Non-admin users do not generate ICP Reports

Hi all,
I'm having an issue with HFM 11.1.3.5. Users that are not provisioned as administrator cannot see data in any ICP Report. The report runs fine, but the report shows no data. Only the POV is displayed. If an admin user runs the same report (with the same POV), All data is displayed correctly.
I've tried to provide "all" acess to metadata in shared services (Assign acess control option), and still no data.
PS: The error occurs only for some members of Value Dimension, such as Elimination. The report runs fine for Ent. Curr Total, for example.

No, consolidation rules don't block data, and the ICP report has nothing to do with consoidation rules unless you have flagged parent entities "IsICP" which you should not do.
Since administrators can see the data and others cannot, this seems clearly related to security. What is the security class assigned to the report in question, and what access do users have to that class? Also, check each entity in the report and reply what the security class listed on "security as partner". This is the security access applied to the ICP dimension. If the fields are both blank then HFM uses the access rights to the [Default] class. You should grant all users at least Read access to the [Default] class, though I recommend All access to this class for all users.
--Chris

Similar Messages

Non admin user - changes not saved (Safari settings, system prefs, etc.)

iMac, 2 users, one is administrator and other is standard user. Recently, in the non-admin user account, it has become impossible to make any changes. For example, adding an application to the the Dock, after logging out and back in next time, the application is not in the Dock any more. Also, making changes to the prefs in Safari, changes are not saved.
I noticed this after installing FireFox v4. I installed it as admin whilst in the non-admin users account. However, I don't believe that the installation of FF has anything to do with the problem, it just highlighted it. I've checked the permissions for the various directories that hold prefs info such as user/libraries/application prefs/etc. etc. and also Safari prefs. Nothing I can see that has changed in system prefs.
Any ideas on what has caused the problem (kids are known to fiddle from within the non-admin account) and any ideas on how to fix it?
Thanks

Hi PPRuNe,
You could try making the standard user an Admin too. To do this, make sure you are logged in to the standard user, go to System Preferences > Accounts > Standard user (you may have to unlock the padlock) > Allow user to administer this computer
This will allow changes to be made without being prompted for a password all the time.
However, if you had Parental Controls on, they probably won't work on an admin account because as an admin you have complete control over a computer, so the computer thinks there is no point in having the controls turned on. And if the kids are known to "fiddle," just think carefully!
Hope this helps you.
Chris.

Non-admin user can not logon to web pages

I setup an iMac, I am the administrator and I set up a non-admin user. I also setup parental controls to their default settings.
The user can log on to their account but when they go to a web page, any web page, that requires a logon, the authentication fails. I can login to the iMac as the administrator and can go to those same pages and try to logon and it works.
I tried disabling parenting controls but it still doesn't work. I don't think that I should have to change any settings to allow a non-admin user to log on to a website, but maybe there is something I am missing...
Any tips or things I should try?

It's recommended to have your Security mode on.
Anyways if you wish to, go to ''''Firefox'''' tab > ''''Options'''' > ''''Options'''' > '''''Security'''''
and do your custom settings.
Re-installing Mozilla Firefox may fix this problem.

Majority of reports missing for non admin users

I have followed the instructions here (SCCM 2012–Reporting in console for non-admins (Reporting User Role) v2) to allow non admin users the ability to view
reports in the console. So far, so good. However, when viewing the reports with the non admin user, only about 100 of the 400+ reports appear.
Am I missing something here?

The custom reporting one in the link I provided, and also modified versions of the following:
OS Deployment manager (removed rights to All driver related items (drivers and driver packages), Boot image packages (except read access), Operating system installation packages).
Application Administrator (removed Application>Approve; Distribition Point>Set Security Scope; Distribution Point Group>Set Security Scope; Global Condition>Set Security Scope)
The reports missing we care about primarily are Software ones (companies and products and files).

Not able Access Page in Page in Page Library for Non Admin users in Shrepoint 2013

Hi all,
All Non Admin users are not able access the page in pages library.If you have idea realting to this please give reply.
Regards
VeerendraNadh

Hi Veerendra,
Thanks for posting your issue,
I think you have not published your pages for Major version. thus, other users are unable to see your pages from page library.
for more details, kindly check out below mentioned URL
http://blogs.technet.com/b/tothesharepoint/archive/2013/04/10/stage-7-upload-page-layouts-and-create-new-pages-in-a-publishing-site.aspx
I hope this is helpful to you, mark it as Helpful.
If this works, Please mark it as Answered.
Regards,
Dharmendra Singh (MCPD-EA | MCTS)
Blog : http://sharepoint-community.net/profile/DharmendraSingh

Not able to install ActiveX (OCX) on Non-Admin user in Windows 7 ( internet Explorer 8/9)

I need the solution to install ActiveX controls throught CAB file (Micorsoft Cabinet) for non-admin users. Our solution is working for user accounts with adminstrator rights but not for nonadmin users.
So far we have tried solution given here: http://msdn.microsoft.com/en-us/library/dd433049(v=vs.85).aspx
and here:
http://blogs.msdn.com/b/askie/archive/2012/09/27/guidlines-on-implementing-activex-installer-service-axis.aspx
But we could not succeed. Pls Help !

Hi,
Apologize for the late reply and the misunderstanding about the ActiveX download location, we could change the location through the below registries:
Use Registry Editor to change the "ActiveXCache" value to the location you want in the following registry key:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Use Registry Editor to change the "0" value to the location you want in the following registry key:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ActiveX Cache
   NOTE: The values you enter in steps 1 and 2 must match.
More information, please check
How to Change the Download Location for ActiveX Files (registries exists in IE11).
Regarding the urls that download the cab files into user profile directory, would you mind to share the URL?
And here is some information regarding inf files:
About INF File Architecture
We may check the value of DestDir, DestDir can be set to 10 to place the file into the \Windows directory or to 11 to place the file into the \Windows\System directory. If no value is specified, the file is placed into the \Cache directory.
Best regards
Michael Shao
TechNet Community Support

Borland C++ Delphi application is not able to connect to SQL Server as Non Admin user

Hi,
I am working on a Borland C++ and Delphi application. This application connects to SQL Server and returns database queries results. Once we migrated to windows Server 2003 we have started facing an issue.
1. IF we login to client application as admin user then this connects properly with SQL Server and returns database queries.But if we connect using Non- Admin users then application is not able to connect SQL Server.
SQL Server 2008
Windows Server 2003.
Can anybody help on this.
Thanks in Advance.
Rakesh

This application is written in Borland C++ and Delphi running on Windows 2003 Server. This is a Windows GUI based small tool. Basic functionality of the tool is : 1) Once we invoke the tool it connects to DB(SQL Server 2005) and populates a list of
all the tables present in DB. 2) If we select any table from the list populated in step (1) and provide query parameters, this will return results from Database.
Issue: IF we login to the Windows machine as Administrator this application runs perfectly .This application populates the DB tables correctly and returns results from database when queries executed as in step (2)
But if we login as some other user (like hubapp) then this populates some different set of table which are not from the same database instance .Also the queries does not return any results. In the logs we get following error message : (TiltData is the instance
name for our Database)
Msg:Application Exception : Cannot locate or connect to SQL server.Unable to connect: SQL Server is unavailable or does not exist. Specified SQL
server not found.Alias:
TiltData1 occurred in main thread.
As for the connection string
'DATABASE NAME=tiltdata'
'SERVER NAME=SDV3'
'USER NAME=sa'
'OPEN MODE=READ ONLY'
'SCHEMA CACHE SIZE=8'
'BLOB EDIT LOGGING='
'LANGDRIVER='
'SQLQRYMODE=SERVER'
'SQLPASSTHRU MODE=NOT SHARED'
'DATE MODE=0'
'SCHEMA CACHE TIME=-1'
'MAX QUERY TIME=300'
'MAX ROWS=-1'
'BATCH COUNT=612'
'ENABLE SCHEMA CACHE=FALSE'
'SCHEMA CACHE DIR='
'HOST NAME='
'APPLICATION NAME=QueryTool'
'NATIONAL LANG NAME='
'ENABLE BCD=FALSE'
'TDS PACKET SIZE=65535'
'BLOBS TO CACHE=64'
'BLOB SIZE=32'
'PASSWORD=jstart')
Any help is appreciated. I have spent a lot of time on this issue with no results.
Regards
Rakesh

Applet does not run for non-admin users

When logged in as a normal user, our applet fails to run. When logged in as a local admin, the applet runs successfully. The client machine is running Windows XP and IE 8.
The java console contains this error message when it fails:
JNLPAppletLauncher.loadLibrary("jogl")
Exception in thread "AWT-EventQueue-3" java.lang.UnsatisfiedLinkError: jogl
at org.jdesktop.applet.util.JNLPAppletLaunc her.loadLibrary(JNLPAppletLauncher.java: 1922)
at sun.reflect.NativeMethodAccessorImpl.inv oke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.inv oke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl .invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.opengl.impl.NativeLibLoader.load LibraryInternal(NativeLibLoader.java:174 )
at com.sun.opengl.impl.NativeLibLoader.acce ss$000(NativeLibLoader.java:49)
at com.sun.opengl.impl.NativeLibLoader$Defa ultAction.loadLibrary(NativeLibLoader.ja va:80)
at com.sun.opengl.impl.NativeLibLoader.load Library(NativeLibLoader.java:103)
at com.sun.opengl.impl.NativeLibLoader.acce ss$200(NativeLibLoader.java:49)
at com.sun.opengl.impl.NativeLibLoader$1.ru n(NativeLibLoader.java:111)
at java.security.AccessController.doPrivile ged(Native Method)
at com.sun.opengl.impl.NativeLibLoader.load Core(NativeLibLoader.java:109)
at com.sun.opengl.impl.windows.WindowsGLDra wableFactory.<clinit>(WindowsGLDrawableF actory.java:60)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at javax.media.opengl.GLDrawableFactory.get Factory(GLDrawableFactory.java:106)
at javax.media.opengl.GLCanvas.chooseGraphi csConfiguration(GLCanvas.java:520)
at javax.media.opengl.GLCanvas.<init>(GLCan vas.java:131)
at javax.media.opengl.GLCanvas.<init>(GLCan vas.java:90)
at gov.nasa.worldwind.awt.WorldWindowGLCanv as.<init>(WorldWindowGLCanvas.java:50)
Java on Windows XP attempts to store the native libraries it downloads at C:\Documents and Settings\<USER>\Local Settings\Temp\
Non local admin users do not have access to this folder. Is there any way to change the applet launcher so that it stores the native lib cache elsewhere?
Thanks,
Jeremy

user11193214 wrote:
JNLPAppletLauncher.loadLibrary("jogl")
..Non local admin users do not have access to this folder. Is there any way to change the applet launcher so that it stores the native lib cache elsewhere?I don't know. One thing I do know is that the JNLPAppletLauncher since plug-in2 architecture JREs allow hooking into JNLP services. Try using web start to launch the applet.

QuickTime fails to initialize for non-admin users (Error 63441)

I have installed iTunes 6.0.4 (including QuickTime 7.0.4) on my XP PC. iTunes and QuickTime work fine for the Admin users, but not for non-Admin accounts.
iTunes crashes with the generic Microsoft 'send error report' message; QuickTime gives "QuickTime failed to initialize. Error # 63441".
Any help / suggestions appreciated.

Eventually fixed it!
As mentioned in numerous other posts this came down to an issue with registry keys.
Updated the permissions for HKEYLOCALMACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime to give 'Full Control' to 'Everyone'.
Initially had a lot of difficulty accessing the Apple Computer, Inc. branch - kept getting 'access denied'. This turned out to be because there was no owner set for the key. Once I had made myself owner I was able to make the other changes.

ColorSync and non-admin users

Is there a way to allow non-admin users to change ColorSync profiles for printers using the ColorSync Utility? Our non-admin users can launch the utility and see all the printers listed in the "Devices" section but the option to change the default profile for any particular printer is greyed out.
Thanks.

Kurt is far more expert on this than I am, so take his advice first.
Hi,
There are three things to consider...
#1. Profiles in use, like Fast User Switching being on and another User logged in, cannot be changed/edited.
#2. There are at least 2 locations for the .ICCs...
/Library/ColorSync/Profiles/Displays/
/Users/YourUserName/Library/ColorSync/Profiles/
Profiles in the 1st location cannot be edited. ICCs in the 2nd location could have copies made & the copies moved to another User's folder & Rights/Privileges changed accordingly.
#3. See what "Scope" Colorsync reports... I think it has to do whether all users was selected when installing drivers, not certain on that though.

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

A Solution for Enabling Sandbox activation by non admin users for testing (OIM 11gr2 PS2)

I just wanted to post what i came up with as a solution the the problem of not being able to Test the effects of sandbox changes for non admin level users prior to their publication. We are constantly making changes to the UI through sandboxes, the problem is rolling a sandbox back isn't easy, and we cannot be sure of the effects they will have on non administrative users until they are published, since the out of the box sandbox link isn't available to non Sysadmin level users.
To allow these non admin user accounts to test the effects of sandbox changes in our development environment, I did the following (as always, follow at your own risk):
Create and activate a new sandbox.
Close all open tabs (including the Home and Sandbox tabs) and click the "Customize" link.
Click the view -> source drop down in the upper left.
After the source is visible, click the Accessibility or Sandbox link to find the area that you will add the new "UserSandboxTest" (call it whatever you want) link.
Add a new commandImageLink directly in the panelGroupLayout: horizontal item before the "switcher" item (see the UserSandboxLink in my screen shot below):
Edit the Link you just inserted, Entering whatever you want the link to display as in your browser in the "Text" field.
Export the sandbox.
Unzip the exported sandbox and navigate to the IdmShellV2.jspx.xml (path should be: \templates\mdssys\cust\site\site).
Edit the IdmShellV2.jspx.xml file and find the new item you added in step 5.
Add the following to the commandImageLink xml item: actionListener="#{pageFlowScope.uiShell.context.launchSandboxes}" rendered="#{oimcontext.currentUser.roles['SANDBOX_USER'] != null}". Note: I used a new custom enterprise role, SANDBOX_USER, to control the display of the new link, You should substitute whatever EL conditions you need in the rendered property.
Save your IdmShellV2.jspx.xml file and zip the contents back up, just like you would for any other customization.
Import your newly edited sandbox back into the target environment.
Publish the sandbox.
This seems to work great for allowing us to test other sandbox changes effects on different types of users.

On step 10, adding the check to determine if the user should have access to the role ended up breaking access to the unauthenticated pages like the self registration page and the forgot userid/user login pages. Non-authenticated users cannot execute the method to return the role, so that fails which leaves the page not loading. To correct this I changed the rendered property to rendered="#{securityContext.authenticated}". This prevents the link from displaying on non authenticated pages, but displays for anyone else who's logged on. We only plan on using this in our development environment where no one but developers and system admins have access anyway, so it's not an issue that everyone will see the link. I wouldn't recommend putting this in an environment where end users will be logging in and testing without developing a method (or finding another way to limit the display) that can be called by unauthenticated users to prevent them from seeing the link.

Reader 9.5.1 Crashes after a few seconds for non-Admin users

I have Adobe Reader 9.5.1 installed on some Citrix XenApp 5.0 servers that are Windows 2003. Any time a non-admin user launches Reader it is open for a matter of seconds and then crashes. It shows a Dr Watson crash in the error logs each time. If I logon as an Administrator, it works just fine. I've tried reinstalling/repairing the installation to no avail.
Has anybody run into this in the past or does anyone have any ideas on how to fix it?

My company is into same issue but thing is that I cannot uninstall the MS patch as it will be vulnerability for our servers and we have opened a case with MS and they have reveiwed the proc dump and now MS is asking to get this reviewed with Adobe. I'm not sure how to reach out to Adobe Support to get the fix from them. Any solution on this regard, it will be great help. Thanks, Sayed.

Is there any way to prevent non-admin user accounts to receive software update prompts?

I am the admin account user on our MacBook Pro, and there is one standard user account on it as well. Generally we are both logged on so we can quickly switch between user accounts and 'spin the desktop'.
For some reason, all the software update notifications seem to be received when the standard user account is the active one.
I know that the standard user cannot actually update without my account password and my Apple ID, but a) The notifications confuse the non-admin user, and she gets flustered, and b) Even if she manages to cancel them from the notification area, she then has to remember to tell me verbally that she had had one.
Is there any way to stop her receiving the update notifications altogether?
Running OS X 10.8.2 on MacBook Pro.
Thanks in advance.

You should be able to do this by unchecking the software update service in the system preferences to prevent the system from running the check as the "_softwareupate" user and passing it to the notification service that broadcasts to all user accounts. Then you can check for the software update in an admin account using the following Terminal line:
/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck -Check YES
This line can be scripted via Terminal services to run on a schedule (ie, every few hours), and if there are found updates it will launch the App Store for that account and present them. Granted this approach circumvents the notification service, but should work. To try this, open TextEdit on your computer and in a new document choose "Make Plain Text" from the Format menu.
Then copy and paste the following text into the new document:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
          <key>Label</key>
          <string>local.softwareupdatecheck</string>
          <key>ProgramArguments</key>
          <array>
                    <string>/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck</string>
                    <string>-Check</string>
                    <string>YES</string>
          </array>
          <key>StartInterval</key>
          <integer>21600</integer>
</dict>
</plist>
When done, save the document to your desktop as "softwareupdatecheck.plist" or anything as long as it ends with ".plist." Then get information on the file in the Finder to ensure its name ends with plist and not anything else like "plist.txt" (rename it accordingly in the Info window's "Name & Extension" section.
With the file name appropriate, hold the Option key and choose the "Library" option in the Finder's "Go" menu. Then locate the folder called "Launch Agents" in the library and drag the text file to this folder. Then log out and log back into your account.
This text file is a launch agent script that instructs the system to run the program arguments every 21600 seconds (6 hours) whenever the user is logged in. The program arguments here are simply those to check for software updates for the system. You can change this time interval to be any number of seconds you would like, but there are other options to use besides the "StartInterval" key for scheduling the task. This approach simply has it repeat every number of seconds, but you can use other options to have it only run on specific hours or days, or only have it run once when you log in, etc.
If this works for you, then if you'd like to explore these other options write back here and we can go over them for you.

Acrobat 7 requires admin password at every launch for non admin users?

acrobat 7 requires admin password at every launch for non admin users?
any one with a solution or similar problem?
thanks for any help.

I've been avidly following all of the threads regarding this issue...yet none of the solutions have worked for me. I've got 11 Mac users that do not use the Creative Suite..only Acrobat, Quark, etc. I've tried installing and re-installing through both Admin and User accounts, I've tried the AdobeBib XML change, I've tried enabling Root and installing, changing permission on the Acrobat folder, etc. all to no avail. I still get asked for Admin Authentication every time Acrobat and Distiller are opened (except on the Admin account side). This is happening on one particular Mac (G4, 1GB Ram, OS 10.4.3) for both Acrobat Standard 6 and 7 as well. The biggest issue that also happens in tandem with the Acrobat installs is the inability to print from Quark. I get the following error when printing: "The process "pictwpstops" terminated unexpectedly on signal 6." Because of the necessity to print Quark documents, I have uninstalled all Acrobat on the machines until we can get a fix. This resolves the printing problem with Quark. The only option left is to set up all users as Admin accounts - which I really do not want to do. Any other suggestions out there? I've got more information available if needed.

Non-admin users do not generate ICP Reports

Similar Messages

Maybe you are looking for