Securing a Logged In Server to Allow Dropbox Syncing?

I'm a Mac Server 10.8.4 user. I also use Dropbox on the server as a shared folder. Dropbox requires that the user be logged in to maintain updating. This presents a small problem. I don't want to leave the server logged in all the time, but I do not want anyone by the admin person to be able to use the computer.
So, as I see it, an option is to remain logged in but lock the screen? If that's the best option, what's the best way to do this?
I have found a website with the suggestion editing the RC.COMMON file in the root to make the application DROPBOX even if the user is not logged in. The website is not current and does not speak to which OS version this will work, or not. These are at:
http://www.dropboxwiki.com/tips-and-tricks/sync-while-logged-out-using-mac-os-x- or-mac-os-x-server
The command line the suggest inserting the RC.COMMON file is:
su username -c "/Applications/Dropbox.app/Contents/MacOS/Dropbox &"
(side question - I can't find the short username for the admin account - any tips?)
I appreciate any advice on helping to make Dropbox keep syncing and be available for all server users.
Thanks,
Seth

Seems like an unorthodox way to use Dropbox.
However in answer to your question, once the admin logs in and starts Dropbox, you can use the "switch user" menu to go back to the login screen while leaving your admin user logged in in the background.

Similar Messages

Cannot generate Account Logon Events (Event ID 4624) in Security Event Log on Server 2008 R2 Domain Controller

I have configured the Default Domain Controller's policy to log SUCCESS for Account Logon Events in the Server 2008 R2 Domain Controller, but these events are not logging in the Security Event log.
Default Domain Controllers Policy
Computer Configuration/Windows Settings/Security Settings/Local Policies/Audit Policies/Audit Account Logon Events = Success.
What tools can I use to troubleshoot this further? The results of "Auditpol.exe /get /category:*" are below.
System audit policy
Category/Subcategory                      Setting
System
Security System Extension               No Auditing
System Integrity                        No Auditing
IPsec Driver                            No Auditing
Other System Events                     No Auditing
Security State Change                   No Auditing
Logon/Logoff
Logon                                   No Auditing
Logoff                                  No Auditing
Account Lockout                         No Auditing
IPsec Main Mode                         No Auditing
IPsec Quick Mode                        No Auditing
IPsec Extended Mode                     No Auditing
Special Logon                           No Auditing
Other Logon/Logoff Events               No Auditing
Network Policy Server                   No Auditing
Object Access
File System                             No Auditing
Registry                                No Auditing
Kernel Object                           No Auditing
SAM                                     No Auditing
Certification Services                  No Auditing
Application Generated                   No Auditing
Handle Manipulation                     No Auditing
File Share                              No Auditing
Filtering Platform Packet Drop          No Auditing
Filtering Platform Connection           No Auditing
Other Object Access Events              No Auditing
Detailed File Share                     No Auditing
Privilege Use
Sensitive Privilege Use                 No Auditing
Non Sensitive Privilege Use             No Auditing
Other Privilege Use Events              No Auditing
Detailed Tracking
Process Termination                     No Auditing
DPAPI Activity                          No Auditing
RPC Events                              No Auditing
Process Creation                        No Auditing
Policy Change
Audit Policy Change                     No Auditing
Authentication Policy Change            No Auditing
Authorization Policy Change             No Auditing
MPSSVC Rule-Level Policy Change         No Auditing
Filtering Platform Policy Change        No Auditing
Other Policy Change Events              No Auditing
Account Management
User Account Management                 No Auditing
Computer Account Management             No Auditing
Security Group Management               No Auditing
Distribution Group Management           No Auditing
Application Group Management            No Auditing
Other Account Management Events         No Auditing
DS Access
Directory Service Changes               No Auditing
Directory Service Replication           No Auditing
Detailed Directory Service Replication No Auditing
Directory Service Access                No Auditing
Account Logon
Kerberos Service Ticket Operations      No Auditing
Other Account Logon Events              No Auditing
Kerberos Authentication Service         No Auditing
Credential Validation                   Success

Hi Lawrence,
After configuring the GPO, did we run command gpupdate/force to update the policy immediately on domain controller? Besides, please run command gpresult/h c:\gpreport.html to check if the audit policy
setting was applied successfully.
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Any issues if database server time get's sync?

Hello,
Just want to ask whether knows of any issues with regards to server stability, server backup and restore or server security if the database server's time gets sync/set back to a prior time once in a while.
thanks,
Zhen

Unless you make use of flashback queries, I don't see any obvious problems.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Tracking oracle database activities in security/system logs of windows server

Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Can purging of oracle log, n case the file has become big or even tempered be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
dhomya

Hi Dhomya,
I am not familiar with Oracle database, though you may try to enable file system auditing:
Audit object access
https://technet.microsoft.com/en-us/library/cc776774(v=ws.10).aspx
Apply or modify auditing policy settings for an object using Group Policy
https://technet.microsoft.com/en-us/library/cc757864(v=ws.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

HT1339 i cant log into instagram fro my ipod it says error & connection to log in server is in error. i deleted & installed the app again. it still wont allow me to log in what can i do ?

i cant log into instagram fro my ipod it says error & connection to log in server is in error. i deleted & installed the app again. it still wont allow me to log in what can i do ?

iOS: Troubleshooting applications purchased from the App Store
Contact the developer/go to their support site
Restore from backup. See:
iOS: How to back up
Restore to factory settings/new iPod

Windows Server 2008 R2 Security Event Log Maximum Size

I have a customer with logging requirements on domain controllers that are exceeding the maximum log size they have configured for the security log. When they attempted to increase the maximum size of the security event log via Group Policy, the settings
did not take effect. When an attempt was made to increase the security event log manually on the domain controller via the properties of the log, an error is generated whenever the value was changed.
The Maximum Log Size specified is not valid. It is too large or too small. The Maximum Log Size will be set to the following: 196608 KB
The 196608 KB value is the value that it is currently set at. Testing on other logs, application, system, has lead to the same result.
wevtutil.exe sl security /ms:<n> produces similar results. There is no error message given but the value doesn't change when you run wevtutil.exe gl security
When viewing the registry value MaxSize under HKLM\Current Control Set\Services\EventLog\Security the change is reflected, but the log does not seem to get any larger.
What one would expect to be a two minute change in a group policy object has turned into something much more difficult. Any idea what could be causing this?
Joseph M. Durnal MCM: Exchange 2010 MCITP: Enterprise Messaging Administrator, Exchange 2010 MCITP: Enterprise Messaging Administrator, MCITP: Enterprise Administrator

I verified that it was not another policy - the domain is pretty simple without many policies, only policies applied are:
Default Domain Policy (no event log settings)
Company Domain Policy (no event log settings)
Default Domain Controller Policy (no event logs settings)
Company Domain Controller Policy (...\Event Log\Maximum security log size 4194240 kilobytes)
The value was 196608 before, the plan was to change the group policy setting to 4194240 and I expected it to be that easy. However, the values didn't change.
4194240 is divisible by 64
Used multiple tools to try and change
Group Policy
Event Viewer
wevtutil.exe
registry editor
While some of the methods display a larger event log, the actual size of the event log still seems to be limited to 196608 kb.
Thanks,
Joe
Joseph M. Durnal MCM: Exchange 2010 MCITP: Enterprise Messaging Administrator, Exchange 2010 MCITP: Enterprise Messaging Administrator, MCITP: Enterprise Administrator

Safari can't establish a secure connection to the server

Hello,
I am wondering if someone can kindly help me solve the following problem? I have been trying to troubleshoot myself, but it seems that the problem persists.
Issue
I am having problems asscessing a wireless web login. The University that I attend allows students to access the wireless web by entering their login and password. When a new browser session is started, it automatically directs to the wiresless web log in. Initially, I had no problems and could easily access log into the site. Recently, I have had a issue where I try to log in and I get one of two error messages:
Safari can't open page "xxxxxx" because Safari can't estabish a secure connection to the server "xxxx"
Your login was processed successfully but a DNS Timeout occured. You will need to close and restart your browser in order to reach your orginal desitnation.
Notes:
Issue #1 happens the most often.
When issue #2 happens, I close my browser and open a new one but the page remains blank.
The wi-fi shows full strength and all others in the room have the ability to log on/off with no problems.
I have no problems with other secure sites when accessing from home wireless connection.
Troubleshooting
I have tried several things:
Date and Time - correct
Parental Controls - none are set
Keychain First Aid - no errors
Another User Account - I have tried using a different user account and the problem continues
Used another browser - I have tried using Firefix, same problem
Open DNS - I have added DNS servers 208.67.222.222 and 208.67.220.220 but the problem continues
Safari Clean Up - I have emptied cache, cleared history, reset safari, same problem
I have tried to research the issue and troubleshoot as best as I can but nothing seems to work. I am somewhat new to Mac's but am pretty savy but need a bit of guidence to figure this one out as I am not sure exactly what I need to do and don't want to mess up any settings any further and compound the issue. It is quite frustrating as I am unable to access the internet and class website during class.
I should mention that at one point I had a scan/clean app installed. Before this app was installed it seems to work, however, I can't directly link the timing. I can't remember exactly which program it was as I have since removed it.
Can someone help me identify the issue? Is it a Certificate Authority or DNS issue? I would love to get this solved...
Thank you!

mdkat, I have encountered this problem in the past, and doing the following helped:
In the URL, simply lop off the "s" at the end of https:// and load the resulting URL.
Before you quite understandably jump on me to say that this action will result in a non-secure connection, confirm for yourself that this will result in the web page being reloaded with the proper https:// protocol with the secure SSL/TLS layer as well as the feel-good lock icon.
That is not to say this behaviour is correct. Obviously the warning you see is an indication Safari / Firefox and the site you're accessing are not communicating in some way, but fixing it is up to them.
Use as you see fit, as I say it works for me.
I should mention that at one point I had a scan/clean app installed. Before this app was installed it seems to work, however, I can't directly link the timing. I can't remember exactly which program it was as I have since removed it.
Good idea. Probably not related though, since I have never installed such things.
... and thank you for writing such a thoughtful and well-organized question!

Couldn't establish a secure connection to the server

The following message is appearing every time I go to log into an account via a secure link.
Safari can’t open the page because it couldn’t establish a secure connection to the server
I am running Mac OS X 10.3.9
I have Reset Safari 1.3.2
Removed all cookies
Emptied my Cache
Contacted my ISP and isolated it is a software issue
I used Internet Explorer and I was able to log into secure web pages. Therefore it is only Safari that doesn't allow me to log into secure pages.
Do I need to reinstall my safari application using my Mac OS X Install Disc following the instructions listed in the manual under topic "Reinstalling the software That Came With Your Computer" heading "Installing Mac OS X and Applications"
Buy reinstalling Mac OS X I hoping it might fix the issue with Safari. I am thinking it is a software/application issue.
Is there anyway I can reinstall Safari without having to reinstall anything else and without making back up file from my hard drive.
How do you go about reinstalling Safari only?

Hi
this is likely a keychain or settings issue rather than Safari....
but here is Safari from the 10.3.9 combo update.....
You'll need to choose the 'free' option, then unzip the file & drag the Safari app to your applications folder; then repair permissions, then run the 1.3.1 updater, then the 1.3.2 updater. Phew !!
maybe someone will upload the 1.3.2 version eh? I have tiger, so can't help directly

The security database on the server does not have a computer account for this workstation trust relationship

When I try to log on to my DC it says "The security database on the server does not have a computer account for this workstation trust relationship". It won't let me log on. I installed another server server 2012r2 (its virtual )
and I can get to ADSI edit.
I think what happened was I had a pc that could not connect without unplugging the network cable. So I found this fix
FIX: “The security database on the server does not have a computer account for this workstation trust relationship”2032011
I’ve seen a lot of solutions, or suggestions rather, with regard to the error in the title of this post. In my experience, the problem can almost always be resolved without extra domain add/removes and reboots, which is the most prevalent solution I have
seen around. Usually, this issue is due to a mismatch between attributes of the computer account in Active Directory and those values on the system itself. Here are the steps I take to fix this issue when it crops up:
Open up Active Directory Users & Computers pointed to the domain the computer account resides in
From the “View” pull-down menu, make sure that “Advanced Features” is checked
Navigate to the part of your organizational unit (OU) structure where the computer account for this server resides
Open the Properties for the computer object
Choose the “Attribute Editor” tab on the Properties dialog box
Check the Attributes dNSHostName & servicePrincipalName – anywhere that a fully qualified hostname is specified (e.g. myserver.mydomainname.com), make sure that the entry matches the hostname
you have configured when you go here on your server: Start -> Computer -> Right-Click, Properties -> Change Settings (under “Computer name, domain… settings”) -> Full Computer Name
As an example, for a fictitious W2K8 R2 server whose Full Computer Name is “srv1.mydomainname.com”, these attribute/value pairs should be in Active Directory:
dNSHostName:
srv1.mydomainname.com
servicePrincipalName:
HOST/SRV1
HOST/srv1.mydomainname.com
RestrictedKrbHost/SRV1
RestrictedKrbHost/srv1.mydomainname.com
TERMSRV/SRV1
TERMSRV/srv1.mydomainname.com"
Not reading it carefully I add a computer with the same name as the pc having the issue and followed the above. The problem is that I did not notice that the spn did not want the name of my server (serv1) but the name of the trouble
pc.
dcdiag output
PS C:\Users\administrator.TOM> dcdiag.exe
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
***Error: DC3 is not a Directory Server. Must specify /s:<Directory Server> or /n:<Naming Context> or nothing to
use the local machine.
ERROR: Could not find home server.
PS C:\Users\administrator.TOM> dcdiag.exe /s:DC2
Directory Server Diagnosis
Performing initial setup:
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\DC2
Starting test: Connectivity
The host 9e0dca7a-d017-445a-b354-adee5ff53d48._msdcs.TOM could not be resolved to an IP address. Check the DN
server, DHCP, server name, etc.
Neither the the server name (DC2.TOM) nor the Guid DNS name (9e0dca7a-d017-445a-b354-adee5ff53d48._msdcs.TOM)
could be resolved by DNS. Check that the server is up and is registered correctly with the DNS server.
Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
......................... DC2 failed test Connectivity
Doing primary tests
Testing server: Default-First-Site\DC2
Skipping all tests, because server DC2 is not responding to directory service requests.
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : TOM
Starting test: CheckSDRefDom
......................... TOM passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... TOM passed test CrossRefValidation
Running enterprise tests on : TOM
Starting test: LocatorCheck
......................... TOM passed test LocatorCheck
Starting test: Intersite
......................... TOM passed test Intersite
PS C:\Users\administrator.TOM> regsvr32 schmmgmt.dll
PS C:\Users\administrator.TOM> netdig /fix
netdig : The term 'netdig' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ netdig /fix
+ ~~~~~~
+ CategoryInfo : ObjectNotFound: (netdig:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> Setup /PrepareSchema
Setup : The term 'Setup' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ Setup /PrepareSchema
+ ~~~~~
+ CategoryInfo : ObjectNotFound: (Setup:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> netdiag /test
netdiag : The term 'netdiag' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ netdiag /test
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (netdiag:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> nslooup
nslooup : The term 'nslooup' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ nslooup
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (nslooup:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM>

Ok fixed.
At a elevated cmd prompt run ;
C:\Users\administrator.TOM>setspn -x
As you can see the DC serv1 had duplicate SPNs.
Checking domain DC=TOM
Processing entry 1
HOST/serv1.TOM is registered on these accounts:
CN=SERV1,OU=Domain Controllers,DC=TOM
CN=C00049,CN=Computers,DC=TOM
{14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/TOWN-HBWJ29ZOQC is registered on these ac
counts:
CN=Administrator,CN=Users,DC=TOM
CN=TOWN-HBWJ29ZOQC,CN=Computers,DC=TOM
{14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/town-hbwj29zoqc.TOM is registered on thes
e accounts:
CN=Administrator,CN=Users,DC=TOM
CN=TOWN-HBWJ29ZOQC,CN=Computers,DC=TOM
RestrictedKrbHost/serv1 is registered on these accounts:
CN=C00049,CN=Computers,DC=TOM
CN=SERV1,OU=Domain Controllers,DC=TOM
RestrictedKrbHost/serv1.TOM is registered on these accounts:
CN=C00049,CN=Computers,DC=TOM
CN=SERV1,OU=Domain Controllers,DC=TOM
found 5 groups of duplicate SPNs.
Went to the computers OU and changed computer c00049 to the correct SPN. Now I have a new issues, I'll start a new thread.

How can I turn off Event ID 5156 AND 5145 in the Security Event Log?

Hi,
I have a high volume web service. Everytime there is a connection from the outside, it logs this in my security event log.
I want to turn this off.
How can I stop the logging of event id 5156 on the web server and 5145 on the file server?
Thanks!
Dane!

Hi,
Thanks for posting in Microsoft TechNet forums.
The problem can be related to Audit settings. Please check the following threads to see if the information can be useful during the troubleshooting:
auditing file share on windows 2008 R2
http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/9e633bad-cda6-4ec4-8f04-c01de57ce767
Event ID 5156 filling up event logs. Probably due to anti-virus software (SEP 11)
http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/8044fb62-f5ea-45b5-b717-3f6592af77e0
Regards
Kevin
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback
on our support quality, please send your feedback here.

Can database activities of creating or dropping tables/packages be tracked in the security/system logs

Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Can purging of oracle log, n case the file has become big or even tempered be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?

2765539 wrote:
Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Can purging of oracle log, n case the file has become big or even tempered be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4?
Your first question is easy, you configure audit to log to the OS audit trail with
alter system set audit_trail=os scope=spfile;
and then enable audit for whatever actions you want to capture. All documented in the Security Guide.
Your second question makes no sense unless you explain what you mean by "oracle log".

Haveing problems with Safari. It gives me an error message. Safari can't open the web page, because it can't establish a secure connection to the server. It only seams to have a problem on https sites. Any help would be apreciated.

Safari keeps giving and error message. " Safari can't open the web page( insert web page here) , because it can't establish a secure connetion to the server.
It only seams to have a problem with https sites.
Any help would be appreciated

The "s" in "https" indicates the site is a secure server--usually a site that will require a password. Connections to secure servers can be blocked by parental controls. Are you using any parental controls, either through OSX's settings (in System Preferences) or third party parental control software (such as Netnanny)? If so, check the settings to make sure they will allow the connection.

Unable to create a secure connection to this serve...

Hello,
When i try to connect Turkish free wireless network TTnet Wifi, i am having "unable to create a secure connection to this server" error. The network connection trying to open an https log in page to connect internet. (in normally after the push connect button on that page, the network connection becomes available for internet.) All notebook and iphone or other mobile / computer devices can connect to internet with this network, but not nokia 5800 (and maybe other nokia devices with same browser)
I have tried with other browsers like skyfire or opera but no luck because after the connect ttnet wifi network, device opens default browser for log in page, and it gives error. I have also tried wefi too.
I think there is a bug or missing features with default browser. If you have any comments or suggestions please write.
Thanks.

I have tried to change default browser from default apps. but no chance, it shows only WEB for browsers, but i have all browsers installed (opera, opera mini, skyfire etc...) isnt there any chance to change default browser?

Problem logging into server.

i have a macbook pro running 10.6
imac running 10.6
macpro running server 10.5.8
MBP logs into iMac no problem, iMac ARD and Sharing settings are identical to server, but server will not allow login without asking permission (so i know server see's it) What am i missing on the server side that's not allowing direct login
server - sharing and remote management set to all users. Server logs into imac no prob but imac/mbp will only log into server if someone is at server and clicks allow, which makes it pointless for remote access.
sorry if explanation was iffy, its a tough one.
thanks

It's clearly still connecting as a guest, even though you say you're using a valid user account on the server. One final question; it appears that you have the ARD administrator application installed on more than one computer. If so, do you have separate serial numbers for each installation, or are you using the same serial number on all the systems?

Security Audit Log SM19 and Log Management external tool

Hi all,
we are connecting a SAP ECC system with a third part product for log management.
Our SAP system is composed by many application servers.
We have connected the external tool with the SAP central system.
The external product gathers data from SAP Security Audit Log (SM19/SM20).
The problem is that we see, in the external tool, only the data available in the central system.
The mandatory parameters have been activated and the system has been restarted.
The strategy of SAP Security Audit Log is to create many audit log file for each application server. Probably, only when SM20 is started, all audit files from all application servers are read and collected.
In our scenario, we do not use SM20 since we want read the collected data in the external tool.
Is there a job to be scheduled (or something else) in order to have all Security Audit Log available (from all application servers) in the central instance ?
Thanks in advance.
Andrea Cavalleri

I am always amazed at these questions...
For one, SAP provides an example report ( RSAU_READ_AUDITLOG_EXTERNAL ) to use BAPIs for alerts from the audit log yet 3rd party solutions seem to be alergic to using APIs for some reason.
However, mainly I do not understand why people don't use the CCMS (tcode RZ20) security templates and monitor the log centrally from SolMan. You can do a million cool things in SolMan... but no...
Cheers,
Julius

Securing a Logged In Server to Allow Dropbox Syncing?

Similar Messages

Maybe you are looking for