Install Admin user using ARD

I want to install a user on every mac in my company that has administrator privileges. I was using 'Create Client Installer' but it creates a 'Standard' user.
Is it possible to use 'Create Client Installer' to install an Administrator User or do I have to change the privileges of a 'Standard User'. If yes, how do I do that with the Send Unix command?
Thanks in advance.

here is what we do at our place...
#!/bin/sh
#create a new user for ARD admin access
#first thing first, create the local account for ARD viewing only
#this is a local non admin account
/usr/sbin/jamf createAccount -username ardview -realname "ARD Viewer" -password @rdvi3w –home /var/ardview –shell “/bin/bash” -hiddenUser
sleep 10 #let the account be fully created before we proceede
#next kick start ARD to allow access for this user
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -users ardviewer -access -on -privs -ShowObserve
#now enable all for admin users
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -users hadmin,cadmin,usd500kckps,root -access -on -privs -all
echo "done"

Similar Messages

  • Can I install Lion Server using ARD?

    I've got a 2008 xserve I'd like to update to Lion Server (from 10.6.8 server). Can I successfully install it using ARD or is it going to hang at some point without ARD access waiting for some kind of input to proceed with the installation?
    Thanks
    Eric

    Yes. You need to buy Leon and Server via AppStore. Think twice before click [buy app]... read posts on this group.

  • I can longer install software packages using ARD.

    I can no longer install software packages to other computers on my local network.  I used to do this frequently to four other computers on my network, but no it just gets stuck on "Waiting for item." status.  I cannot figure out how to fix this.  I have tried all I know: rebooting everything, etc...
    Any help would be appreciated.  Thanks.

    If you can still control and observe these computers, but also can't copy files to them, then this thread might help - the solution by Scooter Magrooter is the best.
    https://discussions.apple.com/message/16201614#16201614

  • Logging onto my Admin Account using ARD

    I support 100 iMacs, I'd like to log into my Admin account remotely using Remote Deskop, how can I do this using Automator / Applescript on multiple machines automatically

    Hi
    Select all the computers you're interested in. Click on the UNIX icon. Copy and paste this into the window:
    osascript <<EOF
    tell application "System Events"
    keystroke "the local administrator's shortname"
    keystroke tab
    delay 0.5
    keystroke "the local administrator's password"
    delay 0.5
    keystroke return
    end tell
    EOF
    You may have to add an extra "keystroke return" before the final "end tell". Send the command as root. If the insertion point is not in the name field on the login window it won't work. This can happen sometimes because someone (a passing student for example) has decided to click into the password field. If caps lock has been enabled, it won't work either.
    A way around this is to simply restart all the workstations. This will 'reset' the login window to its defaut behaviour.
    I'm surprised you did not find anything regarding this when searching the Forum? It's a question that's been asked many times before.
    HTH?
    Tony

  • Changing admin passwords using ARD/root?

    Due to losing some key personnel who had access to our administrator passwords, we need to change all of them. Does anybody know if this might could be done by sending some UNIX command as root to the necessary machines?
    I realize I'm probably out of luck, but it sure would be nice to have a way to change them without having to touch every stinking machine!
    Message was edited by: LostTexan

    Send 1 of 2 Unix commands:
    passwd username
    newpassword
    newpassword
    OR
    dscl . -passwd /Users/username newpassword
    Also, please note that question has been asked and answered many times in the past, so you should always try and help yourself by doing a search before posting.

  • Can I distribute CA Keys using ARD?

    Hi. I'm setting up a FileMaker Pro Server Adv. on 10.6.2 Server with Instant Web Publishing. I got my Windows friend, who admins the CA in our office, to make me a SSL certificate for my IWP site. Everything is good. For Mac users, they will get flagged on this site from their browsers since the SSL certificate is not "trusted." But I have the public key from the CA (x.p7b file) or whatever you call it to install into their Keychains to establish a trust.
    Can I distribute this key to all my Mac users using ARD?
    Thanks.

    Hello Naga,
    Please check the sap help on 'Creating Foreign Keys'
    http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ea77446011d189700000e8322d00/content.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/cf/21eb95446011d189700000e8322d00/content.htm
    I think that the forum - ABAP Development » ABAP Dictionary could help
    you more on the posted question.
    Thank you & best regards, Natalia Khlopina

  • APEX ADMIN user password Reset issue

    Hello All,
    I am trying to reset the password for ADMIN user using following script (taken apxchpwd.sql) from SQL Developer. I have connected to database as user with DBA privileges.
    alter session set current_schema = APEX_040000;
    begin
        wwv_flow_security.g_security_group_id := 10;
        wwv_flow_security.g_user := 'ADMIN';
        wwv_flow_security.g_import_in_progress := true;
        for c1 in (select user_id
                     from wwv_flow_fnd_user
                    where security_group_id = wwv_flow_security.g_security_group_id
                      and user_name = wwv_flow_security.g_user) loop
            wwv_flow_fnd_user_api.edit_fnd_user(
                p_user_id       => c1.user_id,
                p_user_name     => wwv_flow_security.g_user,
                p_web_password  => 'newPassword',
                p_new_password  => 'newPassword');
        end loop;
        wwv_flow_security.g_import_in_progress := false;
    end;
    Commit;But I am getting following error.
    session SET altered.
    Error starting at line 2 in command:
    begin
        wwv_flow_security.g_security_group_id := 10;
        wwv_flow_security.g_user := 'ADMIN';
        wwv_flow_security.g_import_in_progress := true;
        for c1 in (select user_id
                     from wwv_flow_fnd_user
                    where security_group_id = wwv_flow_security.g_security_group_id
                      and user_name = wwv_flow_security.g_user) loop
            wwv_flow_fnd_user_api.edit_fnd_user(
                p_user_id       => c1.user_id,
                p_user_name     => wwv_flow_security.g_user,
                p_web_password  => 'newPassword',
                p_new_password  => 'newPassword');
        end loop;
        wwv_flow_security.g_import_in_progress := false;
    end;
    Error report:
    ORA-20001: Unauthorized access (security group package variable not set).
    ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 22
    ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 1625
    ORA-06512: at line 12
    commited.Database Version: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
    APEX Version: 4.0.2.00.07
    Can someone let me know what is the issue?
    Regards,
    Hari

    Hello All,
    Our DBA has ran the script apxchpwd.sql as SYS and it went fine. But still we are unable to login into INTERNAL schema with ADMIN user. Any thoughts?
    Only thing I need to check is APEX user.
    alter session set current_schema = APEX_040000;But that is correct.
    Where and how can I check the apex INTERNAL workspace user ADMIN status?
    Regards,
    Hari

  • Not able to install ActiveX (OCX) on Non-Admin user in Windows 7 ( internet Explorer 8/9)

    I need the solution to install ActiveX controls throught CAB file (Micorsoft Cabinet) for non-admin users. Our solution is working for user accounts with adminstrator rights but not for nonadmin users.
    So far we have tried solution given here: http://msdn.microsoft.com/en-us/library/dd433049(v=vs.85).aspx
    and here:
    http://blogs.msdn.com/b/askie/archive/2012/09/27/guidlines-on-implementing-activex-installer-service-axis.aspx
    But we could not succeed. Pls Help !

    Hi,
    Apologize for the late reply and the misunderstanding about the ActiveX download location, we could change the location through the below registries:
    Use Registry Editor to change the "ActiveXCache" value to the location you want in the following registry key:
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
    Use Registry Editor to change the "0" value to the location you want in the following registry key:
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ActiveX Cache
       NOTE: The values you enter in steps 1 and 2 must match.
    More information, please check
    How to Change the Download Location for ActiveX Files (registries exists in IE11).
    Regarding the urls that download the cab files into user profile directory, would you mind to share the URL?
    And here is some information regarding inf files:
    About INF File Architecture
    We may check the value of DestDir, DestDir can be set to 10 to place the file into the \Windows directory or to 11 to place the file into the \Windows\System directory. If no value is specified, the file is placed into the \Cache directory.
    Best regards
    Michael Shao
    TechNet Community Support

  • Send a Unix command through ARD that will change a OS X admin user to a standard user.

    I would love to send a Unix command through ARD that will change a OS X admin user to a standard user. The only thing I found close is
    sudo dscl . -delete /Groups/admin GroupMembership USERNAME
    which does remove the user from the list of admins, but they are still listed as an admin in the user preference panel, and can still use their account to authenticate for admin privileges.

    I'm not having any problems adding or removing users from the 'admin' group by using the syntax's
    dscl . -delete /Groups/admin GroupMembership ARDusername
    or
    dscl . -append /Groups/admin GroupMembership ARDusername
    What I'm saying is if a user is ticked as an Adminstrator in System Preferences and I run the
    dscl . -delete /Groups/admin GroupMembership ARDusername syntax and remove them from the 'admin' GroupMembership they still have the Administrator box ticked in System Prefs and can administer the machine.
    By the way the '/' doesn't work in the syntax in ARD.
    Thanks

  • How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

    Hi all,
    I have a company (+150 users) and I would like  to allow users to update Java, FLASH and Adobe Reader only.
    These software are already installed in the hosts, but there are updates of the program every week and it needs to be updated.
    How can I give permissions to every user in the domain to do that? Just "Java, FLASH and Adobe Reader"
    Remember that I dont want distribute software because they were installed.
    I tried to enable "Enable user to patch evelated products" directive but it didn't work at my domain.
    is it possible?

    I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself.  To automate flash player, I created a Policy and added the following:
    Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
    I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
    I used notepad to edit the mms.cfg, and used the following in the body:
    AutoUpdateDisable=0
    SilentAutoUpdateEnable=1
    AutoUpdateInterval=0
    My non-admin users now update flash in the background silently and automatically.

  • Can I use ARD to push Mavericks update out to network of OS 10.6.8 users?

    Can I use ARD to push Mavericks update out to network of OS 10.6.8 users?

    It depends on what you mean by 'push'?
    http://www.edugeek.net/forums/mac/128025-remote-install-mavericks.html

  • Using ARD to change user settings

    I was wondering if it was possible to use ARD to change the desktop background for all users? This kinda turns into two questions for me since I know nothing about Macs. First, is there an "all users" settings type thing at all, if so where? Second, is there some sort of config file that would store the location of the desktop background so I could eventually copy a new background to a location and change that file to point to the new file, thus upgrading the desktop background?

    Hi,
    I have created a script to change other functions of remote macs. So this version is an adaptation of my script to your needs. Note that I am changing the admin password. For other user just change the admin name and password accordingly.
    Let me know if you need further assistance.
    Start of Applescript------
    property my_ip : ""
    property my_password : "the admin password"
    property new_password : "the new admin password"
    tell application "Remote Desktop"
    -- this is a fixed group of macs that should be added or deleted as needed in ARD
    set the_list to computers in computer list "to change"
    repeat with i from 1 to number of items in the_list
    set this_item to item i of the_list
    -- if mac offline skip it
    if the status message of this_item is "Available" then
    set my_ip to Internet address of this_item
    -- log as admin into remote mac
    set my_log to "ssh admin@" & my_ip
    tell application "Terminal"
    activate
    -- log as admin
    do script my_log
    -- there is in some cases the security issue.
    -- RSA key fingerprint is ... Are you sure you want to continue connecting (yes/no)?
    delay 3
    do script "yes" in window 1
    delay 3
    -- enter the password
    do script my_password in window 1
    -- do whatever in the remote mac, in this case change admin password
    do script "passwd" in window 1
    -- Ternimal asks fro existing password
    do script my_password in window 1
    delay 2
    -- Enter new password twice
    do script new_password in window 1
    delay 2
    do script new_password in window 1
    delay 5
    -- close connection to remote mac
    do script "exit" in window 1
    end tell
    end if
    end repeat
    end tell
    ----------end -------
    Regards
    Mauricio

  • Pushing Out User Account Using ARD

    Does anyone know if it is possible to push an entire user account from the administrative computer to a client computer? I am trying to come up with an easy way to create a new user account on 35 student computers in a lab setting. Thanks

    Hi
    You should be able to achieve this using the command line? The commands that follow need to be run as root. As an example let's use one of Apple's 'favourite' test users - Howie Doitt.
    Create a new entry in the local domain under the category /Users
    dscl . -create /Users/howiedoitt
    Create and set the shell property
    dscl . -create /Users/howiedoitt UserShell /bin/bash
    Create and set the user’s full name
    dscl . -create /Users/howiedoitt RealName "Howie Doitt"
    Create and set the user’s ID (assuming only one account?)
    dscl . -create /Users/howiedoitt UniqueID 510
    Create and set the user’s group ID (the default staff group)
    dscl . -create /Users/howiedoitt PrimaryGroupID 20
    Create and set the user home directory
    dscl . -create /Users/howiedoitt NFSHomeDirectory /Local/Users/howiedoitt
    Set the password - if desired?
    dscl . -passwd /Users/howiedoitt whateverpasswordyouwant
    If you would like howiedoitt to be able to perform administrative duties
    dscl . -append /Groups/admin GroupMembership howiedoitt
    Restart the workstation(s) or log out the current user and log in again as the new user for changes to take effect. If there was no home folder created it will be created on successful login with the appropriate POSIX permissions set. You could pre-create the home folder in /Users using the mkdir command making sure you define that folder's name as the created user's shortname.
    There are a number of ways of doing the above using ARD. You could do it command by command applied to a selected list of computers. Or combine the whole lot into a script and run the script. You could even schedule when the script can be run.
    Tony

  • Newbie Question - application install/setup for admin and non-admin users

    Hi,
    I'm 100% new to the Mac environment and OS X and I'm a bit confused as to the environment and setting up applications and such for users.
    I have a brand new Macbook Pro that I need to set-up.
    USER Setup
    - have a dedicated admin account called "Administrator"
    - have a user account for my son, Joe.
    - have a user account for me, Matt, so I can fool around on the machine to see if I like it enough to get one myself.
    This is the account setup model I'm most accustomed to using under OpenVMS and Windows - an administrator account and separate lower privilege accounts for users.
    I have managed to accomplish these three tasks ok. I also enabled File Vault on my account only.
    APPLICATION Setup
    We want to install the following applications but I'm having problems:
    - Firefox, for use by all three accounts, but with separate bookmark files for each user. This is the browser we are familiar with and want to start with (sorry Safari, maybe as time goes by).
    - Eudora for e-mail for just the two user (mine and Joe's) accounts, with separate user files for each account. It's the program we're familiar with.
    - Microsoft Office for all three accounts.
    - An architectural CAD program (ArchiCAD) for use only in my account.
    - PGP for use only in my account.
    My real issues appear to be with how to install apps the way I need them to be 'visible' to users.
    I started by logging in as Administrator and downloading/installing Firefox.
    It installed ok under the administrator account but I can't find/access Firefox when logged in via my or my son's account and I don't know what to do to give my/Joe's account access to it.
    So,
    1) How do I install an application once and make it available to all accounts (admin & user)?
    2) How do I install an application and make it useable only by a subset of users
    Thanks for any assistance.

    matt212, welcome to Apple Discussions & the Mac community.
    Suggest you buy the book by David Pogue - Mac OS X The Missing Manual Tiger Edition.
    Includes everything you need to know about installing OS X, using OS X & maintaining OS X.
    Look at these links for new users. They should give you an overview regardless of which version of OS X you are using.
    Switch 101
    http://www.apple.com/support/switch101/
    Mac 101
    http://www.apple.com/support/mac101/
    Quick Assist
    http://www.apple.com/support/quickassist/
    A guide for switching to a Mac
    http://lifehacker.com/software/mac/hack-attack-a-guide-for-switching-to a-mac-224674.php
    Welcome to the Switch To A Mac Guides
    http://switchtoamac.com/guides/
     Cheers, Tom

  • Using mms.cfg file to enable Autoupdate for non-Admin users

    I need help in getting this to work.  So far it does not.
    Adobe Flash for windows 17.0.0.23
    Windows 7 Enterprise  - 5000 systems
    Users are not administrators on systems.
    The Non admin user gets prompted with a screen ( we do not want any prompts)
    Then the install fails because they are not an administrator.
    My mms.cfg file:
    AutoUpdateDisable=0
    AutoUpdateInterval=1
    SilentAutoUpdateEnable=1
    How do I use this or any other method to have Adobe Flash update automaticly for all users including non-admins
    and give no prompts?
    What are the next steps.  Is there an enterprise support site or method to use for mass distributions for Flash?
    Please Get back to me today before 12:00 EDT 13 Apr 2015.
    Gary Pearson
    401-233-6898

    Hi garyp81126656,
    The current mms.cfg file configuration will perform either a notification update or a background update. There are a few options to update non-admin users:
    Host the background update resources locally.  When using the Adobe servers for background updates there is no way to disable notification updates.  By hosting the background update resources locally users will never be prompted to update.
    Disable updates and deploy Flash Player updates via SCUP, SMS, or Group Policy.
    You can find the various deployment options are listed in Chapter 3 of the Flash Player Administrator's Guide.  The Admin Guide also contains information to license Flash Player for distribution within your organization, which is a requirement for any of the deployment methods described in the Admin Guide.  Additional information is available at An outline of Flash Runtime installation options
    Maria

Maybe you are looking for