Local admin user's folder damaged / missing on 10.4.2 server

my admin account on my 10.4.2 server cropped up a new problem over the weekend. The user folder is missing or damaged, so upon login, i get a default dock et al, and a warning that the folder in /users/admin can't be found. If I look there in the finder, it lists it, with no icon, no contents, messed up ownership, etc. Any idea how I can fix this?? My client is a bit worried about their server due to this. thanks! Running disk utility and repairing permissions didn't help.
[email protected]
Dual 2 GHz G5 Mac OS X (10.4.2)

Again... never got a response.

Similar Messages

Can local admin users override mcx?

Can a local admin user override managed computer settings? ie, the "automatically hide dock" is set to hide in mcx, but a local admin wants to "always show".
Is this possible?
In another post, I found an interesting statement that might apply, but don't know where to do this:
(https://discussions.apple.com/message/5781831?searchText=Is%20there%20a%20way%20 for%20local%20users%20to%20override%20mcx%20settings#5781831)
"There's a Workgroup Manager Computer settings that allows admin users to turn off managed preferences. Be sure this is disabled."

Hi Don,
Thanks for your suggestions.
I find these two helpful links [1211821 - How to determine what folders the TEMP and TEMP variables are set to |http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes_boj/sdn_oss_boj_erq/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/scn_bosap/notes%7B6163636573733d36393736354636443646363436353344333933393338323636393736354637333631373036453646373436353733354636453735364436323635373233443330333033303331333233313331333833323331%7D.do] and [1215142 - Exporting to disk file defaults to the Temp folder |http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes_boj/sdn_oss_boj_erq/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/scn_bosap/notes%7B6163636573733d36393736354636443646363436353344333933393338323636393736354637333631373036453646373436353733354636453735364436323635373233443330333033303331333233313335333133343332%7D.do]. I also check the folder permissions and find that non-admin has full control to it.
And during create report, two files ~DFC500.tmp and ~DFC493.tmp are successfully created into TEMP folder, but the mentioned error still comes up.

Sharing and Permissions for Admin Users Home Folder

Staff user group deleted from Admin User home folder. User groups listed are the user as read/write, admin as read and everyone as read. If you create a new Admin user the group "staff" is listed instead of "admin"???? How do i get it back to how it was? It also seems to be effecting stored passwords in my keychain and other apps.

Hi, i think it depends who are you serving for, if you are just serving for a small office or home server or a big organization. The following quick thinking just came to me:
I think cups set automatically a system user of its own, and runs as it, so no trouble there. Cups also has the option to set users and it uses the system users as default, i think it depends in in how many printers/users your have in your server.Users that can manage cups are in the lp group.
For nfs every user should have their home, samba is also a good option if you have windows computer in your network and it integrates better with graphical file managers like nautilus in the clients side, but it is a hassle to configure.
You should run the web server (owncloud ) as it own user, maybe you can manage to set something up for owncloud in the filesystem, but owncloud uses a database, and the users for owncloud are stored in there, and they are not system users.
You can configure ssh for local use only enabling the corresponding subnets in your /etc/sshd.conf and optionally but recommended you can set a firewall and permissions. You can use iptables but i prefer ufw for simple setup.
I think you should read the wiki:
https://wiki.archlinux.org/index.php/users_and_groups
and the other respective topics in the wiki.
Also as an advice i know that arch linux is a great distribution, but you have to do more work to mantain a stable server. I would recommend debian or another more conservative distro, but of course it is your choice.
Last edited by hydrosIII (2014-11-06 06:26:45)

Photoshop cs6 crashes with "appcrash - module ig75icd64.dll; no problem for a local admin user however. i've tried giving specified user full access to photoshop.exe and set it to Win XP compatibility. how do i fix this without giving user local admin acc

photoshop cs6 crashes with "appcrash - module ig75icd64.dll; no problem for a local admin user however. i've tried giving specified user full access to photoshop.exe and set it to Win XP compatibility. how do i fix this without giving user local admin access?

Danny,
Topic or subject titles should be clear, pertinent and concise so that individual users can tell at a glance if they can help or not.
That field is not for attempting to fit your entire question in there.
Please keep this in mind next time you post. Thank you.

Clients local admin user is managed - how can it be unmanaged

Hi. I have a local user on all my client machines called admin with admin rights. Have had this same user with same password for many years for over 300 client machines from emacs to intel macs. With the 10.6.3-5 server update (major issues for the last6 months) with 10.6.2-5 intel imac clients, logging in as admin gives me a reduced dock. just finder and trash. Every use of any applications comes up with "you dont have permission to use the application "xyz". with 3 buttons Always Allow, Allow once and OK. entering admin and password always results in a second box with the same message. entering admin and password then allows me to use it. This behaviour does not happen on 10.5.8 clients and has never happened before.
In system preferences it says administrator, admin is managed. clicking the lock and authenticating allows me to access the tick for Enable parental controls. If I click on the tick to remove it, it comes up with the message. "You cannot enable parental controls for an adminstrator account. Create a new user account etc." It is unticked but the tick comes back on restarting the system preferences and even restarting the computer immediately.
I have tried deleting managed prefs etc but to no avail. I have tried removing the computer from the network account server and I get my dock back and can use applications but it still says I am a managed user. and I need the network account server for student logins. Any thoughts how to unmanaged local admin users on client machines to get back to the way it has been since 10.2.4 clients!!!

Did you try creating a new admin user, and then using that new account to make the Change to unmanage your "admin" account?
I don't think osx will let you create anaccount called admin these days, as security precaution. Perhaps that has something to do with your problem.

How to reset local admin user password in

Dear members,
i want to reset local admin account(not administrator built-in), let say i have user adminlocal and member in administrator group. my question, how to reset this user via GPO in domain, because i have more than 5000 workstation in my environment. and how to
generate summary of all workstation which are password reset.
i've tried from this link,
http://community.spiceworks.com/how_to/show/1966-how-to-change-local-user-or-admin-passwords-on-remote-computers
using PSTools sysinternal from microsoft, but while i execute one PC on domain for sample using this script, they showing access denied
anyone in this forum can help me to resolve this problem?.

Dear,
you can use Powershell to do this.
I've found a script in the script center which can do this.
http://gallery.technet.microsoft.com/scriptcenter/66a5b38f-cdf1-4126-aa0c-be65e16dd650/view/Discussions#content
Set-Password -computer 'server' -user 'Administratorlocal'
You can create a loop in powershell to check all your servers which you've posted in a .txt file for example.
$strcomputers = Get-Content c:\servers.txt
foreach ($strcomputer in $strcomputers)
$admin=[adsi]("WinNT://" + $strComputer + "/administratorlocal, user")
$admin.psbase.invoke("SetPassword", "Whatever1")

SCCM 2012 - Query Local Admin Users

Hi Guys,
I´m trying to get all users that are local admins of my network using sccm12.
How it´s possible?
Thank you.

Hi,
We can use the following query as follows
SELECT DISTINCT SYS.Netbios_Name0, SYS.User_Name0, LocalAdminMembers.TimeStamp, LocalAdminMembers.Type0 as Object LocalAdminMembers.Account0, LocalAdminMembers.Domain0 FROM fn_rbac_GS_LocalAdminMembers0(@UserSIDs) LocalAdminMembers JOIN fn_rbac_R_System(@UserSIDs)
SYS ON SYS.ResourceID = LocalAdminMembers.ResourceID WHERE SYS.Netbios_Name0 LIKE @variable ORDER BY SYS.Netbios_Name0
To create a custom report
1. Go to SCCM console – Reports – Create report
2. Complete the Reporting Wizard. The MS SQL Report Builder will be opened up now
3. Double Click the Table or Matrix which will open to select a new dataset window. Select ‘Create a dataset’
4. Select the existing Data source connection and enter the data source credentials
5. Under Design a Query window, Select “Edit as text” and copy the above query
6. Next arrange the field as per the attached doc
7. Choose the Layout of the Report and complete the wizard
8. Right Click on report, where the empty area of report page and select properties. Go to reference tab, Click on assemblies.
Add following assemblie - SrsResources, culture=neutral
And Click OK.
9. Select UserSIDs under Paramter and edit the properties
10. Go to Default Value and select Specific Values and Add expression. Leave the rest of the tab as default and complete it
11. Select Variable under Parameter and edit the properties
12. Type Computer Name under Prompt field and leave the rest of the tab as default and complete it.
13. Type Computer Name under Prompt field and leave the rest of the tab as default and complete it.
You are done.
Regards,
Vinod

Deny local admin users from logging on (or at least restrict them)

I have a fully managed environment (AD authentication, using managed preferences from OD) that I am testing before rollout.
My concern is that once preferences are managed, admin users will be able to create local admin accounts (I can't block the accounts pane otherwise users will not be able to change their passwords), then login and bypass preference management.
Is there a way for local admin accounts logging on to inherit a default set of preferences that are only applied when a local account (or someone not in one of my directory groups) logs in, or better still - DENY local admins from logging in, or deny anyone from being able to create new local accounts?
(Please don't suggest denying the users admin rights - it's not possible for political reasons).
Many thanks in advance!
FZ.

There is no root or admin privilege that controls root or admin privilege. You have it, or you don't.
I've been in exactly this case many years ago, and with replete with the politics of privileges and perceived prestige.
I ended up documenting the foibles of the privileged folks and the time spent on recovery and restoration and related for each event, and waiting for a sufficient accumulation of same (and that didn't take very long), and I then preemptively yanked the access.
Yes, the good folks squawked. Loudly. Yes, I got called onto the carpet.
The Designated Responsible Individual (DRI) was then left to ruminate and make a decision, and (with the assistance of the foibles-related documentation around the efforts and time and costs) made the call. The proffered alternative (with the costs and the design and time estimates ready) with a private subnet or private LAN and private services and and a dedicated firewall configured between the privileged folks and the production LANs to keep the good folks safe and secure. Here's what that'll cost...
Either way, you've punted the responsibility and the decision up the management chain to the DRI.
(Oh, wait, did I mention which way that firewall was going to be facing? No? Oops. Bummer.)

Users library folder is missing

I have two users set up, in my principal user account (has admin rights) I can see all folders EXCEPT the Library folder, I only discovered this recently when wishing to delete a preference file from this users library. The other users library is visible as normal.
I have only recently noticed this and attribute it to a change since:-
Updating to 10.5.5
Starting to use Time Machine
Or possibly changing the computers short name some weeks ago
I had not needed to look in the users Library folder prior to now so am not sure when this folder "disappeared" or became hidden.
Can anyone suggest why and/or how I can make this users Library folder visible so that I can delete the preference file that is corrupt.

Thanks Neil - Problem solved and I´ve saved a couple of new Applescripts for checking and reset in case (and when) this happens again.
Lets hope Apple discover the reason for random changes to file flagging and apply to a future update.
Again, thanks for your quick response.

OD and local admin user

I've setup some shares that are used by a few OD clients, but when I'm logged into the server as the admin user, I don't have any permission to those file/folders. Is there any way to over come this? I've created a group for the relevant users, but I can not add this group to the admin account in WGM. I only see this group when I'm looking at the LDAP accounts. Any help would be appreciated. Thanks.

I just tried setting up an OD group with a local user included. I find that WGM does not show the user in the local group unless I search for him. Here are the steps that worked for me:
1. Go to the OD /LDAPv3/127.0.0.1 node
2. Click on the groups tab and select the group
3. Hit the plus to add a member
4. Pick /NetInfo/DefaultLocalNode at the top of the U&G drawer
5. In the search field, type the first few letters of the admin user
=> The account name magically appears for me and I can add it to the group.

How to make Windows 7 local admin user account transparent

Previously with Windows XP, I would use the autolog.exe to have the local windows account login transparently while the user would login via their novell credentials. My company would like to roll out Windows 7 now, but unfortuantely, we are unable to make the windows local account log in transparent. I do not want my users to know this password - also it would really confuse them as they are not tech savvy to understand it.
Is there a way that I can make this happen? If you need more information, please ask and I will provide. Not sure what other info may be required here.
I am using Novell Client 2 SP2 - i find the SP3 to be problematic, but if SP3 would resolve this, I am open to the idea.

Kristaranglack,
> Previously with Windows XP, I would use the autolog.exe to have the
> local windows account login transparently while the user would login via
> their novell credentials. My company would like to roll out Windows 7
> now, but unfortuantely, we are unable to make the windows local account
> log in transparent. I do not want my users to know this password - also
> it would really confuse them as they are not tech savvy to understand
> it.
The easy solution is autoadminlogon:
https://wwwstage.provo.novell.com/su...php?id=7013307
But a far more elegant solution would be to use ZENWorks
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)
Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

Help needed unmanaging the Local 10.6.2 client admin user

Hi. I have a local user on all my client machines called admin with admin rights. Have had this same user with same password for many years for our machines. over 300 client machines from emacs to intel macs. With the 10.6.3 server update (major issues for the last 2 months) with 10.6.2. intel imac clients, logging in as admin gives me a reduced dock. just finder and trash. Every use of any applications comes up with "you dont have permission to use the application "xyz". with 3 buttons Always Allow, Allow once and OK. entering admin and password always results in a second box with the same message. entering admin and password then allows me to use it. This behaviour does not happen on 10.5.8 clients and has never happened before.
In system preferences it says administrator, admin is managed. clicking the lock and authenticating allows me to access the tick for Enable parental controls. If I click on the tick to remove it, it comes up with the message. "You cannot enable parental controls for an adminstrator account. Create a new user account etc." It is unticked but the tick comes back on restarting the system preferences and even restarting the computer immediately.
I have tried deleting managed prefs etc but to no avail. I have tried removing the computer from the network account server and I get my dock back and can use applications but it still says I am a managed user. and I need the network account server for student logins. Any thoughts how to unmanaged local admin users on client machines to get back to the way it has been since 10.2.4 clients!!!

Same problem here. Have you found a solution for this? I have tried to delete the entry for the local admin in /library/Managed Preferences and all caches, but it just keeps coming back.
I had it happen on a 10.5.8 Powerpc also. This was after our servers were upgraded to 10.6(now 10.6.4)

Applet does not run for non-admin users

When logged in as a normal user, our applet fails to run. When logged in as a local admin, the applet runs successfully. The client machine is running Windows XP and IE 8.
The java console contains this error message when it fails:
JNLPAppletLauncher.loadLibrary("jogl")
Exception in thread "AWT-EventQueue-3" java.lang.UnsatisfiedLinkError: jogl
at org.jdesktop.applet.util.JNLPAppletLaunc her.loadLibrary(JNLPAppletLauncher.java: 1922)
at sun.reflect.NativeMethodAccessorImpl.inv oke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.inv oke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl .invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.opengl.impl.NativeLibLoader.load LibraryInternal(NativeLibLoader.java:174 )
at com.sun.opengl.impl.NativeLibLoader.acce ss$000(NativeLibLoader.java:49)
at com.sun.opengl.impl.NativeLibLoader$Defa ultAction.loadLibrary(NativeLibLoader.ja va:80)
at com.sun.opengl.impl.NativeLibLoader.load Library(NativeLibLoader.java:103)
at com.sun.opengl.impl.NativeLibLoader.acce ss$200(NativeLibLoader.java:49)
at com.sun.opengl.impl.NativeLibLoader$1.ru n(NativeLibLoader.java:111)
at java.security.AccessController.doPrivile ged(Native Method)
at com.sun.opengl.impl.NativeLibLoader.load Core(NativeLibLoader.java:109)
at com.sun.opengl.impl.windows.WindowsGLDra wableFactory.<clinit>(WindowsGLDrawableF actory.java:60)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at javax.media.opengl.GLDrawableFactory.get Factory(GLDrawableFactory.java:106)
at javax.media.opengl.GLCanvas.chooseGraphi csConfiguration(GLCanvas.java:520)
at javax.media.opengl.GLCanvas.<init>(GLCan vas.java:131)
at javax.media.opengl.GLCanvas.<init>(GLCan vas.java:90)
at gov.nasa.worldwind.awt.WorldWindowGLCanv as.<init>(WorldWindowGLCanvas.java:50)
Java on Windows XP attempts to store the native libraries it downloads at C:\Documents and Settings\<USER>\Local Settings\Temp\
Non local admin users do not have access to this folder. Is there any way to change the applet launcher so that it stores the native lib cache elsewhere?
Thanks,
Jeremy

user11193214 wrote:
JNLPAppletLauncher.loadLibrary("jogl")
..Non local admin users do not have access to this folder. Is there any way to change the applet launcher so that it stores the native lib cache elsewhere?I don't know. One thing I do know is that the JNLPAppletLauncher since plug-in2 architecture JREs allow hooking into JNLP services. Try using web start to launch the applet.

How to reset password of a local admin in window 8.1

Hi, I have a window 8.1 machine with only a local admin user. Accidentally, the user id got locked due to three incorrect attempts and not i cannot get in to the machine. To reset the password, i tried to use the password reset USB from other machine as
i cannot create from the same machine but it didn't work. I also tried to change the password through command prompt but
Please suggest how I can reset the Password or unlock the userID of the local admin user.
Thanks,
Kunal
KC

Hi,
A locked-out account cannot be used until it is reset by an administrator or until the lockout duration for the account has expired.
If you remember the password,you may type the password after the lockout duration for the account has expired.
If you forget the password,please refer to the link below:
http://windows.microsoft.com/en-us/windows/what-do-forget-windows-password#1TC=windows-8
Regards,
Kelvin hsu
TechNet Community Support

Enabling Silent Auto-update in Java 7.45 as a non-local administrator user, enterprise best practices?

So I have been looking through forums, java help, and everywhere possible for more insight on java in an enterprise environment. What I have found so
far is that there is no actual way to enable auto updates to install as a non-local admin user.
I know you can turn on and off updates My company wants to install java JRE as a silent-autoupdate "always update" kind of installation, but all my users are domain users, without admin rights. When it finds an update - it prompts for credentials and obviously they are denied. Is this even possible? If it is not possible to "auto-update" non local admins, I can make the case to management that java releases need to be QA'd and controlled releases. My environment is adminstudio/installshield and SCCM. I know auto-installing updates to java without QA per version , in a enterprise environment, is not good practice, but its not my decision right now.
thank you very much!

Hi and thank you very much for responding!
I'd be interested in further answers:
Our company is developing unsigned applets ...Why?Sufficient functionality. We dont want to e. g. access the customers local file system, we just wanted to use the applet as viewer sending data to and from the server where the applet was loaded from. Nothing else.
1. What is the idea to show messages for unsigned applets running in a secure sandbox.. why when running in a sandbox, and why not also for potentially more dangerous signed applets?With a signed applet you know who is taking the responsibility.With unsigned applets, I rely on the sandbox responsibility. I actually couldn't do anything dangerous by accident.
With signed applets, I'm fully responsible that nothing bad happens to the clients data. Preventing this is the main task for the java sandbox, so why not use it?
Just to clarify: Is it right that each signed applet has full access rights?
3. Is there any recommended strategy to sign an applet to work across browsers, platforms, JRE versions?Err, sign it?Does the signing scheme matter? According to http://mindprod.com/jgloss/signedapplets.html, there are lots of...
Could you recommend a good tutorial? I'm an absolute beginner concerning signing of applets.
4. Are there negative side-effects to sign an applet?Only that it forces you to sign all its components. Not sure what this question means.What about loading time and jar filesize?
Does JarIndex work with multiple signed modular applet jars?
Must javascript code also be signed to talk to signed applets?
Is a client able to see a signed applet a) without see or interact with a confirmation window and b) without doing any prerequisites (like adding certificates or similar)?
Thanks, Peter

Local admin user's folder damaged / missing on 10.4.2 server

Similar Messages

Maybe you are looking for