Remote Management Multi-User security issue

Hello,
This issue concerns both Mountain Lion and Lion servers. If I'm not mistaken, the issue is also officially described by Apple in the Lion release about Remote Managemenr vs Screen Sharing features.
My question is simple and yet unanswered after hundreds of Internet searches:
Why on earth a non-Admin user has the right to Share and Control the screen of another (Admin) user being logged-in a (Mountain) Lion server? It looks like the trick is that "Remote Management" instead of "Screen Sharing" is active. So what? Why a non-Admin should be allowed at all to view another users desktop just by typing-in his/her own credentials?
Am I missing something or is Apple really out-of-security context? Our admin devoted significant effort to arrange access for the shared directories. For what? To find out that the Screen Sharing security under ARD Management (Remote Management) is non-existent?
Am I terribly wrong?
Any feedback will be highly appreciated.
D.

http://www.apple.com/feedback/

Similar Messages

Multi-user security & privacy

I understand that there have been discussions concerning security and privacy using the iPad. Many have described issues with multiple e-mail accounts. The reality is that many of the items, from Safari bookmarks to iBook (and other applications) selections also put the owner of those items at risk. How can we open a meaningful dialog with the iOS development team and Apple management to consider ways to strengthen personal security and privacy? My vote would be to (as fully as possible) mimic the multi-user ability of the Mac OSX itself. Granted, application developers would also have to develop their applications to play in that sandbox, and each "unique" user would eat up xxx mbytes of the available iPad.

http://www.apple.com/feedback/

ZCM Agent 11.3.x - Remote Management - Windows User Variable

I noticed this back during the initial deployment of 11.3.1, however have not had a chance to comeback to it. Now we are at 11.3.2 and the issue seems to still be.
On login we have a script that runs via a bundle it tracks user, date, time, computer login info to 2 locations, one on the local workstation to a hidden folder and 2 on the network.....
It looks like this in the log file
"pwolfe" , "192.168.x.x" , "LPTP-PWOLFE" , "Tue 02/03/2015" , "11:44:20.05"
What I have noticed is if someone uses ZRM (Zen Remote Management) to manage the workstation / shadow a user for help or any other such thing...the next logon on the box will look like this
"LPTP-PWOLFE$" , "192.168.x.x" , "LPTP-PWOLFE" , "Tue 02/03/2015" , "11:44:20.05"
Notice the user variable went from the username to the computer name with a dollar sign. I would say it could be the script, however see below it works fine with the old agent installed.
If you reboot the computer its fine, you can login and out time after time and it will display correctly. However if someone remote manages the computer it is broke until the next restart.
here is the script that runs:
for /f "Tokens=2 Delims=[]" %%i in ('ping -4 -n 1 "%computername%"') do set IP=%%i
Echo "%username%" , "%IP%" , "%ComputerName%" , "%date%" , "%Time%" >>"\\192.168.x.x\support\utilities\logfiles\IPaddr essLog.txt"
Echo "%username%" , "%IP%" , "%ComputerName%" , "%date%" , "%Time%" >>"C:\Utilities\IPaddressLog.txt"
This is being called as a launch item under a user run bundle, it is set to run as logged in user.
This is not happening on the older 11.2.4 separate Zone / server setup that is still in use for the majority of people. Just on the newer 11.3.x environment.
If I remove the 11.3.x agent and install the 11.2.4 agent and point it to the old environment / server it works fine.
Any ideas?
Thanks,
Patrick

Originally Posted by CRAIGDWILSON
What happens if you create a Shortcut to this bundle and run it manually after the desktop is up and active? (after a RC session that messes stuff up?)
What happens if you create a bundle that runs "cmd.exe" as logged on user and run it manually while this other bundle is having issues? (type "set" from the cmd session....)
Thanks Craig,
I finally got some time to look at this again.
It appears on the first logon to a computer it runs correctly, if a Remote Management session takes place and once logged off and a log in is initiated you get the incorrect information. If you run the application from the Zen App Window it displays correctly. If you reboot the computer it works as expected for the first logon and then stops working if a remote session is initiated.
3 Straight logons, the 4th entry is when I ran it manually from the zen app window:
"pwolfe" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:53:33.77"
"TDLARM280-50125$" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:54:51.09"
"TDLARM280-50125$" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:57:24.29"
"pwolfe" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:58:22.51"
Here is the "Set" CMD
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\pwolfe\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=TDLARM280-50125
ComSpec=C:\Windows\system32\cmd.exe
DEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\pwolfe
LOCALAPPDATA=C:\Users\pwolfe\AppData\Local
LOGONSERVER=\\TDLARM280-50125
NUMBER_OF_PROCESSORS=4
NWLANGUAGE=ENGLISH
NWUSERNAME=pwolfe
OS=Windows_NT
Path=C:\ProgramData\Oracle\Java\javapath;C:\Progra m Files (x86)\Intel\iCLS Clien
t\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows
\System32\Wbem;C:\Windows\System32\WindowsPowerShe ll\v1.0\;C:\Program Files\Inte
l\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Mana
gement Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management En
gine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Comp
onents\IPT;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Progra
m Files (x86)\Novell\ZENworks\bin;C:\Program Files (x86)\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH;.MSC
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=3a09
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PROMPT=$P$G
PSModulePath=C:\Windows\system32\WindowsPowerShell \v1.0\Modules\
PUBLIC=C:\Users\Public
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\pwolfe\AppData\Local\Temp
TMP=C:\Users\pwolfe\AppData\Local\Temp
USERDOMAIN=TDLARM280-50125
USERNAME=pwolfe
USERPROFILE=C:\Users\pwolfe
VSEDEFLOGDIR=C:\ProgramData\McAfee\DesktopProtecti on
windir=C:\Windows
WINDOWS_LOGIN=0
windows_tracing_flags=3
windows_tracing_logfile=C:\BVTBin\Tests\installpac kage\csilogfile.log
ZENWORKS_HOME=C:\Program Files (x86)\Novell\ZENworks

Trying to access Lion server remote using multi-user access, but from a legacy Leopard system

Just purchased a mini server running Lion, and got screen sharing working fine from my legacy system (32-bit so Leopard only). However, I would like to run in multi-user mode, so someone can use the Lion system and another person can access their own account, from the older Leopard system, at the same time. Using multi-user rather than screen sharing. But Leopard does not have the option on the Finder/Share Screen command, the pop-up window to select screen sharing or new virtual session. So, is there a way still to run a new virtual session from a remote client running Leopard? Since the multi-user capability resides on the Lion server, it should be possible, but how, without the pop-up menu?
Message was edited by: Kurt-Syracuse

Hey. I suggest you check out http://discussions.apple.com/message.jspa?messageID=9839785#9839785, where there are a couple solutions posted in regard to the error code -36 when connecting to a samba share. Good luck!
Jeremy A.
Tekserve Intern

Time Capsule & NAS Multi-User Security Question

I want to know how time capsule manages multiple users backing up to the internal or USB drive attached to it. I understand that, in general, time machine uses all the drive's space, and just deletes the oldest backups, is this correct with the Time Capsule too? if so, how does every user get a fair share of the backup space? And if multiple users backup to the same drive (same Time Capsule), is there any security, or could someone just run the migration assistant to steal another user's data?
Oh, and if you backup to the drive attached to the capsule via USB, what do you see when you take that drive and plug it into your computer directly, is it like any time machine backup, or is it formated differently, like if there are multiple people backing up, is each person's backup stored in a password protected growing disk image or something? That would be great if it worked that way, where it would require a password to restore from the backup...

nobody?

Error while trying to publish 2013 workflow via designer. Probably a workflow manager backend user account issue?

Hello, I am getting error while publishing the 2013 workflow via designer. Also, under sharepoint designer if I try to delete any workflow then the page just refreshes and the workflow does not get deleted.
I checked the services.msc and found that the workflow backend service was stopped. (this happened as the password of the user under which this serivce was running had changed).
So, the network admin changed the service user to LOCAL SYSTEM and started the service.
Now, the workflow backend service is started. We have run the iisreset also.
However, I am still getting the same error:-
System.IO.InvalidDataException: A response was returned that did not come from the Workflow Manager. Status code = 503:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Service Unavailable</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
<BODY><h2>Service Unavailable</h2>
<hr><p>HTTP Error 503. The service is unavailable.</p>
</BODY></HTML>
Client ActivityId : ee94689c-4e08-b055-fe9c-268d7a94
Please find attached snapshot.
Is the error as a result of the change in service user? Can you tell me what priviledges should the account running the workflow backend service must have?
UPDATE 1:-
We have set the workflow service backend account user as farm admin and also tried to set it to site admin. The service is re-started. Now, for a new web application,
I can delete workflows. However, for existing site, I am not able to delete the existing workflows.. Also, I am not able to publish workflows (present under new and previous sites) and the error is same as described earlier.

Hi Nachiket,
According to your description, my understanding is that you got an error while publishing the 2013 workflow via SharePoint 2013 Designer.
As you have changed the password of this service. Please open IIS and make sure identify of the WorkflowMgmtPool is correct, you can re-type the identify. Then make this pool is started.
Open Services, find Service Bus Message Broker service and Windows Fabric Host Service. Make sure they are running. If not, firstly, start Windows Fabric Host Service, then start Service Bus Message Broker service. If Service Bus Message Broker service is
started, stop and re-start it.
Here are some similar posts for you to take a look at:
http://developers.de/blogs/damir_dobric/archive/2012/10/23/deploying-sharepoint-workflows.aspx
http://developers.de/blogs/damir_dobric/archive/2012/09/18/servicebus-message-broker-service-is-starting-and-starting.aspx
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

New User -- Security Issues

Hi folks,
... I just Installed Oracle 8i server enterprise version; configured another PC to access the server and all seem to work.
I created a database with a net name service testdb and I successfully log on as follows:
user : system
Password : manager
Host String : Testdb
I thenI created two users called User1 and User2 from the command line.
I am SQL Plus, and I need to execute commands to achieve the following:
i. Both users, User1 and User 2 should be able to create their own table, delete their own tables, insert or update, etc.
ii. User1 wants to assign rights to User2 so that User2 can insert, update and select from a table Tab1 created by
User1 but User1 should not be able to delete tables created by User2.
What I did, and Questions that I came up with? -- I will appreciate your help:
I logged on as system and executed:
SQL>grant connect to public;
but when User1 logged on to Testdb and tried to create a table, he got '...no privilege to tablespace "system"'
1. ??? Any command for a user1 to see tablespaces available to him?
2. ??? Is there a command to assign "tablespace" to each each user as an admin? And as a user to assign to a friend?
Later loggeg on as system, I gave User1:
SQL>grant dba to public;
Now User1 now create table tab1 when he logged on with Host string: Testdb.
With user1 connected, he executed:
SQL> grant select, update, insert on User1.tab1 to User2;
3. ??? User1 did not want User2 to be able to "drop" (delete) tab1 but user2 can -- User one only wanted User2 to be
able to insert, select, update but not delete the table. How do we prevent that?
4. ??? As I log on the same machine sometimes as User1 and as User2, sometimes I may not be sure of "whoami"
-- Does Oracle has the who am I command to show the current user?
5 ??? Also is there a command to see the current user's rights: privileges and roles?
Logged on as system again, I run the demobld.sql to be able to use the demo files.
but when User1 logs on, the demo tables were not available to him.
User1 then logged on an run demobld.sql and now he can use the demo tables
Later when logged on as User2, the demo files were not available and User2 had to run demobld.sql again to be
able to use them.
I then said to myself, if I could log on as user PUBLIC, then may be, I could run the demobld.sql and the demobld.sql
could be available to all, but then, can one logon with the user PUBLIC? What is the password for user PUBLIC?
6. ???The point is, is there any way to make all employees have a copy of their own(their modifications should not be
seen by others) demo tables without repeating the process as above for each person.???
Thanks.

1. ??? Any command for a user1 to see tablespaces available to >him? you can run this select statement to find outwhat tablespaces are available for you:
SELECT * FROM USER_TABLESPACES
when u create a user he shld be assigned to a tablespace named USERS and a temporary tablespace named TEMP
your create statement shld be :
CREATE USER USERNAME IDENTIFIED BY PASSWORD
DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP;
in order for you to create a table u shld have a disk quota on that tablespace:
CREATE USER USERNAME IDENTIFIED BY PASSWORD
DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP QUOTA 5M ON USERS;
and should been granted the create table system privilege.
GRANT CREATE TABLE
TO USERNAME;
this shld solve ur problem 1.
3. ??? User1 did not want User2 to be able to "drop" (delete) >tab1 but user2 can -- User one only wanted User2 to be
able to insert, select, update but not delete the table. How do >we prevent that? a user cannot delete a record/s if he is granted :
GRANT INSERT, SELECT, UPDATE
ON TAB1
TO USER2
only, but look at your problem 2 you granted DBA to all users (PUBLIC) meaning your giving them everything. the reason why he can do anything in the db even dropping u as a user.
4. ??? As I log on the same machine sometimes as User1 and as >User2, sometimes I may not be sure of "whoami"
-- Does Oracle has the who am I command to show the current >user? u can type :
SQL> SHOW USER
at the prompt.
5 ??? Also is there a command to see the current user's rights: >privileges and roles? for OBJECT rights and privileges u can query the data dict views :
TABLE_PRIVILEGES
COLUMN_PRIVILEGES
for SYSTEM rights and privileges u can query the data dict views :
SELECT * FROM USER_SYS_PRIVS
SELECT * FROM USER_ROLE_PRIVS
I then said to myself, if I could log on as user PUBLIC, then >may be, I could run the demobld.sql and the demobld.sql
could be available to all, but then, can one logon with the >user PUBLIC? What is the password for user PUBLIC? you cant log-on as public, USER1 and USER2 are members of the public, if u wanted everyone to use one copy of the demo build u can just simply create a PUBLIC SYNONYM of those tables in the script file. u can just say:
CREATE PUBLIC SYNONYM SYNONYM _NAME
6. ???The point is, is there any way to make all employees have >a copy of their own(their modifications should not be
seen by others) demo tables without repeating the process as >above for each person.??? if thats ur plan u can install the demobild.sql to all the schema of ur users that is they take their own copy of the tables.
wish i was able to satisfy ur queries.
jully abuan manuel
philippines

Iphoto multi user account issues

Hi all.
I recently created a seperate user account for my wife. We want to share/modify the same iphoto library. We're using iphoto 9 v.8.1.2.
I've pretty much completed this by:
moving iphoto library from /pictures/ to /users/shared. Logging out of my account and into hers. Launching iphoto, holding down option key and pointing to the library in /shared/. She can now see the whole existing library I originally created. And has total access to all existing pictures and movie files. Job done!
However, she has since added new photo's to the library. BUT if I launch iphoto in my account and go to the photo's she has added, I can see the thumbnail of them but have no access/permission to do anything with them. Including viewing them. If its a picture (.jpg) I double click andit just goes black. if it's a video (.mpg) it says:
You do not have permissions to open the document **********.AVI
it seems to be only to do with photo's she adds under her account.
Anyone know how to fix this?
Adam

Each iPhoto in the two accounts must be running in order to share libraries. (Just another way of stating what hlumbard said).
OT

To Adobe Management - Multi-User guide request.

I would like to formally request that some kind of guidebook or whitepaper be produced by Adobe providing a clear workflow for Lightroom when more than one computer is involved in accessing the original files.
Start with one assumption: the original images are on a Network drive.
As far as I can tell, the only way to do this with any effectiveness is to sneaker-net a USB drive that contains the catalog and previews, and if necessary re-find the originals when needed by re-pointing for the lost folder.
It is still single user, but it works.
What is the OFFICIAL Adobe workflow design for more than one person using Lightroom?

The "Official Talking point" that seems to be parroted over and over when discussing sharing a catalog between computers is that it is "not supported", but that is totally unhelpful.
The fact is that there are situations where more than one photographer needs to work with a catalog. It may not be possible to do so at the very same time as another photographer, but it is possible to share a catalog one person / computer at a time.
This also helps if you need to use Lightroom on more than one computer, or consolidate from laptop to central storage after a field session.
The scenario is that that two photographers are working on their own photo sets from an event in order to share the workload. Each photographer took his/her own photos, and needs to remove the trash, renumber the photos, do initial ranking, etc, but in the end the photos need to be consolidated into a single location and library, so all the photos can be seen as a cohesive group,
Here are the basic steps that work for me:
a) On their own computers, each photographer downloads their own photos and eventually imports them to their own local catalog, either existing or new.
b) Sort, rank and cleanup the photos, as you would always do, independently on each computer.
c) Both photographers when done perform an "Export Catalog" and check 'include negatives', and place them both at their final location on the NAS device. This will create two standalone catalogs and copy the original files to their new final location. The catalogs are temporary and can be deleted later after they are consolidated,
d) Consolidate the catalogs onto a USB drive. This is what will allow the catalog to be relatively easy to be shared by both photographers by passing the USB drive back and forth between computers.
- When everyone is done exporting their catalogs to the NAS, one photographer creates a NEW catalog, or opens an existing catalog on a designated USB drive that will be used for sharing the catalog. We use a 2.5 inch 100 GB pocketdrive.
- The temporary catalogs on the NAS are imported into the new or existing catalog on the USB drive.
- After the catalog import is done, it may be necessary to right click on a folder and 'Locate Missing Folder' to point back to the originals on the NAS device.
- To improve performance, if time allows a 'Library -> Previews -> Render Standard-Sized Previews' should be done in the new catalog in order to make sure that the preview set is up to date. This can take a long time.
At this point you have a catalog on the USB drive that can be easily shared between computers, just by plugging the USB drive in and opening the catalog file directly from the USB drive.
If you are using only Mac systems, there should be no need to find the originals again when the drive is moved between computers. You just need to have a connection to the NAS established BEFORE you open the Lightroom catalog.
If you are using only PC systems, there should be no need to find the originals again, as long as the NAS is mapped to a similar drive letter and path.
If you are using a mix of Mac and PC, you will probably have to do a "Locate missing folder" each time the USB drive swiitches between system types in order to remap the catalog to the right location.
==========
In reality, doing sneakernet with these catalogs is pretty ridiculous given the state of modern databases and networked computers, but we are not given a choice in this case.
If anyone has any ideas on how to improve this method of consolidating then sharing workflows, I would appreciate your input.

Multi-User Issues

I've taken over development of a Vs2003(vB)/MsSql2000 application which usually runs in on a Windows 2000 server with multiple workstations running the application simultaneously in Remote Desktop Sessions.
The central user interface element of the application is an un-databound grid (actually a farpoint spreadsheet) which displays sql table rows that are accessable from every workstation. The grid refreshes its content whenever a specific subroutine is called. That subroutine performs a query which loads its results into a collection which is then loaded into the grid. The subroutine is called during startup and at other times using the rather elaborate mechanism described below. Each workstation also has the ability to modify any row in the grid via a dialog-based editor. The grid itself is not setup to allow inplace editing.
The grid usually contains about 200 records and 20-50% of these records get modified (some repeatedly) every hour.
My question involves the classic multi-user issues of keeping all of the seperate workstation's grids current as individual workstations make modifications to the data.
What is Microsoft's recommended method for handling multi-user data-refresh requirements in custom applications written in VB.NET2003 with MsSQL2000?
Now that you know what I'm looking for, let me add a little more detail. The existing code handles this multi-user refresh issue in the following way...
A SQL Trigger is attached to the SQL Table's Insert/Modify and Delete events. That Trigger calls the xp_logevent built-in stored procedure to make an entry in the NT Event Log.
The application contains a subroutine to handle EventLog("Application").EntryWritten messages. That subroutine calls the subroutine (mentioned earlier) which refreshes the grid contents through a new SQL query.
In this way, whenever any workstation changes the table data, a trigger fires which makes a log entry and broadcasts an EntryWritten message into the global windows environment. The individual applications (each running in their own RDP session) hear the message and respond by refreshing their grid.
This all seems a little "rube goldberg" to me, but it has worked for many years.
That is, until we moved the SQL2000 server to a seperate machine to improve program responsiveness.
Now when the trigger is fired and the log entry is made, the EntryWritten message is broadcast into the windows environment of the dedicated SQL server where there are no applications listening for it. Meanwhile, the applications continue to run with unrefreshed data on the (now) dedicated RDP server from where the EntryWritten messages cannot be "heard".
So my question really comes down to this...
In an environment where the SQL server and the RDP server are two seperate machines, what is the best method for coordinating multi-user screen refreshes across seperate applications running in distinct RDP Client sessions?
Thanks in advance for any assistance.
Peace,
Colt Taylor
Computer Golf Sofware

Colt,
Is this still an issue?
Thanks!
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it!

BI 4.0 - CMC User security - Unable to locale CrystalEnterprise.ScopeBatch

Hello,
In BI 4.0 when I try to manage the user security in CMC for a folder this error occurs:
"An server error occurred during security batch commit: Request 0 of type 44 failed with server error : Plugin Manager error: Unable to locate the requested plugin CrystalEnterprise.ScopeBatch on the server. (FWB 00006) "
I have done what the OSS note 1643541 - Error: "An server error occurred during security batch commit: Request 0 of type 44 failed with server error ...(FWB 00006)" in CMC in SAP BO BI 4.0, says but the problem still happens.
Does any one have the same problem and has solved it?
Thanks in advance.
Best regards,
Jose

Hello,
I have the same problem and i can't find any solution
Please, can anybody help us?
Thanks in advance.
Regards,

Cant set Remote Management password

I am going nuts trying to find this out! When I right click the remote
management agent, the security selection is greyed out. I have full admin
rights to the tree. Does anyone know where this setting is to allow this?
thanks

I set this option but the security option on the systray icon is still
greyed out so I cant set the password. Any reason why this is restricted?
> On Wed, 09 Nov 2005 19:17:54 GMT, [email protected] wrote:
>
> > Does anyone know where this setting is to allow this?
>
> if the wks is imported you need to allow this in the remote management
> policies..
> --
>
>
> Marcus Breiden
>
> Please change -- to - to mail me.
> The content of this mail is my private and personal opinion.
> http://www.edu-magic.net

Remote Management Freezes computers

When ever I remote manage a user who is running an application in the Oracle instant client it freezes there Internet Explorer. I have to force the program to end now and then the user can go back into the oracle app and everything works fine.
Any Ideas??? Kind of a big problem being that most users call with a problem in Oracle and we cant see the problem since we freeze everything when we remote manage.

jortman83 wrote:
>
> I am running ZEN7 sp1 hp6 on a Netware 6.5 sp6 server. The
> workstations that freeze up are Windows XP pro sp2. You remote into
> their workstation and can view the oracle application they are in
> which runs in IE 6. But as soon as you click on any field IE6 locks
> up and turns all white and then you have to use task manger to close
> IE6. If they are not in the Oracle app you can remote manage them
> with out a problem
what would happen if IE was upgraded to 7??? still the same problem?

Mountain Lion Server: add network user to remote management

Hi,
So recently I have upgraded from Lion Server to ML Server. A little disappointing, but whatever, I've moved on and got everything almost back to where I had it with Lion.
My last few issues I believe are related but can't quite figure it out. In Lion I have an admin profile and then a network user profile that I used on my MBP bound with AD. I'm at the stage where my nre network user can log in on the server machine but I can't log in as the network user via screen sharing. I can't add a network user to Remote Management, and with Remote Management enabled Screen Sharing is greyed out. I'd really like this to work.
My second problem is that I can't bind my MBP to the server but even when bound the network user account can't log in.
Any body have any ideas?
Thanks!

I had this problem on a clean install.
The solution was incredibly simple for me, but only after I saw Ross.M's note about opening the Users & Groups settings panel (in the OS System Prefs, not in server) and rebinding to OD server under Login Options.
That was not the solution for me, but under Login Options I discovered a previously unnoticed pref for "Allow network users to login at login window." I had this option set (apparently by default) to "Only these network users:" but with an empty list. Adding my users to the list made it work perfectly.
Talk about KISS

Remote management under Sharing will not allow me to add admin user

I have just imaged my iMac lab to Lion. I am using Apple Remote Desktop 3.5. (I have used it for several years and know how to set it up and use it.) The problem I am having is adding my admin account to the list of users that are allowed remote management through sharing in system preferences.
The user list shows every other account, but will not show my admin account. I have imaged labs each year and have never experienced this issue. Not sure where to go from here. I am able to log in to each of the systems using the missing admin account but can't add that user to authorize remote management as it isn't listed. The sytems have recently been updated to 10.7.4.
For example, I have these accounts:
Me (admin)
User 1
User 2
User 3
User 4
When I go to system prefs>sharing>remote manage and click the Add to authorize only certain users, I only see User's 1-4. The admin account isn't listed...even if I am not currently logged into that account.
*I have just updated to ARD 3.6.

I can add "Administrators" under Remote Login just not Remote Management.

Remote Management Multi-User security issue

Similar Messages

Maybe you are looking for