Java closes IE for all users except admin - help!
I have citrix installed using AD and GPO's. If I login as administrator then I can use java fine. if I login as a user then anytime I try to goto a web site or luanch the java console it closes with no error messages. it is as if I didn't even run the application. I have enabled the setting int he GPO for java, is there another one I am mising?
Please advise...
I'd guess the 'legal' way to do this is via the Exchange Shell. Try Get-OWAVirtualDirectory | fl and see what the authentication methods are. Then try Get-ECPVirtualDirectory | fl
Try also looking at the properties of the ECP directory in IIS Manager, and see if IWA is enabled.
The settings should be configured using the shell, though, to make sure that what is stored in the Exchange configuration in AD correctly reflects what is set in IIS, which doesn't keep that sort of information in AD.
OWA For SmartPhone
Similar Messages
-
Unix command to stop Software updates for all users except admins?
I want to stop App Store and other software updates for all user accounts. Administrator accounts should still be able to do Software Updates.
Is there a terminal command that can do that i can push out through ARD?
ThanksManaged preferences are the best bet. You could use Profile Manager or use the mcx command from the command line. I'd strongly suggest browsing over this before delving into MCX though...
http://macadmins.psu.edu/2011presentations/PSUMAC301-MCX-John_DeTroye.pdf
(the Workgroup Manager application shown is deprecated, but it's essentially the same with Profiles and running MCX from the command line) -
How to diable delete button in PO for all users excepting one
Dear All
Please guide how to disable delete button in PO for all users excepting only one.
ThanksHi,
check following link
[Disable fields at item level in ME22N;
[Disable Delete Button;
Regards
Kailas Ugale -
Hide Gear Icon (Site Actions) from all Users Except Admin
SharePoint 2013: I need to hide the gear icon (site actions) from all Users except the admin. Please let me know the simplest and easiest way to achieve. I basically have Users that fall into two groups - View and Edit. For expansion
purposes though, would like the solution to include and group that may be formed in the future. Requirement is that only the Admin needs to see the gear icon. THANKS!check the below link
http://social.technet.microsoft.com/Forums/sharepoint/en-US/ec876026-12dc-4afa-b2ae-61e98e843b20/how-to-hide-the-whole-site-actions-button-please-read-for-details?forum=sharepointgeneralprevious
http://sharepoint.stackexchange.com/questions/53728/how-to-hide-only-site-action-using-securitytrimmedcontrol -
Change language to all users except admin
Hello
I hope this is the right forum.
I was wondering if there is a way to change the interface & keyboard languages to all regular users except the admin?
1. What I am trying to do is basically to change an English interface into a Russian. How do I do it. Is it have to do with adding/changing anything in GPO?
2. What files if any do I need to make a change like that?
The machine runs Windows Server 2008 R2
What I need is that not only the Windows interface will change, but possibly other software that run on the server will show Russian/Cyrillic
Thank youyou wont change the OS language im quite sure of that. that need to be selected at point of install
as for keyboards ive used this guide and it worked for me http://social.technet.microsoft.com/wiki/contents/articles/6281.how-to-set-the-keyboard-layout-through-group-policy-gpo.aspx -
Remove Collapse/expand icons from the tray for all user except administrato
Hi,
My requirement is to remove the expand/collapse icons from the overview page for all the user but administrator can have those available.
I have set the show tray property to NO , this has made the complete tray invisible for all including the administartor as well.
I want the only icons to be inviisble and not for administrator.
Please provide your valuable inputs.
Thanks
PoojaHi
The best practice in Portal is to create 2 different design, one for users, one for administrators. I mean design : Desktop, Framework Page, Theme ...and so on.
This allows you to manage two ways of displaying or not informations, for sure user view should be different of administrator view.
And you also in your case you should have tow different "overview" iViews, one for users one for administrators.
The "show tray" property should be yes (otherwise you won't see anyting ), but the property "Show Expand/Collapse icon in tray" to NO.
I hope it will help
Best regards
johann -
PO delivery date field to be made display for all users except one user
Hi All,
I have a specific requirement:
The delivery date field in PO should be made display only at the time of changing the PO. I know pretty well that this can be achieved thru Define Screen Layout at document level, which inturn will make this field disaply mode to all users.
But it should be in changeable mode only for one user. how can we achieve this.
Any ideas, please
/R
AntonyHi ,
You can create a authorization object(Z one) which can be assigned to the user id who need authorization of change .
In the exit , you can specify the logic that if SY-USER (current user) has the authorization id , the system will allow to change . If the user doesn't have the object in his roles , the system would not allow to change .
This will help in providing / removing access to any user id .
Regards,
Hari. -
Alternative UPN suffix exists for all users except new user
Hello,
I am updating AD based on how it was setup by an outside IT company. I am not an IT professional myself. When I view the current user properties on the account tab, each user has 2 options in the UPN drop box; namely, mydomain.local & mydomain.com.
All users are set to mydomain.com. I've added a new user to the same group in AD but there is only the mydomain.local option in the drop down. Does anyone know why or how I can get the two options so I can choose the mydomain.com?Hi,
If you add the Alternative UPN suffix correctly in
Active DIrectory Domains and trusts, you could choose the UPN suffix even for the new user account.
As other said, please make sure the Alternative UPN suffix is added, and create test user account to check the result.
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected] -
HELP! Acrobat 9 - How to get rid of updater notification for all users without admin rights
I just bought Acrobat Pro 9 w/ volume licensing because Adobe said this would fix a problem we are having. Every morning we have users that login and get a box that says that do not have sufficient rights to update Adobe. I need this gone. Obviously I can't give them admin rights. We are running on 5 terminal servers running 2003 server. I just need a hack or something I don't really care.
I just bought Acrobat Pro 9 w/ volume licensing because Adobe said this would fix a problem we are having. Every morning we have users that login and get a box that says that do not have sufficient rights to update Adobe. I need this gone. Obviously I can't give them admin rights. We are running on 5 terminal servers running 2003 server. I just need a hack or something I don't really care.
-
Block payroll data from cost center for all users except HR team
Hello Expect,
Could any body please advise me how can I restrict some HR data in cost center view from FICO,CRM,SRM and other team,
Now when other team see cost centers it display all data booked there but my client want to restrict some HR data from them
In my project there are 151 roles that can display cost center dat including HR data,
Now my requirment is how can I restrict only HR data belongs to a cost center
I mean to say they should be able to see all cost center data exept a cost center containing HR data.
Please advise how to get solution
Thanks and RegardsHi,
in T.code PFCG do to the role of the appropriate usr to whom u want restrict cost center.
Hope this helps.
Reagrds
S.Ravi -
Enable Enterprise Voice for all users excpet management
Hi,
I want to disable enterprise voice for all users except managers.
I want to do this through PowerShell.
Mashhour FarajHi
Here is the command to list all the Enterprise voice enabled users
GET-CSUser | Where { $_.EnterpriseVoiceEnabled }
Get-CsADUser -OU "OU=Test,dc=contoso,dc=com" | Disable-CsUser -RegistrarPool pool1.contoso.com -SipAddressType FirstLastName
To Disable all Enterprise voice Enabled users
$GetUsers=get-CsUser -Identity "* *" -OU "OU=Test,dc=contoso,dc=com"
foreach($User in $GetUsers)
$DN=$User.DisplayName
Set-CsUser -Identity $DN -EnterpriseVoiceEnabled $False
Whenever you see a helpful reply, click on Vote As Helpful & click on Mark As Answer if a post answers your question. -
Hi,
I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines.
First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
Here are my exact steps of what I did to reproduce our problem:
Complete format of HDD in preperation for a clean install
Clean install performed
Set up the machine initially with a local account
Test metro apps - all working fine
Open control panel from the desktop, click on System, change the system to join the domain, click reboot
Log into the system using my domain account
Test metro apps - all working fine
Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
I click add and then add my domain account - also giving it administrator access
Sign off or reboot to ensure the new security is applied
Sign back in to the domain account
Test metro - ALL BROKEN
Sign out
Sign in as local account
Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
could fathom was a full re install and not giving the domain user admin access to the local machine.
Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
ThanksHi Juke,
Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
in event viewer.
Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
Under "Applications And Services Logs" --> "Microsoft" --> "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
Windows.Launch contract failed with error: The app didn't start."
If you require any further information just let me know and I will provide as much as I can.
Thanks -
It says on the "Java for Mac OS X 10.6 Update 8" pg that this download is for all users and supercedes all earlier versions. Yet to the right is says you HAVE to HAVE 10.6.8 as a requirement. WHICH is it? Is it for all versions of 10.6 or not? Why isnt this made more clear?
And question is STILL not answered. WHICH is to be downloaded and used?
I would like an answer.Thank you for the clarification! It is really kinda circle-speaking to state on an information page to put forth info people need in that manner. It really does add to the confusion and frustration when you need a simple,
straight answer, such as you gave, and you dont get one. Kind of like that . . other... software company....
This rabbit hole still continues, though. I'm going to ladder it out, just to see for myself:
Have: MacBookPro / 2.4 GHz/ Intel Core i5/ running OS X 10.6.3 -
Need: latest version of Java, so Flash update can be loaded;
(want html5 to be the standard so badly, but client wants Flash)
Attempted: Tried to find Java for Mac OS X 10.6 Update 2 on Apple website. No Joy.
Found: Update 2 is proper update for Mac OS X 10.6.3. Could not find download on Apple website;
- No Joy.
Attempted: Tried to find Java for Mac OS X 10.6 Update 8. Half Joy. Confusing, no straight info.
Found: In order to install update for Java, must update OS X from present 10.6.3 to 10.6.8
Attempted: Tried to find update to OS X 10.6.3 to 10.6.8. on Apple website.
how far does the rabbit hole go? -
Hi All,
I am looking at an Technical solution for Restricting the direct access some specific tables in my data base to all the users(Except admins and few Service accounts). However views created on top of these tables would be exposed to all Users.
Could any one help me with the best solution.
Thanks in advance,
Regards,
Raja SuriHello,
You can try to create a new role "Client_User" in the database and deny access to the new role on the specify tables. And then add all user which you want to restricting the direct access the specific tables to the database role.
For example:
Use Database
CREATE ROLE [Client_User] AUTHORIZATION db_securityadmin;
DENY SELECT ON OBJECT::schema.table TO [Client_User] ;
EXEC sp_addrolemember 'Client_User', 'username';
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support -
Disable JRE Auto update in Vista for all users?
I feel like a complete idiot that I can't figure this out, but it's either so obvious I'm overlooking it, or I just plain can't figure it out, so I'm hoping someone here can help.
We have not yet been able to figure out how to simply disabled the Auto Update option when installing JRE under Vista, so it will never check for updates, no matter what user is logged into a pc. I've just installed the newest version 1.6.0_05-b13, but get the same results.
Basically, we are creating a "base clone image" of a Vista workstation and we need the auto update feature of the JRE to be disabled so it doesn't check for updates. When a new user logs into the pc, we want them to 'inherit' this setting from the default user profile, or we simply want a 'global' setting on the pc that stops all JAVA update checks from occuring. But even though there are multiple registry keys that 'look' like they control the auto update function, no matter how we set them the update option still shows it is enabled when you open the JAVA control panel.
We have 2 basic problems:
- When a standard user runs the JAVA Control Panel applet and they select the 'Update' tab, the option to "uncheck" autoupdates is "grayed out". If we make the user a local administrator, then it is not grayed out anymore and they can set the option. Problem is, we have thousands of users and none of them are local administrators, hence the problem of getting it to already be defaulted to not check for updates. How do we get the update checkbox to NOT be grayed out for a NON-administrator?
- How do we set the 'global' (or default) option to disable the auto update checkbox for ALL users? No matter what we try, when a new user logs in, the auto update feature is still enabled after their initial profile is generated from the first time login.
I was able to figure out if I change the "EnableJavaUpdate" value in the below registry key, it will "remove" the Update tab from the JAVA Control Panel. But does the simply remove the tab? Or does it remove the tab AND disable auto updates for ALL users on the computer?
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy
I've sent multiple emails to Sun asking for help on what should be a simple thing to do, but have never received a reply from them.
Keith HemmelmanThank you for the reply. I apologize for not getting back here sooner.
We actually already use a deployment.properties file located under the Default User profile on our Vista setup. It's located under the "C:\Users\Default\AppData\LocalLow\Sun\Java\Deployment" folder. This file does get copied over to a new user profile when a new person logs in. This is what we want since we have set things like the maximum cache size and temporary file location.
The problem though is there is no setting that disables the automatic update check within this file. The best I can figure out is that for some reason under the Vista environment, the auto update setting is controlled in the registry at: HKEY_CURRENT_USER\Software\JavaSoft\Java Update\Policy
There is a REG_BINARY key there that appears to control this option. It is named "EnableAutoUpdateCheck". The problem is that the value of this key is "several" characters long and it is "different" from one user to the next. I tried disabling auto update under the Java Control Panel and then copied the value of this key into the same aread of the Default User hive but when a new user logs in, it ignores that setting and auto update is still enabled. I also tried using a simple "0" to disable the autoupdate or a "1" to enable it for this key, but it doesn't work either. (This is very frustrating why there isn't a simple 1 or 0 setting to turn the auto update setting on/off.)
We had no problem getting this to work under XP. Basically we didn't have to do anything special in XP. We simply created a temporary user account and made all the settings we wanted and then copied that profile over to our Default User profile and the Java autoupdate setting under the Java Control Panel was disabled for all new users. We did the same thing under Vista, but the auto update setting was ignored and re-enabled for all new users.
I read through the settings for the deployment.properties file located at the below link, but there is nothing there to control the auto update setting.
http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/properties.html
Thus, we can't get the auto update setting to be disabled in the default user profile so it will in turn be disabled for all new users that log into the computer. This is extremely frustrating.
The other equally frustrating problem we have run into under the Vista environment is that when you run the Java Control Panel, the option to disable the auto update check is "grayed out" and the user can't uncheck this option to disable auto update. We have found you must be an administrator before this option is no longer grayed out. Since none of our thousands of users are admins, this is also a problem for us. (This option works fine for a standard user if you are on a XP machine though. It's just Vista where things have changed.)
I've sent repeated emails to Sun in the past asking for help, but they never replied.
Keith
Maybe you are looking for
-
I have been using Elements 8 ever since it came out, and all of a sudden the cropping tool has changed: I can no longer crop horizontally or vertically, only diagonally. The up/down/side arrows have disappeared! Please help if you can, I'm no longer
-
EXCEPTION_ACCESS_VIOLATION Library: awt.dll
Hi to all! I've been searching in all the forums to try to find a fix or at least an explanation of an exception that I get, but until now I have not seen any answer, so... here it goes my problem: An unexpected exception has been detected in native
-
"Enter" in a multi-line text item (Urgent)
Hello, I am using developer 6i. I have a text item on my form with the following properties: Height = 100 width = 100 Multiline = True Now i am assiging a value to this text item programatically. I want to show the data assigned to this field in the
-
I get a dialogue box asking "What should Firefox do with this file" Options open with or save file. My wife selected save file and now it only opens note pad and displays the text of the file to be saved. OK in windows Internet Explorer.
-
Hi everyone, I'm developing an app where I have a number of buttons, let's say 10. I named them button0, button1, ..., button9. Is there a way to cycle through all of them in a for loop? so instead of button0 setTitle:@"button 0" forState:UIControlSt