LDAP users that are not Windows users

Hello,
I would like to use Active Directory as a directory service for internal intranet sites, etc.
I have users that do not need access to a Windows desktop as they are connecting to the sites via kiosk/mobile devices.
Can I set up a user that can be validated through LDAP but would not be able to access a Windows desktop through the normal Windows logon screen ?
Chris.

Hi Chris,
If you want to restrict some users in Active Directory can only logon through mobiles/devices rather than computers, you can configure
Deny log on locally and Deny log on through Terminal Services through Group Policy.
More information for you:
User Rights
http://technet.microsoft.com/en-us/library/dd349804(v=WS.10).aspx
Best Regards,
Amy

Similar Messages

Tzupdater.How it reflects the users that are not using the new USA DST rule

If I update the JRE with tzupdater or just replace it with newer JRE will the time change according to the time zone I live in because I think that the changes in USA DST will not apply for the most of the other countries.

Hi,
You can do this directly in OAM, with option "a" (using auxiliary object class). You configure OAM to use the main person object class (inetorgperson) and then you can associate extra auxiliary object classes to it - and header variables can be set from any of the attributes that are in the user's profile, both main and auxiliary.
Regards,
Colin

Block deleting DMS Document from user that is not initiator

Hi All
Hello
I Want to Block deleting DMS Document ((CV02N)
form all users that are not the initiators of the Document or
Bolcking for all user
for that I created new user authrization for CV01N,CV02N
without authorization for delete
I created a DOC in SPS (production) No 3001591
but I successed to delete the doc through cv02n
in the buttom icon for delete original
There is an option to block any user or specific form delete document ?
If there is no option for that there is an user exit that I can used ?
Thanks in advanse for your help

Hello,
it is possible to extract DMS's file to application server directory:
FUNCTION Z_DMS_VIEW.
""Interfase local
*" IMPORTING
*"     VALUE(DOC_NUMBER) LIKE BAPI_DOC_DRAW2-DOCUMENTNUMBER OPTIONAL
*"     VALUE(DOC_PART) LIKE BAPI_DOC_DRAW2-DOCUMENTPART OPTIONAL
*"     VALUE(DOC_TYPE) LIKE BAPI_DOC_DRAW2-DOCUMENTTYPE OPTIONAL
*"     VALUE(DOC_VERS) LIKE BAPI_DOC_DRAW2-DOCUMENTVERSION OPTIONAL
*"     VALUE(ORIGINAL_PATH) LIKE BAPI_DOC_AUX-FILENAME OPTIONAL
*" EXPORTING
*"     VALUE(P_RETURN) LIKE BAPIRET2 STRUCTURE BAPIRET2
*" TABLES
*"      DOC_FILES STRUCTURE BAPI_DOC_FILES2 OPTIONAL
CLEAR:   doc_files.
REFRESH: doc_files.
DATA: i_doc_files like bapi_doc_files2.
DATA: i type i.
i = 2.
while i = 2.
   i = 2.
endwhile.
CALL FUNCTION 'BAPI_DOCUMENT_CHECKOUTVIEW2'
    EXPORTING
      DOCUMENTTYPE    = DOC_TYPE
      DOCUMENTNUMBER = DOC_NUMBER
      DOCUMENTPART    = DOC_PART
      DOCUMENTVERSION = DOC_VERS
      DOCUMENTFILE    = i_doc_files
      GETSTRUCTURE    = '0'
      GETCOMPONENTS   = 'X'
      ORIGINALPATH    = ORIGINAL_PATH
      HOSTNAME        = ' '
      GETHEADER       = 'X'
      PF_HTTP_DEST    = 'SAPHTTPA'
      PF_FTP_DEST     = 'SAPFTPA'
    IMPORTING
      RETURN          = P_RETURN
    TABLES
      DOCUMENTFILES   = DOC_FILES.
ENDFUNCTION.
ORIGINAL_PATH must be a directory of application server.
By background is not possible (I don't know how can we do that) download thsi file to PC.
Then with the file in application server we can :
- to map application server directory in a drive unit of Pc
- to transfer with a ftp client from Pc
- rfcexec
But always the bapi can not download the file: it must be a process in Pc who transfer the file.

OSD - MDT 2013 - USMT Scan/LoadState Runs Successfully but user profiles are not restored.

I have this odd issue that I can't seem to figure out. I have an MDT Task Sequence that I created runs scanstate and loadstate without any issues using hard link. Unfortunately, the user profiles are not loaded/restored after loadstate runs. I can go to
the StateStore folder and manually run the loadstate again or use the Windows Easy transfer to restore the users, but I want this to occur when loadstate runs.
Here is the loadstate log:
2014-03-30 18:01:10, Info [0x000000] USMT Started at 2014/03/30:18:01:10.787
2014-03-30 18:01:10, Info [0x000000] Command line: C:\_SMSTaskSequence\Packages\CMP0010E\x86\loadstate.exe C:\StateStore /c /v:5 /l:C:\WINDOWS\system32\CCM\Logs\SMSTSLog\loadstate.log /progress:C:\WINDOWS\system32\CCM\Logs\SMSTSLog\loadstateprogress.log
/i:C:\_SMSTaskSequence\Packages\CMP0010E\x86\MigApp.xml /i:C:\_SMSTaskSequence\Packages\CMP0010E\x86\MigUser.xml /ue:*\* /ui:company.local\*
2014-03-30 18:01:10, Status [0x000000] Activity: 'MIGACTIVITY_COMMAND_LINE_PROCESSING'
2014-03-30 18:01:10, Info [0x000000] Script file specified: C:\_SMSTaskSequence\Packages\CMP0010E\x86\MigApp.xml[gle=0x000000cb]
2014-03-30 18:01:10, Info [0x000000] Script file specified: C:\_SMSTaskSequence\Packages\CMP0010E\x86\MigUser.xml[gle=0x000000cb]
2014-03-30 18:01:10, Info [0x000000] Replacement Manifests are processed because this OS version has built-in component manifests
2014-03-30 18:01:10, Info [0x000000] The ReplacementManifests folder used to service system component manifests is not present. OS settings migration will be done with system component manifests
installed onto the system.
2014-03-30 18:01:10, Info [0x000000] Starting the migration process[gle=0x00000006]
2014-03-30 18:01:10, Status [0x000000] Activity: 'MIGACTIVITY_MIGRATION_START'
2014-03-30 18:01:10, Info [0x000000] Excluding path: C:\_SMSTaskSequence\Packages\CMP0010E\x86
2014-03-30 18:01:10, Info [0x000000] Excluding path: C:\StateStore
2014-03-30 18:01:10, Info [0x000000] Excluding path: C:\WINDOWS\system32\CCM\Logs\SMSTSLog\loadstate.log
2014-03-30 18:01:10, Info [0x000000] Excluding path: C:\WINDOWS\system32\CCM\Logs\SMSTSLog\loadstateprogress.log
2014-03-30 18:01:10, Info [0x000000] Excluding path: C:\_SMSTaskSequence\Packages\CMP0010E\x86\MigApp.xml
2014-03-30 18:01:10, Info [0x000000] Excluding path: C:\_SMSTaskSequence\Packages\CMP0010E\x86\MigUser.xml
2014-03-30 18:02:55, Info [0x000000] Leaving MigCloseCurrentStore method
2014-03-30 18:02:55, Status [0x000000] Activity: 'MIGACTIVITY_SUCCESS'
2014-03-30 18:02:55, Info [0x000000] Success.[gle=0x00000006]
2014-03-30 18:02:55, Info [0x000000] USMT Completed at 2014/03/30:18:02:55.116[gle=0x00000006]
2014-03-30 18:02:55, Info [0x000000] Entering MigShutdown method
2014-03-30 18:02:55, Info [0x080000] COutOfProcPluginFactory::FreeSurrogateHost: Shutdown in progress.
2014-03-30 18:02:55, Info [0x0803e6] Removing mapping for HKLM
2014-03-30 18:02:55, Info [0x0803e7] Successfully unmapped HKLM
2014-03-30 18:02:55, Info [0x0803e6] Removing mapping for HKU
2014-03-30 18:02:55, Info [0x0803e7] Successfully unmapped HKU
2014-03-30 18:02:55, Info [0x080487] Destroying OS analysis service
2014-03-30 18:02:55, Info [0x080488] Destroyed OS analysis service
2014-03-30 18:02:55, Info [0x000000] Leaving MigShutdown method

I've got this to work although I haven't figured out the root cause.
My initial OSDMigrateAdditionalCaptureOptions were: /Hardlink /nocompress /uel:30 /config:%_SMSTSMDataPath%\Packages\%_OSDMigrateUsmtPackageID%\%Processor_Architecture%\config.xml"
My OSDMigrateRestoreCaptureOptions were: /Hardlink /nocompress /ue:*\* /ui:domain.local\*
Since the restore was failing, I removed the domain name from the ui switch which magically caused the restore process to load the user profiles to the computer.
My final OSDMigrateRestoreCapptureOptions which worked: /Hardlink /nocompress /ue:%computername%.
Just to note /hardlink commands are not necessary when you are using MDT task sequence, but I put it in anyway and it seems ensure that I get consistent results.

How do I connect a Lexmark x6570 printer to my iMac wirelessly? The basic user guides are not helping me and the add printer is not finding my printer...

How do you connect a lexmark x6570 printer to an iMac wirelessly? The basic user manuals are not helpful as the printer is not showing up when using the add printer function. I my printer is working fine wirelessly with my windows laptop so it appears to be functioning fine. This is my first time using an Apple at home...
Thank you.

Hello,
I am using a Mac with this router. Any ideas how I can set it up to print wireless. Im not a tech person so this gets confusing for me sometimes.
Thanks!

Lync 2013 client is deployed but user accounts are not migrated from OCS to Lync 2013 Server - how to open Lync meetings automatically in the Lync Web Plug-in

We have in our enterprise the following scenario:
1 - Lync 2013 client is installed
2 - User accounts are not migrated to Lync 2013 Server, users are using Office Communicator as their main tool
3 - Users receive Lync 2013 meeting requests but when try to access them, Lync 2013 client launches and shows error. Users will need to open the browser and paste the URL to the address bar but this still open
4 - We cannot use the workaround of adding "?SL=1" to the Lync 2013 meeting URL as the user base is large and manual workaround is not accepted
5 - Question: is there any automated way, via egistry key or GPO setting, so that users temporarily (until their accounts are migrated to Lync 2013 server) can bypass Lync 2013 client completely and automatically open all Lync 2013 meetings
on the browser, using Lync Web Plug-in?

Thanks for the response,
First, I should have mentioned clearly that users have Office Communicator 2007 client and Lync 2013 client installed in their machines. Their accounts are not migrated yet to Lync 2013 server.
Second, we are using IE9 and IE10. The issue is that users CAN join Lync 2013 meetings with their browsers but have to paste the URL manually to browser and add "?SL=1" otherwise, if they just click at the "Join Online Meeting" or "Join
Lync Meeting" URL it launches Lync 2013 client which shows error because is not configured yet, as they are using OCS client and migrating slowly to Lync 2013 server.
Is there a Group Policy setting or a registry key from Microsoft that can be turned on to these users machines and make will all Lync meeting requests to be opened in IE browser instead of Lync 2013 client. We need a way to ignore
Lync 2013 client until user accounts are migrated to Lync 2013 Server. Manually typing URLs is not an option in a big organization, can't explain thousands of users of different levels what to do.
We are regretting the decision not to separate Lync 2013 from Office 2013 package we deployed recently. If Lync 2013 is uninstalled then all Lync meeting requests are opened in browser without an issue.

Script to find users that are a member of more than one of a list of specific groups

Hi,
I need to generate a list of users that are members in more than one group, out of a list of specific security groups. Here's the situation:
1) We have about 1100 users, all nested under a specific OU called CompanyUsers. There are sub-OUs under CompanyUsers that users may actually be in.
2) We have about 75 groups, all directly under a specific OU called AppGroups. These groups correspond to a user's role within an internal line of business application. All these groups start with a specific character prefix "xyz", so the group
name is actually "xyz-approle".
I want to write a script that tells me if a user from point 1) is a member in more than one group in point 2). So far, I've come up with a way to enumerate the users to an array:
$userlist = get-qaduser -searchroot 'dq.ad/dqusers/doral/remote' | select samaccountname |Format-Table -HideTableHeaders
I also have a way to enumerate all the groups that start with xyz that the user is a member of:
get-QADMemberOf -identity <username> -name xyz* -Indirect
I figure I can use the first code line to start a foreach loop that uses the 2nd code line, outputting to CSV format for easy to see manual verification. But I'm having two problems:
1) How to get the output to a CSV file in the format <username>,groupa,groupb,etc.
2) Is there any easier way to do this, say just outputting the users in more than one group?
Any help/ideas are welcome.
Thanks in advance!
John

Here is a PowerShell script solution. I can't think of way to make this more efficient. You could search for all groups in the specfied OU that start with "xyz", then filter on all users that are members of at least one of these groups. However, I suspect
that most (if not all) users in the OU are members of at least one such group, and there is no way to filter on users that are members of more than one. This solution returns all users and their direct group memberships, then checks each membership to
see if it meets the conditions. It outputs the DN of any user that is a member of more than one specfied group:
# Search CompanyUsers OU.
strUsersOU = "ou=CompanyUsers,ou=West,dc=MyDomain,dc=com"
$UsersOU = New-Object System.DirectoryServices.DirectoryEntry $strUsersOU
# Use the DirectorySearcher class.
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.SearchRoot = $UsersOU
$Searcher.PageSize = 200
$Searcher.SearchScope = "subtree"
$Searcher.PropertiesToLoad.Add("distinguishedName") > $Null
$Searcher.PropertiesToLoad.Add("memberOf") > $Null
# Filter on all users in the base.
$Searcher.Filter = "(&(objectCategory=person)(objectClass=user))"
$Results = $Searcher.FindAll()
# Enumerate users.
"Users that are members of more than one specified group:"
ForEach ($User In $Results)
    $UserDN = $User.properties.Item("distinguishedName")
    $Groups = $User.properties.Item("memberOf")
    # Consider users that are members of at least 2 groups.
    If ($Groups.Count -gt 1)
        # Count number of group memberships.
        $Count = 0
        ForEach ($Group In $Groups)
            # Check if group Common Name starts with the string "xyz".
            If ($Group.StartsWith("cn=xyz"))
                # Make sure group is in specified OU.
                If ($Group.Contains(",ou=AppsGroup,"))
                    $Count = $Count +1
                    If ($Count -gt 1)
                        # Output users that are members of more than one specified group.
                        $DN
                        # Break out of the ForEach loop.
                        Break
Richard Mueller - MVP Directory Services

User pictures are not shown when users are added to person field in custom list

Hi,
Recently we have migrated our intranet from SP2010 to SP2013. We upgraded User profile service application, My sites and Intranet site to new environment. We haven't upgraded sites to use SP 2013 templates due to some business decisions. Everything
is working fine and as expected.
There are few lists in our environment where we have added users in a persons fields and allowed to show their pictures with details along with name. these user pictures are not being shown on to the page. After looking in picture property I found that "white
Space" in a picture library name is replace by %2520 instead of %20 (/user%2520photos/profile%2520pictures).
I tried reproducing problem on a new team site with SP 2010 template and it is reproduced however it is not occurring for a team site with SP 2013 template.
Any suggestions would be very helpful for resolving this issue. Thanks in advance.
-Amol Meshe

We are experiencing the same issue. We get a /User%2520Photos/Profile%2520Pictures/ path anytime we use the people picker field with the option to display picture or the picture and details option.
EDIT: This is only a problem on the list view. If you open the display form the image shows just fine. I can't see any setting view Edit Page and updating the web part that contains the list data to correct this.
Michael Allen (.NET and SharePoint 2010 Developer)

Delivering the crystal formated reports to users who are not defined BO/SAP

Hi,
The requirement is to send the crystal formatted report to number of users who are not in BO/SAP System. Can we use the whole dynamic contact list for automated personalization and distribution to people not set up as a user in the system?
Can we deliver a publication to the users who are not at all defined in the BO system or any SAP system
its to the users who are all together different vendors who do not have any login.
Please let me know if this is possible via publication if possible could any one provide me any doc which states the same
Thanks in Advance,

Moved to BOE Admin forum.
I assume you are using a BOE Scheduling options to distribute your reports?
Check the Scheduling Guide and formats for more info.
And yes simply send them a DPF file and set up a Group in your e-mail Server, or individual if that works better. More work though.
Don

Sp_who2 -need only active sessions from users which are not the background sessions

Hello,
sp_who2 -need only active sessions from users which are not the background sessions
Please assist.
Best regards,
Vishal

Its better to use DMV's to view only active sessions from users (spid>50) as mentioned by Shanky.
You can do that using sp_who2 but it requires a bit of programming to list only user sessions.
SELECT
S.SESSION_ID,
S.STATUS,
S.HOST_NAME,
C.CLIENT_NET_ADDRESS,
CASE WHEN S.LOGIN_NAME = S.ORIGINAL_LOGIN_NAME THEN S.LOGIN_NAME ELSE S.LOGIN_NAME END LOGIN_NAME,
S.PROGRAM_NAME,
C.CONNECT_TIME,
S.LOGIN_TIME,
CASE S.TRANSACTION_ISOLATION_LEVEL
WHEN 0 THEN 'UNSPECIFIED'
WHEN 1 THEN 'READUNCOMITTED'
WHEN 2 THEN 'READCOMMITTED'
WHEN 3 THEN 'REPEATABLE'
WHEN 4 THEN 'SERIALIZABLE'
WHEN 5 THEN 'SNAPSHOT'
ELSE CAST(S.TRANSACTION_ISOLATION_LEVEL AS VARCHAR(32))
END AS TRANSACTION_ISOLATION_LEVEL_NAME,
S.LAST_SUCCESSFUL_LOGON,
S.LAST_UNSUCCESSFUL_LOGON,
S.UNSUCCESSFUL_LOGONS,
S.CPU_TIME AS CPU_TIME_MS,
S.MEMORY_USAGE AS MEMORY_USAGE_PAGES,
S.ROW_COUNT,
S.PREV_ERROR,
S.LAST_REQUEST_START_TIME,
S.LAST_REQUEST_END_TIME,
C.NET_TRANSPORT,
C.PROTOCOL_TYPE,
S.LANGUAGE,
S.DATE_FORMAT,
ST.TEXT AS QUERY_TEXT
FROM
SYS.DM_EXEC_SESSIONS S
FULL OUTER JOIN SYS.DM_EXEC_CONNECTIONS C ON C.SESSION_ID = S.SESSION_ID
CROSS APPLY SYS.DM_EXEC_SQL_TEXT(C.MOST_RECENT_SQL_HANDLE) ST
WHERE
S.SESSION_ID IS NULL
OR S.SESSION_ID > 50
ORDER BY
S.SESSION_ID
-Prashanth

Find USERS that are using a particulary Forms ??

It is possibile to find the USERS that are using the a FORMS in application server ??
I must update sometime a forms, but if the user is using the forms it is not possibile. Find the user i can call it for exit from teh form.
Thank's a lot.

I'm not aware of such an information somewhere. We had a similar need (actually we needed something more), and we used DBMS_APPLICATION_INFO package, which updates CLIENT_INFO column in V$SESSION.
Bad news are : you have to change every Form to do that....but it's not difficult, you can add a call to that package in WHEN-NEW-FORM-INSTANCE trigger in each Form...

HT2515 Does iChat work with other users that are on other types of smartphones? or only Mac phones and Mac mail, contacts, etc?

Does iChat work with other users that are on other types of smartphones? or only Mac iPhones and iMac Mail, Contacts, etc?

Hi,
The Messages Beta will Send iMessage to iPhones (Messages replaces iChat)
iChat can SMS to phones
It needs the computer to be listed as if it in the United States and contacting a Phone that is on a Carrier in the United States that is accepting SMS forwarding from AIM
You list the Buddy as AIM and then +plus their number as in +123456789
The computer can be made to "think" it is in the United States in System Preferences > International (or Text a Language in Lion) then Formats tab.
The Phone has to be a US phone with all the trimmings about AIM's SMS forwarding.
11:14 PM Monday; February 20, 2012
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 iMac 2.5Ghz 5i 2011 (Lion 10.7.3)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

How to find out FICO user exits that are used by User

How to find out the FICO user exits that are used by user.

Go to tcode CMOD. In the project field drop down your list there. Put a Z* there and run the list. These should be all the exits that are activated. Search for the ones that pertain to FI. You can also search by development class. You need a little ABAP knowledge to search easily. You get this by going to the tcode then to status then to the program then to the attributes. There you find the development class. Ie FBAS.
pls assign points if helpful as a way to say thanks.

When I open mac mail, it opens 1000 emails in separate windows. Emails that are not even in my account anymore. Can anyone help?

When I open mac mail, it opens 1000 emails in separate windows. Emails that are not even in my account anymore. The system freezes and the only thing I can do is force quit. Can anyone help?

You should post in the Mail forum area of whichever os is installed on your computer.

How to retrieve the users that are following a document using JSOM / REST APIs in SharePoint 2013

Hi everyone,
Does anyone know how to use JSOM / REST APIs to retrieve the users that are following a specific document in SharePoint 2013?
Thanks in advance,
Nam

Hi Nam,
Please use the sample code to get the followers for the document. Courtesy: Mokhtar
Bepari
using Microsoft.SharePoint.Client;
using Microsoft.SharePoint.Client.Social;
ClientContext clientContext = new ClientContext("http://URL");
SocialFollowingManager followingManager = new SocialFollowingManager(clientContext);
SocialActorInfo actorInfo = new SocialActorInfo();
actorInfo.ContentUri = "<documenturl>"; //set the document url.
actorInfo.ActorType = SocialActorType.Document;
//By using the GetFollowed method you can get the people who the current user is following.
ClientResult < SocialActor[] > followedResult = followingManager.GetFollowed(SocialActorTypes.Users);
//By using the GetFollowers() method you can get the people who are following the current user.
ClientResult < SocialActor[] > followersResult = followingManager.GetFollowers();
clientContext.ExecuteQuery();
Once you get the resultset you can iterate like below:
foreach(SocialActor actor in followedResult)
string name = actor.Name;
string imageURL = actor.ImageUri;
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

LDAP users that are not Windows users

Similar Messages

Maybe you are looking for