Prevent ~/Library/ folder creation (for dummy/daemon users?)

Hi.
I have a few daemon/dummy users under whose UID I only run a few shell daemons, so nothing that has anything to do with Mac OS X proper --- only the UNIXy foundations.
Hence, the Library folders in those users' home directories are unnecessary (and actually a problem). However, for some reason, they keep getting re-created (though empty, with only ".localized" in them).
Can I somehow stop the Library folder from being created, short of a minutely rm -rf cronjob?
Thanks.

Bear in mind that I don't actually know what I'm talking about and this is moreover "do as I say" not "do as I have done" because I haven't...
It sounds like you created those users using System Preferences > Accounts. Don't! That's not the way to create daemon users.
Instead you want to use the dscl command. See Apple's Example: Adding a User From the Command Line. In particular,
1. Choose a UID less than 100 or 200 to mark a "system"-type user but be sure it is not already used.
2. Use something like /var/empty or /dev/null for the NFSHomeDirectory property. That should take care of your home directory issues. (Preexisting Apple system accounts seem to use /var/empty.)
3. Use something like /usr/bin/false for the UserShell.
4. I'm not sure what you are supposed to do about the password. Search for more Apple documentation.
5. Use at your own risk.
Unfortunately, MacOS doesn't include a useradd program to make this easy like Linux does.

Similar Messages

How to view Library folder on external hard-drive user

Dear all,
Wanted your assistance with something.
Backstory: I have an External Hard-Drive which I used to use for Time Machine. I use it no longer (I use a different Ex-HDD) however I still have all my old back-ups on it.
Problem: There's a file I need to obtain from a user profile on one of the old back-ups, and to retrieve it I need to access the Library folder which is usually hidden unless toggled visible. Usually this is no issue as I can access it in the "Go To" option in Time Machine...but because I can't use this old drive with Time Machine, I need to find a way to do this manually.
Anyone know any solutions?
Many thanks anyway.
My current OS is: Mavericks 10.9.5

The full path would be:
/Volumes/Untitled/Backups.backupdb/*********’s iMac/2014-03-03-162737/Macintosh HD/Users/*********/Library
without the ~.
(122708)

Step by step to disable Folder Redirection for a single user - Windows 7 and SBS 2011 Essentials

OK...I got chewed (by someone I have a lot of respect for) for pounding on an old thread, so I'm starting a new one. I've got the Windows 7 Value Pack Plugin for SBS 2011 Essentials and Folder Redirection is working for everybody. What I'm looking for is
exactly how to go into Group Policy and disable the FD for a single user. I'm not looking for quick, incomplete answers. If you don't have time to give me the 'For Dummies' version, don't bother. Sorry, but I've done all the Googling I can stand for one day
and I'm over it! (and a little grumpy)
Thanks in advance!
Wayne S. CompTIA A+ CompTIA Network+ Microsoft MCP

... I've got the Windows 7 Value Pack Plugin for SBS 2011 Essentials and Folder Redirection is working for everybody. What I'm looking for is exactly how to go into Group Policy and disable the FD for a single user. I'm not looking for quick, incomplete
answers....
Hi Wayne,
Here's what I'd do.
1) create a Security Group in your AD environment. Call it 'Folder Redirection Members' or something like that. Put all the user accounts in your AD environment who you want to have their folders continue to be redirected to the server, do not include the
one user who you wish to exclude. in other words, you're going to use a specific security group to target the Folder Redirection policy (right now, it's Domain Users, which is everyone).
2) Edit the Group Policy that the W7PP created in your AD environment. It's likely called "W7PVP Folder Redirection". Start with verification under the Settings tab, expand Folder Redirection beneath User Configuration states that
Policy Removal Behaviouris set to Restore Contents. Then proceed using the Editor, to make adjustments under the Scope tab; verify membership in Security Filtering. Remove Domain Users,
add in Folder Redirection Members (or whatever you named your group in step 1).
3) on your workstation that your user you are applying the change to disable folder redirection, Log on to the domain account while connected to your network, elevate a command prompt, and perform a 'gpupdate /force' command and then reboot your computer.
Folder redirection configuration should be removed from the system and redirected contents should be restored back to your local path. Verify with inspection of the My Documents or other folders.
Hope this helps. Keep in mind, no warranty implied or expressed in this advice.
Try not to be so darn grumpy. :-/
Jason Miller B.Comm (Hons), MCSA:Win7, MCITP, Microsoft MVP

Can't retrieve folder privileges for a specific user

I am trying to get the granted privilege for a specified user for a certain folder. I am using the wwsec_api.get_granted_user_privilege function. When I run my code, nothing is ever returned. Here is my code:
l_priv_varchar := wwsec_api.get_granted_user_privilege(
p_user_id => 0,
p_object_type_name => 'FOLDER',
p_name => '2889');
p_user_id is from wwsec_person.id$
p_object_type_name is my object type
p_name is from wwv_corners.id
I have looked at the properties of this folder and this user, 0, is set up as the owner. So I am expecting to see 'OWN' returned. I have another user set up to only VIEW the folder and when I put that user's id into the p_user_id parameter I still do not get any return. I can run this same code (with different parameter values) and get the privileges for a 'PAGE', but never for a FOLDER.
Does anyone have this problem or can tell what I am missing?
Thanks.
null

p_name for a folder is "sitename/parentfolder/foldername". You can see that in the syspriv_name field on the WWV_CORNERS table.

How to: Exculde the library folder located in the shared user folder.

Ive been told this is a hard concept to grasp. I am sharing my home folder, I want to exclude the "Library" folder from being shared. How do I do this? -Thanks you

In theory, you should be able to select the file in Finder, then use Finder -> File -> Get Info. Then under the "Sharing & Permissions" section, change "everyone" to "No Access".
This would prevent anyone except yourself from accessing your HOME -> Library folder tree. Of course if you mount your home volume using your username and password, then you will be able to access Library.

Folder permissions for sharing between users on the same machine

Hello,
I have several accounts on my MacBook and I want to keep some files private and some files shared with full permissions for everyone.
OS X standard behavior for the default Users/Shared folder is that everyone has read/write access to the folder, but if you create a new file there, then only the creating user has write access to that file.
I want to change that folder's behavior so that newly created files can be modified by everyone on default.
How would I do that?
Thanks.

Thanks, your answer helped me a lot. I found an even simpler method which doesn't require any extra applications.
Open console and navigate to the directory where your share directory is located, e.g. /Users/Share/
create the desired folder: mkdir public
set acl permissions for each user with: chmod +a "username1 allow flag1,flag2, ....." public/
check permissions with: ls -le
Example:
chmod +a "dev allow list, add_file, search, delete, add_subdirectory, delete_child, readattr, writeattr, readextattr, writeextattr, readsecurity, writesecurity, chown, file_inherit, directory_inherit" public/
This will give the user dev full access to that folder. Any file or directory created inside that folder by the user dev will also inherit the permissions of that folder.
Also, the advanced permissions override any other permissions. you can test that my making that folder inaccessible with chmod oga-rwx public/ and dev will still be able to access it because of the acl permissions.
exactly how i wanted it.

Linked Images : Automatic Folder Creation for linked images?

Best Rgards
Mac OSX 10.9.3
InDesign CC (9.2.1)
Presently: 120 page Blurb publishing with 190 images
I have created a large number of INDD documents that I piece together from many sources,
such as file folders, internet searches, external drives, emails...kind of grabbing things
from all over the place. usually I publish this as a PDF for local and archival use. Sometimes
using this also for newsletters and other ways to distribute documents as pdf and epub.
I never really paid to much attention to LINKED FILES and where they might
be located, as my intent was PDF and you can publish a very
serviceable Pdf without verifying or correcting MISSING LINKS...
NOW, I am working on a higher end 120 page Photo BOOK to have printed on paper.
I did not organise my image assets into a folder, i should have first. Now as I go to
upload to the publisher I find I have to many missing links to images. So I am going
back through the whole project and organising the assets and re-linking...what a lot of work this is.
I was wondering if InDesign supports automatic creation of assets folder?
As you place images, with their links, the program creates a folder and puts a copy of the file there?
I don't see anything about this subject.
I am wondering why not? It would sure make the work flow speed up. Options for
the format, size, pip etc. Does this exist in InDesign and if not
wtf not?
Sure would appreciate anyone's thoughts on this. It is to late now to save this
relinking 190 images, but I realise I need to be better prepared with my assets in the
future. I work on a number of publications, some spontaneously and others
more carefully planned...some sort of auto process for asset-linked-folders
seems a simple enough coding issue. It is 2014 already.
???....best rgards, Thanks for any input on this issue.
WF Posey
Pantelleria Italy

Thanks to everyone for these answers. I guess the real answer is "no", Adobe software engineers see no reason to create a script which
will place linked files into a folder. To bad. A really serious and lazy oversight in my view. The package function is helpful if one has already
organised their assetts.
As great as these programs are, this is an oversight of some frustration. As I said in my comments above, it seems an easy enough routine to program
into the app. Why should a user have to worry about collecting details of resources/links for a document?
Even after all these years?
Best regards, thanks to everyone who contributed some thoughts.
WFP

Template creation for logged in user

Is there a variable or other means to auto check the 'Document and Settings\<current logged in users>\My Documents'
I can not find how to auto check the box for the current logged in user. It's not in the template editor.
Also searching returned dead end posts...
http://forums.novell.com/novell-prod...shortcuts.html
http://forums.novell.com/novell-prod...s-folders.html
http://forums.novell.com/novell-prod...ing-admin.html
Anyone have experience with this?

myfirelight,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Best practice for Active Directory User Templates regarding Distribution Lists

Hello All
I am looking to implement Active Directory User templates for each department in the company to make the process of creating user accounts for new employees easier. Currently when a user is created a current user's Active directory account is copied, but
this has led to problems with new employees being added to groups which they should not be a part of.
I have attempted to implement this in the past but ran into an issue regarding Distribution Lists. I would like to set up template users with all group memberships that are needed for the department, including distribution lists. Previously I set this up
but received complaints from users who would send e-mail to distribution lists the template accounts were members of.
When sending an e-mail to the distribution list with a member template user, users received an error because the template account does not have an e-mail address.
What is the best practice regarding template user accounts as it pertains to distribution lists? It seems like I will have to create a mailbox for each template user but I can't help but feel there is a better way to avoid this problem. If a mailbox is created
for each template user, it will prevent the error messages users were receiving, but messages will simply build up in these mailboxes. I could set a rule for each one that deletes messages, but again I feel like there is a better way which I haven't thought
of.
Has anyone come up with a better method of doing this?
Thank you

You can just add arbitrary email (not a mailbox) to all your templates and it should solve the problem with errors when sending emails to distribution lists.
If you want to further simplify your user creation process you can have a look at Adaxes (consider it's a third-party app). If you want to use templates, it gives you a slightly better way to do that (http://www.adaxes.com/tutorials_WebInterfaceCustomization_AllowUsingTemplatesForUserCreation.htm)
and it also can automatically perform tasks such as mailbox creation for newly created users (http://www.adaxes.com/tutorials_AutomatingDailyTasks_AutomateExchangeMailboxesCreationForNewUsers.htm).
Alternatively you can abandon templates at all and use customizable condition-based rules to automatically perform all the needed tasks on user creation such as OU allocation, group membership assignment, mailbox creation, home folder creation, etc. based on
the factors you predefine for them.

Photos deleted from iPhoto, but still in Library folder

iPhoto 9.5.1
Strange behavior in iPhoto : let's say I imported 100 photos. Then, in iPhoto, deleted 80, keeping 20. Emptied trash in iPhoto. Then emptied Trash in Finder.
Let's say the "_DSC1234.JPG" photo was among deleted files. When searching "_DSC1234.JPG" in Spotlight, I find it in the "Master" folder of the "iPhoto Library" folder (Photothèque in French).
I've got a lot of photos deleted, but kept in Library, Not good for privacy, not good for hard drive space.
For exemple, I find 514 ".NEF" photos in the iPhoto searchbox. But when searching in the iPhoto LIbrary folder with Spotlight for files with ".NEF" in their names, I find 1048 ! No duplicates, no previews or "faces" (hey are in JPEG), but photos I deleted, before emptying iPhoto and Finder trash !!
Rebuilding Library didn't help.
I'm using a user account not allowed to administrate the computer. Maybe a link ?
The question was already asked, but never answered :
Growing iPhoto Library, deleted photos still in folders
Deleted Photos: Why are they still in my iphoto library folder?
Photos deleted from within iPhoto are still in Library folder
Thanks for your help !

Strange behavior again, with the original library : If I select NO event and use the menu Information, I've got 14.634 photos. If I select all events, I've got 15.760 photos. How can I have more photos in all events than in my Library ??????
Check, if you have hidden photos.
File > New Smart Album, with a rule: Photo is hidden
In my iPhoto Library the "Hidden" flag accounts for the difference in the Photos count between selecting all events and no events.
Make sure, "View > Hidden Photos" is enabled in the View menu, so you can recognize hidden photos by the X.

How do I find the Library folder on time machine back up disk

I had to rebuild my iMac and wanted to start fresh. I'm useing mountain lion and had everything backed up with time machine. The problem that i'm having is that I can't get the aplication support floder to show up in the library folder that you find under user menu. I know if you hold down the option key while youpull down the go window it will show up on your Mac, but how do I get to the one that is on your time machine backup, useing Moutian Lion? Thanks for any help.

Once you have the folder open in the Finder, enter Time Machine and you'll see the snapshots of the folder.

Best way to give access to Library folder, etc.

Hello.
I have someone in our studio who needs to access various directories within the root Library folder (mainly for dealing with web/wiki file editing) — what's the best way to give them access to the server for this (assuming they'll be accessing the xserve from another machine on the LAN and not directly logging in on the Xserve itself as it's in a secure room in a rack)?
I tried using File Sharing and creating aliases or symbolic links to the requires locations, but that didn't seem to work.
FYI, all users are set up via an OD Master (if that helps)?
Regards,
Kristin.

Hi Kristin,
What you are describing is a developer having access to files on the server that a running service is using. A common developer situation: modifying and editing files on a remote machine but not in use by the service. The service needs to be restarted to put the modifications into service.
A setup I'm familiar with is more tolerant of the interaction and provides backup in case things go awry. A repository on the server (subversion or git) is setup to accept versions of the file directories used by a service. Then the latest version is checked out to the service directory. The service is stopped and restarted to load this latest version. If things are not working correctly, then a rollback can be performed to restore service to the previous running version. The developer is provided an ssh connection on the lan to keep secure file transfers to and from the repository.
Using a tool such as Capistrano provides the automated mechanism to restart service and load any configuration data that may be required. Rollback is just as simple.
This approach means the service is up as much as possible. Development and testing is accomplished on a remote machine, not the server. Version control is maintained and a backup of known tested files is available for rollback. Lastly, the control of bringing online a new file or capability is allowed in a controlled manner. Security of access to files is limited to those allowed an ssh connection to the repository.
With subversion preloaded on OS 10.5 Server and git easy to install it is a straightforward solution.
HTH,
Harry

~/Library folder in Time Machine backups

Dear readers,
I have run into a somewhat weird problem with the ~/Library folder in my Lion Time Machine Backups.
I have made the folder visible for my normal user through Terminal and I can see it sitting in my user just fine.
However, if I want to manually copy Mail and Mail Downloads from my Lion Time Machine backup I cannot seem to make the ~/Library folder visible in my TM Backup.
I have tried to directly link to the hidden folder, but this doesn't work either.
Anyone who has the solution to this one?
Help would be greatly appreciated!
Thank you.

Thank you for your fast reply;
Does this also work in Backups that have not been linked to a fresh install yet, ergo: The Time Machine disk is seen by Lion as a normal external HDD.
Say for example I wish to manually place files back due to a corrupted user, I will still not be able to see the /Library folder in my Time machine backup...

Where is the Library folder on HD

I no longer can access the Library folder. It used to be on my HD. When I create a folder and try to name it as Library folder it says that the name already exist. So... its like invisible.
Please help... this is bizarre.
thanks.

I found the solution on Google. For some strange reason my Library folder that is outside the user, became invisible. I found a program xRay, which finds it and makes the folder visible again. The program is only $1.99. The Apple support team suggested reinstall the operating system and reinstall all my software.
Well after debating for an hour or two I have chosen the the solution #1, the xRay.
:0)
Message was edited by: Girshon Rutstein
Message was edited by: Girshon Rutstein

Default permissions on /Library folder?

I'm having a permissions problem here. I'm trying to reinstall a couple of games from Gamehouse and when they first run they (apparently) need to write a file to the /Library/Application_support folder. Now they all generate an error saying I need to be an admin user (I am) or repair permissions (I have several times, including booting from the 10.5 dvd and running repair from that).
I checked the settings and on TWO different macs both with a recent format/install of 10.5 the permissions are as follows:
/Library
system (r/w), admin (r/w), everyone (r only)
/Library/Application Support
system (r/w), admin (r only), everyone (r only)
ALL of the folders inside the main Library folder are set with the admin user being read only.
On a Tiger machine here, all of the folders in the main Library folder are set with admin user being read/write.
So... has the default permissions changed in 10.5 or do I somehow have an exactly the same wierd issue on 2 different macs?
Thanks if anyone can shed light on this.

after running DU, the permissions on /Library/Application Support are still:
system r/w, admin r-only, everyone r-only
Is this what they are supposed to be? If so, it creates a problem for some installers apparently. If not, I need to find out what changed them incorrectly on mine and fix it. Again, on a Tiger system the admin user has r/w privs on the app support folder... on Leopard its read-only.

Prevent ~/Library/ folder creation (for dummy/daemon users?)

Similar Messages

Maybe you are looking for