Remove settings applied directly to an AD user account?

Hi:
I have a magic triangle setup and in my testing I mistakenly applied some prefs via workgroup manager directly to a couple of my Active Directory user test accounts.
Now that I'm setting things up properly by applying preferences to OD groups with the AD users as members, I need to remove the settings that were applied directly to the AD user accounts, but I can't seem to do this in Workgroup Manager: If I select the user's AD account, then go to the various Preferences to disable the settings, the settings simply re-appear after I've saved the changes. I can also see the MCX entries when I look at the AD user account under the All Record Types tab.
Is there any way to remove them via Workgroup manager, or does this have to be done through an AD management tool?
Thanks!

To clarify:
Not a computer list in the OD Node. I opened WGM, selected the AD and authenticate to it. I click on the user's list and I'm presented with a list of AD users. From there, I search for the user in question and when their record appears, I can select it, click Preferences and then see the items applied directly to that AD account (both when I select the Overview & Details tabs) . It's definitely not an OD computer group or user group, but the actual AD user account I'm referring to here.

Similar Messages

  • What exactly happens to my apps and settings when i create a new user account, and delete all the other user accounts?

    Such apps and settings that apply to icloud, appstore, and itunes. I know the apps will still be in the new account and any other purchased apps will be in the appstore for re-download. But what will happen I delete user accounts and choose not to save any folders or files of the soon to be deleted user accound? I don't have a disk to do a clean install and I'm trying to give my super old macbook pro to a friend and I want to make sure the laptop is his and everything of mine is gone. Will erasing free space do that trick?

    If it is not installed in HD>Applications folder and installed in a user account then it's gone with the user account. It's that simple.

  • Remove com.apple.sidebarlists.plist from 450 user accounts

    I have moved my Users data to a new drive and all of the users are able to login and authenticate, however, the users get an error message on attempting to access their items from the sidebar. The solution I have found is to remove the com.apple.sidebarlists.plist and the sidebar and home directory then works fine. What I need is the UNIX command to remove the .plist file from 450 user accounts. Thanks -Eric

    Funny you ask this - because I just went through the same thing with 500 user accounts. But Roger's looks a little more elegant than mine...
    Here is my script - this one is for all users in one folder:
    dir=/Volumes/diskname/restofpath
    filename=com.apple.sidebarlists.plist
    destdir=Library/Preferences
    for user in `ls $dir`
    do
    echo Removing sidebar for $user
    echo rm $dir/$user/$destdir/$filename
    done
    This one is for users in subfolders (or group folders):
    dir=/Volumes/diskname/restofpath
    filename=com.apple.sidebarlists.plist
    destdir=Library/Preferences
    for subdir in `ls $dir`
    do
    for user in `ls $dir/$subdir`
    do
    echo Removing sidebar for $user
    echo rm $dir/$user/$destdir/$filename
    done
    done
    One caveat - it didn't seem to work when the users were currently logged in.
    Good luck!

  • MCX Does Not Apply to Cross Realm User Accounts

    Here's the situation:
    Kerberos realm (REALM1) set up for user account access
    AD created to allow authentication via REALM1 as well as AD (REALM2)
    Mac OS workstations are bound to AD and local Mac OS Kerberos configurations on the clients allow authentication using user accounts defined in REALM1.
    Users are able to log in to client workstations with no issues. Kerberos works fine within AD services. What we're attempting to do it get MCX policies to somehow apply when an AD account logs in to a Mac OS X workstation. We've been using either local MCX (dslocal) or OD (via Golden Triangle).
    When a native AD account or local Mac OS user account logs in to Mac OS, policies are successfully applied. However, when a user account in our MIT Kerberos Realm logs in (REALM1), no policies are applied. It appears that policies exist when using mcxquery, although these policies are not apparent to the users that log in.
    I also attempted to use mcxrefresh to get a better idea (with the -a switch for authentication), but it does not work since it bases authentication on REALM2 (AD) rather than REALM1 (MIT Kerberos). Since it cannot authenticate, no policies are refreshed and nothing applies.
    I'm just wondering if anyone has seen this issue and if they managed to solve it, how they solved it. We're hoping to find a solution that does not require a CoD (Cylinder of Destiny) or LDAP schema changes.
    Any info is appreciated.

    Hi Shiju,
    Before going further, we can run command gpresult/h report.html with administrative privileges to collect group policy result report to check how group policy settings are applied.
    Besides, we can try to install the following hotfix to see if it helps.
    Users cannot access removable devices after you enable and then disable a Group Policy setting in Windows Server 2008, in Windows 7 or in Windows Server 2008 R2
    https://support.microsoft.com/en-us/kb/2738898?wa=wsignin1.0
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Lost user account applications/settings

    A friend partitioned the hard drive and create 2 separate user accounts. An application was not working on my account (Account 1) and I was also not able to access pictures and music on the second user account (Account 2). I logged into the second user account (Account 2) and dragged and dropped the entired user into the shared folder, figuring this would give my user account access (Account 1) to everything. Instead now I have lost all settings, applications, etc. on the second user account (Account 2). What have I done? How can I fix it?
    G4 Power Book 17"   Mac OS X (10.4)  

    Log back into the second user account and open the Users folder. From here, rename the folder with the house icon to something else. Next, open the Shared folder and hold down the Option key while dragging your old folder back to the top level of the Users folder. Select the copy you left in the Shared folder and choose Get Info from the File menu. Under Ownership & Permissions, set all three access settings to Read & Write.
    (10201)

  • Remote / Home Sharing not working on a particular user account

    I have recently purchased a new MacBook Pro 13" (Core i5) and I'm having issues using the Remote app on my iPhone 3GS, as well as using Home Sharing. I used Migration Assistant to transfer my account and files across from my previous MacBook (with which I never had any Remote or sharing issues).
    If I try to connect using Remote it says "Remote can't connect to your iTunes library. Check your network settings and try again". Strangely, if I open the Remote app immediately after starting iTunes, it will work for about 15 seconds and then lose the connection.
    For Home Sharing, if I try to click on "Shared" using my iPhone's iPod app, as soon as I click on my library it simply says "Cannot connect to Media library". Again, if I click on shared as soon as iTunes starts, I can select my library, which will then load, but once loaded it just cycles through any albums I choose without playing the tracks (e.g. it just silently shows each track name in turn for about half a second until the end of the album is reached).
    As a test, I created a new user account, and when using that account these features seem to work fine. I have tried everything obvious, and have tried reinstalling iTunes and the Remote app. I have no firewall, and am properly signed into Home Sharing on all devices. As a test, I also just tried using my old MacBook again with the same iPhone, everything functions as expected. The problem seems to be directly related to this user account. Any ideas anyone?!
    Thanks!

    May of found a fix (could be temporary but is working fine for me).  I had issues with itunes - iphone (remote app).
    - Turn on Home sharing on iPhone
    - Turn off Home sharing on Mac in itunes
    - On iphone (remote app) Click Add an itunes library manually
    - iPhone will appear in itunes device list - choose and setup (using passcode)
    - Now turn on hone sharing again.
    Should be working.

  • OS Lion - Difference image quality in EyeTV with new user account?

    Hi Everyone,
    My computer has been crashing ever since installing Lion, mainly on the Mail app it appears, so I created a new user account and have set that up to use.
    I have an Elgato Eye TV Hybrid with EyeTv for watching TV. The image settings are the same on both user accounts, but the new user account is extremely grainy. Any ideas about why it would be different on multiple accounts?

    pod meister,
    quite as yr office person says. It would be wrong to remove all the apps. I would not be sure what ElGato can mean when they say the test user has no apps!. Elgato (?) will need to use some apps for it's normal operation, and the more general user functions will as well. You would msee in yr 'Parentalo controls, in sys prefs pane that there are 'helper apps' that you can allow or not to any controlled user. So there are helper apps.
    You can 'turn off' lots of system extensions with a special boot up but won't Elgato need some of them? It is after all the operation of Elgato that you want to test.
    The usual dodgy 'apps' are starup items like so called haxies which moderate certain basic system operations. You could start by disabling the.
    You might care to consider that Elagto is shoveling the blame onto 'the rest of the world' saying it 'is something else',but I may be wrong.

  • Cant see my user account

    Guest is always showing on my log in page and im looking for the solution to remove this, then when im looking a way to remove the guest id turn off my user account cause i thought it will automatically directed to my account if i will turn on my imac, but when my imac restarted its showed only guest and cant find my user account to get in.
    I dont know what im going to do now to get on my account, i tried the shift+option+control+scroll but theres no other account.
    I am now using guest account to get online, but all of my files are in my account.
    Anyone can help me to solve this problem?

    Sir can you tell me the step to boot with option key?
    Actually i did the command+r then theres a four option to do
    Time machine
    Reinstall OS X
    Safari online
    Disk Utily

  • Newly created user accounts can't log in??

    I've got a 5 year old who is starting to use my computer for game playing, typing notes, and simple web stuff.
    I want to set up a user account for him with parental controls so he can't randomly rename, delete, or change things.
    I've followed the directions, set up a user account, given it a password... logged off my admin account ...
    and when I click on his login picture, it brings up the password window, and when I input the password, it just gives a little shake, clears the password line, and lets me try again.
    I've deleted that account and created a new one without parental controls. I've tried having NO password in the password line. I've tried making sure the short names for the accounts I'm creating are exactly 8 characters. I've turned off Norton antivirus. Nothing works - I cannot log in with any newly created account??
    What else can I try?

    Sara
    Well you probably don't need to be told the NetInfo database is in a bit of a mess, but the significant thing is the "No such file or directory" from the last two commands. Basically this is where passwords are stored (encrypted) since the system changed to "Shadow Hash" passwords in 10.3.
    Your account seems to be OK since it predates this change, and when you installed new system versions you chose the "Upgrade" option which left your settings alone. This is why your primary group is 'staff', or 20, whereas for Will it is creating a group 'will', or 502. That bit appears to be working, just not the passwords. Your password still works because it is in the old 'passwd' file (in encrypted form).
    By far the best thing, at this stage, would be to do an Erase and Install, but this depends on you having a complete and up to date backup of all your files. See Mac OS X 10.4: About installation options. Alternatively you might try an Archive & Install, see Mac OS X : About the Archive and Install Feature, probably not choosing the "Preserve Users and Network Settings" option. But note this requires you to backup a lot of your data, and then re-enter settings and so on.
    If you have a backup, the Migration Assistant can help you get your files back in place.
    If it were my machine of course, I would probably carry on a bit longer trying to fix things, but the appearance of "#NoValue#" twice in the NetInfo output suggests some serious inconsistency which would be difficult to fix.
    Let us know how you get on, and Good Luck!

  • How do we sync contacts and calendars (ONLY) between two iCloud accounts, two iPhones and one iMac with two user accounts?

    This is complex.  Until today we had one iMac with two user accounts - one for me and the other for my wife.  We sync'd our calendars and contacts between our two user accounts using my iCloud account, thereby keeping our schedules coordinated and our contacts information always the same between us.  Also, as I had an iPhone, I sync'd my phone with my iCloud account, thereby keeping the contacts and calendars in the two user accounts on the iMac AND my iPhone sync'd.  (I also sync'd other things, like Notes and Mail and Safari settings, between my iPhone and my user account on the iMac, but my wife did not want to be burdened with all my emails showing up in her email account and I wasn't interested in hers, etc., so we didn't sync anything between us other than calendars and contacts.)
    We've finally bought my wife an iPhone and set up an iCloud account for her.  And of course she now wants to sync several items from HER account on our iMac to HER iPhone, but I don't want them, just as she doesn't want all of my other stuff.  But we still want our mutual calendars and contacts to sync to HER new iPhone, just like they already do to mine.  But I can't figure out how to CHANGE her iMac user account from using MY iCloud account on the iMac to using HER new iCloud account, and then having HER iCloud account speak to MY iCloud account but share JUST our calendars and contacts.
    Originally I tried a workaround by simply having her iPhone log into my iCloud account.  That works great for the calendars and the contacts.  But...she can't sync anything else from her iMac account to her new iPhone because she's presently "forced" to use my iCloud account.  And neither of us want to sync our other things to each other's iMac accounts or iPhones.  Also as we're both using my iCloud account, in things like the Find My iPhone app, the Cloud is seeking two phones labeled with my name and none with her's.  So we definitely don't want this as the set-up and communications network between our devices.
    We want to set up our users on the iMac to sync to our SEPARATE AND DIFFERENT iCloud accounts and then have those iCloud accounts sync calendars and contacts (ONLY) between themselves, and then push that data to our separate iPhones (or the other way, from either of our iPhones to the individual accounts on our iMac and the other person's iPhone).  Does this description make sense to you?  I've diagramed it nicely using Keynote, but even thiough I can draw it, I can't figure out how to set up and configure all the devices to make it work.  If you would like me to send the Keynote slides (just two of them - the current and desired configurations - please send your email address to me at [email protected] and I'll be happy to forward it to you.
    If anyone can help me set this up I'd be most appreciative!  Thanks so much.  Merry Christmas and Happy New Year to all readers in this community!

    BobT.
    I had the same problem, and decided to look into it last night.
    First of all, the solution I would like to have is for Apple to allow for selection of iCloud accounts per application, i.e. Contacts to one, Photo Stream to another. I believe this would be the most straight forward solution for the problem we are facing. 
    Since this is not an option I came up with a workaround. I was most interested in solving this for Contacts, so this is what I tested for. Now I have all 3 devices with the same contacts.
    1) Turn off iCloud for Contacts on all devices. On the device that has the Contacts list that you would like to propagate to all others select to keep the contacts, and on the others select not to keep them.
       Note that the current backups still exist on iCloud, so in case something goes wrong you can still turn the iCloud for Contacts back on to get your current Contacts back.
    2) In iTunes, sync All Contacts with the phones, starting with the one with the Contacts content you chose to keep.
    From this point on, the 3 devices should sync contacts with each other.
    This, of course, will stop your iCloud backups of Contacts, but I don't think this is really needed. You are already storing copies of your Conacts on 3 devices, which for good parts of the day are likely not all co-located. You also potentially have Time Machine backups turned on, which would mean there is a 4th copy there as well. For the case of Contacts iCloud only complicates matter ... that is until Apple implements the solution I first wrote about.

  • How to move an old iTunes folder into a new user account?

    Hi there, so I have a 98Gb iTunes library and it was sitting on an older version of an iMac (2006 OSX 10.6.8  iTunes 11.4).  Realised it would be cumbersome to transfer to my newer iMac (2014 - OSX 10.9.5 iTunes 12.1.2.27) so I used the migration assistant to transfer everything across.  Only problem  is now I have 2 user accounts for myself on the new iMac and all I want to do is consolidate my iTunes library into one, but am struggling to move the iTunes folder directly into the newer user account on the new iMac.  I keep getting a "you do not have permission to move this".  I've tried both passwords to each account but still it won't move the folder.  Any suggestions or directions would be greatly appreciated.

    SlippySlope wrote:
    Were you saying that you have two user accounts (one one the old Mac and one on the new Mac) or two Apple IDs with your music?
    Read the original post. The user used Migration Assistant to copy files from an old computer to a new one. This creates a new computer account with the old content. The user then had two accounts on the new computer with content the user wished to merge.

  • One library for 2 windows user accounts

    I am having and issue and I don't understand why apple made the software this way. I have itunes installed on my pc and I built a library but when I logged into my wifes account and ran itunes it was as if i was running itunes for the first time on my pc. so now there was 2 library's so made a single folder on directly on the hard drive so it comes up as c:/itunes music library and would not be directly linked to either user account and thus I would be able to turn on Auto update and it we would be able to just plug in the ipod no matter who was logged in and it would update but it does't work. anytime I select auto update feature and I just want to auto update playlists only it says it's linked to a differnt library and stuff, but it's not
    why can't this work seemlessly

    It was designed that way so people with vastly different tastes in music wouldn't have to sort through a bunch of music they don't like.
    You can keep the actual music files in one place on the hard drive, but have different library itl files for only the music you like in each Windows user profile.
    These articles might explain things a bit better
    What are the iTunes library files?
    How To Share Music Between Different Accounts On A Single Computer

  • Can't sign in OSX 10.8.2 Message for 2 OSX User Accounts

    Since upgrading from Messages Beta (OS X Lion) to Mountain Lion (10.8.2) it is impossible for me to re-sign in as a standard network user, but only under the administrator account. Date/Time is set automatically. Preference File has also been removed.
    Might be two OS X User accounts can not use the same Apple ID for Message, and for the admin the Apple ID is initiazed first, of course.
    Do I need separate Apple IDs for those OS X users, endeed? That would mean, that the Apple ID is associated to UIDs for Mesaage, whereas for iTunes etc. it is not.
    How to re-enable the standard user to send messages via Messager?
    Thanks a lot for any ideas

    I'm not sure why it is not showing up, but you can download the update from here:
    http://support.apple.com/kb/DL1581

  • How to copy information from a user account's Security tab of Active Directory User and Computer Security tab to another user account?

    Hi, I'm using vs2012
    Grammatically, by C# code, I need to copy a user account's Security (from ADUC Security tab) and apply it to a new user account I created by code.  My application creates new AD accounts when needed.  I need to duplicate/copy attribute from another
    user account that we use as a base template.  I can copy most other attributes through property["xxxxx"] but how do I copy all that permission access information under the ADUC Security tab?
    How can I do that?  Thank you.
    Thank you

    I would recommend asking them in C# forums: https://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=csharpgeneral&filter=alltypes&sort=lastpostdesc
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • User account

    I want to re-create my user account. How can I use time machine to restore all my settings after I blow away my user account and re-create it?
    Also, my iPhoto library is on an external drive, the same drive that Time Machine uses. Will Time Machine backup the iPhoto library?
    Thanks

    Welcome to Discussions, Rhodan.
    You can restore your user account from TM by restoring the deleted user account in the Users folder, then reboot. Then you have to go to System Preferences-Accounts and recreate the account. Be sure to use the exact same name as the home directory in /Users. Click "yes" at the warning that comes up.
    As for your second question, I'm not sure. I've seen [this post|http://discussions.apple.com/thread.jspa?threadID=1338395], which seems to suggest that you can. However, a better option would be to partition the external into a TM partition and an iphoto partition. The iphoto partition can be backed up by TM. Use Disk Utility (in Applications/Utilities) for the partitioning but remember that it is a destructive process and will delete all the data on the drive.
    An even better option would be a separate drive for each application.
    /p

Maybe you are looking for