Non-secure application update on standard account

My daughter has just downloaded and updated Microsoft Messenger to version 5.1.1 whilst logged into her standard user account (without admin priviledges). There was no request for an admin password and when she launched the application there was no alert box advising she was opening an application for the first time.
I am concerned the normal security protocols of the OS appear to have been bypassed! All settings have been checked and everything is locked down as far as possible. Was the Messenger update just a very minor issue without any change to the actual application or is there a potential security hole?
Maybe I'm missing something simple but it raises a few questions.
G5 Dual 2GHz Mac OS X (10.4.6) Latest Security Update in place

I figured out my own question and want to delete it but I can't find an option to do so? Anyway, it turns out that when there is two or maybe more "desktops" open at one time, that is when right clicking on an application in the dock shows the assign to options. Ok then.....

Similar Messages

Secure and non-secure access to the web application in one war

Say we have one web application (in one war) which includes JSP, servlets and the security intercepter. There is one business requirement to have most of the JSP(s) accessed via HTTPS, but a few JSP(S) accessed via HTTP.
My questions are:
a. Is this possible, or a reasonable requirement or a good practice?
b. if yes, what can we do to make it happen in the security intercepter implementation?
c. If not, what is the technical reasons?
Thanks much.

a) Yes its is reasonable and good practive, there is an overhead using https, so you should only encrypt file you need to. When you use an online store, only account details / payments are https, the shop itself is http
b) I dont really understand your difficulty. You can define a folder as 'secure' and put all your secure pages in this folder, leaving non secure files in a different folder. Whenever a page in the secure folder is accessed, https is automatically invoked.

Is there a problem with itunes (11.1 latest version) on a windows 7 non-administrator (standard) account?

When I tried to update my dad's iphone 5 to iOS 7 on a windows 7 standard account an unknown error was encountered and he lost everything! It also doesn't recognise my mum's iphone 4s (already updated to iOS 7), it gets an error, but her phone works fine on my administrator account. Do non-administrator restrictions cause problems? Any support would be really valued. Thanks.

I think there is a problem. I dont get the noises on each song even though that happened to me on a previous update but rather than being a sporadic click it was a very loud hiss over every single track...
The latest problem with my copy is that the songs are only playing out of one speaker and its not even the centre speakers, its the left speaker.
The last time itunes didnt work properly it took apple around a week or so to correct so im not worried at the moment but i have to use windows media player in the mean time which I dont like to use.
HP Windows XP

Updating existing itunes account billing method none

How do I update an "existing iTunes account" (i.e. from the original iTools and Bondi Blue iMac) to reflect the "Billing Method" as "NONE"?
It's the kids account and I will allow them to "go crazy" with FREE applications but, can not find out how to remove the credit card information.
Yes, I know you can create a NEW iTune/MobileMe/App Store account but, I don't want to burden Apple or myself much less have the kids change their name, etc.
Suggestions?

Unbelievable crappy Apple support over two weeks via multiple e-mails.
The resolution came within a patient 20 minute phone call to the "top tier software engineer" for the iTunes Store!
I'll keep is name off the board but, I hope the department BBQ made him blush when his boss shared my glowing e-mail about his expertise aloud to the crowd.
Truly a intellectual engineer with great communications skills!

Do I Have To Use A Standard Account for Computing Security?

Hi,
I have often heard that it is safer to use a Standard Account for normal computing and keep an "Admin" account separate, but it bugged me to have two accounts.
Once I began to use File Vault 2 I thought I could only sign into my Mac initially with the Admin account and would have to log out and switch over to the standard account every time I turned my computer on, which was never going to happen, but I just found out that I can sign in with my Standard account from the beginning if I give it permissions.
So my question is...
Do I really need to separate my accounts? What security measures are in place when I use my standard account vs the Admin if I can just use the Admin password when I need it (like I do now)?
Also, are any changes made in a Standard account (such as files downloaded for school or software installed) carried over to the admin account or would I have to transfer that new content over if I ever decided to delete a standard account?
Thanks!

Using a standard account is probably marginally more secure. Both standard and admin accounts give you the ability to modify any files in your home folder. But standard accounts can't modify system settings nearly as easily.
However, you don't *have* to use one to be sufficiently secure. I would certainly recommend that you ensure Gatekeeper is set to "signed apps and app store apps" and NOT set to allow all applications by default. Then, just use a modicum of good sense about things.

Can't create new folder to Applications in standard account

Hi.
As I have two accounts one admin account and other standard account and last time it didn’t work in both.
So I just restored factory settings like described here: http://support.apple.com/kb/ht3910
This fixed the problem.
Now again I can't create new folder to applications but this time it doesn’t work only in my standard account but it does work in admin account.
Previously I downloaded this program to open pdb files :http://www.loghound.com/pordible/
But it didn't work for me so I removed it to Trash. That's when I noticed that the new folder icon in applications isn't active but I can't be sure that this caused it.
I used Disc Utility to repair my macbook pro hard disk using Mac OS X Install DVD but it didn't fix the problem.
Is there any way to fix this problem without restoring factory settings again?

I think either way should work OK - it's less of a security risk to use a standard account for "everything", including web browsing, but I confess I don't myself do this. You would again have to authenticate with an admin username/password if you do download and install from the standard account.
Whichever way you do it, this article may be relevant:
*About file quarantine in Mac OS X v10.5 and v10.6*
http://support.apple.com/kb/HT3662
It includes the following:
If you have multiple user accounts on your Mac, the user account that downloaded the file is the only user account that can remove the quarantine attribute to the file. All other user accounts can open the quarantine file, but they will be presented with the quarantine dialog box asking "Are you sure you want to open it?" every time they open the file.
--------------------

Problem updating pre-installed iPhoto and iMovie "to update this application, sign into the account you used to purchase it"

My dad bought a new retina macbook pro over a year ago.
The pre-installed iPhoto and iMovie applicaitons get this error when trying to download an update:
"to update this application, sign into the account you used to purchase it"
We are logged into the only account that he has ever had.
He has mountain lion.
It's very annoying and there's no way we know of to get around it. Searching and searching online led nowhere.
Please help!!!!!

You cannot.
As requested... You need to use the SAME Apple ID that Originally made the Purchase of whatever Application you are trying to Update.

I currently have Iphoto v. 9.1.4. There is an update v. 9.4.3 that I am unable to install. I keep getting a message, "you have updates available for other accounts. To update this application, sign into the account you used to purchase it."

I have iPhoto v 9.1.4. Update available is 9.4.3. I keep getting this message: "You have updates available for other accounts. To update this application, sign into the account you used to purchase it". I have done this and I keep getting the same message over and over again. Please help me!

Please try each of the following steps you haven't already taken, until the issue is resolved. After each step, relaunch the App Store and try again.
1. Follow the instructions in this Apple Support article.
2. If any App Store purchases were made under a different Apple ID, or if the bundled iLife applications were accepted under a different ID, sign in to the App Store with that ID to update.
3. Alternatively, delete the probem applications and re-download them with the ID you're using now. If you haven't already purchased them with that ID, you'll have to do that first, because purchases can't be transferred from one account to another.
4. Select the Purchased tab in the App Store window. If you see an item in the list marked "You have 3 apps to accept," click Accept.
5. Triple-click anywhere in the line below on this page to select it:
/Library/Caches/com.apple.appstore/adoption.plist
Right-click or control-click the highlighted line and select
Services ▹ Reveal
from the contextual menu. A Finder window may open with a file selected. If it does, delete the selected file. You may be prompted for your login password.
Then repeat step 4.
6. Select
Store ▹ View My Account
from the App Store menu bar, then select View hidden purchases. If you're trying to update any hidden purchases, unhide them.
7. Launch iTunes and select
Store ▹ Authorize This Computer
from the menu bar.
8. If you've moved any App Store apps out of the Applications folder, or into a subfolder, put them back. Never move or copy those applications. If you have backup copies of the apps on another volume, unmount it and try to update again.
9. Contact Account and Billing Support.

I keep getting an error message that reads "to update application sign into the account you used to purchase it" I am trying to download Final Cut Pro X 10.0.9 I am signed in with the account that I purchased Final cut Pro X I don't have another acco

I keep getting an error message that reads "to update application sign into the account you used to purchase it"
I am trying to download Final Cut Pro X 10.0.9
I am signed in with the account that I purchased Final cut Pro X
I don't have another account I'm not sure what's going on

Welcome to Apple Support Communities
Open the Mac App Store and go to Purchases. Do you see Final Cut Pro X listed?
If so, open a Finder window, choose Applications in the sidebar and delete Final Cut Pro X. Then, go to the Mac App Store and download Final Cut Pro X for free.
If you don't see it in Purchases, see if it's hidden, and if so, unhide it > http://support.apple.com/kb/HT4928 If it doesn't work, contact with the Mac App Store support > http://www.apple.com/support/mac/app-store/contact

Updated my AppleID account info. Under password security shows an email address to be used to receive email with new password settings. I need to update that email address, how do I do that? Thanks!

Updated my AppleID account info. Under password security shows an email address to be used to receive email with new password settings. I need to update that email address, how do I do that? Thanks!

Thanks for the help Niel. I couldn't change the rescue email address (an address that no longer exists and is therefore useless) until I could correctly answer the security questions. After numerous guesses, finally got them right. Was then presented with the option to change the rescue email address. Guess the only other option was to have Apple Support make the change or reset my account info. Have made note of the correct answers so this won't happen again. Thanks for the fast response!!

HT201109 Why am I getting this message when I am signed in with the account that I purchased it I don't have another account I'm not sure what's going on here's the message I keep getting my:"To update this application sign into the account you used to pu

I am trying to update my Final Cut Pro X which I have done many times before.
Why am I getting this message now?
--- here's the message I keep getting every time I try to download the update--
"To update this application sign into the account you used to purchase it"
I am signed in with the account that I purchased it I don't have another account I'm not sure what's going on

Open up iTunes. Go to Store. Go to Account and sign in. Click on Purchase History. Find your purchase record.
Good luck
Russ

Do you push non-security patches? (i.e. hotfixes, product updates, etc.)

I work for an organization with about 11,000 computers, and we are switching from Altiris/SMP to SCCM. We've always struggled with pushing patches in SMP, and have experienced a lot of issues with their patching product (especially lately). Now I've always
been a big proponent of preventive maintenance, so I have always been on the side that we should push hotfixes, and product updates, along with security related patches. Unfortunately we have had a bad spell with patching lately, and I am starting to rethink
this strategy.
I was curious what the general consensus is. We don't have a lot of time for patching, and I am worried the issues with non-security patches are going to distract us away from patching that really is critical. Basically consider anything that has
a severity rating of 'none'.
So what is the general consensus; do you only push security updates, or do you push non security updates too?
Appreciate your time.

in our organisation (45,000 workstations), we adopted ConfigMgr and Windows7 at the same time.
(we migrated from WinXP and HP CA / Radia).
When we did this, I made the decision "if there's a patch in the catalog, and it's Required on at least 1 PC, we will acquire/test/release it".
This doesn't include "hotfixes" since those aren't published into the WSUS feed from MU, nor does it include "CU's" for Office.
(Almost) Everything in the feed is what we do, as long as it passes our testing protocols. Some things, we skip. (stuff like MSRT and CheckSUR). We also skip stuff that doesn't apply in our locale (Australia), e.g. the EU stuff, and Japanese pop words dictionaries.
We have Win7, Win8.0, Win8.1. 32bit and 64bit. Office 2007/2010/2013. We have IE8/9/10/11. We have no WinXP.
I don't cover patching for WindowsServer (that's a different team, and they don't use ConfigMgr at all).
It seems to me (and I'm convinced that I'm not alone), that MSFT have accelerated the release cycle of a lot of patches since Win8 was released, largely dropped the concept of ServicePacks, and, there are shorter cycle-times now (which surely must mean there
is less testing being done at MSFT).
So I'm not overly surprised that in the last 6 months there have been quite a few patches released then withdrawn then revised.
Even those with Security/Severity ratings.
I'm still in favour of releasing non-security updates to our estate, so that's what I do.
But, patching = change, and change=risk. Some risk mitigation is addressed by testing, but we can't test every feature of everything.
Not patching is also a risk. (how long will you put up with the internal noise about those really annoying defects?)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

When I update applications more than one account appears. How do I delete second account

when I update applications more than one account appears. How do I delete second account?

I'm wondering if you have to Apples IDs or iTunes IDs and have puchased apps on both accounts.I have the same issue, and must supply both accounts' passwords in order to update apps. From my research here, there's no way to merge the two accouts. It is aggrivating, indeed.

How to launch an application with elevated administrator account privilege from windows service even if the account has not yet logon

Here is the case:
OS environment: Windows 7
There are two user accounts in my system, standard user "S" and administrator account "A", and there is a windows service running with "Local System" privilege.
Now i logged-in with account "S", and i want to launch an application with elevated administrator account "A" from that service program, so here is the code snippet:
int LaunchAppWithElevatedPrivilege (
LPTSTR lpszUsername, // client to log on
LPTSTR lpszDomain, // domain of client's account
LPTSTR lpszPassword, // client's password
LPTSTR lpCommandLine // command line to execute e.g. L"C:\\windows\\regedit.exe"
DWORD dwExitCode = 0;
HANDLE hToken = NULL;
HANDLE hFullToken = NULL;
HANDLE hPrimaryFullToken = NULL;
HANDLE lsa = NULL;
BOOL bResult = FALSE;
LUID luid;
MSV1_0_INTERACTIVE_PROFILE* profile = NULL;
DWORD err;
PTOKEN_GROUPS LocalGroups = NULL;
DWORD dwLength = 0;
DWORD dwSessionId = 0;
LPVOID pEnv = NULL;
DWORD dwCreationFlags = 0;
PROCESS_INFORMATION pi = {0};
STARTUPINFO si = {0};
__try
if (!LogonUser( lpszUsername,
lpszDomain,
lpszPassword,
LOGON32_LOGON_INTERACTIVE,
LOGON32_PROVIDER_DEFAULT,
&hToken))
LOG_FAILED(L"GetTokenInformation failed!");
__leave;
if( !GetTokenInformation(hToken, (TOKEN_INFORMATION_CLASS)19, (VOID*)&hFullToken,
sizeof(HANDLE), &dwLength))
LOG_FAILED(L"GetTokenInformation failed!");
__leave;
if(!DuplicateTokenEx(hFullToken, MAXIMUM_ALLOWED, NULL,
SecurityIdentification, TokenPrimary, &hPrimaryFullToken))
LOG_FAILED(L"DuplicateTokenEx failed!");
__leave;
DWORD dwSessionId = 0;
WTS_SESSION_INFO* sessionInfo = NULL;
DWORD ndSessionInfoCount;
bResult = WTSEnumerateSessions(WTS_CURRENT_SERVER_HANDLE, 0, 1, &sessionInfo, &ndSessionInfoCount);
if (!bResult)
dwSessionId = WTSGetActiveConsoleSessionId();
else
for(unsigned int i=0; i<ndSessionInfoCount; i++)
if( sessionInfo[i].State == WTSActive )
dwSessionId = sessionInfo[i].SessionId;
if(0 == dwSessionId)
LOG_FAILED(L"Get active session id failed!");
__leave;
if(!SetTokenInformation(hPrimaryFullToken, TokenSessionId, &dwSessionId, sizeof(DWORD)))
LOG_FAILED(L"SetTokenInformation failed!");
__leave;
if(CreateEnvironmentBlock(&pEnv, hPrimaryFullToken, FALSE))
dwCreationFlags |= CREATE_UNICODE_ENVIRONMENT;
else
pEnv=NULL;
if (! ImpersonateLoggedOnUser(hPrimaryFullToken) )
LOG_FAILED(L"ImpersonateLoggedOnUser failed!");
__leave;
si.cb= sizeof(STARTUPINFO);
si.lpDesktop = L"winsta0\\default";
bResult = CreateProcessAsUser(
hPrimaryFullToken, // client's access token
NULL, // file to execute
lpCommandLine, // command line
NULL, // pointer to process SECURITY_ATTRIBUTES
NULL, // pointer to thread SECURITY_ATTRIBUTES
FALSE, // handles are not inheritable
dwCreationFlags, // creation flags
pEnv, // pointer to new environment block
NULL, // name of current directory
&si, // pointer to STARTUPINFO structure
&pi // receives information about new process
RevertToSelf();
if (bResult && pi.hProcess != INVALID_HANDLE_VALUE)
WaitForSingleObject(pi.hProcess, INFINITE);
GetExitCodeProcess(pi.hProcess, &dwExitCode);
else
LOG_FAILED(L"CreateProcessAsUser failed!");
__finally
if (pi.hProcess != INVALID_HANDLE_VALUE)
CloseHandle(pi.hProcess);
if (pi.hThread != INVALID_HANDLE_VALUE)
CloseHandle(pi.hThread);
if(LocalGroups)
LocalFree(LocalGroups);
if(pEnv)
DestroyEnvironmentBlock(pEnv);
if(hToken)
CloseHandle(hToken);
if(hFullToken)
CloseHandle(hFullToken);
if(hPrimaryFullToken)
CloseHandle(hPrimaryFullToken);
return dwExitCode;
I passed in username and password of account "A" to method "LaunchAppWithElevatedPrivilege", and also the application i want to launch, e.g. "C:\windows\regedit.exe", but when i run the service program, i found it do launch
"regedit.exe" with elevated account "A", but the content of regedit.exe is pure back. screenshot as below:
Can anyone help me on this?

You code is not dealing with the DACL access to Winsta0\Default. Only the LocalSystem account will have full access and the interactively logged on user which is why regedit is not displaying properly. You'll need to grant access to your user.
You also need to deal with UAC since that code is going to give you a non-elevated token via LogonUser(). You need to get the full token via a call to GetTokenInformation() + TokenLinkedToken.
thanks
Frank K [MSFT]
Follow us on Twitter, www.twitter.com/WindowsSDK.

After Every CLEAN Wipe my APP Store in a Standard Account Downloads Weird Software Automatically, EVERY TIME!!

Hello everyone,
I have a very weird situation that is going on that keeps happening to me and has caused many "Weird" situations on my Retina MBP and other Mac's that I own. I did have some of this in another thread, but most people simply don't think what I am describing is really happening, etc.
To date I have spoken with many Mac Genius's at multiple Apple Stores, I have spoken with many Level 2 Apple Care Rep and now have an Apple Certified IT person that visits my house once or twice a week trying to figure out what is going on.
Anyway....
I will give a quick example and if anyone can explain this to me or has had a similiar experience I would love to hear back!! .....
So I have about 6 macs for my current and past business. Plus I always love grabbing the newest technology. That said this "Problem" occurs with every Mac I own. Even to a brand new MBP Retina that no one has had access to. I keep Firmware PW's on, I only use Eithernet connections, I have a $600 Hardware Firewall configured to let nothing in (No VPN's, etc)... obviously have sharing off, **** I don't even use Bluetooth.
Anyway when I wipe the drive I do it like this...
1.) Take out both the MAC HD and Recovery Partion....
2.) I have 50 MBPS Download Speed so Internet Recovery is very quick. I go through the normal process.
3.) Once I have reached the new recovery partition from the Internet Recovery I partion the SSD a couple times in different formats and then go back to the normal Journaled that I will be using for my single partioned SSD
4.) Then I install and go through all the normal steps, expect I skip everything that I can. I don't add location services, I set time manually and I don't sign into iCloud as this will be my Admin Account. I normally just call the account Main or Admin.
5.) I check for updates and install any that might have not been included in the most recent Internet Recovery.
6). In the Admin Account I set a tough PW and then begin with all the security options. Again all sharing off, Firewall on, Wifi Off and requires Admin Access to Turn on, No Peer-to-Peer Networking without Admin Access, Bluetooth Off, Java and Extensions turned off in Safari, etc. You name it I have done it as far as the GUI goes. I am certainly no expert in Terminal, but can make my way around for some things.
7.) I create a Standard Account "The one in which I will conduct 99% of my business in." Again I create a strong PW for this account and confirm that the security settings that I setup in Admin match those of my Standard Account.
HERE IS WHERE THINGS GO WRONG...
8.) I go into options and login to icloud.
HERE IS WHERE IT IS ABSOULETLY WRONG...
911) I login to the apple store as I want to dowlonad some of the simple apps so I can go to work. IMMEDIATELY, it starts downloading a program called "Mountain" ... please don't confuse this with Mountain Lion (You can see it listed second in the APP Store search "Mountain")... when I look down at my Launchpad bar without hitting anything the 2.1MB file is downoading and then dissapears from my launchpad.
** Also as this is going on "storeagent" with the linux exec box icon next to it shows up saying "storeagent is attempting to install software to your computer" It does ask the for Admin User and PW, but no matter what I hit this "Mountain APP" downloads.
When I first noticed this I thought this was legit, well it certainly is not. I have never purchaed that "APP" however it does show up in my APP store Purchaes. The gateway is obviously not doing it's job and FURTHERMORE I don't have any of the options to "Automatically Download New Apps, etc." I simply just check for updates manually everyday as it is a 2 second process and Mounain Lion doesnt check automatically until every 7 days.
Here is a Screen Shot...
Sorry for the long post... Anyway experiencing the same thing? I can redo my drive over and over again... I have ever purchased a new Mac Book Air a year ago to see if it would happen and the problems eventually started and fairly quickly. The weird thing also is that I have done wipes and renistalls in all sorts of different locations.
So all this said... how could it not be in the EFI or on the machine some how?
Thanks guys... I hope someone has experienced a similiar experince!!! .... as the Mac Store and Apple Care have been of no help!! ... and with a problem like this I think it is way above a level 2 Mac specialist head

Hey etresoft,
I need that firewall for VPN Tunnels. These are not setup yet, but in order to work from home... outside our office, this is a requirement. Money is not really an issue and I do always back up kids / family photos. I have two Thunderbolt backups attached to the Monitors. So the 4TB with Raid 0, was cut down to 2TB and then I have another more movable / durable one that piggybacks off that.
I am considering the new Apple ID, the problem is I have a ton of Apps and a TON of Moview / TV Shows that have been downloaded over the past years.
The movies are easy enough, but it just ****** me off that I won't just be able to have them in the iClould and put on my Apple TV and have it right there with my Apple ID (My 2 year old loves Tom & Jerry )
It might come to the new Apple iD with minimal security, but being a partner in a business that runs the Internet Marketing team... we have very sensitive data that is stored. That said large email list and many other items that make us money and the ability to run a successful business is important to protect. Apple has these security mesaures in place for a reason and really the bottom line is I want to get to the bottom of what is causing this.
If you don't believe me, etc... that is fine. I did start a new forum as you said and I am simply looking for people to throw some feedback my way, if they have any.
When you say thing like "I suspect you aren't telling the Full Story." it is upsetting because I am trying to be as detailed as possible and why would I ever be typing on this forum unless I was just looking for some feedback.
I did start my own forum, but please don't acuse me of not telling the truth or the full story as others were in the last forum. That was a bad thread to jump in on, as it started out way more extreme than what I am trying to explain.
Anyway...
I have never posted on this forum until recently... and I promise you I am telling you the full story and I am simply looking for feedback. This is not fun for me. I would rather be running the business 100% and not have to worry about this and spend time on forums that eat into my day.
Thanks.

Non-secure application update on standard account

Similar Messages

Maybe you are looking for