Restricted admin privileges

Hi,
I am guessing not...but, is there any way to setup restricted admin privileges so an account only has privileges to bounce the server?
Thanks.

>
I am guessing not...but, is there any way to setup restricted admin privileges so an account only has privileges to bounce the server?
>
Indeed, there was the sysoper privilege invented for that purpose.
SQL> grant sysoper to fred;
SQL> connect fred/pwoffred as sysoper;
SQL> shutdown immediateKind regards
Uwe
http://uhesse.wordpress.com

Similar Messages

Limited Admin Privileges/Specific Elevation of User Accounts

I'm hoping to create an account on my laptop for my roommate. I don't want him to have a full admin account, but he knows enough about computers that he could troubleshoot networking, and I want to enable him to install programs on the system. I'm not sure what the best way to go about creating an account which can elevate itself for specific tasks; I've never modified my sudoers file before, and I don't know how to do so to grant him access to the privileges he should have. I don't want to force him to use Terminal; I'd rather have him be able to enter a username/password for Admin privileges when prompted, whether that's his standard user account or a limited Admin account, but I want to make sure that account DOESN'T have access to modify anything in Users & Groups, can't create accounts with dscl, can't modify the keychain or hard drive partitions, etc.
Am I right in thinking the sudoers file is the best way to approach this? How do I find out what processes to allow access to? Does Network Preferences, for example, have any dependencies he will also need to be able to run? Also, is there a good starting point/article on modifying the sudoers file for this type of thing anywhere? <<clearly googling the wrong thing because my searches just tell me how to add someone to the sudoers file>>

To modify network settings he needs to be able to unlock the preference pane. If you can unlock one pane you can unlock them all including Users & Groups.
While it is more feasible allow him some latitude in the application installing scenario it's going to be a pain. The non-server version of OS X is just not setup for this. Either a user has admin privileges or he doesn't there is no part way.
Again if you trust him then you should also trust him not to do what you don't want him to do. If you tell him he can do x but please don't do y and you think he won't abide by your rules then giving him any access is potential trouble.
And again if he can get to the machine when you are not around he can do what he likes, privileges or no privileges.
good luck,
regards

ITunes 10.6.3.25 only opens with admin privileges

A few days ago I tried to open iTunes, but for some reason it didn't. There was no error displyed nor anything shown. I've searched the web but I didn't find any solution. The only way I found to open it is by giving it admin privileges. I also tried unistalling every Apple program I have, but there's no solution.
I'm running Windows 7 32-bit (that is up to date) and iTunes 10.6.3.25 (I guess it's up to date).
What's wrong?

That is troubling!
I downloaded the Kindle app on my iPad1 tonight, logged into my Amazon.com account and was able to download the books I had bought on my Kindle to my iPad! I am a VERY HAPPY CAMPER!

AIR runtime and AIR applications built using Captive Runtime still need Admin Privilege to Install

I am working on a small project to install AIR application(native .exe & .dmg) with AIR runtime without needing the Administrator privilege so I used Captive runtime but the installation is still asking for admin privilege
I bundled AIR application with AIR runtime using Captive runtime from flash builder 4.6, then I packaged this into a .MSI using Advanced Installer. Now when I install it for a user without admin privilege it prompts me for Admin credentials.
Can you please tell me if
1. I need AIR distribution license to install AIR runtime without Admin privilege
2. Do I need a different installer
3. Am I missing any step here
Thank you

If you're installing to a location where Windows requires elevated privileges, like Program Files, you'll need to have admin privileges to continue. Are you using an AIR based native installer or have you taken the application with the captive runtime and rolled this up in your own installer?
Here's a section from the Installation and deployment options in Adobe AIR 3 article that might help:
Installation privileges
When designing an installer, one has the option to choose from approaches that may or may not require administrative privilege. For example, a drag-and-drop install on Mac OS X requires no special privilege; users can always copy the application into their own application folders, for which they have the necessary permissions. On the other hand, if registry keys must be written to the machine-specific portion of the registry on Windows, installation of that application will require administrative privilege to do so.
The two installer formats directly supported by AIR, AIR files and native installers, have always required administrative privilege. This was a design decision made in part to simplify the implementation of the AIR installers: If administrative privilege is assumed to be available, implementation is possible if the registry can be written to, and so on. It was also selected because, in many enterprises, this is the desired behavior: administrators can use the privilege requirement to gate software installation.
All the same, there are scenarios where supporting installation without requiring administrative privileges is desirable, or even necessary. This can now be achieved using custom installers; you simply need to author an installer that operates correctly with only standard user privilege. In practice this can be easy to achieve; a simple install-by-copy to a writable location (that is, in the user's own folder) will suffice. Should you author a more complex installer, you should keep in mind that the addition of certain operations during the install process will in turn reintroduce the requirement for administrative privileges.

Since I have updated to Firefox version 5, my Firefox browser just hangs when I am logged in to my laptop without Admin privilege. If I am logged into my laptop as Admin then Firefox is working well is this a known issue.

Since I have updated to Firefox version 5, I cannot use Firefox on my laptop as a normal user without Admin privilege. Whenever I try to run Firefox, the browser window just says connecting and hangs. It looks like it also uses all the CPU and stops all other processes on the computer. Even the computer clock stops working.
If I am logged into my laptop as Admin then Firefox works well as it used to with previous versions. I am using Windows XP service pack 3.

Hi Tylerdowner -
Thanks for your suggestion.
I already tried a Reset, but all that did was lose all my settings , search engines etc. and one or two add-ons - as expected.
I also already tried updating my graphics driver - both manually, and with Windows Update (Automatic Updates is set to ON anyway, and I've checked the optional ones as well, and though there was nothing relevant there, I installed most of them anyway!) Apparently I'm using the most up-to-date and appropriate driver already!
Oh dear........
Going to try turning off hardware acceleration next....

Business Area not visible to account with admin privileges

Hello,
I've encountered the following scenario on visiting a client site:
A Business area has been created by the EUL owner account (IFL) and he has granted admin privileges to another account (BRIANB who has been granted the DBA role). However, when BRIANB logs onto DIscoverer Admin, the Business area in question is not visible. BRIANB is able to create a new business area in the EUL which includes folders that are part of the 'invisible' BA. BRIANB is not able to access the 'invisible' BA using Discoverer End User. I'd be very grateful if anyone out there has an explantion for this,
regards,
KEvin.

Problem solved. My client inadvertently created an additional EUL when initially logging onto Disco Admin as BRIANB. Thereafter this was the default EUL. The errant EUL has now been deleted the required BA's are now in view,
Kevin.

Our IT guy installed the new Adobe reader on my machine, but FF isn't picking it up and I don't have admin privileges to install it as a plug-in.

I just need to know how to get FF to "pick up" the new version of Acrobat Reader that is already on my computer. I got a new work computer, and don't have admin privileges to install AR as a plug-in on FF. The new version is fully installed -- just not in FF. I'm running Win7 and FF 18.0.1.
Thanks for the help!

Firefox should find the Adobe Acrobat plugin through a registry scan, which probably runs at startup.
I notice in your "More system details" list you have this, which sounds promising:
Adobe PDF Plug-In For Firefox and Netscape 11.0.01
If you check the following tab, is it enabled?
orange Firefox button ''or'' classic Tools menu > Add-ons > Plugins category
If it's enabled, is the problem that Firefox still wants to launch PDFs externally? If so, you might need to change a setting here:
orange Firefox button ''or'' classic Tools menu > Options > Applications
In the search box on that tab, type pdf and pause while the list is filtered. You normally get two or more entries and there are drop-down boxes on the right side to choose how to open them. Does that work?

Add-On installation showing admin privileges error

Hi all,
Scenario for SAP 9.0 PL 07 :-
I have logged in using Windows Standard user profile.
The SAP folder in " C:\Program Files\SAP " has been given full Admin privileges.
But still not able to install the Add-Ons. Giving error of no rights/permission .
Can you please help me locate some other folder which need to be given Admin privileges so that the Add-Ons will install.
Regards,
Angad

@ Pvsb prasad k,
Thanks for the reply.
We have tried giving full rights(full control) to the user for the SAP folder in " C:\Program Files\SAP ".
But still the Add-On installation problem exists.
Is there any other folder of SAP which requires the full control permission to be given?
Please suggest.
Regards,
Angad

No admin privilege. Cannot install latest version of iTunes

I have no admin privileges for corporate laptop. Cannot install latest version of iTunes. No problem with previous versions. Any ideas?

Hey Roderick136,
If you haven't encountered issues previously, then I would try following the steps in this link:
Issues installing iTunes or QuickTime for Windows
http://support.apple.com/kb/HT1926
Let us know if that helped resolve the issue.
Welcome to Apple Support Communities!
All the best,
Delgadoh

Firefox won't open links from Outlook when FF is started with admin privileges

OS: Windows 7 64 bit
I usually start Firefox from a toolbar (PowerPro) which runs with admin privileges. Thus Firefox starts with admin privileges too. Under this condition links in Outlook won't open in Firefox.
But if I start Firefox with normal privileges the links in Outlook works as expected.

Under Tools > Options > Advanced look to see if the "check if Firefox is default browser on startup" Check this and then restart FF. If it isn't the default it should ask if you want to make it the default. Choose yes and it should open when clicking links again.

User requires ADMIN privilege to perform this operation.

Hi
I have written a procedure which creates a new workspace. The owner of the package has been granted apex_administrator_role. This works fine with SQL Developer/Plus.
But when I try to use this procedure from my Apex page I get User requires ADMIN privilege to perform this operation.
I understand that Apex makes a connection with APEX_PUBLIC_USER, and this can be one of the reasons of the error. But I would like to know if there is some solution:
My code is:
      apex_instance_admin.add_workspace (
        p_workspace          => p_name,
        p_primary_schema     => p_name,
        p_additional_schemas => '');
--p_name is passed as a parameter and workspace and primary_schema name are the sameHabib

I think you will need to grant privleges to apex_instance_admin directly to the owner of the package.
http://docs.oracle.com/cd/E14072_01/network.112/e10574/authorization.htm#BABFJEGJ
The privileges of the procedure's definer must be granted directly to the user, not granted through roles.

Restricted session privilege in 9i and 10g

We recently upgraded from 9.2.0.7 to 10.2.0.3. Oracle 9i allowed a user with RESTRICTED SESSION priv to connect (sqlplus user /@db) when the database was in restricted mode as it should. However, our Oracle 10g database will not allow a user with RESTRICTED SESSION privilege to log in after 'alter system enable restricted session' is executed. The DBA role does not work nor does granting the system privs CREATE SESSION and RESTRICTED SESSION directly to the user. The error I get when trying to log on is ORA-12526. Any advice on how to remedy this would be much appreciated.
what is the alternative to achieve the same in 10g other than locally?
Thanks,
Vishal

From 10g doc (Oracle® Database Administrator's Guide):
Typically, all users with the CREATE SESSION system privilege can connect to an open database. Opening a database in restricted mode allows database access only to users with both the CREATE SESSION and RESTRICTED SESSION system privilege. Only database administrators should have the RESTRICTED SESSION system privilege. Further, when the instance is in restricted mode, a database administrator cannot access the instance remotely through an Oracle Net listener, but can only access the instance locally from the machine that the instance is running on.

Catch 22 on lost admin privileges

After update to a pbookG4 12", both admin users became standard; root user is not enabled. Can't enable root user, because no admin privs to change settings in the Directory Utility. Can't login as root because login is pic only, no "other" for allowing text login. Can't change login format from Accounts pane because that requires Admin privs.
Is there a way, from Terminal or SingleUser, to enable root user? or to escalate a user's privs from Standard to Admin?

hirammm wrote:
Rebooting with Command-s (releasing the keys once text started appearing), I tried the *sudo passwd root*, which gave me some errors; then I looked more closely at the prompt, *root #* and said hmmmm. Used the command *passwd root*, entered the root password I had earlier set from the OS dvd password utility, entered the new password twice (happened to use the same password, no use adding another to my limited memory lobes); typed exit to reboot, and the "Other" user option became available; logged in as root with the password, went to System Preferences/Accounts, and gave the appropriate users Admin privileges, and all seems well, except I may have to suffer through +Dancing with the Stars+.
*Thanks particularly nerowolfe* for the responses. BTW, the spy-hill reference looks to me as though it's based on an earlier OS-X Server, I seem to remember net-info from those days.
Even partial success is good
Yes that article is old, but the reference to the root account being disabled is still valid. And for a good reason.
I think now that you have access to your OS you can start fixing up other things, DWTS, as you jokingly call it.
Usually perseverance pays off. Many people give up way too early and too easily. I congratulate you for sticking to it and proving that problems usually have solutions.

Lost Admin Privileges

I lost my Admin Privileges and am now a "standard" user. I need to reacquire my Admin status. I tried following the steps under Michael Conniff's "I lost my admin user", but it didn't work. I never got to the OK after putting in 'fsck -fy' Have the instructions changed since they were posted on Jan. 28, '04?

Hi
No, the instructions in kmosx: I lost my admin user have not changed.
I never got to the OK after putting in 'fsck -fy'You did press the return key at the end of that command I assume? If not, just try that. You will need to press return at the end of all the commands listed there.
If you did press return, what output did you see?

How can I disable wireless admin privileges to the router ?

I am using an Airport Utility for Windows for Airport Extreme. For the sake of better security, how can I disable wireless admin privileges to the router so that the router can only be configured via hardwire connection?

For the sake of better security, how can I disable wireless admin privileges to the router so that the router can only be configured via hardwire connection?
Sorry, but this is not possible.
If you want to limit access to administration of the router, you should change the Base Station password, and only give out that password to those individuals that you want to have access to the administration settings of the router.
The forums have been having problems displaying screenshots, but we will attach one below in the hopes that the problems may be fixed.
Important Note.......even with this, "security" on the AirPort routers is an illusion.......since a one second press on the reset button will give any user 5 minutes of free access to go in and change any settings that they want.
So, you might want to keep any eye on things.

Restricted admin privileges

Similar Messages

Maybe you are looking for