Launching application in admin mode for standard users from start/menu

hi
i am currently working on an application which runs fine for admin users but for standard users it ask for admin user name and password. creating shim is not working. what will be the other option so that application can be run for standard users without
asking admin credentials?
thanks all

hi i am developing this application and we are deploying silently to some user's machine. Also i tried to use ACT and shim it as "Run as admin","Run as involker","Run as highest"but nothing works so far. so dont know which option to use. Any registry capture
would be good? or can i know how to apply shim?
I am following the route like
1) create the shim.
2) install application
3) run as standard user. or 1) install application 2) install shim 3) run as standard user.
Nothing works....
Thanks all

Similar Messages

Allow application installations and updates for standard user account

Good Afternoon. Is there a way to configure/allow standard, non-admin user accounts to have access to only install applications or update applications? Is there a group those user accounts can be added to via dscl or some other method? Appreciate any help/input. Ideally I would like to grant users this access/option without giving them full administrative rights. Thank you.

When you're prompted for the administrator password, take note of the requested right in the dialog box, download TextWrangler from the developer's website(not the Mac App Store), and use it to edit the /private/etc/authorization file so that those accounts have that right.
(110103)

Can't change home directory for standard users (admin is OK)

I'm can't relocate home directories for standard users. Relocating works fine for admin users.
When a standard user logs in, they get a message (paraphased) saying "the home directory is not available. If it is located on a server, the server might not be online". If I change the standard user to admin, this message goes away, and everything is fine.
I created a standard user
moved the home directory using the terminal as root: mv UserName /otherlocation/UserName
I then went into users and groups, other options and changed the home directory location.
Rebooted, then tried to log in as the standard users.
Next try - Deleted the standard user and created the same user with admin rights. Followed the above steps and everything works fine.
I don't want this user to have admin rights on my system. Any ideas

Hi,
the AFP is has always been switched on. As for the path I believe this to be correct. The path I am using is:
afp://musicserver/Users
I'm not at the server right now so I mat have got the afp and : and / in the wrong order here but they are correct on the server.
This however does not seem to put the a folder in the Users folder. Could it be something to do with my external hard drive? I am using a Mac Mini as our server (not ideal but fine for us, or at least was) this is booted from our external hard drive. This is the main system drive which is where the Users data is also stored. I have tried all possible paths I can thing of from replacing the 'musicserver' with the IP address. I have also tried adding the name of the drive to the path (System) but all does not work.
Are you able to suggest anything I have missed? Perhaps I'm doing the path wrong?
Thanks again
Chris

Restrict Standard User from not removing the COM-Addins registered under HKLM with Admin rights.

Hello,
I have developed a COM-Addin for word 2013 by VS 2013 and installed it under the HKLM with Admin rights. Now from an non-admin account, ie Standard User I'm able to uncheck that addin from the COM-Addins dialog and remove it also. Previously I have done the
same thing for word 2007 addins and if a non-admin user tries to uncheck it the warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" pops
up. But this is not happening for office 2013 apps(basically word, excel and powerpoint).
This is happening for all Add-Ins installed under HKLM.
How can a Standard User be restricted from unchecking and removing the Office Addins registered under HKEY_LOCAL_MACHINE with same warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" in
a pop-up box?
Regards, Sayan

Hi,
The behavior is changed since Office 2010. Office 2010 and Office 2013 allows a standard user to turn a per-machine add-in off by unchecking the add-in in the COM Add-ins dialog.
To restrict Standard User from not removing the COM Add-ins, we can try to add the add-in to
the Group Policy option: List of managed add-ins in the Office Group Policy template.
Word for example, the policy is under:
User Configuration\Administrative Templates\Microsoft Word 2013\Miscellaneous
To enable this policy setting, provide the following information for each add-in:
In "Value name", specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.
To obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins.
To obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.
In "Value," specify the value as follows:
To specify that an add-in is always enabled, type 1.
Hope this helps.
Regards,
Steve Fan
TechNet Community Support

Remote Desktop repeatedly installs ARD Client for standard users...

ARD 3.2 running on OS 10.5.4 on MacBook Core2Duos...
These are machines imaged from an asr disk image...
No issues with admin users...
Every time Remote Desktop is launched by a standard user, a admin user name / password is required and the Apple Remote Desktop Clint is reinstalled. After, ARD runs normally until it is quit and relaunched, even without a user logout...
Making the standard user an admin user resolves the issue. The issue returns when the admin right are removed from the user...
Have run permission repairs, removed and reinstalled Remote Desktop, manually checked permissions, etc...
It appears that from the standard user perspective, the ARD Client software needs to be updated. ...
Any ideas out there? I have to deploy these machines NOW and I am running out of ideas on this...
Thank you! Les

Dave,
Thank you for the ideas. While you are pretty much correct in what you have said, these are unfortunately not my issue(s). I wish they were!
1) ARD will run fine for a standard user (at least it did in Tiger) as long as it is properly setup and licensed by an admin user ahead of time (especially the entry of the license code). This I have done, and the license code is recognized just fine. I too thought of the promote / demote idea and have tried it. While promoted, it launches fine for the user, but upon demotion goes back to reinstalling the ARD Agent at each launch of the program (this install process does not run while the user is promoted)...
2) The systems are from the same disk image. However, I have given system its own unique, valid, legally purchased serial number. Though the program is loaded on the image, it has been installed only. It is not run or licensed on the master, only on the end-user client machines...
It appears to me that from the standard user perspective, the system thinks that the ARD Agent needs to be updated. I have verified with the PackageMaker SnapShot utility that the ARD Agent and its related files are being installed when this happens, and they appear to be the only thing being installed. The Remote Desktop Admin program itself seems to be fine.
Does anybody know exactly what happens at the file system lever when Remote Desktop is launched? I am thinking my standard user is lacking access to a particular file or directory or right, and I am sure I could quickly find it if I new what to trace. Watching fs_usage has yielded lots of information, but nothing that has helped...
I have also removed and reinstalled Remote Desktop to no avail. Disabled all ACLs on the file system, placed known-good receipts and run permission repairs, and forced chmod -R 777 down the path of everything I can find with the names Remote Desktop, ARD, etc...
I am a little worried at this point that the issue is created by the imaging process something like the question marks in docks in the latter updates of 10.4. I have seen similar issues come up (launching apps under Rosetta being one) with users' LaunchServices property lists after moving their home directories from one volume to another, making the issue very hard to track down, as they reside in files that do not contain the name of the app being affected...
Any further ideas would be much appreciated!
Les

One application won't open for one user

We are doing a rollout of Macbook Pros to a group of people. We have used migration assistant for 20 computers. One application will not open for one user on each of the computers. The applicaiton will open for users that are added, but not the admin user that the application was originally installed. We have tried uninstalling and reinstalling the application with the same results. The one user can not log in. The permissions look right for all files.

How about clarifying some things for me? Does each machine have a different admin user? What user installed the application that won't open (you say there is only one?) How many users on each machine - one or many? How many admin users are there? How many users are Standard or Managed users? What user "can not log in?" Is this on one machine or all machines? Which is the application that won't open, where is it installed, what are the permissions for the application, what are the permissions for the folder in which it's installed?
Are these computers on a network or operating standalone or does each person in the group have their own separate machine?
From where did you migrate for these 20 computers and why did you use Migration Assistant? MA is not the correct tool for doing a multi-system configuration. This is usually done using a net-based installation from a machine running OS X Server or from an XServe or by creating a standard system DVD and installing via ASR.

Reader not showing pdf with long file names in IE8 for standard user

Hi,
I have this problem for standard users, that is, not Admin level. Admin level users have no problems.
If a web site opens up a pdf file with java, usually in a new window, and the file name is very long (I haven't figured out how long, but visually long) then the reader plug-in won't work and opens a blank page. If the file name is small then there is no problem, and reader opens the pdf without problem.
Interestingly, if I edit the document name (say for example the link has something on the end like "&Doc_Type=Statement" which is obviously not part of the document name but part of the SQL used to find the document by the web page) then reader will open the file no problem.
Again, this doesn't happen for Administrative level users.
Any ideas on how to fix?

I'll crosspost to the reader forum.
Yes, reader works in all other situations.

MAM application is not working for some users

Hi All,
Tha MAM application is not working for some users.Different users have different workcenters other than that I dont see any other change. When I run MAM30_090_GETLIST in the backend I can see the no of customized users.But I cant see same no of users in the MEREP_207 table for the Syncbo MAM30_090 and strcture id TOP in the middleware. There is a data when I checked under worklist monitor for that user. But neither the MAM application nor MAM data is downloading to that device.
If I use different user on the same device I can see the MAM application and MAM data.
What could be the wrong in this case. Any help would be highly appreciated.
Mobile Client:MI 70 SP 15 Patch 0 Build 200802280918
Middleware:SAP NetWeaver 2004s with Patch leve 15
Backend:SAP ECC 6.0
Application:MAM 3.0
Thanks and Regards,
Ameer.

Hi,
from your description the source of your issue is quite obvious: some of the MAM users configured in spro are not configured properly.
For T01 SyncBos the number of TOP records in merep_207 MUST be the same as number of headers returned by an appropriate getList FM in the backend.
You need to solve this before you can go any further.
Reason why a record is not recorded in MEREP_207 - getdetail failed for whatever reason. So execute MAM30_ML_getdetail for each of the users that is not replicated in the middleware and check if there are errors in RETURN table. If there is no error - one of the common reason for replication fail is when there are records in item tables that have duplicate primary keys.
Regards,
Larissa Limarova

Hello i need help for adobe creative cloud...when i launch application adobe cc 2014 for photoshop or illustrator.....the apps launch and i can see the workspace and menu bar for a while and suddenly this application close automatic

hello i need help for adobe creative cloud...when i launch application adobe cc 2014 for photoshop or illustrator.....the apps launch and i can see the workspace and menu bar for a while and suddenly this application close automatic

Sign in, activation, or connection errors | CS5.5 and later
Mylenium

How to change the browser used for Google search from context menu of selected text?

How to change the browser used for Google search from context menu of selected text?
It uses Safari. But I want to use Chrome (it's my default browser).

How to change the browser used for Google search from context menu of selected text?
It uses Safari. But I want to use Chrome (it's my default browser).

HT1926 when i try to download itunes 11 my computer stops the download and displays the message could not access network location #user profile%\start menu\programs\startup\

when i try to download itunes 11.1 or any updates i get the message could not access network location #user profile%\start menu\programs\startup\. any help

Let's try the fixit from the following Microsoft document with that one:
Fix problems with programs that can't be installed or uninstalled

Enable Third Party Preference Panes for Standard User Account

I work as a Mac admin for a private school.
All of our Macs are imaged with two accounts, an Admin account (for tech support) and a standard user account (for faculty/staff/students).
One of our art rooms has Wacom tablets.
There is a Wacom preference pane in the "Other" section of System Preferences, which allows you to customize the sensitivity, etc of the stylus.
In the admin account, this preference pane is enable, in the standard user account, it's grayed out.
I would like to give the standard user account access to this preference pane, so each student can customize the Wacom to their liking.
I've tried everything I can think of, from changing the ownership and permissions of the preference pane in /Library/PreferencePanes to creating an identical folder with the preference pane in ~/Library. Any help would be MUCH appreciated. Thanks!

If this is retricted by policy there is not much you can do about it.
There are no settings to change on LPT ports. COM have utilites that sett the settings.
At a command prompt type: MODE /?
Follow the instructions. Only administrators can use this utility. Only administrators can change hardware settings.
I recommend contacting your network admins for assistance in getting this done. It cannot be done with a script.
¯\_(ツ)_/¯

Weblogic starting in ADMIN mode for Epmserver0...11.1.2.3 version

Hi All,
I have installed Hyperion 11.1.2.3 version with sql server 2008. after configuration .. services are up and running.But i'm unable to login to worskpace/shared services.
i tried login to weblogic. under servers epmserver0 in running in ADMIN mode...insted of runnin mode.
also EPMA services are not starting...
Can anyone give me the solution for this 2 issues...
Regards,
Ravi

user9060912 wrote:
Hello hyperionEPM...
Firstly thank you very much for your help.
I haven't check the forum due some prob... pls dnt says like this... i have marked helpful for your post.
once again thank you hyperionEPM.
One more thing... please try to help the people if you know the answer and dont expect anything from them.they will automatically do this.
and about my questions analysis ... please don't do like this to anyone.
thanks for you big big help...I am not here to fight, so relax... :)
Sorry to say but you shouldn't be saying all this...After all points encourage users on the forum to answer to your queries..
Thanks,
hyperionEPM

Auto update flash player for standard user without notification

Hello, I hope I don't ask an already answered question, I've searched around without finding precisely what I'm looking for, but if I've missed something please point me in the right direction.
I'd like to know if there is a way for flash player to be automatically updated while a standard user is connected (no admin rights) and without any notifications.
So far I configured the mms.cfg file (in c:\Windows\SysWOW64\Macromed\Flash for a win7 64bit) with those settings:
AutoUpdateDisable=0
AutoUpdateInterval=0
SilentAutoUpdateEnable=1
SilentAutoUpdateVerboseLogging=1
(the autoUpdateInterval=0 is for testing, I plan to put a 7days delay
I plan to update all our clients with the latest version of flash player via sccm and add this file during the process.
Then I hope that I won't have to push any other updates (until I guess version 11.5 or maybe even 12...)
Will those settings will work as I intended?
As we'll use 32 bits browsers do I need to put this file also in c$\Windows\System32\Macromed\Flash ?
If it wont work, is it doable?
thanks!

Hi ersatyle,
Thanks for clarifying.
will flash player be automatically updated while a standard user is connected (no admin rights) and without any notifications.
By pointing the Background Updater to an internal server, yes.
Are those settings will work as I intended?
The AutoUpdateInterval setting in the mms.cfg has no effect on the Background Updater. AutoUpdateInterval can only be used for the notification updater. If you're setting up background updates from an internal server, this property is best dropped from the mms.cfg to avoid confusion. The other settings will work as expected. Once you have your clients set up and tested, I also recommend dropping SilentAutoUpdateVerboseLogging, since this will reduce the size of the log file.
As we'll use 32 bits browsers do I need to put the mms.cfg file also in c$\Windows\System32\Macromed\Flash, If it wont work, is it doable?
There is only one location for the mms.cfg. The same file is used for 32-bit and 64-bit browsers. From the administration guide, page 22:
mms.cfg file location:
Assuming a default Windows installation, Flash Player looks for the mms.cfg file in the following system directories:
•32-bit Windows - %WINDIR%\System32\Macromed\Flash
•64-bit Windows - %WINDIR%\SysWow64\Macromed\Flash
Note: The %WINDIR% location represents the Windows system directory, such as C:\WINDOWS.
I hope this answers your questions. Let us know if there's anything else.
-Stephen

Finder is not available for standard user

Hi,
I recently installed OS X (10.8.2) from app store. We created "Data" folder and created few admin and non admin users. Granted access to both users to same folder. When admin logged off and standard user logged in, he could not find Finder. Repeated this with 8 standard users and Finder is not available for all 8 standard users. For 2 admin users Finder is available.
We did not change any settings whatsoever, so not sure this behavier is by design or I am missing something.
Please help
Thanks in advance.

Are you running OS X 10.8 client or Server (is Server.app installed)? If you are using OS X Server, are these local accounts or network accounts?
What do you mean by "could not find Finder?" As in could not log in? Could not access this 'Data' folder in Finder?

Launching application in admin mode for standard users from start/menu

Similar Messages

Maybe you are looking for