Importing Certificates for all users on a machine

How do I import certificates for all users on a machine in Windows/OSX.
Since firefox does not use the system store and uses its own, we have been able to use a utility called certutil to add certificate to a user's firefox db on Linux. So if the user logs into any Linux system on our network he will have those certs in his trusted root cert authority for firefox. Unfortunately this does not carry over to firefox on osx as I am not sure why since it should carry over if the user's home is network. Then we have Windows users who basically have local accounts and we are looking for some solution to have it set up for all users without having to manually import for each user. Any ideas would be much appreciated.
Thanks

See CCK Wizard: https://addons.mozilla.org/firefox/addon/cck/
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes

Similar Messages

You do not have sufficient privileges to complete this installation for all users of the machine. Log on as administrator and then retry this installation

Hi all
Have seen a couple threads regarding this but unfortunately nothing that solves my problem thus far!
Right now, our developers are using the Domain Admin account to promote their website code using MSI files. I'd like to change this as I feel the Domain Admin account should be on lock down and only used when absolutely necessary, pretty common. The
same goes for my account too, I would like to absolve as much use of the Domain Admin as I can.
Problem is, when they run installers from their own accounts, they receive this error: You do not have sufficient privileges
to complete this installation for all users of the machine. Log on as administrator and then retry this installation
The accounts they are using are part of the Built In Administrators group and the Domain Admins group... I'm not sure what other permission you'd need in a domain? We've gone as far as explicitly giving them local admin access on this server and still
nothing changes.
Is there a Group Policy or something that I can change to provide install rights and possibly remove these accounts as Domain Admin and more along the line of Power User?
Thanks much for your help!
Ryan

Hi,
You could use Software Restriction Policies (SRP’s) or Applocker(supported on Windows server 2008 R2/Windows 7 only) to restrict the running
of the application for specific user.
Description of the Software Restriction Policies
http://support.microsoft.com/kb/310791
HOW TO: Restrict Users from Running Specific Windows Programs
http://support.microsoft.com/kb/323525
How to Implement Group Policy Security Filtering
http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.htmlPlease remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

How do I set Premiere preferences for all users - University lab machine?

I am setting up an editing suite for our University which has a "per machine" Creative Cloud licence. It is a PC installation. This machine will be used by a class of students who will log in with their own credentials. I need to set the preferences for Premiere (video output, workspace layout, default drives etc) so that it will be the same for all users logging in since we want a consistent setup for teaching purposes and dont want to have to help each student set up so that it shows correctly on the monitors. Is there a way of saving this setting as the default for every user?
The most important one is the preferences - Playback in order to set up the second monitor.
Message was edited by: Bruce Cooke

Hopefully you did manage to do it.
Reading this should be enough Adobe Premiere Pro Help | Preferences

How do you configure Firefox for all users on a machine?

I want to
1. Take my existing set-up of Firefox
a. with all bookmarks
b. with all my chosen options
c. with my default start-up home page
d. bypass all the initial Firefox startup screen and "make this your default screen"
2. Have it be the base set-up for all users that log into a machine on our domain.
Is there a config file? Where do I place this config file so when all open their firefox it takes the above settings. I am creating a base image using VMware and will want this set-up so when a user log in with their logon credentials and open Firefox, it already has the above mentioned settings in place.

See CCK Wizard: https://addons.mozilla.org/firefox/addon/cck/
You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes

How to set up Windows with Reader and certificate for all users

Good afternoon (GMT),
we're dealing with a Win XP (SP3) system that is set up by an Administrator. One task is to set up the system in a way that all users (w/o admin rights) become able to read a certified-protected PDF. Currently we know a way to install the "public key" for this certificate only for one known user. But how to proceed when not all users are known? The users shall later on never be asked to confirm the certification installation/registration.
If it helps, here is the software version:
Acrobat 8.12 to encrypt the PDF via certification. In near future I will switch to Acrobat 9.x
Reader 7.x and/or 8.x on customer PCs.
Thank you for ideas and hints.
BTW: Next time we want to provide a solution for Win7 systems, too.
Carsten

Check
Time Zone Specification from http://docs.oracle.com/cd/E12844_01/doc/bip.1013/e12187/T421739T481157.htm#4535403
just in case https://blogs.oracle.com/xmlpublisher/entry/how_to_keep_your_dates_from_go

How to globally set WiFi to use device management identity certificate for all users?

I'm using Apple's Profile Management service in Mountain Lion, and discovered through serendipity that an enrolled device can authenticate on EAP-TLS to our WPA2-Enterprise Wifi using the Device Managment Identity Certificate instead of an individually-generated-for-user x509 cert. This is extremely convenient, because then we can effectively revoke a device's cert by unenrolling the device.
However, I haven't been able to figure out how to make WiFi always designate EAP-TLS and select the Device Management Identity Certificate globally (whether through /usr/bin/networksetup or through the Profile Manager).
Does anybody have any pointers on how to do this? My goal is to have an OS X >= 10.7 machine at a network login prompt capable of logging into the machine, authenticated against the Open Directory server the machine is already bound to. At present a wireless user cannot do this, as the machine's Wifi preferences haven't yet been set to use the aforementioned device management cert.
Thanks!

Making customisation from the default profile is generally considered poor practice and quite often doesn't work out as planned. (If you're interested in some more information on this, [http://mockbox.net/windows-7/227-customise-windows-7-default-profile.html see here] see here)
This article should help you with developing and deploying your customised Firefox 4 installation (without touching the Windows 7 default user profile):
http://mockbox.net/configmgr-sccm/174-install-and-configure-firefox-silently.html

Firefox is crashing for all users on my machine except me. How do I sort?

This morning I had a prompt that a Windows update was available so I chose to update my machine (I don't normally). Once the update was applied, I couldn't start Firefox as it crashed immediately, saying "Mozilla Crash Reporter - Firefox had a problem and crashed. We'll try to restore your tabs and windows when it restarts". I performed a system recovery back to yesterday and I can now run Firefox fine as my user, but none of my family can under their users (we are all set as administrators). Any idea what I need to do to get them back on Firefox please?
== Crash ID(s) ==
Signature: Pltfrm.dll@0x1977b

Copying a profile folder and replacing another with it should work ok, but remember that everything is stored there, not just settings. It's bookmarks, passwords, history and all. To access your profile folder, access ''about:support'' in your location bar and click "Open containing folder". Remember that profile folders may be named differently from user to user. If you want to replace them, replace the contents. Be sure to back up your data first, too.
But before you do that, you may want to try creating a new profile ( [http://support.mozilla.com/en-US/kb/Managing+profiles managing profiles] ) to see if the issues persist. If they do, it's possible that some kind of third party software is hindering Firefox...

Network Drives mounting for all users on one machine

I have a diskless netboot image that I've made specifically to capture the local drive and run system image Utility. I'm trying to "perfect" this image, and I would like to have 2 network shares be mounted automatically when any network user signs in. one to write the DMG to and the other being the NetBootSP0 folder. I'm thinking the way to do this would be a script, but I don't know how to make it, how to set it up to run when any account signs in.
thanks!

I would also love to be able to do this.
I have my iTunes library in iTunes on a virtual machine on an SMB PC mount. If I bring up iTunes on the MAC to sync my iPods then it will fail unless I manually connect to the SMB mount.
Is there any way to automount an SMB volume at login time?

1 Library for all Users on one machine

Is there a simple way to have multiple users to have full access to all songs on that single computer?
Music sharing is OK, but then the non-owner can't use these songs to set up playlists etc.
Any help would be appreciated.

In addition to a_ vs_z's reply.
There's an article describing the procedure (skip the first part about fast user switching):
iTunes: How to share music between different accounts on a single computer
Hope this helps.
M
17' iMac fp 800 MHz 768 MB RAM Mac OS X (10.3.9) Several ext. HD (backup and data)

New self signed certificate, how to mark as trusted for all users on clients

We have a new 10.8 server that we are currently using for iChat/Messages service. We have created a self signed certificate to encrypt the traffic to the Messages service since we have the service accessible for internet and phone users. We use network accounts and users need to log in on several different machines when in the office.
Can anyone suggest how to tell a client machine to trust the certificate for all users?
Currently, each user is asked to trust the certificate on each client they log into.
I have imported the server certificate into the client's system keychain in Kechain Access and asked it to trust the certificate for all items manually. This does not appear to allow all users to trust the certificate since subsequent users who have not yet trusted the certificate on the test client are still asked to confirm trust. When opening the iChat.app the users are still propmpted to verify the certificate which now indicates that it is trusted for all users.

Resolved.
- Drag certificate from verification dialog.
- Import into System Keychain
- Select certificate in System Keychain and select "i" button at bottom of window.
- Set all items to always trust.

Adding a domain user to the admin role within the local user management breaks all metro apps for all users!!

Hi,
I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines.
First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
Here are my exact steps of what I did to reproduce our problem:
Complete format of HDD in preperation for a clean install
Clean install performed
Set up the machine initially with a local account
Test metro apps - all working fine
Open control panel from the desktop, click on System, change the system to join the domain, click reboot
Log into the system using my domain account
Test metro apps - all working fine
Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
I click add and then add my domain account - also giving it administrator access
Sign off or reboot to ensure the new security is applied
Sign back in to the domain account
Test metro - ALL BROKEN
Sign out
Sign in as local account
Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
could fathom was a full re install and not giving the domain user admin access to the local machine.
Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
Thanks

Hi Juke,
Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
in event viewer.
Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
Under "Applications And Services Logs" --> "Microsoft" --> "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
Windows.Launch contract failed with error: The app didn't start."
If you require any further information just let me know and I will provide as much as I can.
Thanks

Unable to change keyboard layout for all users on Windows Server 2012 R2

Hi,
I have a requirement where I need to support national keyboard layout for Danish for all users on that machine. When I ran the powershell with script Set-WinUserLanguageList
-LanguageList da-DK it only sets the Danish keyboard layout to the specific logged in user.However the for other users its same English(US) keyboard which is not expected.
Please help me how to set the Danish keyboard for all users on the machine. Its Urgent!Thanks

Hi Mike,
Thanks for reply.
But I need to configure everything using powershell script. Is it possible to use powershell script to setting group policy/ adding logon script ?
These are pretty basic administration tasks and almost always quicker to accomplish with the GUI. Why do you want to use a PowerShell script?
EDIT: Here's some information on the topic however:
https://technet.microsoft.com/en-us/library/cc781361%28v=ws.10%29.aspx
http://blogs.technet.com/b/heyscriptingguy/archive/2011/01/06/use-powershell-and-group-policy-for-your-logon-script.aspx
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing)

Common Cache for all Users JRE 1.6

I understand that the cache location is controlled through the Deployment.Properties file. The part I do not understand is how to get JRE to ignor the properties files in user profiles. Can someone please explain how to create a single cache location for all users on a machine?
I need to package this application and have the process included in the package.
Thanks in advance.
Hector

I don't know if you read this [http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/properties.html], maybe it helps.

Powershell 4.0 How to use Add-Printer to add printer for all users (machine)

Is there a way I can use Powershell 4.0 Add-Printer cmdlet to add a printer for all users (machine)? I tried from an admin account but it only adds a printer for the currently logged on user.
thanks.

Adding a printer for all users requires having access to their profiles (and registry hive for user) to save the mapped printer information. Your best bet is to either use Group Policy Preferences or write a user logon script that ones when they log in and
maps the printer if not already mapped.
Group Policy Preferences Example
I wrote an article a while back that shows how to use a GPO logon script to map a printer. It doesn't use V4, but the process would be the same as far as a GPO goes.
http://learn-powershell.net/2012/11/15/use-powershell-logon-script-to-update-printer-mappings/
Boe Prox
Blog |
Twitter
PoshWSUS |
PoshPAIG | PoshChat |
PoshEventUI
PowerShell Deep Dives Book

Security settings for all users

I recently developed a document that requires digital signatures and have been testing it. The only downside is that when a user opens the document, Adobe prompts for the installation of new security settings, and it installs it for that user only. I need to add a registry key to the new security settings, but it is only available to be added to the current user hive. Does anyone know how to install the new settings for all users?
Here is the registry key I need to add.
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cPubSec]
"bSelfSignCertGen"=dword:00000000
Im using Adobe Reader 9.3 and Win XP.
Any help would be terrific!
Thanks.

Hi,
There are really two separate issues. First, is Adobe pushing updates to the Acrobat Address Book (i.e. adding certificates as trust anchors) and the second issue is how you can push your own update to disable the creation of self-signed digital IDs. Although the two issues share an underlying mechanism, they are separate and you cannot leverage one for the other.
First issue first. Adobe has entered into partnership with certain Certificate Authorities and has created a mechanism to add their certificates to the Acrobat Address Book (aka Manage Trusted Identities) using http to send a copy of the Security Settings file that contains only digital IDs. There are two ways to trigger the download process. One is to go into the Preferences, select Trust Manager, and click the Update Now button in the Automatic Updates group box. The other method is to load the DigSig plug-in (beginning with Acrobat 9, plug-ins no longer load a launch in order to speed up the launch process). As I'm sure you have deduced, opening a file with a signature field cause the DigSig plug-in to load which in turn triggers the automatic download. The reason we have limited the automatic download to DigSig being loaded is because the vast majority of people viewing PDFs are not using the digital signature functionality (much to my personal chagrin because the more people use digital signatures, the better my job security ) and we didn't want to bother them with an update they would never need. People already complain that there are too many updates, and we are trying to limit the irritability factor. To close the loop on this function, once the download process has been triggered the Acrobat check two more things before it does the update, 1) has it been a month since I checked and, 2) if it has been a month is there a new file to download. This way we are not pestering people with unneeded updates, or if they do need the update, at least not too often. And finally, Address Book management has to be on a per user basis. A certificate that you may elect to trust could be a certificate that the next person want to specifically keep untrusted. The Windows Certificate Store, Mac Keychain and Firefox Certificate Manager all work on a per user basis.
That brings us to what you would like to do. The good news is you can use the Export Security Settings featrue to create a distributable file that will set the preference. The real question is how will you distribute the file, but before we get to that, here is how to create the file.
With Acrobat closed, set the registry setting you noted in the message above
Launch Acrobat
Select the Advanced > Security > Export Security Settings menu item
Click the Deselect All button on the Export Security Settings dialog
Select the Signing Preferences Settings checkbox
Click the OK button on the Export Security Settings dialog
Select Signature Creation Settings and note "Allow creation of self-signed Digital IDs" is set to No
Click the Export button on the toolbar
Follow the on screen dialogs. You don't have to encrypt the file, but you must sign it with a certifying signature
At this point you have the file available for distribution. You could e-mail it to your intended recipients with import instructions, or you could post if for download, or you could set the Preference the to automatically push the file from a server. To check this feature out select the Edit > Preferences menu item and then select Security from the Categories list box. You would need to select the Load security settings from a server checkbox and then set up the URL. As an aside, you can also export these settings by selecting the Automatic Update Settings checkbox on the Export Security Settings dialog noted in the bullet points above. You have a chicken and egg problem in that you have to get the users to first manually import the file in order to set up the automatic import. That I can't help you with, you're just going to have to decide what works best for you.
Good luck,
Steve

Importing Certificates for all users on a machine

Similar Messages

Maybe you are looking for