changes you make using SYMCMOS.EXE. So keep that bootable disk around in case you need to re-apply your settings in future.
The token numbers above are specific to version 3.03 of the Lenovo 3000 N200 model 0769 BIOS. They might be different for earlier BIOS versions, and will be different for other models of computer.
Once you have created a bootable floppy disk with a text file containing your updated settings, you could create a bootable CD with the floppy's data on. Just boot that CD to restore your settings in future.
Before experimenting with randomly changing token values to discover other hidden settings, make sure you know how to reset your computer's CMOS memory! Changing some settings results in your computer becoming unable to boot, so you can't use the BIOS setup screen to reset. I wrote about how to reset the N200 model 0769 CMOS in this thread.
If you discover any other settings, please let me know.
Any changes made are at your own risk; if you "brick" your laptop don't blame me!
Message Edited by Donuts on 10-15-2008 09:45 AM
Message Edited by Donuts on 11-16-2008 11:35 PM

Hi Donuts !
My computer is a 3000 N200 0769BAG. It has a Dual Core Pentium and the information I get about the BIOS using lshw are :
========================================================================================
description: BIOS
          vendor: LENOVO
          physical id: 0
          version: 68ET35WW (04/16/2008)
          size: 106KiB
          capacity: 960KiB
          capabilities: pci pnp apm upgrade shadowing escd cdboot bootselect edd int13floppy360 int13floppy1200 int13floppy720 int13floppy2880 int5printscreen int9keyboard int14serial int17printer int10video acpi usb ls120boot biosbootspecification
====================================================================================
I've nothing telling me it is a 3.03 BIOS version but only got the BIOS file name (68ET35WW);
Is it the same BIOS you used and if not how could I find the list of (token, default value,new seting) for that particular BIOS ?
Thanks a lot in advance for your help !
Regards

How to Create a New Admin Account and Change Original to Standard Account?

I have a single user admin account that I set up when I got my PowerBook. Now I want to have two accounts with the new one being the admin account. This way I can leave most of the data files, email accounts, etc. with the old account and use the new one for personal data and admininistration. Then I could give out the password for the original account without fear that a user could change permissions and get access to the new account with the personal data. Can I create a new admin account and then change the original account to "Standard" instead of "admin"? What problems will this create?
PowerBook G4 Mac OS X (10.3.9)

i2:
Not sure if you are asking if or how. Templeton has
answered if. Here's how.
Apple Menu > System Prefs > Accounts. Click on the +
under User Options to create new account. Go to
Security and check box at bottom to make account
admin. You can take care of the other items, picture
etc, login options etc.
To make the other account Standard select the
account, go to Security and deselect box "Allow User
to Administer".
Hope this answers your questions.
Good luck.
cornelius
PismoG4 550,
100GB 5400 Toshiba internal, 1 GB RAM; Pismo 500 OS
(10.4.4) Mac OS X (10.3.9) Beige G3 OS
8.6
Thanks, I'm tying to find out if I will run into problems, such as not being able to use the new admin account to change permissions in the old.

How to enable a disabled iPod that won't connect to internet

trying to enable my disabled 5th generation iPod touch. I have tried connecting to iTunes on the computer, which I couldn't get it to do anything. I then tried using the "Find my iPhone" website and erased the iPod. However, I got a message that says "This iPod will be erased when it connects to the internet". How do I connect a disabled/locked iPod to the internet/wifi while it is waiting to be erased because it won't connect to internet/wifi?

Disabled
Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
iOS: Forgot passcode or device disabled
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software
To restore from backup see:
iOS: Back up and restore your iOS device with iCloud or iTunes
If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
You can redownload most iTunes purchases by:
Downloading past purchases from the App Store, iBookstore, and iTunes Store
If problem what happens or does not happen and when in the instructions? When you successfully get the iPod in recovery mode and connect to computer iTunes should say it found an iPod in recovery mode.

How to enable a disabled iPad without losing very important pictures?

How can you enable a disabled iPad without losing very important pictures?

If you have important files, photos, videos which are only on your iPad, you need to backup frequently to your computer or iCloud.
How can I unlock my iPad if I forgot the passcode?
http://www.everymac.com/systems/apple/ipad/ipad-troubleshooting-repair-faq/ipad- how-to-unlock-open-forgot-code-passcode-password-login.html
iOS: Device disabled after entering wrong passcode
http://support.apple.com/kb/ht1212
How can I unlock my iPad if I forgot the passcode?
http://tinyurl.com/7ndy8tb
How to Reset a Forgotten Password for an iOS Device
http://www.wikihow.com/Reset-a-Forgotten-Password-for-an-iOS-Device
Using iPhone/iPad Recovery Mode
http://ipod.about.com/od/iphonetroubleshooting/a/Iphone-Recovery-Mode.htm
You may have to do this several times.
Saw this solution on another post about an iPad in a school environment. Might work on your iPad so you won't lose everything.
~~~~~~~~~~~~~
‘iPad is disabled’ fix without resetting using iTunes
Today I met my match with an iPad that had a passcode entered too many times, resulting in it displaying the message ‘iPad is disabled – Connect to iTunes’. This was a student iPad and since they use Notability for most of their work there was a chance that her files were not all backed up to the cloud. I really wanted to just re-activate the iPad instead of totally resetting it back to our default image.
I reached out to my PLN on Twitter and had some help from a few people through retweets and a couple of clarification tweets. I love that so many are willing to help out so quickly. Through this I also learned that I look like Lt. Riker from Star Trek (thanks @FillineMachine).
Through some trial and error (and a little sheer luck), I was able to reactivate the iPad without loosing any data. Note, this will only work on the computer it last synced with. Here’s how:
1. Configurator is useless in reactivating a locked iPad. You will only be able to completely reformat the iPad using Configurator. If that’s ok with you, go for it – otherwise don’t waste your time trying to figure it out.
2. Open iTunes with the iPad disconnected.
3. Connect the iPad to the computer and wait for it to show up in the devices section in iTunes.
4. Click on the iPad name when it appears and you will be given the option to restore a backup or setup as a new iPad (since it is locked).
5. Click ‘Setup as new iPad’ and then click restore.
6. The iPad will start backing up before it does the full restore and sync. CANCEL THE BACKUP IMMEDIATELY. You do this by clicking the small x in the status window in iTunes.
7. When the backup cancels, it immediately starts syncing – cancel this as well using the same small x in the iTunes status window.
8. The first stage in the restore process unlocks the iPad, you are basically just canceling out the restore process as soon as it reactivates the iPad.
If done correctly, you will experience no data loss and the result will be a reactivated iPad. I have now tried this with about 5 iPads that were locked identically by students and each time it worked like a charm.
~~~~~~~~~~~~~
Try it and good luck. You have nothing more to lose if it doesn't work for you.
 Cheers, Tom

How to enable a disabled ipod

how do I enable a disabled ipod touch

Place the iPod in Recovery mode abd connect to your computer and restore via iTunes.

How to enable a disabled iphone 4s

my bf bought me a iphone 4s from his friend he was drunk does not remember password there for iphone disabled, how to enable it with out an itune account

You can not. You have to have the Apple ID password. Ask your drunk friend to reset the password and let you erase the phone. Simple.

How to replace all prior admin account info and files

I know this is a common question but I'm bogging down reading the various threads and would appreciate a link or answer.
I replaced my Powerbook hard drive, clean installed (no archive) and updated Tiger, transfered my home folder and apps only via Carbon Copy Cloner from a back up drive. I noticed that I had typo'ed my ne Admin long and short name. I went to Sys Prefs/Accts and created a new account, logged into that one, gave it admin access, re-logged to the new acct and deleted the old one.
My P'Book still shows the old name on start up. How do rename and certain that any other existing system level or other files under the old acct are gone. I'm also getting keychain password box and the P'Book immediately wakes up when trying to Sleep from Apple menu or closing the lid.-checked energy saver settings and reset Power Manager... I'll look at those after I'm sure there's nothing lingering from the old admin account. No other problems noted.
I'd greatly appreciate a thread or explanation.
Thank you.

Yes, the old account is gone in Sys Prefs/Accts. When I start up the machine, the old name still shows above the log in window, while the new account name is the only log in option.
I've also got a keychain mail password box popping up so I want to be sure that everything is gone from the old account before I resolve the keychain. Some threads here give me the impression there may be other files lingering from the original account set up from the boot disk, even though I deleted it from Sys Prefs/Accts.

How to enable my disabled iphone.it says connect to itunes

How do i enable my disabled iphone.It says connnect to itunes.Tell me what can i do about it

iOS: Device disabled after entering wrong passcode - Support - Apple

How can you clone a admin account?

I was trying to change the home folder name on my account but ended up moving my home folder and converting my account into a new admin account. All the default settings on the account were gone and it looked like a new mac.
After locating my user folder with my entire mac moved into it I copied it to a external HD.
I now need to create 1 new admin account and set my home folder to the old folder so all my original settings are restored to how I had them customized before.
How can this be done??
HALP D=
Jon

Hi figment,
Have you tried one of the templates in
Numbers > Menu > File > New From Template Chooser > Personal Finance ?
Regards,
Ian.

How to enable your disabled iPhone

How do I enable my disable iPhone?

You need to restore using the recovery mode as described in http://support.apple.com/kb/HT1212

Can't disable admin account

I have created a new account on my macbook so that I can make it an admin and disable the admin status on the account I have been using.
But when I go to the 'Accounts' pane, the 'Allow user to administer this computer' flag is grayed out, so I can't remove the admin abilities.
Can anyone help?

happyaid wrote:
Yes it is. Does that make a difference?
Wait a minute - is that the answer to the former or the latter question?
If the former, you can't remove this user from the admin group if the short user name is "admin". You were warned about this when you originally set up this account as an admin account.
You'll have to change the short user name to something else first if you want to make it a non-admin account.
If your answer was to my latter question, see my post of a few minutes ago at the bottom of this thread.
Message was edited by: Király

How to enable a disabled admin account?

Similar Messages

Maybe you are looking for