Script setting require an admin password to unlock preferences

Hidden in System Preferences -> Security & Privacy -> Advanced is a button to turn on or off requiring an administrator level password to unlock various System Preference options. This will secure certain preference options as defined in the /etc/authorization file.
When you turn it on it will set to true that those preference options are to be secured and when you turn it off it will set the control to false. By making a copy of the file /etc/authorization and then doing a diff of the before and after copies you can see the changes. (Or open both copies and scroll through them.)
However it seems it also sets a flag someone where else to indicate which mode it is in, this I somewhat expected because it is possible to manually modify the settings in /etc/authorization and it would need some overall method of determing which mode it is in.
My problem is that I don't know where this overall flag is kept, it does not appear to be in /etc/authorization itself although I may have missed it.
Does anyone know where this setting is?
With this information it would be possible to then write a script to apply the changes to /etc/authorization and also set that overall flag for the purposes of pre-configuring a computer when imaging it.
Thanks.

its should disable but every time i open the system preferences still show up ????
Or i should make restart ?
That is a different question. Your initial question was about where the setting was.
I never messed with the setting before and I have always had to unlock locked preferences. I tried it just now, though, and it doesn't seem to do what it says it should. Maybe it does something but I don't know what it is. You can try a restart or log out but I am doubtful it will make a difference.

Similar Messages

Why can I not disable the guest user in the 10.8.2 update? I have never enabled the guest user, but after the update, it was automatically enabled with a "managed" tag. It is not selectable even after entering my admin password to unlock the options.

Why can I not disable the guest user in the 10.8.2 update? I have never enabled the guest user, but after the update, it was automatically enabled with a "managed" tag. It is not selectable even after entering my admin password to unlock the options. I was able to select the account under "parental controls", but again, could not delete it. Why Apple? Why?!!????

SOLVED Ok. I actually was able to disable it. I had to actually log in as the guest user to make it accessible in the preference window. Then I disabled it and logged out. Apologies if this was obvious for some people, but I have had some sort of issue with something every update since Snow Leopard.

I cannot install a Mavericks software program on mac. it asks for administrator password. i never have set up an admin password on computer.

i cannot install recently downloaded Mavericks software on computer. it asks for admin password. i have never set up an admin password and was able to install programs by passing this step. any help isappreciated,

Not having a password means that any casual passer-by can have access to all your personal data, or deleting it.
Resetting or changing a password:
For Lion or later: http://support.apple.com/kb/HT6022
If it's running Mac OS X 10.7 or newer, restart with the Command and R keys held down, open the Terminal, and use the resetpassword command:
https://discussions.apple.com/docs/DOC-4101

Verizon PAP2 admin password or unlock guide.

I recently purchased a pap2-vn that was previously used on Verizon.
I did not do enough research and just found out it is locked and can only be unlocked with an admin password.
Does anyone know of the username and password?
Any guide to unlock the VN model?
Thanks.

Customata , I believe you're referring to unlocking methods found in another forum and when you search it through my friend, google.
Message Edited by Lemon57 on 02-14-200704:45 PM

Adobe pro 9 requires mac admin password

I just restored my macbook air and reinstalled my adobe pro 9 software, but now I have to enter my admin password before I can open any pdf file. How can I turn off this security feature?

This sounds like something needs to be repaired with the installation. I’d recommend uninstalling and then re-installing and updating to the most current version of Acrobat 9.

It requires a admin password to do the upgrade, but i never set one up

as the said in the above, how am i supposed to do...?

http://support.apple.com/kb/ht1274

PackageMaker: requiring admin password when it should not

I've been seeing a really strange "anomoly" with a package I've created.
None of the files in the package are configured to require the Admin password and the install
destination is specified to be the user home directory. However, with the *same* .pkg file, I
see three different installations:
1) Everything goes along with minimal interaction and everything is installed where it
should be.
2) Almost the same, except the user is presented a window asking where to install the
package: the user directory or some other location.
3) With either of the two above, there may be a popup requesting the admin password. But
even with the correct password, the package files are not installed; even though the install
is declared successful. (I haven't been able to figure out where it thinks the files are going.)
So there are really two questions. First, why is the user ever queried about the destination
of the package files when the package is configured to use the home directory. Second,
why is the user promoted for the admin password.
As I said, this is with the same package file. Double clicking it will present one of the
scenarios above.
This certainly makes for a poor installation experience. I'm wondering it there is something
I've done (ore haven't done) which would cause these to happen.
Suggestions or comments welcome.
Oh yes, it makes no difference whether I use the PackageMaker GUI or the command line
interface.
- Mark

try double clicking a song with a !
in the resulting pop up hit locate
browse to the location of the song and select it
in the next pop up tell it yes to use the location of that song to find other items

Resetting DHCP without sudo or admin password?

Not sure if this is the right place to post this query but I am trying to reset the DHCP lease automatically so I can create a little "logout" application in my internet café.
I've found the following commands that do the trick but they require the admin password:
sudo ipconfig set en0 BOOTP; sudo ipconfig set en0 DHCP
Any ideas on how this could be done without the admin password? What about with AppleScript?
Many thanks in advance,
Galen

No a hook is initiated by a launch daemon via launchd. So the shell script is being run by the system, not the user (admin or otherwise). ofcourse you would need to be an admin/sudoer to set it.
But why do you want to release the DHCP binding on logout? User processes shouldnt really be doing anything to change that to make it need to be released/renewed unless there is a wider network issue.

Require Change of Password on First Use

Gurus,
I need som help with regards to the Change of Password rule for users (new of APEX 3.0).
I read from the help text:
Select Yes to require the user of this account to change the password immediately after logging in the first time using the current password. This rule applies to the use of this account for workspace administration or development as well as to use of this account to log in to developed applications.
So, I add a user and set 'Require Change of Password on First Use' to TRUE and the user logins on the 'Main page' (http://apex.oracle.com/pls/otn/f?p=4550:1:1944788853821985) APEX redirects to a change password page. Extremly cool!
But here is the problem, if I build myself a little application (one empty page) and then have a user login to this application (not the same one, a brand new test user) the user is never challenged with the password change.
Is this the way it is supposed to be and I can't read the documentation correctly or is there something I have missed?
Cheers,
Andy

Andy,
The workspace needs to "enable" the account expiration/locking feature. If you don't have it enabled, the new features are not available for end user accounts. To enable it, use the workspace admin app: Home>Administration>Manage Services>Set Workspace Preferences and click the "Enable" radio button for Account Expiration and Locking. We could have disabled the Account Availability (Locked/Unlocked) and Requre Change of Password on First Use user account attributes disabled when this fetaure is not enabled for the workspace but then you wouldn't be able to create accounts and set those attributes as you require in anticipation of enabling the feature for the workspace.
Scott

Admin password won't work to install software

I'm trying to install Photoshop and when it gets to the point where it asks for the password, I enter it but the password box just disappears for a second and returns asking for the password again. (I entered it several times with the same result each time.) I'm certain that I'm entering a valid admin password and that permissions for the applications folder are set to read & write for admin and system. Just to be sure I tried entering the password incorrectly and the box shook as it normally would when an incorrect password is entered. Has anyone had a similar problem with Adobe products or installing any other software on Lion?
Also, I just installed Adobe Lightroom last night and it worked just fine. And when I just tried to run the Adobe Creative Suite Cleaner Tool which also asks for a password and I'm having the same problem. So I know that it's not just Photoshop but I don't know if it's just something to do with Adobe or maybe all software which requires an admin password to install.
Trying to repair permissions and run a virus scan now although I think these two options are unlikely to fix the issue...

It looks like repairing permissions did the trick.

Lost admin password for SPA-941

Hi all,
I asked this question on community/netpro/collaboration-voice-video/ip-telephony, but was told that it was the wrong place to do it. I don't know how to move a post, so I'm asking again here (I hope I got it right this time).
The short version: how to reset/disable admin password in SPA-941 phone?
The long version:
I have an IP Phone SPA-941 --- bought it on eBay with 'lost admin password'. I've found somewhere on the Internet that it's possible to reset the phone to 'factory defaults', which is supposed to reset the admin password as well (which is why I bought the phone with this 'warning'). However, the 'information', failed to mention, that the factory reset is protected by the said administrator password.
Now, I have a bit of a problem since without this password, the phone is useless --- I cannot configure my SIP account there.
I cannot believe that loosing the admin password could yield a device unusable, so I presume that there must be a way to reset/recover password.
I have found somewhere a tool to upgrade firmware. I tried it.... Not surprisingly, it requires the admin password. However, it also prints a very promising message: "If you are the administrator and forgot the password, you may perform a factory reset by entering ****, option 73738#, and value 1 from a telephone connected to the unit to be upgraded.". I have no idea what the 'option' might be and the 'value 1'... I also do not know what they mean by 'telephone connected to the unit to be upgraded' --- this seems to indicate that the upgrade tool (or message) isn't meant for a phone, but for some other device to which a phone is to be connected.
I also found some discussions about the jumpers (JP1 and JP4) in the printed board of the phone. I tried all of possible combinations and none of them caused the phone to be any less demanding in terms of admin password (if it booted at all).
I also found some kind of 'recovery software'. It is supposed to 'recover' firmware to a version 4.1.x (I have 5.1.8 now but I assume that I'd be able to upgrade it back again when the 'downgrading' removes password). There are two options --- one is for 'normal' upgrade (well.. downgrade in this case), which requires admin password.
The second option is the 'recovery' --- it requires serial number. When I choose this one, the program warns me that it's only meant for phones displaying SOS message... I tried it regardless (what do I have to loose?), but the 'device couldn't be found'. Perhaps there is a way of corrupting the phone and entering this SOS-state?
This, for the moment used up my ideas as how to use my phone. In desperation I'm trying the brute-force 'attack' --- I'm able to check about 1k passwords in 60s... I've found in some docs, that passwords can be 63 character long alphanumeric strings, which means that I should be able to check all of the combinations in something about 264646141002173127075674008932259139731080369373079015446569116064180887885670843 years, so I'll not hold my breath. In the meanwhile... Please help. Is there a way to 'crack' the phone and reset the admin password?

Hi Michal,
From what you describe, it appears that the original service provider properly locked down the phone. If they really did, then brute force is the only way ahead.
There are no backdoors in the SPA phones or ATAs. The idea being that a service provider can easily recover from a lost password by simply reprovisioning a device with a new or blank password. Many service providers give the SPA devices away and then sell a service, this is why they allow the customer to keep the device when the service is terminated.
I read articles where if so inclined, as you appear to be, you can set up a private network to replicate the original service provider's network, including DNS. Then, using a protocol analyzer, you watch to see how the SPA device behaves and what it looks for. I've read that if you devote enough time to this exercise, you could build the files that make the phone believe it is on its home network and then provision it with a blank password.
Or, you could buy a shiny new SPA5xx or SPA3xx phone with many more features, current firmware, and get to spend the time doing something else.
Best of luck, either way.
Regards,
Patrick

I forgot my admin password for my mac and need to reset it, any help?

Im not sure how long ago I set up the admin password and have tried every password I can remember ever using in the last 5 years and cant seem to get anywyere. There must be some alternative to changing my admin password. I have any and all info pertaining to this mac. What can I do to reset the password? Thanks

You mean you've installed SW without knowing your admin password the past years? Interesting stuff, that.

Are there installations that do not require an Administrator Password?

I just installed the Camino web browser onto Leopard. I was suprised when Leopard did not ask for an Admin Password when installing it. I then simply downloaded another program and was able to install it without the Admin prompt. Leopard DID let me know that it was downloaded from the internet and if I "wanted to run it" but it just did not ask for the Admin stuff. Are there programs that Leopard does not ask Passwords for? If so, what is the criteria where it asks for a password?
Thanks for your help.

Some installers will work fine even if you don't provide an admin password. Apple officially recommends that application installers require an admin password. This gives that installer, software, and software developer complete control over your machine. Many application will work fine just with a drag-and-drop installer, but such installers are no longer recommended by Apple. It is possible to construct an installer that does not require an admin password but few people do it, and for good reason. The installer is a flaky beast at best and a smart developer doesn't want to take risks with it like that. So, the answer to your question is that the criteria is just that "Apple says so".
Sorry if this doesn't make much sense. It is mostly a rant. I don't like the admin password requirement at all. I really don't like the recent recommendation of using the Apple installer for all applications. It is a safe bet that you will see fewer and fewer drag-and-drop installations in the future. Pretty much all installers will require your admin password. Pay attention to what they are installing because they can literally do whatever they want and wreak havoc with your system the next time you update your system.

Installing Java SE 6 runtime without admin password

I work for a school district which uses JAMF's Casper suite to manage our Macs. We recently received a new shipment of mbp's which have been updated to 10.8.4. With Casper we are able to push out software packages without any end user involvement. This is especially convenient so we don't have to input the admin password with each install. We use a couple of Java based applications as well as Java enabled web sites for education. Problem is I can install JDK 7 Update 25.pkg which takes care of viewing webistes but when I attempt to open our Java desktop apps it asks if I want to install Java SE 6 runtime which requires an admin password. I've tried installing Java 6 from Apple's download page but when I attempt installing it says I must be running 10.6.x. Is there any way of installing runtime without an admin password and where might I find the runtime package. Sorry for the lengthy explanation. Thanks.

JDK 7 Update 25.pkg
That is the newest Java so you shouldn't need Java SE 6.

How can I get an admin password?

How can I get an Admin Password?

System Preferences>Users/Groups>Password>unlock the padlock. When done lock the padlock.

Script setting require an admin password to unlock preferences

Similar Messages

Maybe you are looking for