Newly created user packages with no admin rights

Hi all,
Have already opened a ticket with Novell on this one as i've never seen it before...
Have upgraded a site to ZFD7 SP1 IR2 using the iso's from the Novell site, so it's a full upgrade install, everything went perfectly on the server, consoleone snapins upgraded fine and all
however, if I try and create a user package with consoleone from the server, it hangs and never completes and I end up with packages with no rights for any users, so i'm unable to edit, delete or do anything with them
also tried using a workstation with IR4 snapins which gives the same result, using a spare consoleone with earlier zfd7 snapins I can create packages with no issues
Anyone run into this before and will we be able to get rid of these objects from the tree?
And are the IR4 snapins not compatable with IR2?

gleach1,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

How Do I Create User Account with "limited admin rights"?

Hello;
I would like to give a handful of users the ability to login to the DCC and enable them to add/delete/modify users and or hosts only, I.e. People and/or hosts.
Is there anyway to:
1. Make a user with this admin capability?
2. Segregate the containers they are able to modify?
Thanks to all in advance.

BobM53, That would be needed regardless of what front end my users log in with, in my case I was looking for them to access the DIT via the DSCC/DCC, which is not possible. Regardless, thank you for your reply, it is reassuring to know I am headed in the right direction.
I am now looking towards installing something else like Apache Directory Studio, or some other GUI for users to manage the directory.
I will most likely create one or more ACI's to build groups, adding members to those groups as needed; each group being allowed to perform functions such as create users, lockout users, add/modify hosts, etc.
I will most likely follow the steps outlined in:
Directory Server Groups, Roles, and CoS - 11g Release 1 (11.1.1.7.0)
Slightly OT, does anyone have a suitable and similar proven method to "lockdown" root accounts, and who has root access?
Thank you

Deployment Software on user with no admin rights

Hello,
We are using SCCM 2012 R2 and our environment machines are Windows 8.1 with no admin rights for all users.
We are trying to deploy some sprecific software but with no luck.
On the Deployment method we specify "Install for User" and what happens on User side is "Past due it will be retried".
If I modify my script and instead of /qn I use /qb I have the UAC control that pops up.
But from my understanding SCCM should install the software as system account.
How can we do to make it work?
Thank You,
Chris

Hello,
I have already bypass my problem using the "install for system".
Creating 2 deployment method. One for the application (msi) "Install for system" and the second for the settings (cmd) "Install for User" and it works like a charm.
But there is no way for SSCM to elevate the privileges when installing an application with "Install for user" set?
Chris

Excel Plugin installation with out admin rights

Hi,
We have developed an excel plugin which is a combination of dll written in c# and VBA project(.xla file). We have created .msi to ship the plugin using Install Shield and the settings in it had Require admin privileges set to NO.
The installation seems to be seamless regardless of whether it was installed on a PC with admin rights or without admin rights.
However the plugin loads fine only on the PC where it was installed with admin rights.
When installed with user without admin rights, Opening excel comes up with an error "Compile error in hidden module: ". The same message appears when closing excel as well.
I have searched through internet and found couple of ways it can it can be resolved
1. By manually registering mscomctl.ocx but cannot be done as the user don't have admin rights
2. Deleting .exd files in USER_HOME\AppData\Roaming\Microsoft\Forms dir (Tried this but no success)
I ran out of ideas and couldn't find anything more on this. Can anyone please let me know what I should be doing to resolve this?
Additional Info:
The location where registry entries are written is HKEY_CURRENT_USER\Software\VB and VBA Program Settings
I am deploying all my files to C:\Program Files\<Project Name> dir
and Interop.Excel.dll is one of the files am shipping along with my dll and .xla file
So don't think any of the above needs admin rights. Please let me know if I am wrong?
Many thanks for your help!!!

Hi Kittu1201,
>>which is a combination of dll written in c# and VBA project(.xla file).
What do you mean by “a combination of dll written in c#”? Do you use VSTO? If yes, is it application level or document level?
>> We have created .msi to ship the plugin using Install Shield and the settings in it had Require admin privileges set to NO.
As far as I know, Install Shield is a third party product and I'm not very familiar with it. For questions about Install Shield, I will suggest you going to the Install Shield official site for help.
>> Opening excel comes up with an error "Compile error in hidden module: ".
I made a research about this error, it could be caused by a specific *.xla file and the KB below might be useful to you:
# You receive a "Compile error in hidden module" error message when you start Word or Excel
https://support.microsoft.com/en-us/kb/307410
If the issue keeps existing, can you share a us very simple sample to help us to reproduce this issue.
Best Regards,
Edward
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey.

Permission to view content of table of SYS schema to newly created user

Hi,
I am facing issue giving permission to view contents of table p_users of SYS schema to newly created user.
Regards,
Phani Ram

Hi Phani,
Could you please check if you have an a authorization to give a permission to other users for particular schema.
I mean check for privileges, user and roles.
Warm Regards,
Earesh kumar

Authorization newly created user

hi experts,
can any body explain, what infotype/authorization will be required for newly created user of HCM.
Thanks,
Waqas
You should first go through the
[SAP Help|http://help.sap.com/saphelp_erp60_sp/helpdata/EN/48/efa441d54eae5fe10000000a1550b0/frameset.htm]
& then seek help for specific issues. Please do not post vague questions.
Edited by: Suresh Datti on Aug 13, 2009 5:10 AM

Hi Waq,
Infotype access can be given based on client requirement. What ever infotype they will be using for their requirement you can add under role. Role can be created via Tcode PFCG. There are 2 objects named P_ORGIN & P_ORGXX can be used for giving infotype access under firld INFTY.
Then creaed role can be assigned to user via Tcode SU01.
If you want to give Tocde access, then authorization object P_Tocde & S_Tcode can be used.
Regards,
Purnima

Creating user accounts with OIDDAS and use them from the OS

Hi,
I have a customer that is experiencing an error creating user accounts from OIDDAS, and use that user accounts from the operating system.
My customer is using OID/OAS4OS 10.1.4.2.0, and that version is not longer available to download, then, I will try in my own environment
with OID/OAS4OS 10.1.4.3.0.
And the question is the following: is supported to create user accounts with OIDDAS and expect that users can work with OAS4OS and be
able to authenticate in the operating system?
For the reference, SR# 7222351.993:
Thanks,
Luis Vivero.
Edited by: LV in ORCL on Dec 11, 2008 6:47 AM

Hi Jacco,
I didn't see your post before.
Nop, unfortulately I don't have a document with that. I just received that answer
from development (related to the plugin for AD that is not certified, and DAS is
not intended to work with OAS4OS).
Anyway, about the plugin to work with AD, this is working for me; at least I tested
it by configuring the plugin, I configured synchronization, the mapping file, I did
the bootstrap, and the accounts that were bootstraped now shows the OS attributes
on DAS.
Regards,
Luis Vivero.

User with no admin rights can not authenticate on wikis or blogs

I just set up my OD and proceeded to add users in the workgroup manager. I create an account for myself and gave it full admin rights under the privileges tab (in work group manager). I then created a test user account and gave it no privileges. My admin account can log on to wiki's and create blogs but my test account can not, It wont let me log in to any of the wiki's it's assigned to or set up a blog. I set the test account to have full privileges and then I was able to do these things.
I had this set up correctly before the 10.5.2 update came out and crashed my server, I had to re-install the OS and start from scratch again.
Any thoughts on what's wrong?
Thank You,
Message was edited by: pixelmnky

Are the users and groups local or in an OD master?

Newly created user accounts can't log in??

I've got a 5 year old who is starting to use my computer for game playing, typing notes, and simple web stuff.
I want to set up a user account for him with parental controls so he can't randomly rename, delete, or change things.
I've followed the directions, set up a user account, given it a password... logged off my admin account ...
and when I click on his login picture, it brings up the password window, and when I input the password, it just gives a little shake, clears the password line, and lets me try again.
I've deleted that account and created a new one without parental controls. I've tried having NO password in the password line. I've tried making sure the short names for the accounts I'm creating are exactly 8 characters. I've turned off Norton antivirus. Nothing works - I cannot log in with any newly created account??
What else can I try?

Sara
Well you probably don't need to be told the NetInfo database is in a bit of a mess, but the significant thing is the "No such file or directory" from the last two commands. Basically this is where passwords are stored (encrypted) since the system changed to "Shadow Hash" passwords in 10.3.
Your account seems to be OK since it predates this change, and when you installed new system versions you chose the "Upgrade" option which left your settings alone. This is why your primary group is 'staff', or 20, whereas for Will it is creating a group 'will', or 502. That bit appears to be working, just not the passwords. Your password still works because it is in the old 'passwd' file (in encrypted form).
By far the best thing, at this stage, would be to do an Erase and Install, but this depends on you having a complete and up to date backup of all your files. See Mac OS X 10.4: About installation options. Alternatively you might try an Archive & Install, see Mac OS X : About the Archive and Install Feature, probably not choosing the "Preserve Users and Network Settings" option. But note this requires you to backup a lot of your data, and then re-enter settings and so on.
If you have a backup, the Migration Assistant can help you get your files back in place.
If it were my machine of course, I would probably carry on a bit longer trying to fix things, but the appearance of "#NoValue#" twice in the NetInfo output suggests some serious inconsistency which would be difficult to fix.
Let us know how you get on, and Good Luck!

SQL fails on newly created user

I just downloaded Oracle XE, installed and managed to go through all the steps in the Getting Started manual, i.e. creating a simple application and tried simple SELECT statements on EMPLOYEES and JOBS tables using the user account, "HR". I have tried to create two new user accounts with same settings as "HR". But when I log in as any of these two new users and just try on the SQL window with the same SELECT statements, I would get an ORA-00942 - form or view not exist. What else should I have to do? Do I have to grant certain access rights to the new accounts? I checked also the video tutorial and couldn't see any thing.

When you create a table, it is by default created in user's schema, which is same as username. In fact, if you create table table_name as user hr, you create table hr.table_name. That's not an issue if you try to access this table as the creator. But it is a problem if you want to access this table using different user accounts.
If you log in as e.g. usera, you can use query like this:
SELECT * FROM hr.table_name

Shockwave Player with no admin rights?

Hi Everyone,
I'm having an issue getting Shockwave to work for a user trying to play game with students. The site is http://www.bigideafun.com/penguins/arcade/doom_funnel/default.htm
This occurs in both IE and Firefox (both the latest versions) if the browser is not run under an Admin account, or run with admin rights. We're using an 8e6 filter, but the site is entirely unfiltered for both the teacher's account, as well as mine. I found an article on here that referred to giving a certain folder full access by everyone in order for Shockwave to work correctly in Firefox. This didn't work and the site still doesn't properly load.
Any ideas?
Thanks in advance,
-CR

No ideas? Anyone?

Do users have to have admin rights in order to be able to sync?

It seems that the Blackberry users at my company have to have admin rights in order for them to be able to sync their devices to their computers. The company is tightening the controls and soon, only the IT department will have admin rights. So how will users sync their devices? The company is not willing to spend the money on the BES. Any guidance to this problem would be GREATLY appreciated!

hello,
correct. Either a user groups, or directly the rights granted locally on each computer for its owner.
I have no idea so the IT guy will have to trial & error by dichotomy.
patience will be needed.
=> some registry folder in write/modify, some firewall ports opened, some rights on some NTFS folders.
I wish good luck to the ITman. Maybe theyll find salute with technical documentation on how the Desktop Manager works.
it's the price to pay for not paying the price of a BES
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Installing SQL server with local Admin rights

Dear DB experts
I have a concern about installing SQL server 2000 on win 2003 with out local admin rights
I have delegated local admin rights to a Domain user. that user can install and configure SQL with out any issues or its is a must to install SQL using local administrator account pls advise.
Regards
Rabbani
RaSa

Hi Syed_R,
SQL Server 2000 was out of support in SQL Server Forums since April,2013. You can install SQL Server 2005 or later version and more experts will assist you.
As other post, the user that runs the SQL Server installer must have Admin rights on the server when installing. For local installations, you must run Setup as an administrator. If you install SQL Server from a remote share, you must use a domain account
that has read and execute permissions on the remote share.
In addition, in preparation for setting up Microsoft SQL Server on this system, you add the Setup account to the local administrators group, also the Setup account need to have certain user rights for avoiding SQL Server installation fails. Such as Local
Policy Object Display Name, Backup files and directories and so on.
For more information, you can review the following article.
http://support.microsoft.com/kb/2000257
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support

Create BPC - Dimension with SSIS Admin Task

Hallo experts,
I am figuring out features for BPC - Packages and wanted to create a dimension within a SSIS Package.
The "Admin Task" offers this feature, but unfortunately I can't find any documentation about the SQL Source Table,
which ist needed when configuring and executing this task.
Help is appreciated about the structure, location and naming-conventions for this table.
Another Question:
Where does the Admin Console store the dimension structure e.g. of the account dim?
Thanks in advance
Jochen Kowalski
P.S: I'm working with BPC 5.1 SP3 and SQL-Server 2005

Brian, your explanation is sound and i understand your requirements.
Essentially you need to run a dimension process on both your Prod/Dev servers.
At one of our clients, we customised the Dimension excel sheet with some VBA. Administrators could still process the dimension sheet normally but they could click a command button that dumped the excel file to dev and then launched an SSIS package - the main problem is that we used XPCMDSHELL to kick the package off that processed the dimension in dev.
see http://social.msdn.microsoft.com/forums/en-US/sqlintegrationservices/thread/d4d69654-e2cc-4aa7-90f3-701b8180de36/
After much thought we decided it was best to use SQL to keep the databases mirrored, SSIS to keep the OLAP procssed [in dev] and we used a batch script to transfer the webfolders.
You may notice that the final solution is very much like the automated backup solutions that many BPC practitioners have gone with in the past.

OIM 9.1.0.1 :- Create User Operation with Approval.

Guru/Experts,
I am currently using OIM 9.1.0.1 , and i want create user functionality to be work with approval. Whenvr a user Or xelsysadm tries to create user then its should ask for approve/Rejact then only it will create or reject the operation.
Thanks,
Hemant.

user8995781,
Thanks for your reply , but i am not able to create a user. I am getting illegalArgumentException. My Approval process is triggering properly but i am not able to see provision process triggering properly.
Please find below log :-
13:24:07,457 INFO [PropertyMessageResources] Initializing, config='org.apache.struts.taglib.html.LocalStrings', returnNull=true
13:24:07,478 INFO [PropertyMessageResources] Initializing, config='org.apache.struts.taglib.html.LocalStrings', returnNull=true
13:24:07,481 INFO [PropertyMessageResources] Initializing, config='org.apache.struts.taglib.html.LocalStrings', returnNull=true
13:24:07,616 INFO [PropertyMessageResources] Initializing, config='org.apache.struts.taglib.html.LocalStrings', returnNull=true
13:24:09,285 INFO [PropertyMessageResources] Initializing, config='org.apache.struts.taglib.html.LocalStrings', returnNull=true
13:26:09,387 ERROR [REQUESTS] Class/Method: tcRequestOperationsBean/getRequestDetail encounter some problems: Error while executing query to get request information.
13:26:09,388 ERROR [REQUESTS] Class/Method: tcRequestOperationsBean/getRequestDetail encounter some problems: {1}
java.lang.IllegalArgumentException
at java.sql.Date.valueOf(Date.java:138)
at com.thortech.xl.ejb.beansimpl.tcRequestOperationsBean.getRequestDetail(Unknown Source)
at com.thortech.xl.ejb.beans.tcRequestOperationsSession.getRequestDetail(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionContainer.java:237)
at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionInterceptor.java:158)
at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstanceInterceptor.java:169)
at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:63)
at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:121)
at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:350)
at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:181)
at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:168)
at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor.java:138)
at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:648)
at org.jboss.ejb.Container.invoke(Container.java:960)
at sun.reflect.GeneratedMethodAccessor134.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
at org.jboss.invocation.local.LocalInvoker$MBeanServerAction.invoke(LocalInvoker.java:169)
at org.jboss.invocation.local.LocalInvoker.invoke(LocalInvoker.java:118)
at org.jboss.invocation.InvokerInterceptor.invokeLocal(InvokerInterceptor.java:209)
at org.jboss.invocation.InvokerInterceptor.invoke(InvokerInterceptor.java:195)
at org.jboss.proxy.TransactionInterceptor.invoke(TransactionInterceptor.java:61)
at org.jboss.proxy.SecurityInterceptor.invoke(SecurityInterceptor.java:70)
at org.jboss.proxy.ejb.StatelessSessionInterceptor.invoke(StatelessSessionInterceptor.java:112)
at org.jboss.proxy.ClientContainer.invoke(ClientContainer.java:100)
at $Proxy767.getRequestDetail(Unknown Source)
at Thor.API.Operations.tcRequestOperationsClient.getRequestDetail(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at Thor.API.Base.SecurityInvocationHandler$1.run(Unknown Source)
at Thor.API.Security.LoginHandler.jbossLoginSession.runAs(Unknown Source)
at Thor.API.Base.SecurityInvocationHandler.invoke(Unknown Source)
at $Proxy786.getRequestDetail(Unknown Source)
at com.thortech.xl.webclient.actions.RequestAction.setPendingTask(Unknown Source)
at com.thortech.xl.webclient.actions.RequestAction.requestDetail(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
at java.lang.Thread.run(Thread.java:662)
Thanks,
Hemant.

Newly created user packages with no admin rights

Similar Messages

Maybe you are looking for