Multiple prompts for all users

We have 2-factor authentication. Certs for every user is mapped so they only select the cert and enter the PIN. They do not enter username/password unless they use the certificate that is not mapped.
Lately...within the last month, many users are complaining about being prompted multiple times for their username/password. They keep entering the correct username/password and it keeps prompting. Eventually, it shows a blank page.
Users belong to multiple contractors but we gave them AD accounts on the same domain.
Any ideas?

It may be due to either of below:
1. Check if some changes happened to there mapping
2. Check the version of Browser used by effected user
3. Any new item\webpart recernt added to the page they face this issue with.
4. ULS and event log from sharepoint and active directory server

Similar Messages

How do I set the about:config settings for all users? iprism keeps prompting from authentication for users.

When users log on and try to open Firefox 23.0.1, users are prompted with Iprism Authentication. We made changes to the firefox about:config values "network.automatic-ntlm-auth.allow.-non-fqdn" and "Network.negotiate-auth.allow-non-fqdn" to true and it works, but only works on a per user basis. How can we set this up for all users?

I would think the about:config entries discussed are ex-factory set to values each user has to change individually, after the installation has run its course. The solution could be to have patched files ready to install post factum:
[https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/A_brief_guide_to_Mozilla_preferences A Brief Guide to Mozilla Preferences - MDN]

How do I install an Add-on for all users

I wish to user the FoxFilter addon to prevent users from visit all websites, except a whitelist. This addon works fine. I just need the addon to work for all users on the computer. Not just the one the addon was installed for. Can this be done and if so, how?

This is very possible and you can do it in few very steps.
 1-First you have to download the xpi add-on file instead of installing it.
 2-Use the following command at the run prompt (type Windows + R): firefox -install-global-extension
 For example if your downloaded xpi add-on is on C:\Users\Simon\Downloads\
 Then you write firefox -install-global-extension C:\Users\Simon\Downloads
 Note : The addon will be normally available where every addon is. Keep in mind that only administrators can uninstall it.
Have a nice day
Sincerely,
Ahmed Nefzaoui

Read-Only cell for all users

Hi,
We're running an 11.1.1.2 Planning application. A member in the Account dimension is read-only for all users including the Admin account.
The member is read only when accessed through a Data Form or through Smart View.
We addressing the Account dimension at level 0 on the data form.
The member is not Dynamic.
The member is only locked for EUR and GBP currencies.
The member has previously been moved to a new location in the Account dimension however we have run multiple database refreshes since the move.
Let me know if you need any more info. Any help which can be provided would be greatly appreciated.
Thanks
Jim

Hyperion Planning and More...: Why My Data Form is Still Read Only...!!!
See if any of the points mentioned here is any help.
Cheers..
Rahul S.

Set a default layout for all users via DIAPI

Hello everyone,
I am attempting to set a default report for all users/business partners using the DI-API.
I can accomplish this in the B1 application via Tools> Layout Designer...>Set as Default
If there are entries in the RDFL table for this layout, I am prompted to delete these entries and set this layout as the default for all users/BP's
Based on the SDK Documentation, the following code should accomplish the same thing via the DI-API
(stripped down for clarity)
Dim oDefaultReportParams As DefaultReportParams
oDefaultReportParams = oLayoutService.GetDataInterface(ReportLayoutsServiceDataInterfaces.rlsdiDefaultReportParams)
oDefaultReportParams.LayoutCode = sMyLayoutCode
oDefaultReportParams.ReportCode = sMyReportCode
Me.oLayoutService.SetDefaultReport(oDefaultReportParams)
Code executes fine, but it doesn't have the expected impact on settings. The above code adds an entry to the RDFL table rather than changing the DfltReport field in the RTYP table like I expected, so instead of setting the default report globally for all bps/users, its adding an entry to the RDFL table to set the value for a specific user/bp
I experimented by including and setting the following properties to every combination I could think of with the same results
oDefaultReportParams.UserID = 'tried 1, 0, -1
oDefaultReportParams.CardCode = 'tried "", "0", "-1"
Am I misunderstanding the API, or using the wrong objects/calls...? If all else fails I could accomplish this via the UI-API instead, but the application was intended to be a stand alone app that didn't rely on SAP B1 application running, so any help or suggestions would be much appreciated.
Thanks!

Hi,
Please repost at SDK forum to get quick response. Close this thread here with helpful answer.
Thanks.

Seeding the cache for all users

We are facing some performance issues (even after using aggregate tables) and are looking into seeding the cache for all users so that the dashboard pops up immediately.
So far I couldn't make it work. As Administrator I created an iBot to run a report for 1 month (dashboard has a dashboard prompt on the period) with Data Visibility set to 'Personalized (individual data visibility)' as I understood from the manual this is the way to seed the cache for all users. Now when I log on with my personal userid and set the prompt value to that specific period it is not using the cache.
Obviously destination was set to 'Oracle BI Server Cache' and cache has been turned on.
Does anyone have any suggestions ?

We are facing some performance issues (even after using aggregate tables) and are looking into seeding the cache for all users so that the dashboard pops up immediately.
So far I couldn't make it work. As Administrator I created an iBot to run a report for 1 month (dashboard has a dashboard prompt on the period) with Data Visibility set to 'Personalized (individual data visibility)' as I understood from the manual this is the way to seed the cache for all users. Now when I log on with my personal userid and set the prompt value to that specific period it is not using the cache.
Obviously destination was set to 'Oracle BI Server Cache' and cache has been turned on.
Does anyone have any suggestions ?

Disable JRE Auto update in Vista for all users?

I feel like a complete idiot that I can't figure this out, but it's either so obvious I'm overlooking it, or I just plain can't figure it out, so I'm hoping someone here can help.
We have not yet been able to figure out how to simply disabled the Auto Update option when installing JRE under Vista, so it will never check for updates, no matter what user is logged into a pc. I've just installed the newest version 1.6.0_05-b13, but get the same results.
Basically, we are creating a "base clone image" of a Vista workstation and we need the auto update feature of the JRE to be disabled so it doesn't check for updates. When a new user logs into the pc, we want them to 'inherit' this setting from the default user profile, or we simply want a 'global' setting on the pc that stops all JAVA update checks from occuring. But even though there are multiple registry keys that 'look' like they control the auto update function, no matter how we set them the update option still shows it is enabled when you open the JAVA control panel.
We have 2 basic problems:
- When a standard user runs the JAVA Control Panel applet and they select the 'Update' tab, the option to "uncheck" autoupdates is "grayed out". If we make the user a local administrator, then it is not grayed out anymore and they can set the option. Problem is, we have thousands of users and none of them are local administrators, hence the problem of getting it to already be defaulted to not check for updates. How do we get the update checkbox to NOT be grayed out for a NON-administrator?
- How do we set the 'global' (or default) option to disable the auto update checkbox for ALL users? No matter what we try, when a new user logs in, the auto update feature is still enabled after their initial profile is generated from the first time login.
I was able to figure out if I change the "EnableJavaUpdate" value in the below registry key, it will "remove" the Update tab from the JAVA Control Panel. But does the simply remove the tab? Or does it remove the tab AND disable auto updates for ALL users on the computer?
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy
I've sent multiple emails to Sun asking for help on what should be a simple thing to do, but have never received a reply from them.
Keith Hemmelman

Thank you for the reply. I apologize for not getting back here sooner.
We actually already use a deployment.properties file located under the Default User profile on our Vista setup. It's located under the "C:\Users\Default\AppData\LocalLow\Sun\Java\Deployment" folder. This file does get copied over to a new user profile when a new person logs in. This is what we want since we have set things like the maximum cache size and temporary file location.
The problem though is there is no setting that disables the automatic update check within this file. The best I can figure out is that for some reason under the Vista environment, the auto update setting is controlled in the registry at: HKEY_CURRENT_USER\Software\JavaSoft\Java Update\Policy
There is a REG_BINARY key there that appears to control this option. It is named "EnableAutoUpdateCheck". The problem is that the value of this key is "several" characters long and it is "different" from one user to the next. I tried disabling auto update under the Java Control Panel and then copied the value of this key into the same aread of the Default User hive but when a new user logs in, it ignores that setting and auto update is still enabled. I also tried using a simple "0" to disable the autoupdate or a "1" to enable it for this key, but it doesn't work either. (This is very frustrating why there isn't a simple 1 or 0 setting to turn the auto update setting on/off.)
We had no problem getting this to work under XP. Basically we didn't have to do anything special in XP. We simply created a temporary user account and made all the settings we wanted and then copied that profile over to our Default User profile and the Java autoupdate setting under the Java Control Panel was disabled for all new users. We did the same thing under Vista, but the auto update setting was ignored and re-enabled for all new users.
I read through the settings for the deployment.properties file located at the below link, but there is nothing there to control the auto update setting.
http://java.sun.com/j2se/1.5.0/docs/guide/deployment/deployment-guide/properties.html
Thus, we can't get the auto update setting to be disabled in the default user profile so it will in turn be disabled for all new users that log into the computer. This is extremely frustrating.
The other equally frustrating problem we have run into under the Vista environment is that when you run the Java Control Panel, the option to disable the auto update check is "grayed out" and the user can't uncheck this option to disable auto update. We have found you must be an administrator before this option is no longer grayed out. Since none of our thousands of users are admins, this is also a problem for us. (This option works fine for a standard user if you are on a XP machine though. It's just Vista where things have changed.)
I've sent repeated emails to Sun in the past asking for help, but they never replied.
Keith

Cannot disable compatibility mode for all users once enabled

I work for a school district technology department. For a computer lab that is using an old version of adobe Photoshop, we tried turning compatibility mode to windows xp and set it to run as administrator for all users in hopes that it might fix some problems
with the program. When students log on it now asks them for a password. They do not have local administrator rights to the computers. After going back in and disabling the compatibility settings, the students are still being asked for a password to run the
program. I have even tried uninstalling and reinstalling photoshop and the computer is still asking for a password to open the program. Is there some way to undo this in a permanent fashion so students are not asked for a pssword?

Hello Mike Witnauer,
Please correct me if I have misunderstanding:
1. The student account can ran the Photoshop without administrator password before you turn compatibility mode to Windows XP.
2. Then, the students need the password to run the Photoshop no matter if you use compatible setting.
Please take the following steps and check if this issue still exists.
1. Enable built-in administrator account
2. Use the following code
runas /user:ComputerName\Administrator /savecred "Full path to program's exe file"
For more information, please take a look at the answer in the following thread.
How to run a program as an administrator from within a non-elevated command prompt?
https://social.technet.microsoft.com/Forums/en-US/0339772f-9f9b-4381-b513-73b263e2cf2f/how-to-run-a-program-as-an-administrator-from-within-a-nonelevated-command-prompt?forum=w7itprogeneral
Best regards,
Fangzhou CHEN
Fangzhou CHEN
TechNet Community Support

How to make custom append search help tab default for all users?

I've implemented my own search help append and I need to make the F4 search help to display my tab as default for all users. I know that search help stores the last tab used by the user in memory and when user uses the search help next time the last used tab is displayed but I have to make the system display the tab od my search help append always as default tab. Any idea how to do it?
Message was edited by:
 Marcin Milczynski

hi
Enhancement using Append structures
 Append structures allow you to attach fields to a table without actually having to modify the table itself. You can use the fields in append structures in ABAP programs just as you would any other field in the table.
Click on the append structure tab and opt to create new
structure.
Append structures allow you to enhance tables by adding fields to them that are not part of the standard. With append structures; customers can add their own fields to any table or structure they want.
Append structures are created for use with a specific table. However, a table can have multiple append structures assigned to it
 Customers can add their own fields to any table or structure they want.
The customer creates append structures in the customer namespace. The append structure is thus protected against overwriting during an upgrade. The fields in the append structure should also reside in the customer namespace, that is the field names should begin with ZZ or YY. This prevents name conflicts with fields inserted in the table by SAP

Impact on roaming profile accounts if we Change User logon Name to Employee Number format in Active Directory for all User accounts

I want to understand if we change User logon Name to Employee Number format in Active Directory for all User accounts, then what would be the impact on existing profile. Whether we need to change it manualy or it will connect to same profiles in terminal
session.
As i observed it create new profile after logon name changed to employee number where existing users profile settings get fails to load and prompt for new settings (such as outlook reconfiguration, share drive mapping etc.).
Kindly let me know the proper process to overcome with this, how to connect same existing roaming profile with employee number format change.

Hi,
What if we change the user name of user account, will it have impact on roaming profiles.
Yes, it will affect roaming profiles. Please rename the roaming profile folder as the new user account name, in addition, change the profile path in ADUC.
Here is an related article below for you:
How to Rename a Windows 7 User Account and Related Profile Folder
http://social.technet.microsoft.com/wiki/contents/articles/19834.how-to-rename-a-windows-7-user-account-and-related-profile-folder.aspx
Best Regards,
Amy

Security settings for all users

I recently developed a document that requires digital signatures and have been testing it. The only downside is that when a user opens the document, Adobe prompts for the installation of new security settings, and it installs it for that user only. I need to add a registry key to the new security settings, but it is only available to be added to the current user hive. Does anyone know how to install the new settings for all users?
Here is the registry key I need to add.
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cPubSec]
"bSelfSignCertGen"=dword:00000000
Im using Adobe Reader 9.3 and Win XP.
Any help would be terrific!
Thanks.

Hi,
There are really two separate issues. First, is Adobe pushing updates to the Acrobat Address Book (i.e. adding certificates as trust anchors) and the second issue is how you can push your own update to disable the creation of self-signed digital IDs. Although the two issues share an underlying mechanism, they are separate and you cannot leverage one for the other.
First issue first. Adobe has entered into partnership with certain Certificate Authorities and has created a mechanism to add their certificates to the Acrobat Address Book (aka Manage Trusted Identities) using http to send a copy of the Security Settings file that contains only digital IDs. There are two ways to trigger the download process. One is to go into the Preferences, select Trust Manager, and click the Update Now button in the Automatic Updates group box. The other method is to load the DigSig plug-in (beginning with Acrobat 9, plug-ins no longer load a launch in order to speed up the launch process). As I'm sure you have deduced, opening a file with a signature field cause the DigSig plug-in to load which in turn triggers the automatic download. The reason we have limited the automatic download to DigSig being loaded is because the vast majority of people viewing PDFs are not using the digital signature functionality (much to my personal chagrin because the more people use digital signatures, the better my job security ) and we didn't want to bother them with an update they would never need. People already complain that there are too many updates, and we are trying to limit the irritability factor. To close the loop on this function, once the download process has been triggered the Acrobat check two more things before it does the update, 1) has it been a month since I checked and, 2) if it has been a month is there a new file to download. This way we are not pestering people with unneeded updates, or if they do need the update, at least not too often. And finally, Address Book management has to be on a per user basis. A certificate that you may elect to trust could be a certificate that the next person want to specifically keep untrusted. The Windows Certificate Store, Mac Keychain and Firefox Certificate Manager all work on a per user basis.
That brings us to what you would like to do. The good news is you can use the Export Security Settings featrue to create a distributable file that will set the preference. The real question is how will you distribute the file, but before we get to that, here is how to create the file.
With Acrobat closed, set the registry setting you noted in the message above
Launch Acrobat
Select the Advanced > Security > Export Security Settings menu item
Click the Deselect All button on the Export Security Settings dialog
Select the Signing Preferences Settings checkbox
Click the OK button on the Export Security Settings dialog
Select Signature Creation Settings and note "Allow creation of self-signed Digital IDs" is set to No
Click the Export button on the toolbar
Follow the on screen dialogs. You don't have to encrypt the file, but you must sign it with a certifying signature
At this point you have the file available for distribution. You could e-mail it to your intended recipients with import instructions, or you could post if for download, or you could set the Preference the to automatically push the file from a server. To check this feature out select the Edit > Preferences menu item and then select Security from the Categories list box. You would need to select the Load security settings from a server checkbox and then set up the URL. As an aside, you can also export these settings by selecting the Automatic Update Settings checkbox on the Export Security Settings dialog noted in the bullet points above. You have a chicken and egg problem in that you have to get the users to first manually import the file in order to set up the automatic import. That I can't help you with, you're just going to have to decide what works best for you.
Good luck,
Steve

1 VirtualBox VM for all users

We are trying to utilize VirtualBox to run a Windows 7 Virtual Machine on OS X (10.6). We want to create 1 VM for all users to access. I have changed the default folder to /Users/Shared/VirtualBox_VMs. Please does anyone know how this can be done?

The SIMPLE answer is do not have the iPod devices setup with each account. You can sync multiple devices to a single iTunes library.

Adding printers to Terminal Server 2008 for all users

Hi! I'm trying to add a printer to a terminal server for all users that log in. I've been reading around and this seems like a working solution:
Rundll32 printui.dll,PrintUIEntry /ga /c\\localcomputername /n\\servername\printername
So I ran this with the proper parameters. Nothing shows up in Devices and Printers with the name I specified. I rebooted the server, still nothing. I re-run the command above and it tells me there's already a printer defined with that name.
I look at Devices and Printers and the name I specified still isn't there. Why doesn't the above command work like it's supposed to?
Thanks!

Thanks, yes, that was the first command I tried (without the /c). All subsequent attempts tell me the printer already exists yet it definitely does not show up under Devices and Printers. I ran the above logged in as Administrator with an elevated
command prompt. The printer can't be seen from this login or a 'normal' user login.

How to delete existing e-mail signature for all users in outlook 2010

Dears,
How to delete existing (or reset to none ) e-mail signature for all users .
If anyone knows where I can find this script or another way of accomplishing this I would be very thankful.
outlook Version : 2010
PS : Not to disable.
Khaja Hameed

If you want to manage signatures for multiple users your best bet is to use Group Policy.
See:
Setting up a Corporate Signature | HowTo-Outlook
http://www.howto-outlook.com/howto/corporatesignatures.htm
Eric Legault (<a href="https:/mvp.support.microsoft.com/default.aspx/profile/legault">MVP: Outlook</a>) <a href="http://about.me/ericmlegault">About me...</a> <a href="http://www.outlookappins.com/products/social-contacts">Outlook
Appins</a>: Store Social Media fields in your Outlook Contacts!

New flash player not working for all users

I have Flash 10.0.22.87 installed on a freshly built Citrix 4.5 PS. When the administrator is signed in, everything works just fine. When my users sign in, they navigate to a webpage that requires flash and it either tells them that Flash is not installed or it prompts them to install (but does nothing when you tell it to).
Did flash player become profile specific with this new release? I have 10.0.12.36 and 9.0.115.0 on my other Citrix servers and they work without issue for all users. I've tried uninstalling with the utility I downloaded from adobe.com and re-installing with the offline activeX control. I've played with the security settings opening thing wide open and it still does not work. There is no different software between the problem server and the other Citrix servers other than this version of Flash.
Any suggestions? Thanks in Advance
Linc

I am experiencing the same problem on my LAN. Administrator account the app works fine, end users sign in with non admin accounts and it will not work.
I spent some time reading online and found the following instructions on the NET. I tried them and I thought it worked because I was able to log on as a non admin user test account and the flash player worked just fine.
Log in as Admin
2. Download the following zip file from here:
www.supportflash.com/reset_all.zip
3. Unzip this folder onto your desktop.
4. Drag both files ‘reset_min_all.cmd’ and
‘subinacl.exe’ to your
desktop.
5. Run the reset_min_all.cmd file.
6. It will open a DOS like terminal and start
running through registry
keys.
7. When it is finished it will say “press any key
to continue”.
8. At this point you can install the latest Flash
Player:
for Internet Explorer:
http://www.adobe.com/support/flashplayer/ts/documents/tn_19166/Install_F
lash_Player_9_ActiveX.zip
other browsers:
http://www.adobe.com/go/getflashplayer
9. Check that Flash Player is working for the
Admin.
10. Check that Flash Player is working as the
other 2 users.
I hope this information helps. Feel free to reply
if you need further
assistance on the issue discussed here or file
a new case if you want to
report a new issue in the Support Portal:
I also found 6 different versions of Version 8 that supposedly does not require Admin priveleges but it does. Back to the drawing board.

Multiple prompts for all users

Similar Messages

Maybe you are looking for