Multiple users - Keychain issues

Anyone know a solution to the root cause of this defect:
I support an organization with various Apple Mac systems, OS X Mountain Lion - Mavericks.
These systems are joined to Active Directory using Centrify.
Each time our users change their passwords, select the option to update the keychain, their Keychain log in items do not get updated.
Mostly the proxy keychain log in items do not get updated. To resolve this (Until the users have to change their passwords again), we
have to delete the ~/library/keychains folder.
Also tested this without centrify, it is mostly the proxy keychain log in items which do not get updated and deleting the proxy keychain items
does not always sort the problem out.
-Problems caused by this: Account lockouts.

Wish it were as easy as telling the users to not save there passwords in their keychains.
Correct, the login keychain does always get updated, however it is other network credentials which do not update correctly sometimes and the proxy credentials almost never get updated.
Some advanced users know how to set their proxy and credentials in network preferences for the ethernet connection for HTTP and HTTPS, when they change their Active Directory passwords then they manually update their proxy password in network preferences. Under no circumstances would the majority of users accept this as a work around, they want everything automated.

Similar Messages

  • Creating multiple users - keychain troubles

    I have decided to create seperate user accounts for each of my kids (2). I am the administrator. In both of the kids user accounts, I get repeated dialogue boxes asking for a keychaing password. One example I just got in my sons account reads: "Safari wants to use keychains login". I type in his password and am told it is invalid. I type in mine (as the admin) and am told it is invalid. This happens not only in Safari. It also occurs in my daughters account - but not mine. Any thoughts/suggestions? Thanks in advance....Karen

    Hi,
    I'm sorry for posting picture, and thanks for the reply.
    The script I used was on the picture I posted yesterday, in any case I'll just type it here
    Import-Module -Name ActiveDirectory
    Import-Csv -Path "C:\Users\Administrator\Desktop\users.csv" | ForEach {New-ADUser
    -GivenName="$_.First_Name"
    -SurName="$_.Last_Name"
    -UserPrincipalName=("$_.User_name"+"@jesyang.local")
    -AccountPassword=(ConvertTo-SecureString -AsPlainTect "P@ssw0rd" -Force)
    -ChangePasswordAtLogon=$true
    -Enabled=$true}
    Result:
    Powershell is asking me to supply a value for parameter.
    Now I got my script working. Instead typing the codes on vertical manner, I just type all throughout like this (though i made little changes on the script):
    Import-csv "C:\Users\Administrator\Desktop\users.csv" | ForEach-Object {New-ADUser -Name $_.Name-GivenName $_.First_Name -Surname $_.Last_name -UserPrincipalName ($_.User_Name + "@jesyang.local") -SamAccountName $_.SamAccount-AccountPassword
    (ConvertTo-SecureString -AsPlainText "P@ssw0rd!!" -Force) -ChangePasswordAtLogon $true -Enabled $true -Path "CN=Users,DC=jesyang,DC=local"}
    Is writing powershell script should be continuous?
    akosijesyang - the conqueror
    Please read the above responses very carefully.
    ¯\_(ツ)_/¯

  • How to use Keychain for multiple users on one computer?

    I have a new Macbook Pro with Yosemite.  I just moved over from PC for my work computer and the Keychain thing is killing me!  I am a social media consultant so I manage multiple accounts for multiple clients.  I need a way to log in and out as them on many different platforms.  The reality is that I am the only user but I log in and out of different things as if this was a public computer with multiple users. 
    PC allowed me a drop-down option with each login.  For example the email box could be clicked and then I could select the client email that I needed to fill in.  The password would then auto-populate.  Is there any setting I can change to make this happen on a Macbook? I have been logging in, deleting the info in Keychain, then logging in for the next client, delete...etc.
    Most password managers don't work because of this same problem.  Please don't recommend a password manager app unless it can handle logging in and out of (for example)10 different LinkedIn profiles.
    Any advice would be greatly appreciated!

    Tanja Turtsanyi wrote:
    I have a new Macbook Pro with Yosemite.
    Apple>About This Mac>More Info>Service
    Please read the warranty paperwork that came w/your computer.
    You have 14 days to return the computer w/no questions asked. 
    You have 90 days of FREE phone tech support on top of your standard 1 year warranty unless you also purchased AppleCare which gives you an additional 2 years of coverage plus FREE phone support.
    Strongly suggest that you take FULL advantage of the above before it runs out.  Let Apple deal w/the problems.
    Mac OS X (10.4)
    Conflicting info:  Please update/correct your profile so that you can receive the correct troubleshooting suggestions.  This will assist the users in trying to help you.  Thank you.

  • Firefox issues with multiple users on a single computer.

    I have an issue with Firefox and multiple users on my computer. There are two users setup and I'm running Win7 Ultimate x64. When the other user logs in, my settings in Firefox get screwed up somehow. Even if that user does not open Firefox.
    Examples of problems this causes:
    Gmail - Cannot load the standard interface, however it will load the HTML only interface.
    Facebook - Cannot post anything.
    vBulletin Forums - Some forums will no longer normally load - a text-only version loads as if I was browsing from a mobile device.
    There may be other issues, but these are the main ones. If I clear my cookies, cache and browsing and download history, then restart Firefox, everything works again.
    This seems to happen most often when the other user logs in, and uses Firefox to log on to their Gmail account.
    How can I fix this?

    Create a new profile as a test to check if your current profile is causing the problems.<br />
    See [[Basic Troubleshooting#Make_a_new_profile|Basic Troubleshooting&#58; Make a new profile]]
    There may be extensions and plugins installed by default in a new profile, so check that in "Tools > Add-ons > Extensions & Plugins"
    If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files)
    See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

  • Sharing the same keychain across multiple user accounts

    Hello, Anyone know how to do this? Thanks in advance!

    I have tried, without success to share a keychain between two accounts. In Keychain Access -> Edit -> Keychain List there is a Shared checkbox next to each keychain. If I click on that, the keychain disappears from the list of Keychains that you see when you open Keychain Access (and if necessary, click on Show Keychains). The keychain does not show up on any other account, either. The keychain is still there in ~/Library/Keychains.
    Seems pretty useless, as does Apple's article "Mac OS X 10.4 Help -- Administering keychains for multiple user" at <http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh1775.html>.
    Some idiot in the security world recommended that we split our account into administrator and non-administrator, and normally log on only to the non-administrator account. This forces me to try to share files, folder, and keychains, so I can get any work done while logged on from the administrator account. Mostly, I don't think Unix, or Mac OS X, was designed to share things. (This is not a Mac versus PC statement. I only have one account on the PCs I'm forced to use at work -- it may be just as hard or harder on a PC.)
    This security advice is stupid! Don't do it. Do everything on one account or you will waste hours and hours trying to bridge the gap between them.
    But I would like to know how to share a keychain, since Apple's help files SAY you can. Only it does not work.

  • F110 issue with multiple users - unable to create DME output

    Hi
    I have an issue, when i have multiple users executing F110 using the payment programs for DME output. program SAPPAYM that when a user tries to create DME output, that nothing is created.
    it is as if the first person who creates a payment proposal then blocks the subsequent users from creating output.
    we have found that the only way around this issue is to get one user executing a payment run at a time.
    Only by getting all the other suers off the system and deleting any payment proposals can we produce the output.
    any ideas??
    Liz

    Hi
    I have an issue, when i have multiple users executing F110 using the payment programs for DME output. program SAPPAYM that when a user tries to create DME output, that nothing is created.
    it is as if the first person who creates a payment proposal then blocks the subsequent users from creating output.
    we have found that the only way around this issue is to get one user executing a payment run at a time.
    Only by getting all the other suers off the system and deleting any payment proposals can we produce the output.
    any ideas??
    Liz

  • Keychain popup with multiple users

    We have a lab where all the Macs are joined to our Active Directory. When studnets set down at this Macs they get the following error.
    Safari wants to use keychain "login"
    How do I fix this so no matter which one of the 1200 students using one of the Macs do not have to enter in a password.

    This might help:
    Administering keychains for multiple users
    If you are an administrator of a computer that has many users, you may want to create a keychain for each user account that contains passwords for servers and other system or network resources. You can also create one keychain and allow all users to access it.
    Open Keychain Access located in Applications/Utilities, and choose Edit > Keychain List.
    Choose User or System from the pop-up menu to view the keychains in these categories.
    To share a keychain with all the users on a computer, select the Shared checkbox by the keychain in the list.
    To add a keychain to the keychain list, click Add , and select the keychain. To delete a keychain, click the Delete button.
    Miriam

  • ITunes Issues - Multiple Users/Libraries

    I am experiencing several issues that revolve around multiple users, multpile iPods and two networked computers. To describe the situation - I have two computers networked with an external drive connected to the main computer. My wife, my son, and I are all users of the computers, we all have our own iPods and it seems like we have multiple libraries out there. I am looking for a solution to do the following: Consolidate all of the libraries into one shared library that all of us can use located on the external drive (due to size constraints and trasportability). The external drive is a plug and play type device with ample space for this. SOme of the issues I have are some songs appear in one iTunes list with a gray exclamation point in front of them and then you have to go searching for the proper folder/library to locate the file, so obviously there are multiple libraries/folders. I believe this has everything to do with my sons "ability" to fix things on the computer. Can anyone direct me to or provide me with a solution to this dilemma? Is there a way to consolidate these without creating multiple copies of the same songs (this has also occurred in the past when my son was solving things. Sorry for the long description but I am trying to provide as much info as necessary.

    Each user on each computer will have to set iTUnes to use the external as the library location.
    Next depends on what you want to do. Move all files to external then using iTunes add the files to iTunes library again. Empty library in iTunes then add files to library recreating library from scratch.
    All users will have to maintain each library separately even though all files will be in same place and accessible to all users. When one person adds something to their own library the other ones will not know it. If someone else wants those files also then they will have to use add folder or add file option to add the files to their own library. It should not duplicate the files on the drive but is sometimes does when you do this. Deleting files or renaming them can be problematic if one user deleted a file another user has in library it will affect both. Podcasts are an exception, these will always duplicate if multiple users subscribe. This allows individual management of episodes.

  • Multiple Users - NOTES (Outlook/iTunes Synchronization issue)

    To date I have tried everything I can think of. My wife and I share one computer, and we use Outlook. We have new iPhones (purchased yesterday), and it appears that most of what we need to allow separate entries is working properly.
    However, in Outlook I can set up different "groups" of notes, but I cannot get iTunes to recognize them. Both my wife and I use Notes a lot ... we rely heavily on them (from our older Palm Centro and other Palm OS devices). We would like to be able to use the notes and have them synchronized, but she doesn't need my notes, and vice versa.
    Does anyone have suggestions for getting this to work?

    Notes do not appear to allow for multiple users via Outlook. Too bad. I have put in a "wishlist" request for this. Am closing the question.

  • Multiple SAP User Access Issue?

    Dear Expert,
    SQL Express 2005
    Wndows Server 2003
    Client PC RAM 1GB
    Server RAM 16GB
    SAP Version 8.8 PL15
    14 Store Procedure
    When multiple user connected with SAP (Logedin) at that time any user add any SAP document then all remaining user hanged approx 2 min after successfully add all user working normally.
    Please Suggest me as early as possible
    Thanks,
    Srujal Patel

    Hi Srujal.......
    This is purely due to heavy customization may be thorugh Addon or through Stored Procedure.
    Try nullifying effect of these 14 Stored Procedures and DC Addons if any and then ask users to add the documents. I am sure they wil work normally. This may happen because of FMS also.......
    Regards,
    Rahul

  • Multiple users\passwords on the same website with Safari

    Coming over from Netscape for MAC to Safari.
    Here is the issue-- In Netscape I was able to have multiple users/passwords for the same website page. Netscape controls its users/passwords; not the keychain. With Safari everytime I try to enter the second user/password this wipes out the first user and password.
    Is there a way with Safari to have mutlple users/passwords for the same website page?
    Thanks,
    Reed

    A service might call the other one.

  • Multiple users accessing the same data in a global temp table

    I have a global temp table (GTT) defined with 'on commit preserve rows'. This table is accessed via a web page using ASP.NET. The application was designed so that every one that accessed the web page could only see their data in the GTT.
    We have just realized that the GTT doesn't appear to be empty as new web users use the application. I believe it has something to do with how ASP is connecting to the database. I only see one entry in the V$SESSION view even when multiple users are using the web page. I believe this single V$SESSION entry is causing only one GTT to be available at a time. Each user is inserting into / selecting out of the same GTT and their results are wrong.
    I'm the back end Oracle developer at this place and I'm having difficulty translating this issue to the front end ASP team. When this web page is accessed, I need it to start a new session, not reuse an existing session. I want to keep the same connection, but just start a new session... Now I'm losing it.. Like I said, I'm the back end guy and all this web/connection/pooling front end stuff is magic to me.
    The GTT isn't going to work unless we get new sessions. How do we do this?
    Thanks!

    DGS wrote:
    I have a global temp table (GTT) defined with 'on commit preserve rows'. This table is accessed via a web page using ASP.NET. The application was designed so that every one that accessed the web page could only see their data in the GTT.
    We have just realized that the GTT doesn't appear to be empty as new web users use the application. I believe it has something to do with how ASP is connecting to the database. I only see one entry in the V$SESSION view even when multiple users are using the web page. I believe this single V$SESSION entry is causing only one GTT to be available at a time. Each user is inserting into / selecting out of the same GTT and their results are wrong.
    I'm the back end Oracle developer at this place and I'm having difficulty translating this issue to the front end ASP team. When this web page is accessed, I need it to start a new session, not reuse an existing session. I want to keep the same connection, but just start a new session... Now I'm losing it.. Like I said, I'm the back end guy and all this web/connection/pooling front end stuff is magic to me.
    The GTT isn't going to work unless we get new sessions. How do we do this?
    Thanks!You may want to try changing your GTT to 'ON COMMIT DELETE ROWS' and have the .Net app use a transaction object.
    We had a similar problem and I found help in the following thread:
    Re: Global temp table problem w/ODP?
    All the best.

  • Multiple users on computer

    This question is somewhat answered on other forum posts, but it begs to be asked again. If enough people ask, maybe the bean counters will start to understand how regular customers buy and use books. Then those same features will be available on eBooks.
    Just installed ADE on one computer, under one user account. (System: Windows XP PRO sp3). Did this as both my wife and myself are getting eBook readers for Christmas. (Augen "TheBook" units)
    First issue / question why not have multiple user ID's supported on single device through the ADE interface directly?
    Can I actually have multiple activated ID's on XP via separate user log-ins? (Again, ADE should be one program instance with multi-users IDs to the one instance, not separate Windows accounts. It should also have a share/loan function and frankly an ownership transfer function.)
    The eReader device itself does not appear to support multiple user logins. So, I guess that means the reader is lock to a single Adobe ID?
    When will the above changes occur if ever?
    (I am also posing this question to Augen's tech support.)
    My soapbox comments to feed up to the publishing world's bean counters that are forcing DRM and fixing prices.
    Real world buying habits. Single book bought by myself or wife may be read by both of us. (Gee! Isn't that a surprise! We don't buy 2 copies.) And maybe occasionally loaned to a friend, passed on to a friend, donated to charity or sold at a garage sale. More likely sitting on a shelf after one or 2 reads.
    Real world current MSRP/list price on a new eBook: As much as or maybe slightly less than the same printed Hardbound book. More than same printed paperback book.(Viewed recent Mary Higgins Clark book as example: 75% of Amazon hardcover price and 163% of not yet released paperback price.)
    Real world cost of delivering eBook vs printed book: About one-tenth the cost of a printed book. And that is with all the extra manpower wasted on DRM programing and servers.It would be a twentieth without the DRM costs.
    Printing, warehousing and transporting books is not cheap. I am in the printing business. I know this.
    An eBook cuts out all the labor and material of printing, all the costs of physical warehouse and transport, and wasted un-sold product or remaindered product. Unsold returns from retailer back to distributor or manufacturer very by catagory and title. But range from 10-50%. That all is gone with an eBook.
    So, every level from publishing to retail is more profitable with the ebook model.
    Real world use of an Ebook with DRM ePub. Restricted to single user on apparently 6 computers and 6 portable devices. Effect is that at best I can buy a book and others in my household may read it on one of the registered devices as well. I have paid as much or more than a trade paperback. Publisher has received a higher profit by far and so has seller. Author has not received a higher percentage or royalty most likely.
    I can not sell it as used, I can not donate it to charity or library. This, even though I have paid full retail and that is effectively ten plus times as much over traditional printed book production and distribution costs. Distributor actually may have higher costs as they must maintain records access for an extended time, which with court cases will in the future probably mean 20 plus years. But, that cost should be well offset by no warehousing or brick & mortar store costs.
    Of coarse I can still read the full printed library of Mark Twain books that my grandmother purchased for my father and uncle in the 1920's today. And those books will last another 100 years with moderate care. So I am paying ten times more than cost, and book may last 20 years (with luck and no business failure)  INSTEAD OF 200.
    Long story short, I am willing to purchase an ePub even with reasonable DRM protections and at a price at or lower than trade paperback, even at 75% of hard bound one new releases on occasion. But, at the much higher profit potential of a single purchased book to publisher and retailer, one should be able to use and share it the same as a printed book.
    As it is, I can not even directly buy an eBook on most sites as a gift. Don't publishers know that books a often bought as gifts?
    Publishers: If your eBook sales are not at the level you would expect, maybe, just maybe the points above may have something to do with why consumers are not buying into eBooks as you would hope.
    I guess that ends my rant for now.

    This might not be the right way but since I was having similar issues today, this something that worked.
    I placed the domain.site file on my time capsule and the Imac which I created the pages with remembered the site.
    On my mac mini I can access the site it if I open the domain.site file directly using the finder and it will then open iweb on my mac mini. If I open iweb directly, it seems to remember previous iweb sites that I created but not the current one.
    Hope this helps.
    If anyone else has another way please let us know.

  • Working with multiple users and computers, but shared data

    Sorry if this is posted in a poor place, I'm not sure where the best place is. This is sort of a general questions.
    For a long time, my wife and I have had either one computer, or two machines but one has definitely been just a terminal. We've basically set up all of our data to be one one primary machine, and if we want to view/edit that data we have to use that machine.
    We just got a new MacBook Pro and I would like to be able to use two machines as equals. Sadly, this idea of multiple computers, with two users and some shared data is really giving me difficulty. I was wondering if anyone has any suggestions on how to best manage things like:
    Synchronizing portions of our contact list (We share about 50% of the combined library -- we don't have to share all though).
    How to manage iPhoto so that we can each have access to the photos. As an added difficulty (or maybe this is easier?) my Wife just wants to have access to the pictures for viewing and sharing on Facebook/Picassa/etc. I am the only one who wants to edit, correct and cull our library. That said, I always edit when I first put the data on the machine, and almost never again; so it would be fine to have one (or both accounts) set up as view only for the iPhoto data.
    How to manage iTunes so that we can each have access to the music. As a super awesome bonus, it would be great if we could have three libraries: His, Hers and Shared. Maybe as much as 30% of our music library is similar, the rest just gets in the way.
    What is the best solution people have found for calendars? (I'm thinking two separate calendars, and we each subscribe to each others iCal feed)
    Mail.app and bookmark synching is not really a problem for us.
    Two extra points:
    * One machine is portable, and the other isn't. Ideally, when the laptop is out of the house, both machines should still have reasonable access to the shared data. That is: Just dumping things in the shared folder won't work because when the laptop is out of the house we will be disconnected from the source data.
    * We just got a second iPhone. This means that both of us will be taking photos/video separately and trying to synch back to the master data store.
    * Basically, I'm trying to minimize data duplication as much as possible, and just synchronize the systems to each other.
    Thanks a ton in advance. If anyone has any suggestions at all, I would love to hear them. Including "This is in the wrong forum, go ask here instead..."

    So you have a desktop Mac and a laptop Mac, right? Two user accounts (and a third admin account) on each computer, right?
    I profess that I haven't tried this, but here is how I would approach your problem:
    Sharing Music and Photos between multiple user accounts on the same computer: 
    See if http://forums.macrumors.com/showthread.php?t=194992 and http://forums.macrumors.com/showthread.php?t=510993 provide any useful information to assist you in this endeavor.
    Sharing across multiple computers:
    Turn on file sharing on the Desktop (System Preferences > Sharing). Now you can mount the Desktop as an external drive on the laptop's Desktop. Copy the music and photo folders across. Will take awhile to do the first time. Then, for future use, get a copy of the donationware CarbonCopyCloner or equivalent. You can use CCC to selectively sync specific folders from one computer to the other. There may be a hassle with digital copyright issues on music and movies, though.
    Calendars:
    As you have suggested yourself, publishing yours and subscribing to hers is probably the best way to do it, on the same computer. Across computers, syncing with CCC or equivalent would probably be the way to go.

  • Multiple users identified when only one on the machine - me

    I am experiencing very slow internet communication and when trying to download latest App from Apple the guidance tells me that I need to shut down 'multiple users' when I am the only user shown on our machine.  We did suffer a power cut a few days ago when the computer was being used.  Would this 'upset' the system into thinking that it is still in use by the 'other user(s)' - is it possible to 'reset' to in effect clear this - I am using TimeMachine. 
    Normally I get good but not brilliant internet response but since the power cut we do seem to be running very slow - well that's out anaylis so far but any other suggestions as to how to get back to normal would be welcome.
    I have run MacKeeper to see if it can find anything untoward.
    Rodney

    Hi Rodney
    Let me address your issues in reverse order.
    First, Mackeeper is extremely bad software, and is very often the cause of slow Macs. My recommendation is that you uninstall it immediately, and see if that improves your speed.
    http://help.mackeeper.zeobit.com/Manual/GettingStarted/UninstallingMacKeeper.htm l
    Next, can you describe what "app" you are downloading from Apple? Is it a software update?
    How much hard drive space do you have available? Click cmd-i on your Macintosh HD shortcut and look at the "available" value.
    It would be helpful if you could include your version of OS X in your profile. You say "iOS 7" which is iPhone/iPad software, not Mac software.
    Matt

Maybe you are looking for