Modify a Managed User Account Back to Local Account

I set up a small OSX Server Leopard network in my home office made up of one IMAC, MacBook Pro and a PowerMAC as the server. Turns out it was not the setup I needed so I am returning my PowerMac back to a standard workstation. Can someone please advise on the best way to change my user account on my individual machine back from being managed accounts by the server to a local admin account.

For starters, it seems like your problems are with third-party apps, and this is a forum for Apple and Apple software. Have you contacted the third-party developers or checked their websites for updates or information?
Second, the list of "permissions differ" is normal and can be ignored:
http://support.apple.com/kb/TS1448

Similar Messages

Standard Versus Managed User Accounts

Simple question -
What is the difference between a Standard and a Managed user account? Essentially, I would like to set up an user account that has all the functionality but does not have the ability to install software or applications - similar to how one can set up a Limited user account in Windows.

No worries. Figured this one on my own. Setting Parental Controls created the "Managed" user account. Also, setting the options within the Parental Controls section allowed for me to prevent installation of applications since the Application folder cannot be modified.

Mac app store will not connect under a managed user account but will under admin. Please help clear this up?

After I have installed OSX Mountain lion I clicked on the app store to buy an app. Only one problem, it says it "cannot connect", I then tried under the admin account and it worked no problem. I log back into the managed user account and disable any parental controls that might be interferring, I try again and it worked. I need the mac app store to work under the managed user with parental controls on. I cleared the iTunes store cache and reset the warnings just to see if that might do the trick but no luck. When the latest update was availble I updated immediatly in hopes of that might fixing the problem but again it did not work. I would really appreciate if anyone had any ideas on how to help solve this issue.
-Thanks

Back up all data before proceeding.
Step 1
Triple-click anywhere in the line below on this page to select it:
/Library/Preferences/SystemConfiguration/NetworkInterfaces.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. You may be prompted for your administrator login password. Restart the computer and test.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
Log out, log back in, and test. If there's no improvement, continue.
Step 2
Reset your computer’s PRAM.

Managing User Accounts

Hi,
I am reviewing current security policies in my organisation.
Developers currently log on to schemas using the same username and password and don't have individual accounts.
These accounts were created during an initially open policy but I have pared this back to least privilege.
Is it enough to use these single accounts with least privilege or should I set up individual user accounts for each developer and then use roles to manage collaboration? My understanding is that individual accounts best serve auditing but when I audit I can still see the osuser (we all have our own machines).
What way are other DBA's managing user accounts?

This approach I follow most of the time. I find it a reasonable balance of flexibility for developers and quality control for me.
For an application (data-owning) schema, I am OK with developers having that account's password in a development database, and working directly in it. They are responsible for keeping track of what changes they make, and coordinating with each other. I maintain a different password for the application schema in each environment. In other test environments, and in production, the password for that schema is not given to them, so any changes must be scripted and applied in a controlled manner, ensuring everything needed to deploy a change is in place early in the life cycle. In those controlled environments, developers' personal IDs may have read access to the data in the application schema, so they can research and troubleshoot as needed.

Safari can't establish secure connection in parental controls managed user account

Hi,
Safari can't establish any secure connection in parental controls managed user account. Normal web sites open OK, but secure connections, like Gmail which requires https doesn't work. This is what I get instead:
Safari can’t open the page “https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false& continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=llya694 le36z&scc=1&ltmpl=default&ltmplcache=2&from=login” because Safari can’t establish a secure connection to the server “www.google.com”.
Any ideas how to overcome this?

Do you have anti virus software installed, or Peer Guardian?
"https note: For websites that use SSL encryption (the URL will usually begin with https), the Internet content filter is unable to examine the encrypted content of the page. For this reason, encrypted websites must be explicitly allowed using the Always Allow list. Encrypted websites that are not on the Always Allow list will be blocked by the automatic Internet content filter."
From here:
Mac OS X v10.5, 10.6: About the Parental Controls Internet content filter

How do I change a managed user account to a non-managed account?

I had a Time Machine back up of a user account that was managed by an IT group at the last company I worked for. I am no longer employed by that company and I used Migration Assistant to import my Time Machine backed up user account to a new Mac. Now I have all sorts of issues with permissions (I can't open VLC because I can't run it as root, I can't run Steam, I can't open iTunes). I've already repaired permissions using Disk Utility and I restarted in Recovery mode and did the "resetpassword" command in Terminal and reset Home folder permissions. No luck. Any ideas?

I looked into this a little more carefully. It's not the Guest account. It clearly indicates "Managed".
Searching for more information, this is something related to Parental Control, but I can't seem to get this account to take on the characteristics of either an administrator or user role.

Can't access a managed user account in system preferences

Hi I've recently upgraded to M.L and migrated everything from my son's old computer to this new one. His account is still showing in the System preferences but now it has an orange check mark next to it and says it's a managed account. There are some minor parental controls on there currently.
In system preference, I cannot select his user account. Any ideas why and how I remedy this??

Try repairing permissions and ACLs on that user.
The Repair Permissions run from Disk Utility in your Applications doesn't touch anything in any of the user folders, so startup holding command-r keys into your Recovery Volume.
From the menu bar choose Utilities then select Terminal.
At the prompt type resetpassword
Press return
The Password reset utility will launch (do not reset password)
Instead, click your Mac hard drive.
Then from the drop-down select the user account you want to repair. At the bottom of the window, you’ll see an area labeled ‘Reset Home Directory Permissions and ACLs’. Click the Reset button there.
The process takes a couple of minutes. When it’s done, quit the programs you’ve opened and restart your Mac.

Mail inbox shows no mail on managed user account

Upgraded to 10.5.6, mail works fine in my main account.
However in managed account for my daughter her mail shows no messages.
i can find her old inbox, I want to restore it to her inbox.. Any thoughts?
I am using parental controls, I have added all her email addresses to the list. I can see her previous recipient list.
Also when I close Mail in her user account I must force quit it, do not have to in my main user account.
iMac G5, 2 gb ram, did archive and install to load 10.5.6, all software up graded, permissions verified and fixed using Onyx and disk utility.

I certainly agree you have to wait to clone intel vs ppc!
But the settings inside the user should certainly be portable - they are just XML files and the options need to be the same even if the code has to be different when compiled as a universal binary versus PPC only code.
The time out period and on/off status as well as whether you need a password to unlock/unsleep is a system wide setting. The last admin user to make a change there wins (undoes any other settings)
The other settings can be different for each user. (Dock icons/arrangement).
Again, simply make one mac perfect and then make a disk image of the /Users/shortname folder on the "correct" mac and copy the contents of that folder to another machine. I think you will find that as long as you correctly preserver the owner permissions/bits the new mac will look exactly like the old one.

Managed user account, the dock, and the full finder?

I am creating a simple lab for school (26 computers wired together with CAT 6 switchers and no server...just me as the admin account) and will be creating managed accounts for each period. When I have been testing this, logging in as a student, I cannot figure out how to switch to the full finder so I can change the dock appearance for the account or if I want to open an application it simply denies me access. I thought it would give me the option of authenticating it with my admin password but no such luck yet...
Also, once I set up my user accounts, I have found several ways to copy them to other computers but will the dock preferences I set-up transfer as well? Or do I have to log-in on EVERY computer and do that? I'm asking because eventhough I limit access to several applications they still appear in the dock. Any suggestions about setting up the screen saver/energy mode for every computer in an easy fashion as well? Thanks!
varies Mac OS X (10.4.7)

I certainly agree you have to wait to clone intel vs ppc!
But the settings inside the user should certainly be portable - they are just XML files and the options need to be the same even if the code has to be different when compiled as a universal binary versus PPC only code.
The time out period and on/off status as well as whether you need a password to unlock/unsleep is a system wide setting. The last admin user to make a change there wins (undoes any other settings)
The other settings can be different for each user. (Dock icons/arrangement).
Again, simply make one mac perfect and then make a disk image of the /Users/shortname folder on the "correct" mac and copy the contents of that folder to another machine. I think you will find that as long as you correctly preserver the owner permissions/bits the new mac will look exactly like the old one.

Managed user account can't be accessed thru admin account

In trying to get a handle on my 14 year old son's computer habits I established myself with an administrator account and his user account is managed by me through parental controls.
When in my Admin account I go through System Preferences> Accounts. My son's account (and mine) appear on the left however I cannot get into his account. I created a test user and it does allow me to enter into it to create parental controls.

Is the son's account logged out? Parental controls can't be applied to an account that is logged in.

How to manage user account and management through AMS

Hi all,
I’m in the process of designing a new mobile app that requires user registration, login and password reset. Basically all the standard user self service activities that public apps provide. Imagine Instagram for example.
We’re already looking at Azure Mobile Services and Facebook, Live, etc. authentication. But I’m a bit unclear on how to best handle manual user registrations. How would you best handle a user who decides that they want to register
without their social account?
User table in the custom application DB with user name, password, etc. and custom user management pages for registration, login, password reset
Azure Active Directory and OAuth same as with facebook, etc. Then build custom user management pages for registration, login, password reset, etc.
Some other Azure service that I don't know about?
Something else?
I noticed there is already another related question here:
https://social.msdn.microsoft.com/Forums/azure/en-US/ca5527f6-1130-4ebb-b335-2d4d6eda7734/create-new-account-and-reset-password-options-on-aad-signin-page?forum=azuremobile
The 2 important aims for this app are to require minimal maintenance and support overhead and high security at the same time.
Thanks,
Kia

I am not saying that, but with your question it looks like you want a custom auth.
Did you saw these article:
Register your apps to use an Azure Active Directory Account login
Authenticate your app with Active Directory Authentication Library Single Sign-On
Sara Silva - Microsoft Visual C# MVP
My blog |
My Windows 8 Store Apps Samples |
More Samples
Follow me in Twitter @saramgsilva
My Windows 8 Store Apps:
Female Pill |
Galinho (Tic tac Toe) |
24 |
My Snake
My Windows Phone Apps

Wondering how I should manage user accounts

My Dad (on his computer) has a lot of private information he doesn't want anyone messing with, so he has made an account for himself, and an account for the rest of us. My Dad also takes a lot of photos and does a lot of video editing in iMovie on his account. The problem is, often my sister wants access to the iPhoto library and browse my dad's pictures, but there's no way she could access them from our account. Any suggestions on what we should do?

See this link about sharing iPhoto libraries among multiple users.
http://docs.info.apple.com/article.html?artnum=304890
iMac 20" 2GHz Intel Core Duo Mac OS X (10.4.9) iBook G3 Dual USB 640MB 30GB - 30GB iPod Video - Two iMac SE DVs

How can users add their devices to Profile Manager without a user account?

We would like to allow company devices to be tracked, inventoried and managed in Profile Manager without creating a user account for each person so they can log into /MyDevices to download the mobile profiles. We aren't staffed to have someone manage user accounts as quickly as iPads are being purchased.
If we can't do some kind of guest access, can one user, maybe called Enroll, have literally one thousand devices attached to them?
The other alternative is to have the profiles on a small webpage with a password to download.

the easiest way is to use apple configurator
using apple configurator
enable enrollment in PM
un tick restrict to users in device library
apple configurator should pick up your server certs
and the PM auto enrollment profile
setup a enrolment wifi lan
configure your IOS devices with apple configurator adding the
server cert and your enrolment wifi lan
you'll still have to handle each device tapping yes to install each profile
but you should end up with the ipads in PM with no users
from there you can set which wifi you wish them to connect to
eg staff wifi, email setings, VPN etc.
open the correct ports on firewalls to allow PM to work internaly and externaily
and pr any port forwading as nessessary and you'll be able to wipe lock change settings outside on your network, providing the device is online.

User accounts corrupted - how to fix

So my Mac locked up the other day when the babysitter decided to put it to sleep. The fan was on full and it was unresponsive. I force-powered it off and then on again. When it came back, almost everything was fine except for my wife's account. It had switched to sort of my son's account. What I mean is that my son is running the restricted finder, and when my wife logged in, it was using the restricted finder and the "My Applications" folders, etc. were pointing to my son's directories. Everything else was normal, so when you select full finder, it's running from my wife's account (has her desktop files, etc.), but the dock was still the messed up one. Going into Accounts as me, it shows her as an admin and doesn't show that she is running the restricted finder.
I'm quite comfortable with Unix sys admin activities, but OS-X doesn't run things the same way as normal Unix systems. Can anybody help me figure out what's gotten messed up and how to fix?
Thanks.
Andrew

With a full or otherwise marginalized hard disk drive with possible damages
to files or directory (or corruption, lost data, or files lost due to meddling) the
advice to make a full backup of the computer's contents to an external HDD
in a suitable enclosure for use with your computer, is the best first step to
not loose any more data. Clone utilities help do this while retaining what is
left of the correct and original file structure which would be otherwise lost.
For other ideas about user accounts and their place in OS X systems, you
can take a look at how they work and how the topic is addressed in these
selected web page links. User accounts are the basis of keeping a system
secure and help keep the contents organized and protected. If someone
who has no business in an Admin account had this access, they could be
responsible for a considerable degree of damage. And the blame does not
necessarily fall on the last person to unknowingly mess it up. The owner
has to be accountable for learning how to best protect their investment and
the contents of the computer, and other users, from loss or harm.
There are several articles & documents to help manage accounts.
• Mac OS X: How to manage user access to applications, system ...
Aug 5, 2008 ... Mac OS X 10.2 reintroduced this level of Admin user control
over local users via the "Capabilities" function of the Accounts preference pane ...
http://support.apple.com/kb/HT2400
• Managing User Accounts - XvsXP.com, Mac OS X vs. Windows XP, OS X
has five main types of user accounts: Root; Administrator; Standard... acct
available under OS X. Root has absolute power and control over the system
Fewer types of user accounts limit access options. No easy way to limit ...
http://www.xvsxp.com/system/users_configuring.php
• Mac OS X 10.5: Working with user accounts and Accounts preferences
Dec 8, 2008 ... You can use Accounts preferences to configure or delete user
accounts in Mac OS X. Each account can have its own log in, password, ...
http://support.apple.com/kb/HT3309
• Mac OS X: Changing or resetting an account password
Learn how to change or reset an account password in Mac OS X, including the
original administrator account password... From the Apple menu choose System
Preferences. Select the user name of your original administrator account.
http://support.apple.com/kb/HT1274
• Mac OS X 10.5 Help: Creating a new user account
You should create individual user accounts for each person who regularly...
http://docs.info.apple.com/article.html?path=Mac/10.5/en/8235.html
• Mac OS X 10.5 Help: Creating a guest user account
When the log in window is appears the user can just click Guest Account...
http://docs.info.apple.com/article.html?path=Mac/10.5/en/15600.html
• Mac 101 - File Sharing:
http://support.apple.com/kb/HT1549
These links cover OS X in general, and the newer more common later ones.
Some of the ideas and processes can be applied, and knowing how the
basics work, should help in looking for more applicable information for 10.3.9.
To take charge of security and account management when more than one
person uses a computer (or even just one admin-owner account user) is a
preventative action. The later OS X systems are even more elaborately made
and there are some very in-depth articles and documents for management of
system accounts, user access, security and so on, for Leopard. These are
often pro-level documents and some of them are 3MB downloads.
In the meantime, damage control requires a different path be taken to recover
from the problems at hand; while looking into how to prevent them.
{Do you have a backup computer?}
Good luck & happy computing!

How to restrict delegated administrators to modify their own OIM accounts

Hello - I have a requirement where we need to create delegated administrators for each department. The Delegated Admins are allowed to create and manage user accounts in OIM and OID resource. They can modify user accounts that are part of the organization that they have admin permission on however they should not be able to modify their own accounts. For example, if Org1-Admin is a part of Org1 and have admin priviledges on the Org1 he can create and modify user accounts in Org1 and provision user accounts to OID resource. He can update user profile data and process form data etc. But he should not be able to change his own user profile data and should not be able to get provisioned to OID resource. I am able to set up OIM for the delegated administration part but I am not sure how to restrict the delegated admin for modifying his own profile and restrict OID resource from him. The reason to have this requirement is these delegated admin accounts will act as non-user accounts i.e. they are not tied to any person they are more or less service accounts where if Person1 is assigned as a delegated admin of organization 1 in week 1 he should be able to do the tasks as discussed before using org1-admin account. The next week we may have person 2 doing this job and he should use the same account to login and to do these tasks, these delegated admins will have their own end user accounts that will be tied to their personal ID's and they can modify that account if they are delegated admin :) but not the delegated admin account.
Thanks,

If your self-service application binds to the directory using some special account, like 'superuser_directory' (just an example), then you could allow superuser_directory to modify entries but deny aministrators the ability to modify entries. This means that they connect with their own login to the directory when they modify entries. If you want them to stop modifying their own entries in the application, that's a matter of making the application be aware of that..

Modify a Managed User Account Back to Local Account

Similar Messages

Maybe you are looking for