Non-Administrator setup

Hi,
We are running Netware 5.1 SP8, and Zen3.2. Currently our users are all in
the Administrators group, as this in the past made thiungs easier for us,
however as the department has got bigger it is now more of a hinderence as
users have complete control and regually manage to install applications that
affect the performance of the machines.
I have created a user who is not in the Administrators group, and I can log
in as that user, however when I try and launch some applications that
install from Zen, they fail with a "cannot find network path" error, I have
found the "run as secure/unsecure system user" and tried both of those and
neither seem to work. (The application in question is an msi, that is
installed by running setup, with apropreate flags to make it install
silently).
We do not currently have our workstations registered in the NDS, though I
eventually intend to, if this affects the problem ?
Additionally does anyone know of a utility that will log program execution
so that we can at least find out who is installing stuff and go and stomp on
them :)
Thanks.
Phill.

You can use workstation groups, but take note that by default workstation
groups are not enabled for reading of app associations.
Check the Launcher Configuration tab in C1 to enable this.
Craig Wilson
Novell Product Support Forum Sysop
Master CNE, MCSE 2003, CCNA
Editor - http://www.ithowto.com
(Seeking Full-Time Expert? Drop me a note :> )
"Phill Harvey-Smith" <[email protected]> wrote in message
news:[email protected] 81...
> "craig wilson" <[email protected]> wrote in
> news:zMg%e.5208$[email protected]:
>
>> This is basically 100% required to access network resources using a
>> "Secure or Unsecure" system process.
>> These types of apps access the files on the NetWare share using the
>> network permissions assigned to the workstation object, not the user.
>> No workstation object. No Netware Share access.
>
> Now I have fixed workstation importing (**** DNS changes !).
>
> Does the applicatio have to be ascociated directly with the workstation
> object, or can I put a bunch of workstations in a workstation group and
> ascociate it with that ?
>
> Phill.

Similar Messages

Write errors when using non-administrator shared accounts

Dear all,
we're experiencing an apparently weird issue with our Xserve machines. The entire setup comprises of 4 Xserve, all of them running Lion Server, connected together and to the network of our institution through an Ethernet switch.
I've set up an OpenDirectory master on one of these servers and created several shared user accounts for the various people working here (the /Users folder is hosted on that machine and shared across the other three). Users can access any of these machines via VNC.
A few days ago a guy reported to me that he was getting random write errors when attempting to perform basic operations on his shared user folder (e.g., unzipping a file or running a software which write data on the disk). I had a look into it and found that the guy was right. When attempting to extract a zip archive (which, I'm absolutely confident, is a non-corrupted .zip file) from the Terminal - using his account - a few errors came out, like:
error: cannot create pybrain-pybrain-87c7ac3/pybrain/auxiliary/importancemixing.py
error: cannot create pybrain-pybrain-87c7ac3/pybrain/rl/learners/meta/meta.py
Every single time I run the unzip command the errors are related to different files.
Weirdly enough, the problem arises only when the user works on one of the three machines that don't host the shared /Users directory. Furthermore, it only applies to non-administrator accounts (if I try to perform the same operation using my admin account everything works smoothly, no matter on which machine I'm working). Promoting that guy to administrator (Server->Users->right click on the username->Edit User->Allow user to administer this server) made the problem disappear. Even more weird, after I removed the flag on "Allow user to administer this server" for that user, he is not experiencing the issue anymore.
What the heck is going on?
Cheers,
Fabio

1. You can delete the Test1 and Test2 accounts if you log into your Administrator Account. Once in your Admin Account, open System Preferences > Users & Groups and you will see and be able to delete the Test1 & Test2 accounts.
2. Leave your Guest account for, well, guest users. Do not use it in the normal course of events. When you log out of the Guest account, all the settings, caches, etc. are wiped, as are all files and folders that you may have saved in the Guest account home folder. The Guest account is truly designed only for temporary, guest use.
3. Leave your Administrator account for use only for installing programs, doing system administration, managing accounts, etc.
4. User your named account as your regular account. It appears to already be a User account. The primary limitation is you cannot install programs in a regular User account. This actually helps protect your Mac from viruses and other malware that would need to install software in order to corrupt your system.
5. You can turn off the need to enter a password when your computer sleeps in System Preferences > Security & Privacy > General. UNcheck the option called "Require password for sleep and screen saver."

Can't install add-in for non-administrator

Hello all,
I'm having trouble getting the Adobe Connect add-in installed under a non-administrator user's account. I found a successful method of installing it in this thread, but that method is no longer working for me. As the forum in question is currently down, I'll paste the post below:
I know this is an old thread, but we recently had this issue. Our users do not have the ability to install software, and using admin credentials at the UAC prompt installed it in the admin's profile, instead of the user's.
Here's how we solved it and made it per computer on Vista SP2. All without turning UAC off.
1) Log in as an admin and install the Connect Add-In.
2) Browse to the plug-in directory; directory should contain 1 .exe and 1 .s. **Note, there is a space in ...\Flash Player\...**
C:\users\%your_admin_account%\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\connectaddin6x5\
3) Run the connectaddin6x5.exe file, which will create 2 .dll files. It will also launch a window, which is okay to close after the 2 .dll files have been created.
4) Copy "\www.macromedia.com\bin\connectaddin6x5\*.*" to a central location for easier access.
5) Copy "\www.macromedia.com\bin\connectaddin6x5\*.*" to c:\users\default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\connectaddin6x5\*.*
**When any new user to the system logs in and their profile is generated, this will include the Connect Add-In plugin
6) For users who already have a profile, we created a simple .bat script to xcopy the directory structure and files created in Step 4 to "C:\Users\%UserProfile%\AppData\Roaming\Macromedia\Flash Player\"
7) Have the user run the script once and the plug in will be installed for the user.
8) Log in to/Refresh the meeting.
I hope this helps. If there's a better way to do this without disabling UAC, I'm interested. Or maybe an MSI to push with GPO. Or even a Setup.exe that can be run with User privileges. But with 10-15 users per computer and 100+ computers, this was our best solution.
Evan Franklin
Field Service Engineer, SAIC
The computer that I used this method on had the add-in working fine until a few days ago, when the add-in stopped being recognized. Repeating the process yielded no results. When installed as an administrator it works fine, and launching the browser under administrator credentials allows the add-in to run, but this is not an acceptable solution for the long-term.
Any help would be much appreciated.

Having the same problem has anyone come up with a fix yet?
Since the connect 9 update to our hosted account we can no longer use in the connect add-in for meetings. we lose all the screen sharing option that we once had working fine.

Allow a windows non-administrator user to run cmd.exe as administrator without sharing administrator password with the user

I have standalone Windows 2003 and 2008 Oracle database servers (they are not in a Windows domain environment ). The Oracle DBAs can perform all their routine activities from command line with administrator privileges. For this i've to either share administrator
user password with the Oracle DBAs or add their windows login user to Administrators group. If i can give the DBA user permission to run windows command prompt without sharing administrator password, i can give them non-administrator login access to Windows
2003/2008 server. Normally when a non administrator user would try to run a program as administrator on Windows 2008, the user is prompted to input administrator username/password. Is it possible to give non-admin user access to run a program/application (cmd.exe
in this case) on Windows 2003/2008 without sharing administrator credentials with them?

With the OTORISER application I developed, normal users can run applications with admin privilege …
Otoriser is totally free ! Applications, mmc consoles, control panel cpl files can be run under admin and system context with Otoriser. Let’s say you donot want your users to be admin in their machines, but want them to run some applications with admin rights.
If this is the case then you are on the right blog.
There are two components for Otoriser. Management and client components. There are no complex implementation and no frustrating steps to be performed. Within 10 minutes you can start testing the results
After you download the setup files, install client components in the client by running it directly (or any deployment method you have), it will take about 5 seconds to install it. Then, let’s say you want your user to change system properties of the machine.
With the tool provided in Admin package produce the hash of system.cpl file and enter that hash into the group policy (details are provided in documentation). When policies are applied for that user then he or she can run that control panel applet under admin
context but donot forget that the user is still an ordinary user.
download link :
http://burakuysaler.wordpress.com/2013/02/21/with-the-otoriser-application-that-i-developed-normal-users-can-run-applications-with-admin-priviledges

How do I make Firefox the default browser in a non-administrative Windows XP account, where clicking to do so has no effect?

I have two accounts for myself on my PC running Windows XP. In the administrative account, Firefox is already the default browser that opens when I double-click an HTML file, etc. Firefox knows it's the default browser there.
In my other account, every time I start Firefox, it tells me it's not the default browser. Clicking there to make it the default, or in the options, does nothing.
When I go to Set Program Access and Defaults in the administrative account, "Use my current Web browser" is selected. Mozilla Firefox is not listed as an option. In my non-administrative account, the Add or Remove Programs control panel can't be used. It says I don't have permission.

To check that in the other account you would have to give it temporarily administrator permissions.
See:
*https://support.mozilla.org/kb/How+to+make+Firefox+the+default+browser
*https://support.mozilla.org/kb/Setting+Firefox+as+the+default+browser+does+not+work
*http://kb.mozillazine.org/Default_browser

Acrobat/CS5.5 won't open from a non-Administrator account

I have an intermittent problem that occurs when I double-click a .pdf file from a non-Administrator account. Acrobat.exe shows up as an active process in Task Manager, but Acrobat never actually launches or opens the file. My administrator doesn't have this problem from his account on the same computer. This is an intermittent problem that occurs about 70% of the time I try to open a .pdf. I am also unable to launch Acrobat from the Start menu when I am experiencing the problem. I am running Windows 7. Any help would be greatly appreciated.

I completed all of the recommendations and I am still having this problem. I'm going to completely uninstall all Adobe products and re-install again. Is there any recommended steps for a complete uninstall?

Is there a problem with itunes (11.1 latest version) on a windows 7 non-administrator (standard) account?

When I tried to update my dad's iphone 5 to iOS 7 on a windows 7 standard account an unknown error was encountered and he lost everything! It also doesn't recognise my mum's iphone 4s (already updated to iOS 7), it gets an error, but her phone works fine on my administrator account. Do non-administrator restrictions cause problems? Any support would be really valued. Thanks.

I think there is a problem. I dont get the noises on each song even though that happened to me on a previous update but rather than being a sporadic click it was a very loud hiss over every single track...
The latest problem with my copy is that the songs are only playing out of one speaker and its not even the centre speakers, its the left speaker.
The last time itunes didnt work properly it took apple around a week or so to correct so im not worried at the moment but i have to use windows media player in the mean time which I dont like to use.
HP Windows XP

App is getting damaged when I replace it as non-administrative user

Hey people,
When I want to update e.g. VLC Player, as an administrator, it is simple: I just download the dmg, mount it and drop the new version of the VLC.app into the Applications folder to replace the old VLC.app. Few days ago I created a new admin account and changed my old account to normal user. If I want to install new software that I did not use before, everything works as expected: when I drop an .app package into the Applications folder, I need to type in the admin login and password to allow this operation, then the package will be copied and I can start the new app.
My problem:
If I want to update the software by replacing the app as non-administrative user, the system first will promt me to keep both files, replace an older one or to stop - so far so good. BUT, when I select to replace, the copying process actually begins before the administrator prompt and it results in corrupted file. I also tried to create a new user account. So then I need first to remove the broken app (admin prompt once again) and then to install the new one (3rd admin prompt).
I attached some screenshots to visualize the issue. I have the same issue on two different macs with different user/admin names. I hope you have any idea how can it be fixed.
1. I download the package:
2. Mount the package:
3. Drag the VLC app to the Applications folder (selecting >Authenticate in the prompt)
4. Copy prompt (>Replace):
5. Authenticate with administrative user
6. Error message:
7. Corrupted file:

Thanks, you helped me. I had gotten hung up on '--user = <vboxuser>' in the ExecStart line, which works for one of my other services, but not this one.

Performance Tuning for non Administrator users

Hi,
Since i had performance issue on my cube i have followed tutorial:
http://www.oracle.com/technology/obe/obe_bi/bi_ee_1013/aggpersist/aggpersist.htm
to obtain best performance using aggregate tables.
All works, but opening NQSQuery.log i've seen that only Administrator User uses aggregate tables, and not other users. In fact:
Administrator User:
WITH
SAWITH0 AS (select sum(T209.SPESA_PRES0000004A) as c1,
T202.Sesso00000057 as c2
from
SA_Nominat00000090 T202, (Aggregated table)
ag_Fatti T209 (Aggregated table)
where ( T202.Nominativo0000005F = T209.Nominativo0000005F )
group by T202.Sesso00000057)
select distinct SAWITH0.c2 as c1,
SAWITH0.c1 as c2
from
SAWITH0
Other user:
WITH
SAWITH0 AS (select sum(T32.SPESA_PRESCRITTA) as c1,
T32.ASSISTITO__SESSO_LVLDSC as c2,
T32.TEMPO_DIM_ANNO_LVLDSC as c3
from
STORDO_CUBE_CUBEVIEW T32
where ( T32.TEMPO_DIM_LEVEL = 'ANNO' and T32.ASSISTITO__LEVEL = 'SESSO' )
group by T32.TEMPO_DIM_ANNO_LVLDSC, T32.ASSISTITO__SESSO_LVLDSC)
select distinct SAWITH0.c2 as c1,
SAWITH0.c3 as c2,
SAWITH0.c1 as c3
from
SAWITH0
How can I do to obtain a query similar even for a non Administrator User?
However, in your opinion, to have a TOTAL level for all dimensions, can me help to improve performances?
p.s. In addition, aggregate measure value is wrong. It's 900, but it must be 300, infact the total of all rows in fact table is 300 and not 900. In this way, even the report result is wrong!!! Why?
Thanks
Giancarlo
Edited by: user5380662 on 10-mag-2010 4.44
Edited by: user5380662 on 10-mag-2010 5.47

Hi daqstudent,
What versions of Windows (with service packs), LabVIEW, and the DAQmx
drivers do you have? It looks like this issue should have been
fixed in DAQmx version 7.4. As a work-around, you should be able
to use the Measurement & Automation Explorer (MAX) to create
DAQmx Global Channels, and then use those saved Global Channels in LabVIEW. The
configuration for DAQmx Global Channels in MAX is the same as that of
the DAQ Assistant in LabVIEW. The only experience lost is seeing the
actual DAQ Assistant icon in LabVIEW.
Thaison V

Using non-administrator user to start/stop services

We have Crystal Report Server (BOE XI) running on Windows platform.
Our customer's policy dictates that operator ID are to be use to manage starting/stopping of Crytal Report Server. The operator ID has no administrator rights and it has no access to the Microsoft Management Console.
Would it be possible to use non-administrator ID to start/stop Crystal Report Server services? Appreciate if anyone could share on the configuration.
Thank you.

salafrance wrote:A simple way would be to write a small C program to run systemctl setuid root.
So perhaps like this?
#include <stdlib.h>
#include <unistd.h>
int main(void)
execl("/usr/bin/systemctl", "systemctl", "start", "calibre", NULL);
return(EXIT_SUCCESS);
compiled it, then "chown root:root test", "chmod u+s test" and it worked.
But is this safe? I have absolutely no knowledge about potential security issues...
I also have thought about periodically restarting calibre, but on the Raspberry Pi, with it's slow ARM, the start takes ages and the processor is completely busy with that task for some minutes.
And that's the reason why I also want to avoid starting an entire second systemd session... Or is this not that resource intensive?

Photoshop CS as a non-Administrator

I recently installed Photoshop CS for a user. After installing, I ran the program without issue. When the user logged in and tried to run it the following error was displayed:
"Current user account does not have privileges to perform product activiation. Run this application from a user account with administrative priveleges or contact your system administrator."
We do not allow any users to run as administrators at the company I work for. We are willing to elevate permissions for users if a program references files that standard users do not typically have access to. We attempted giving full control to the Photoshop folder but that did not work. Has anyone run into this error and found where the permissions need to be changed?

I am sorry I did not specify. The user is running Windows XP SP3.
I disagree on this being a Windows issue because non-administrative software should not require being an administrator to work correctly. The program runs fine when I use my administrator account. There must be some files that Photoshop CS wants to access that non-administrators cannot. We have come across this in the past with other software and a solution (work around) has been to elevate user permissions to "Full Control" on the folders the software wants to access.
I appreciate the reply though, thanks.

How can I open Firefox 3.6.15 in non-administrator profiles?

When I installed Firefox 3.6.15, the previous version (3.6.13) opened in non-administrator profiles on my computer. I uninstalled 3.6.13, but firefox.exe is now in a different location: c:\Documents and Settings\All Users\Application Data\Mozilla Firefox. Administrator rights are required to open the file in this location. How can I get Firefox to open now?

Firefox installs to C:\Program Files\Mozilla\Firefox by default.
Did you do a custom installation to that \All Users\AppData folder?

Can I run as a non-administrator?

I run on a Windows XP user account that does not have administrator priveledges. The administrator installed ADE and I can run it. However, if I attempt to get a book from Adobe's web site, it wants me to install ADE. Of course, if I try to install it, that fails with a message indicating I need "administrator access". Is there any way I can run as a non-administrator user (so not being able to install a program), but still download books?

Hi,
All that one need to run application in NWDS is the SDM password to deploy the applications .
who ever know the SDM password can simply install NWDS on thier PC , deploy and run applications.
Regards,
Satya.
Edited by: Satya on Jul 17, 2009 12:24 PM

Allowing non-Administrator "Users" to use AEBS (1)

I'm getting tired of always having to "Authorize" other "Users" on my computer without Administrator Privilege when they wish to connect to my "Closed" AEBS. How can I work around this issue so all "Users" can conect to the AEBS?

It seems that I have originally stated the happenings incorrectly. It should been titled.
Allowing non-Administrator (or Standard) "Users" to use the Airport Card freely
I am both the 'Administrator' and the 'User' in this scenario.
I log in as the 'User', without "Allow user to Administer this computer" checked in System Preferences. This is for enhanced security while surfing at home and also when using open networks on the road. This way an Authentication by the Administrator is required every time when changes to Mac OS X are about to occur.
And, as far as I am aware, MY 'User' keychain has all the passwords I need to do what I need to do.
It's when I am logged in as the 'User' and I go to 'Turn Airport on' (in the Apple Menu) that I get the 'Authenticate' window asking me to "Type an Administrator's name and password to make changes to Mac OS X".
How do I get around having to 'Authenticate' every time 'User" needs to turn the Airport on?

Run NWDS 7.0 SP12 as non-administrator

Hi,
May I know if I can run NWDS as a non-administrator?
Is there any documentation on this?
Thanks.

Hi,
All that one need to run application in NWDS is the SDM password to deploy the applications .
who ever know the SDM password can simply install NWDS on thier PC , deploy and run applications.
Regards,
Satya.
Edited by: Satya on Jul 17, 2009 12:24 PM

Non-Administrator setup

Similar Messages

Maybe you are looking for