Root/admin access for user account

I'm not sure the best way to explain this, but, I want my user account to be able to write/read ANY file on my HDD. How do I enable that in Lion? I've already added my user to the admin group, but, to no avail. Essentially I want to do $> sudo chmod -R a+rwx /, but, without having to do that.
Yes, I understand that your everyday account shouldn't have this type of access and you should only elevate privleges when necessary. W/ that in mind, I'd really appreciate answers (or links) detailing how to do this and not explaining why I shouldn't do this.
Thanks, and let me know if I should explain what I need in more detail.
- Matt

The top level of the hard drive has always been an admin-only area. In 10.6 and earlier, the admin group could write there. Now in 10.7, only root can write there. It was changed for security reasons. Apple realized that not many people are following their security guidelines and are running as admin users all the time, and so they have tightened up security in Lion.
User files should not be put there. Put them in your home folder or in /Users/Shared if you wish multiple users to access them.

Similar Messages

Controlling network access for user accounts

Can anyone suggest a way to control airport access to a wireless network?
I have an iMac G4 with AirPort running Tiger that I'd like to set up for a young teen to practice doing some video editing. I'd like to have network access disabled under normal circumstances, but be able to enable it easily during times when there is supervision.
Ideally, I'd like to have the airport icon in the menubar and select a network to join causing a prompt for an administrator password. I can't seem to get anywhere close to that. Any help would be appreciated.
Thanks.

Thank you for your quick response.
5. Click the checkbox under Require Administrator
password to:
The two choices I have are:
- when changing networks
- when creating a computer-to-computer network
The first almost gets me what I want, there are two problems with this as I see it.
1. when the computer comes up and automatically logs in, the user is greeted by authentication dialogs. (AirPort trying to connect?) I'd like to configure AirPort not to automatically try to connect and therefore not produce these dialogs.
2. once approved, the network stays approved until the next reboot. I'd like to not be forced to reboot just to "lock down" the network again.
Any help on those two points?

Cannot access primary user account - even with Install CD

I’ve been racking my brain trying to figure out how to solve a OSX problem for a friend that ran into some problems on his iMac. For some reason, he wasn’t able to log onto his user account – the only one on this computer. He didn’t try to change his password, but something strange must have happened.
We tried to reset the password with an OS X install disc, but I couldn’t even find, much less access his user account. Thanks to the help of some folks at the Genius Bar of an Apple store, we were able to log onto the Root account and create a new account. I tried t recreate the original user account, but the computer wouldn’t allow it, as that account was already being used. If that user account was still active, why wasn’t I able to reset it with an install disc?
I’ve rebuilt the volumes with Disk Warrior, and repaired permissions with Disk Utilities. I’m at a loss on how to deal with accessing the original user account, which has a lot of important data. I’ve copied the user data to an external drive, and I’m thinking I might be able to import various files – email data, photographs, and various documents, but I’m hoping there be an alternative to what seems like a tedious route. Other than using an install disc to reset the password to the user account it can’t seem to recognize, are there any other ways to gain access to this account?
My friend’s computer is a G4 iMac running, I believe, 10.3.9.

There are several possibilities as to why a user account may
not be correctly available or a password to it reset to fix it.
One of them may be, if the short name of the computer or of
an account was changed by the user; and later the system
may appear different or changed, with some of the user acct
settings or preferences no longer as they were prior to that.
There is a way to create a new admin level user account and
then move the older user info into the new account; then go
in and delete the other one. I am not certain as to how to do
this; but the topic has come up in these discussions, and the
general path is about the same from Panther through Leopard.
A few details may be named different, but similar as things go.
• Mac OS X: *How to change user short name* or home directory name:
http://support.apple.com/kb/ht1428
• How do I change owner's name in my Mac:
http://www.askdavetaylor.com/howto_change_owners_name_applemac.html
While these kinds of details may not be behind the exact problem in
the computer in question, directory and user account issues do often
have similar causes. Often, they are user-caused events. If the general
Directory of information on the hard disk drive has a problem, the use
of a third-party disk tool such as Disk Warrior is usually advised. If that
were needed, usually more evidence across the system would appear.
There may be a way to use a Setup Assistant to recreate a new user
experience and start over with a new admin account and user name.
Then go into the system to ferret out the old user info.
+Sorry I can't be of more help; as I am being distracted by an elderly+
+person who can't figure out why I am online or what it means to be.+
Good luck & happy computing!

TC with Access via User Accounts

Hi all folks,
I start using a new TC (2TB with 7.5.1) with access via User Accounts switched on, but it confuses me a little. In general I'm interesting in storing some more data to the TC, also I'm interesting in using seperate folder/mountpoints.
I add some User Accounts (I used the short names from my Mac, for example lutz, test, work, gast and admin) and every User can logon/connect to the TC, with a User Folder and a "Data" Folder, but admin can't connect to the User Folder.
All the time I try to logon/connect with the admin User, I can mount the "Data" Folder, but I can't mount the "admin" Folder (but the folder is shown).
In the Mac Syslog I find,
/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder[111]:
NetworkNode::handleMountCallBack returned -6602
I got a box with,
The operation cannot be completed because the original item for "admin" cannot be found.
And in the TC Syslog I find,
Syslog Protocol 6 - All Information
Nov 18 00:16:54 Gewichtung: 5 AFP login OK from [email protected].
Nov 18 00:16:57 Gewichtung: 5 AFP session from [email protected] closing.
Nov 18 00:16:58 Gewichtung: 5 AFP login OK from [email protected].
Nov 18 00:18:03 Gewichtung: 3 No Address for NTP server time.euro.apple.com.
I got folders like this, "lutz" and "Data" and both are empty.
From the admin Point of view the "Data" Folder looks like this and the "admin" folder can't connect too.
"Data"
"Data/Shared"
"Data/Users"
"Data/Users/lutz"
"Data/Users/test"
"Data/Users/gast"
"Data/Users/work"
"Data/MacBook.sparesbundle"
"Data/PowerBook.sparesbundle"
My question, is "admin" an TC internal User too?
What's the reason I can't mount the "admin" Folder and why I got a complete view to the TC filesystem with the "admin" User only?
It's nice to see this, but what's the reason!
How to add some more Shared folder for data exchange?!
Any idea what's happend,
thanks for any help, I can't find any information about this behavior,
Lutz
p.s.
The password from the User Account definitions are ignored for the "admin" user, the TC Password is used all the time.
p.s.
I read "http://web.me.com/pondini/Time_Machine/FAQ.html", too.

Hi all folks,
anyone who spend some time to add an User Account named "admin" to a TC and try to logon/connect to the TC with this user.
If someone try to do this, don't use the same password for "admin" and the TC itself, but try to logon/connect with "admin" to the TC with the defined passwords, both. I can connect "admin" to the TC with the TC password only, not with the password defined via User Account.
Thanks for any help,
Lutz

Unable to provision Business Rules access for users

Hi all,
Our analytic server is properly configured in Shared Services : we can correctly create users, provision Essbase access for those users, change password, etc...
An application business rules is visible in the left pane of shared services, but we are not able to provision Business rules access for users.
When we try to provision access for a user, we have only access to the Analytic properties.
What's going wrong ?

It sounds like the user you login to HSS with hasn't been assigned with "Provisioning Mgr" rights to business rules.
Get the HSS admin user to grant you these rights and you should then be able to provision users to use Business RUles.
Gee

How to force password policy requirements on password resets for user accounts reset by the Administrator?

OS: Windows Server 2008 R2 Enterprise
Domain Level: 2008
Forest Level: 2000
We have Domain Administrators in our domain that reset passwords for user accounts, and the passwords the Administrators set them to are not being enforced follow our default domain password policy. For example, I log on the domain controller, as an administrator
and can reset a password for a user account to be blank.
Is there a reason Domain Administrator password resets for user accounts are not enforced by our default domain password policy? Is there a way to enforce this on password resets by Domain Admins?

Do you have fine grant password policy? If not ; by default all the usrs are effected by domain level password policy even domain admins,
Regards~Biswajit
Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights.
MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
MY BLOG
Domain Controllers inventory-Quest Powershell
Generate Report for Bulk Servers-LastBootUpTime,SerialNumber,InstallDate
Generate a Report for installed Hotfix for Bulk Servers

I cannot recover my Master Password under 10.6.8. I want to change it. I do have my admin password for my account. How can I create a new master pw?

I cannot recover my Master Password under 10.6.8. I want to change it. I do have my admin password for my account. How can I create a new master pw?

If you are referring the Master Password that can be set in System Preferences>Security>FileVault, then see this thread:
How to reset FileVault master password
http://discussions.apple.com/thread.jspa?messageID=5822772
As explained there, and for obvious security reasons, a new master password created in this fashion way will not unlock any pre-existing FileVault accounts. Resetting the master password is therefore only useful after you turn off FileVault in all existing accounts. You can then turn FileVault back on after the new master password is in place.

Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORREC

Hello
I am installing Java add In in Solution manager 4.0, Central Instance. The process stops in this step:
Mar 12, 2007 10:56:58... Info: User management tool (com.sap.security.tools.UserCheck) called for action "checkCreate"
Mar 12, 2007 10:56:58... Info: Connected to backend system SMD client 200 as user DDIC
Mar 12, 2007 10:57:02... Info: Called for user SLDDSUSERSMD
Mar 12, 2007 10:57:05... Info: Formal password check successful
Mar 12, 2007 10:57:05... Info: Will create user SLDDSUSERSMD
Mar 12, 2007 10:58:52... Info: Created user SLDDSUSERSMD of type A with reference user <none>
Mar 12, 2007 10:58:52... Info: Verification of status for user SLDDSUSERSMD
Mar 12, 2007 10:58:52... Info: User SLDDSUSERSMD exists
Mar 12, 2007 10:58:53... Error: Verification of status for user SLDDSUSERSMD failed. Task not successfully executed. Details following.
Mar 12, 2007 10:58:53... Warning: Error during creation of user SLDDSUSERSMD. Will remove user again to ensure clean exit state
Mar 12, 2007 10:59:44... Error: Exception during execution of the operation
Mar 12, 2007 10:59:44... Error: Exception during execution of the operation
[EXCEPTION]
com.sap.security.tools.UserCheck$UserLogonException: Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORRECT)
     at com.sap.security.tools.UserCheck.checkUser(UserCheck.java:833)
     at com.sap.security.tools.UserCheck.createUser(UserCheck.java:1904)
     at com.sap.security.tools.UserCheck.main(UserCheck.java:289)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Mar 12, 2007 10:59:44... Info: Leaving with return code 2
Reserved 1610612736 (0x60000000) bytes before loading DLLs.
INFO       2007-03-12 10:59:45 [synxcfile.cpp:177]
           CSyFileImpl::remove()
Removing file C:\Program Files\sapinst_instdir\SOLMAN\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\dev_UserCheck.
TRACE      [iaxxejsexp.cpp:188]
           EJS_Installer::writeTraceToLogBook()
NWException thrown: nw.ume.userError:
Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORRECT)
ERROR      2007-03-12 10:59:45
           CJSlibModule::writeError_impl()
CJS-30196 Incorrect password for user account SLDDSUSERSMD (USER_OR_PASSWORD_INCORRECT)
TRACE      [iaxxejsbas.hpp:460]
           EJS_Base::dispatchFunctionCall()
JS Callback has thrown unknown exception. Rethrowing.
ERROR      2007-03-12 10:59:45
FCO-00011 The step createSLDDSUser with step key |NW_Addin_CI|ind|ind|ind|ind|0|0|SAP_Software_Features_Configuration|ind|ind|ind|ind|12|0|NW_Usage_Types_Configuration_AS|ind|ind|ind|ind|0|0|NW_CONFIG_SLD|ind|ind|ind|ind|0|0|createSLDDSUser was executed with status ERROR .
User doesnt exist in SU01 - I cannot find it. When I try to create it manually, I have the same error
Some help?
Thanks in advanced

At the end I have created the user
Thanks

Duplicate SPN for user accounts

Hi Support,
I get an error on the system log like the below - but is bringing up a user account rather tham for a computer account; for duplicate SPN:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is username. (of type -17). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate
entries for username in Active Directory.
Steps in the article KB321044 is for computer accounts and not for user accounts; is there any relevant steps for user accounts having duplicate SPNS ?
Thanks,
Arun

I've followed the above steps and does not seem to resolve my issue and the below error on system log repeats:
Log Name: System
Source: Microsoft-Windows-Kerberos-Key-Distribution-Center
Date: 20/08/2014 10:29:49
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxxxxxx.xxxxxxx.internal
Description:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is [email protected] (of type -17). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate entries for [email protected] in Active Directory.
* Setspn -x command on Server does not list any duplicate SPNs
* Followed http://support.microsoft.com/kb/321044 , but output does not give any duplicate SPNs
* Referred this article and SPN shows only one value and no duplicates:
http://blogs.technet.com/b/qzaidi/archive/2010/10/12/quickly-explained-service-principal-name-registration-duplication.aspx
* Tried re-registering SPN for the account sphilpot as per this article - which :
http://msdn.microsoft.com/en-IN/library/ms191153.aspx#Manual
Not sure this will fix the issue.
{ Noticed Disk error on System event log noticed: " The driver detected a controller error on
\Device\Harddisk1\DR1 "
For which asked to remove/format the Expansion S drive and test }

Creat new admin cannot access old user accounts

i got a macbook running os x 10.6.8 i forget the admin account's password i created new administration account using command+s and typing following commands
mount -uw /
rm /var/db/.AppleSetupDone
shutdown -h now
now i can not access my old data i got 80 gb hard drive i can only access 6 gb of it how can i access my old user accounts and all of its data
thanks for help in advance
regards
hardeep

Does the old user account have the same name as before , or has it been changed to 'xyz (deleted)' ?.
If it has a usable name, just go to System Preferences - Accounts & create a new one with that exact name.
Click OK when "A folder in the Users folder already has the name 'account name'. Would you like to use that folder as the Home folder for this user account?" appears. Note: This will correct the ownership of all files in the Home folder, and avoid permissions issues with the contents
You can then logout & into the 'new' one.
If the name needs changing : follow https://web.archive.org/web/20130919225809/http://support.apple.com/kb/HT1428
rather than the current version at Apple
If you want to continue using the new account you've already made, but access the old folders :
Select the old account home folder in Finder, then use Finder - File menu - Get info (command I). Open the 'Sharing & Permissions' section at the bottom, then click the padlock icon at bottom right & authenticate with an admin name & password.
Click the + button & add your new account name to the list, then select it & change 'Read only' to 'Read & Write'.
Now click the gear icon at the bottom & choose 'Apply to enclosed items...'

Access admin share from Users account. UAC into admin.

Server 2012 R2 domain.
I want USERS to be able to UAC into Admins and access Admins shares.
To be clear: I want to type \\svr1.horse.local\c$ from a USER account without Admin rights, to be able to access that share.
I have added LocalAccountTokenFilterPolicy, and set it to 1. No difference, and yes I have restarted. :)

Hi,
Another way to access Administrative Shares is to Disable UAC Admin Approval mode for all administrator accounts.
Checkout the below link for article on Access Denied for Admin Shares, Disabling the UAC restrictions and Disabling UAC Admin Approval mode,
http://4sysops.com/archives/access-denied-to-administrative-admin-shares-in-windows-8/
Regards,
Gopi
JiJi
Technologies

Possible to create separate passwords for admin and main user account?

Hello,
My ex wife is going to lend me her Macbook so I can open a separate account to transfer 30K critical business emails from my current Macbook Pro to Mail.app whilst it gets replaced by Apple.
I still need to work with these emails over the week I'll be left without the computer.
I was thinking, when requesting to import the mailboxes from my External HD, will it ask for a administrators password?
She's a bit paranoid about giving me it if that's the case, even though I couldn't give a toss... so is there a way to password protect her main user account with one password, and create another admin password for importing an external mail folder - as OSX sometimes asks for an admin password to install apps etc.
If I can just use a guest account and import the 'Mail' and 'Mail Downloads' folders from my library to a separate Mail.app on her computer without a password, then great.
If it's the case the admin password is needed, please let me know ASAP so we can make arrangements for her to hang around to type it in whilst I initially make the transfer - which would be a right royal pain because I'd have to tidy the house up and put some putpourri out and ****.
TIA

She can create a new account for you to use. She can set it up as a new Standard account which restricts you from admin privileges. You can use the same username and password as you use on your machine. You will have access to the standard OS X applications such as Mail so you can download your email into a separate account. This can be configured to be exactly the same Mail account you use on your machine.
Once your use of her machine is finished and you've transferred your data to your machine, she can log into her admin account and delete the Standard account you were using.

HT2518 I've migrated from PC to IMAC, but it has created new users. I can't access these user accounts even though I've set up passwords for them as administrator. Can you assist?

I have transferred files from PC to IMac using Migration assistant. This has automatically set-up new users on the IMac and I can't access these. As administrator, I have set-up passwords for these new users, but when i try to acces these new users usung those passwords, the screen shakes as if the passwords are incorrect. Any suggestions?

fungec wrote:
I can see these in my user groups, and I can change the passwords on both as often as I like. But when I then try to logon, the screen just shakes and nothing happens.
I don't do Windoze, so haven't been able to test migrating from a PC.
There have been a few similar posts here. Are you trying to log on to the new user account(s) via Fast User Switching? If so, apparently that doesn't work. You need to turn that off (via System Preferences > Users & Groups > Login Options. Remove the check from the Show fast user switching .... box.
Then log out of all accounts, restart, select the new account from the login screen and you should be prompted to set the password.
I'm not sure a screenshot will help (and to be honest I'm not sure how to do screenshots on the IMac - I've been a PC man for over a decade!).
In most places, Shift+Cmd+3 will print the entire screen; Shift+Cmd+4 will produce a "target" you can drag over a portion of the screen.
EDIT: by "most places" I mean after you're logged-on, and OSX knows your preferences about how & where to put the screenshot. So it won't work on the login screen itself.
Message was edited by: Pondini

Can the Admin Password give me access to user accounts desktop

I want to install macs at my office but I also want to have access to the staffs desktops (email etc) how do I do this so they can have their own passwords but in essence I have a master paswword?

Maybe you're thinking about something like Apple Remote Desktop?
http://www.apple.com/remotedesktop/
You can also connect with any VNC client.
If you just mean violating user's privacy while they aren't logged in, you could login with an administrator account, and look at their files, i.e., using the sudo command, or using the root account. Depending on how their email is stored, you could arrange to access that as well, if you know what you're doing and have sufficient access privileges. Do you run the mail server?
It might be possible to setup a user account with the same userid (but different password) and same home directory as another user, and thus access their desktop effectively as them. You would have to manually configure this though, there is no automated way to do this through Apple's account management interface.

Delete (-) for user account dimmed.

I had created a “Guest Account” that I would now like to delete, however I cannot. When I log into my administrator account, go to System Preferences and unlock the lock to allow changes and then select the guest account, the delete [-] for the guest account is dimmed. How do I get rid of this account?

Within the guest account, was there any higher privilege given to make it
equal to your main Admin account? In those cases where a secondary
account was given high privilege, that would have to be revoked prior to
being able to simply remove the account from the system.
Some access from the guest account may be holding up the delete process.
(This is an area where I have only read several things about; however I did
add a link and quote to this reply which may be of help if nothing else works.
But it has a limited answer, too; the main command is dimmed out, inviting
you to try other advanced or even routine maintenance on your computer.)
An account access permissions issue may likely only be a maintenance matter.
But check the settings used to create and maintain the Guest user accounts.
*See this topic:* "How do I completely disable the Guest Account in Leopard?"
http://www.askdavetaylor.com/completelydisable_guest_account_mac_os_xleopard.html
Sometimes, issues within accounts, users and privileges go odd; it may
be you would need to repair disk and disk permissions from the booted
Installer's Disk Utility version. Also, check and repair anything in the OS
that may have been lacking. There are times where general maintenance
is a way to fix odd issues that otherwise have no explanation.
Have you started the computer into SafeBoot, and when then in the admin
account, see about removing the guest or other user; or at least try to make
the settings function? Some extensions and system bits are inactive when
the computer system is booted into SafeBoot Mode, but you can use this to
an advantage since it does a basic repair on startup. Then run Disk Utility,
and its 'repair disk permissions' then when done, quit D.U. & restart normally.
There are several Support documents on the topic of user accounts and how
to manage them; some troubleshooting of them involves reading up on the
variable and ways you can change the settings. I'd use caution since there is
a way to Delete a Guest User Account that involves the terminal or root level
and fair attention to detail is required so as to not affect more than the one item.
A post in this Discussion tread tells of how to delete a guest user account:
http://discussions.info.apple.com/thread.jspa?threadID=1521487
From May 14, 2008 as contributed by V.K. to resolve another user's problem:
+"From an admin account uncheck the option enabling Guest account in accounts+
+system preferences and then enter the following command in terminal.+
*sudo dscl . delete /users/Guest*
+Please just copy and paste the above. That's very important, you don't want+
+to delete a wrong thing here. You'll have to enter your admin password which+
+you won't see (that's normal).+
*This command will delete the Guest user.*
+Now go to the accounts preferences and enable Guest. This should create+
+Guest user afresh and hopefully resolve the password issue. Restart and+
+try the guest user again. Double check and make sure that it's enabled."+
{This last part, should you need to re-create a guest user again.}
While I have not tried this, nor have I ever created a Guest User account in
any of my dozens of Macs, (prefer to create Standard user for daily use; or
try the Parental Controls to minimize damages an inexperienced user may
create in the process of over-reaching their grasp) I can see it may be handy.
Hopefully some of the above may be helpful. Usually if a system function is
acting oddly, sticks, or won't work correctly, some systematic maintenance
is likely behind the situation. To have and run AppleJack from single user or
perform other preventative actions to head off possible issues, are ideas, too.
Since I don't use AppleJack, and seldom need to run in the command line or
single user or terminal mode, some of that is out of my range. I've found most
of the issues I've read about can be prevented. However, if a user gets into the
OS and can move things around, trash or misplace important parts, etc; odd
things can happen. Unfriendly or careless/unwanted user access can mess it up.
Usually about once a month whether or not the computer needs it, I run OnyX
and have it complete all items check-marked in Automation, and have it set to
restart the computer when that group is finished. There are other tools in it, too.
Perhaps the combination of things can help; or just what Dave Taylor said.
Good luck & happy computing!
+{ edited to add more confusion }+

Root/admin access for user account

Similar Messages

Maybe you are looking for