Not a member of the Administrators group

My wife wants to use my iMac to do office work for her employer at home.
To do this, she has to install some employer software on my iMac. But when she tries to install her employers Mac software, she get the message "Hardware installation cannot start with this user account. Make sure that the user is a member of the Administrators group on the computer."
To make her a User/Admistrator, do I do the following:
1) Go into System Preferences and clicked on Users & Groups.
2) With the Current User as Admin checked, clicked on the padlock to unlock it and type in my password.
3) With the padlock unlocked, under Login Options, do I click on the + to establish a new user account for her?
4) Then, highlight the new account and click on the box "Allow user to administer this computer" and relock the padlock?
5) When the computer reboots, will it reboot with her as Administrator so she can load her employers software?
Once I have done this, in the future when she wants to use her new account, does she go into System Preferences - Users & Groups, unlock the padlock, click on her account to highlight it, relock the padlock and reboot the computer.
Thanks,
jzach52

Yes to 1 thru 5
To access the account it is faster just to logout and login rather than rebooting.

Similar Messages

User is not a member of the Administrators group but they Can Access anything the Administrators group is assigned to!!

Ouch!
Did a Server migration from Server 2003 to Server 2012 R2. Virtualized the Domain controller and a File Server.
Used Robocopy, icacls and takeown to get the permisions and access to work correctly.
One user we will call here Mary is a member of three groups: HR, HRA and Boardroom but when I give a test file Administrators only access she can breeze right in!
I do not know if this was how it worked before the migration but how do I stop it.
Effective permissions appear correct but she just tra-la-la's right on in!
Any ideas?
Liam

Please do this after you verify all permission settings for all the groups the account is associated with. Also, make sure you check the NTFS folder permissions before doing this as well.
Since the same result happens on multiple computers, it is not the profile.
I am recommending you delete the AD account (or rename to backup the account).
It will not effect the users Exchange account, but you will need to link it back to the new AD user account.
You can also delete her profile just to remove it, for the "just in case" scenario.
Don't forget to mark the post that solved your issue as "Answered." By marking the Answer you are enabling users with similar issues to find what helped you. Lewis Renwick - IT Professional

Group policy - restricted groups. How to specify a -local- user as member of the administrators group in group policy

Hi
With restricted groups I can specify the end user -domain- accounts that are members of the local administrators group on domain PCs. But - I need a particular LOCAL account on all the machines to keep its membership of the local administrators group for testing reasons. At the moment restricted groups is striping this local account of its admin access.
Is it possible to specify a -local- computer account as admin on all the PCs via group policy or it can only be done with domain accounts?
thanks

You are asking for local accounts to be managed via "Restricted Groups".
Yes, it is possible.
Rajesh showed you one way with domain groups. In his version "Administrators" group will only contain those accounts
that are specified in the GPO, no manually added accounts. This is not always desired.
If you wish to have an account (group or user, local or domain) to be added to "Administrators" group while keeping all the other
members, proceed like this:
- create the local account on the client(s)
- in the GPO select "Add Group" in "Restricted Groups".
- type in the name of the local account, e.g. "TestID"
- in the appearing dialogue choose "This group is a member of" => Add
- type in "Administrators"
Link the GPO and that's all.
The original MS description for "Restricted Groups".is here:
http://support.microsoft.com/kb/279301/en-us
Another nice one here:
http://www.frickelsoft.net/blog/?p=13
Besides that, a great solution to manage local accouts is GP Preference Extension "Local Users and Groups".
You can simply create a "Local Users and Groups" Item (computer or user based) and specify the needed options.
http://technet.microsoft.com/en-us/library/cc731972.aspx
Of course you need some prerequisites (at least one Vista or Winows 2008 for management and the GPP CSE on each target machine).
If you are new to GPP, these links will help you to get into it:
http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=42E30E3F-6F01-4610-9D6E-F6E0FB7A0790&displaylang=en
http://support.microsoft.com/kb/943729/en-us
http://technet.microsoft.com/en-us/library/cc732027.aspx
http://technet.microsoft.com/en-us/library/cc731892(WS.10).aspx
Patrick

TS3274 I am getting the error message "you are not a part of the administrator group". How do I get rid of this

I am getting the error message "you are not a part of the administrator group" when I try and set up my ipad and log in with my apple id. How can I bypass this error message?

Firstly, I recommend to go to Central Administration > Security > Manage the farm administrators group > make sure that your account is listed.
Yes, the account that I log into the server is a Farm Admin account
Secondly, did you do the backup or restore operations with PowerShell command or through Central Administration?
Used to be able to do it thru the CA, now I'm running PowerShell and using the scheduled tasks to run it when needed.
If you are using PowerShell, I recommend to run SharePoint Management Shell as administrator.
I'm able to run the backup with the account that is in the Farm Admin group. as I have that setup as the PowerShell account to run under.
If you are using Central Administration, I recommend to run Internet Explorer as administrator.
I still get this error when I run IE as the log in to the server who is in the build in and the SPS Farm Admin Security group:
You are not a local administrator. You must be a member of the Administrators group on the server that is running Central Administration to perform most backup and restore operations.

Programatically Check if the logged in user is in the Administrators group in Project Server (C#, VS2010)

Hi I would like to be able to check if the logged in user is a member of the administrator group programatically through c#
I know that I can get the user's GUID / check if they are actually a user in project server (resource table in reporting DB) but I am having trouble finding out how to programatically check if they are a member of the "Administrators" group.
Could somebody please provide a code sample of how to check if a user is in the administrators group when you have their GUID or username or name?
I did not see a table in the reporting DB that has this so I am guessing this has to be done through the PSI..
Thanks in advance!
BTW.. i am just wondering is there a way to check each groups permission levels? was wondering that if it is possible, what is the best way to implement a similar security model to that of the actual project server 2010

hi Amit :) I ended up finding the answer myself before you posted here but thank you for your reply anyways, it is basically the same thing that I did.
This is what I ended up doing :) Basically I have three different types of users configured in my web.config - admins, readwrite users, and read only users. In my code here I loop through and find out who the person is. Based on what group they are in I
can later show/hide different options in my application :)
SvcSecurity.SecurityClient security = new SecurityClient(ENDPOINT_PROJ_SECURITY);
string adminGroupsString = ConfigurationManager.AppSettings["adminGroups"];
string readWriteString = ConfigurationManager.AppSettings["readWriteGroups"];
string readOnlyString = ConfigurationManager.AppSettings["readOnlyGroups"];
List<string> adminGroups = new List<string>(adminGroupsString.Split(';'));
List<string> readWriteGroups = new List<string>(readWriteString.Split(';'));
List<string> readOnlyGroups = new List<string>(readOnlyString.Split(';'));
List<Guid> adminGroupIDs = new List<Guid>();
List<Guid> readWriteGroupIDs = new List<Guid>();
List<Guid> readOnlyGroupIDs = new List<Guid>();
List<Project> projectList = new List<Project>();
SqlConnection con = new SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings["RDB"].ConnectionString);
con.Open();
SqlCommand command = new SqlCommand("SELECT * FROM MSP_EpmResource where ResourceNTAccount = @username", con);
command.Parameters.AddWithValue("@username", this.User.Identity.Name);
SqlDataReader reader = command.ExecuteReader();
if (reader.Read())
string resourceID = reader["ResourceUID"].ToString();
//Get a list of security groups
SvcSecurity.SecurityGroupsDataSet sgds = security.ReadGroupList();
//Get the IDs of the required groups
foreach (SvcSecurity.SecurityGroupsDataSet.SecurityGroupsRow ds in sgds.SecurityGroups)
if (adminGroups.Exists(group => ds.WSEC_GRP_NAME == group))
adminGroupIDs.Add(ds.WSEC_GRP_UID);
else if (readWriteGroups.Exists(group => ds.WSEC_GRP_NAME == group))
readWriteGroupIDs.Add(ds.WSEC_GRP_UID);
else if (readOnlyGroups.Exists(group => ds.WSEC_GRP_NAME == group))
readOnlyGroupIDs.Add(ds.WSEC_GRP_UID);
bool isAdmin = false;
//Go through each group using the id and check if the current
//user is in that group (for example here check if the user is an admin)
foreach (Guid id in adminGroupIDs)
SecurityGroupsDataSet group = security.ReadGroup(id);
foreach (SvcSecurity.SecurityGroupsDataSet.GroupMembersRow member in group.GroupMembers)
if (member.RES_UID.ToString().Equals(resourceID))
isAdmin = true;
Session["createReport"] = "true";
break;
//If the user is not an admin then continue checking who they are
if (!isAdmin)
bool readWrite = false;
//Check if the user is a read write group member
foreach (Guid id in readWriteGroupIDs)
SecurityGroupsDataSet group = security.ReadGroup(id);
foreach (SvcSecurity.SecurityGroupsDataSet.GroupMembersRow member in group.GroupMembers)
if (member.RES_UID.ToString().Equals(resourceID))
Session["createReport"] = "true";
readWrite = true;
break;
//If the user is not a read write group member either then check if they are a team member
if (!readWrite)
foreach (Guid id in readOnlyGroupIDs)
SecurityGroupsDataSet group = security.ReadGroup(id);
foreach (SvcSecurity.SecurityGroupsDataSet.GroupMembersRow member in group.GroupMembers)
if (member.RES_UID.ToString().Equals(resourceID))
Session["createReport"] = "false";
break;
Cheers! :)

Windows 2012 : A domain user who does not belong to the Administrators group can change the passwords

Hello,
Can a domain user
that does not belong to the Administrators group,
be able to change your password ?
I tried to create a domain user account
without administrative access. This user account have
permission to access Windows Server
2012 via Remote Desktop.
I tried to access the same account
to the Active Directory Users and Computers,
i was amazed, because the user account it can changed
the password for multiple accounts,
included one administrator account.
Best regards,
Ricardo

Hi Ricardo,
I agree with Martin, we can check the membership about this user account. Besides, we can refer to following steps to check the memberships:
Start the ADUC on windows 2012.
Right-click the user account and select
Properties, then click the Member Of tab.
Check which group is the user account belongs to.
In addition, i suggest you create a new user account, and check if the new account can change other user’s password.
Best Regards,
Erin

TFS says {oldaccount} is not a member of the Team Foundation Valid Users group, but I am

I'm trying to check in changes to TFS using VS2013. When I hit the submit button, TFS returns the following error, "TF14002: The identity {domain} \ {oldaccount} is not a member of the Team Foundation Valid Users group."
Background: my account name has been changed to {newaccount} from {oldaccount}. And when the sys-admins changed my account name they did not update my computer itself, so I'm still using C:\Users\{oldaccount}. I can't believe that would make a difference
but you never know....
When I first started working at this company I'm almost certain I set up my TFS Workspace with my old account. But I thought I deleted all that stuff related to my old account and reset everything to my new account (Workspaces and TFS server). My lead tech
has even shown me the account mgmnt screen with my new account name. And I've been able to check out items with my new account name.
I performed the following steps to try to "clean out" TFS:
• I copied all of my changed files to a back-up location.
• I undid all changes in TFS (note that TFS has been allowing me to check out files to edit).
• I deleted the TFS entry in Credential Manager per a suggestion online.
• I deleted my Workspace.
• I even deleted my TFS server.
• I Rebooted my computer.
• I reconnected to the TFS server.
• I rebuilt my Workspace.
• I restored my changed files from my back-up location.
At this point I tried checking-in my changes again but got the same error message as above.
Next, I deleted everything in this folder:
C:\Users\ ...\AppData\Local\Microsoft\Team Foundation\5.0\Cache
... but I'm still seeing the error.
Also, we'd been informed that a number of us need to downgrade from "Ultimate" to "Professional". I did my downgrade to VS2013 Pro (after the steps above) but I am still seeing the same error.
A comment on another question
here suggested that I shelve my changes without preserving changes locally, then un-shelve and attempt to check-in. This also did not work, I could shelve my changes and un-shelve, but doing so did not fix the original problem.
Note that I do NOT have access to the TFS server itself - much less permissions to perform any sort of admin on it (and I don't know the person who would) - but might there be a table in the TFS database that still has an entry for my old account that could
be joining to my computer name &/or new account name when TFS goes to look up my account info when I check in my changes? I am getting desperate for an answer!
Any suggestions?
Thanks,
D. Kelley

Hi D. Kelley,
Thanks for the details. Based on your description, you might need to change or update the SID for users. Try identity command to change the username if you never use the new username in TFS. Check this page for more information about
identities command in this
page.
You can also check the table "tbl_Identity" in the tfs_configuration database to see if the new user exists, or it has the old user. Another option is have a check on other machines to see if it works fine. Refer to links below for more information:
https://social.msdn.microsoft.com/Forums/en-US/93568425-a877-4d21-8497-1adc4561b6d3/unable-to-check-in-code-to-tfs-due-to-tf14002-the-identity-old-user-name-is-not-a-member-of-the?forum=tfsversioncontrol
https://social.msdn.microsoft.com/Forums/en-US/acc56859-624f-41bc-b698-cbb5e0b8f525/cant-check-in-code-the-identity-devoldusername-is-not-a-member-of-the-team-foundation-valid?forum=tfsversioncontrol
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Database instance: You are not a member of the specified Installer group

Hi,
When I start ./RUNINSTALLER in HP-UX to install oracle, as a part of database instance instalation of SAP, the following message appeared.
"The Oracle Universal Installer Inventory on this system does not exist or is not writable. the possible cause are:
        1. The /tmp/orainstRoot.sh script was not executed with root priveleges, or an error occured during execution
        2. You are not a member of the specified Installer group"
Mention that I have executed the script by root user without any error.
Requesting your kind help to solve the problem.
Regards
Wahid

Hi,
I am trying to install oracle 9i as required by SAP ECC 5.0. Instance name is PRD as disaster recovery will be tested in that system. In the same time our SOLMAN is running in that system with database oracle 10g. We are planning to run parallel process in same time SOLMAN and DR PRD.
Till now we have done SAP Central instance installation. While trying to install database instance SAP asked to go /oracle/stage/920_64/Disk1/SAP and run the script RUNINSTALLER in HP-UX system for oracle.
To do this I have done the following
a. Logged on the system as oraprd
b. Set up environmental variable
          ORACLE_HOEM to /oracle/PRD/920_64
          DISPLAY to My work station IP:0.0
and started OS> ./RUNINSTALLER
After some time a window appeared headed by "Inventory Location"
I Specified base directory /oracle/oraInventory and pressed OK.
Then a window asked to run script /tmp/orainstRoot.sh by root user and then press continue
The script run successfully by user root. But when I press continue the following message appeared.
The Oracle universal Installer Inventory on this system does not exist or is not writable. The possible cause are:
        1. /tmp/orainstRoot.sh script was not executed with root priveleges or an error occured during execution.
        2. You are not a member of the specified Installer group.
Please help me how can I resolved the problem.

Allowing the creation of users but not letting them be assigned to the Administrators group?

Hi
I am using Project Server 2013 on-prem, with Project Server Security. We have defined a local administrator group that is intended to allow for a limited set of permissions to local administrators. The reason for this is that we need the individual offices
in a global company to be able to add their own users, but we want the ability to change configuration of Project Server to be controlled centrally.
However I have found that once I give Manage Users and Groups permission to a user in this Local Administrator group they can then simply add themselves to the Administrator group anyway.
Setting policy and training is not proving effective, hence I need to limit this. The desire is for a group that can create users and add values to lookup tables, but not add themselves to the Administrator group.
Is this possible?
Thanks
Ryan

You could still take the approach of having your helpdesk assign the permissions and remove the manage users and groups permissions from the local administrators in an office (as opposed to switching to the different permission model).
I'm curious how training and policy isn't working -- you've asked (told) the users not to add themselves to the administration group and yet they do it anyway? Are they doing this so they have permissions to perform some other tasks?
Jason Warren
@jaspnwarren
jasonwarren.ca
habaneroconsulting.com/Insights

I'm trying to get into game center to download some things. Enter user id/password then keep getting a "you are not part of this/the administrator group" then a cancel or retry command. What do I do? (I am using a friends wi-fi) What d

I am trying to get into the Game Center and download some apps. I enter my user id/password the keep getting a "you are not part of the/this administrators group" message then a cancel/retry command. What do I do to become part of this/the administrators group? I am using a friend's wi-fi...Help!

I am trying to get into the Game Center and download some apps. I enter my user id/password the keep getting a "you are not part of the/this administrators group" message then a cancel/retry command. What do I do to become part of this/the administrators group? I am using a friend's wi-fi...Help!

Primary member of the 501 group ?

I try install a tool, copy the message from a dialog box:
An OS user that is a primary member of the 501 group is required to install.
username: oracle
password:
But not continue...
And I check the linux's configuration and I have:
#cat /etc/passwd
oracle:x:501:501::/oracle:/bin/bash
#cat /etc/group
oinstall:x:501:oracle
dba:x:502:oracle
#id oracle
uid=501(oracle) gid=501(oinstall) grupos=501(oinstall),502(dba)
#cat /etc/gshadow
oinstall:!::oracle
dba:!::oracle
What wrong I do? or What more I do?

But not continue...Whyt do you mean "not continue". You type password and login will hang or what?
Could you post exact steps how you created user?
Are there some error messages in /var/log/secure or /var/log/messages?
Are there some other error messages?

Dreamweaver CS6 not have Text in the Tab groups?

Hi, can anyone tell me why my version of Dreamweaver CS6 does not have Text in the Tab groups?
Text also doesnt apear in the Insert drop-down menu on the tool bar.

Yes it does, I am on adobe cloud which has the most upto date version, but if you purchased the discs then you will have the original CS6 which still includes it. Aparently it was taken out because in HTML5 it can cause problems as text formating has to be in CSS and the text on dreamweaver insert tab is html formating. I purchased a training dvd to teach myself CS6 and that DVD shows you how to use it, which is why I was wondering why I didnt have that option and a few others. Jon Fritz II sent me the following link, which explains the changes in the upgrade. http://helpx.adobe.com/dreamweaver/using/changes-insert-options-creati ve-cloud.html
Thanks for taking the time to reply.
Regards
Stuart

How do I get home share when it says: the selected files could not be copied because the machine is not a member of the home share?

What do I do when it says the selected files could not be copied becasue the machine is not a member of the home share?

You dont say how you are connected to PC .
This is how i copy data .
USB Mass Storage mode .
Use Windows Explorer to open memory card and copy .
Your free space problem if not resolved copy data off memory card to pc then back .
jje

Adding the Administrators group to a user token

I'm attempting to launch a process running with Administrator privileges from a service running on session 0. I'm using WTSQueryUserToken(WTSGetActiveConsoleSessionId(), ...) in my service (which runs as LOCAL SYSTEM) to get the user's token and then call
CreateProcessAsUser() to launch the process.
However, I need to add the Administrators group to the user token, but I'm severely intimidated by all the security API functions and I'm afraid I'll be adding something with unintended side effects.
What's the best way to get the same elevated token that a UAC prompt converts an ordinary user token into?

The Elevated token is stored in the user's token. The caller must have the SeTcbPrivilege and it must be enabled. You can call GetTokenInformation + TokenLinkedToken which will return a TOKEN_LINKED_TOKEN structure which contains the handle
to the Full token.
thanks
Frank K [MSFT]
Follow us on Twitter, www.twitter.com/WindowsSDK

How to be a member of the administrator group

since i got my ipod i can't get games because i am not a member of the adeministrator groupsooo mad i need games on my ipod to have fun plz

So, I've searched and searched the topic - is there no answer? Does Apple not monitor this site and give any answers? My 9yr old gets an ipod touch and cannot use it. I am so upset and ready to go to my Facebook page and tell the world that I will NEVEE buy another apple product!! Someone from Apple, please respond!

Not a member of the Administrators group

Similar Messages

Maybe you are looking for