Staff and wheel users ?

I have two users that show up in the permissions group when ZI look at get info for my folders and drives.
What is the staff and wheel users and what is the purpose of these users?

Staff and Wheel are "Groups".
Unix permissions are broken down into User (Owner), Group, World (Other), with separate read, write, execute permissions settings for each class of user. "Staff" and "Wheel" are standard Groups.
Generally all user accounts are also granted "Staff" membership. So if you create another user account on your system they would have a unique User ID, but would also be granted "Staff" membership. Permissions could be assigned that would allow other members of Staff access to your files, but deny World/Other access (NOTE: World does not really mean all members of planet Earth, just other processes on your system that are not you and not a member of your group; remember these terms were invented when computers were not networked, and they were their own little world).
"Wheel", as in "A Big Wheel", meaning someone of importance and authority, is a group for administrators. Many files are part of the Wheel group with permissions that allow users in the Wheel group to access them, but would not allow other users without Wheel group access.
Staff and Wheel are normal in a Mac OS X system. Please do not mess with them.

Similar Messages

Windows Server 2012 Standard and Essentials User CAL's

I've been running Windows Server 2012 Essentials in an organization that until recently stayed within the 25 user 50 network device limit specified by the license. Eventually we've grown beyond that. Since the Server 2012 Essentials machine had a non-transferable
OEM license I decided not to waste it by doing an in-place migration to Server 2012 Standard, and instead set up a new server with freshly purchased Server 2012 R2 Standard and migrated Active Domain roles to it, leaving the original server as a part of a
fail-over cluster.
We purchased 30 User CAL's for the 2012 R2, as required for 25+ staff members.
Now I am curious. The 2 servers that we have right now (2012 R2 Standard and 2012 Essentials) both maintain the same Active Directory and manage the same pool of users and workstations. Does that mean that the primary server with 30 User CAL's takes dominance
and sets the limit as to how many people are allowed to access the network. Or does it become a combination of purchased 30 CAL's + 25 Users hard-wired into the 2012 Essential edition?
Do these servers have to run separate domains with segregated pools of users in order to be license compliant for 30+ users or can they exist within the same same domain preserving individual user limits? What if the 2012 Essentials server maintains
one office location with fewer than 25 staff and the Standard R2 2012 server runs another office with fewer than 30 staff, while both offices are linked via a VPN for the purpose of sharing 3rd party licenses? Do individual user limits apply, or is it still
30 users max?
To sum up the question, I'd like to know whether I'd need to buy more user CAL's when we reach more than 30 staff at 1 or possibly 2 office locations.
Oh, and the device limit! 2012 R2 Standard under user CAL licensing scheme has no machine limits. Essentials is always capped at 50. When running one active directory, what's the legally allowed number of devices on the network? I assume it's unlimited.
Thanks.

Thank you for the reply.
My question then is how to transition while preferably keeping both physical servers.
Should a 2012 Standard key be purchased additionally for an in-place transition of 2012 Essentials machine to 2012 Standard (which at this point is as good as a fresh install)? Until then, should the Essentials 2012 server be taken offline entirely?
What about the situation where I described both servers running segregated networks with their own pools of users, only connected via a VPN for 3rd party license sharing? Is that configuration supported?
Also, if the configurations is unsupported, why are the servers able to share roles in first place? Why isn't there a software mechanism preventing interaction? What configuration do the servers themselves assume is in place?
Thanks again.

Which trxn for Support staff to terminate users in a Load Balance system

We have trxn sm04, but it will only provide users that are logged into the system that you have been sent to in a load balance environment.
I was also considering al08, but that does not allow support staff to terminate users.
Is there another trxn?
Please advise, we want to determine a strategy for the support staff before we roll out load balancing to all SAP users
B.Regards,
Maria

>
nirmal konchada wrote:
> Hi,
>
> In ST03 ransaction you have something called as transaction list, there you can find your transaction and after double clicking it you can find the list of users working on that transaction.
>
> Once the list is clear you can disconnect the user through SM51.
>
>
> Regards,
> Nirmal.K
Thank you for the advise. However I cannot locate in transaction ST03 the information you indicated. Also, your directions are confusing to me.
Maria

Policies and Excluding Users

I'm using Messenger 7.0.2 and have a pretty basic question (I hope). I have the following eDir structure
<Organization>
<School 1>
<Office>
<Staff>
<Students>
<School 2>
<Office>
<Staff>
<Students>
etc.
My LDAPContainer object looks at everything in the tree (O=organization).
I have a DefaultPolicy that permits Messenger Use
I have a DefaultScope profile that includes the entire tree (*,O=organization).
I'm attempting to exclude certain OUs from Messenger use. Toward that end, I've:
1. Created a second scope (e.g., *,OU=Students,OU=Site1,O=organization).
2. Created a second policy and left (and locked) the checkboxes to disable messenger.
3. I've set the "Scope Profile" attribute for the policy for the new scope.
4. I cycled the Messenger agents.
Needless to say it didn't work. When I look at one the "student" users and click the "Novell Messenger" tab, I get a message that there is not policy associated with the Messenger object. I checked the template object but there are no Messenger options. I know I can select a bunch of users, assign the policy, and then it'll work but I have over 10k accounts in 8 different OUs and would like a better option. The documentation says I can go to the "Used By" attribute of my student policy and add them there but that's pretty clunky and requires maintenance.
Any thoughts would be appreciated!

Well, it's not perfect but I found a solution using (of course) JRB Utilities. Here's the procedure i wrote up:
=================================
Disabling Novell Messenger for Students
Through the use of Messenger (NM) scopes and policies, Novell has a method for denying NM services to users (students, in our case). The application of the policy, however, is relatively arcane and not user friendly. Through JRB's setname, the policy assignment can be made to large numbers of users very easily. This procedure assumes a "no Messenger" policy already exists.
1. Create/export a list of users or OUs to which the policy should be assigned. The file should look similar to the following (this example encompasses all students):
..*.students.<School1>.<Organization>
..*.students.<School2>.<Organization>
..etc.
2. Run SetName to assign the policy to the user attribute:
Setname @<input file> /a=nnmPolicyDN .StudentPolicy.PolicyContainer.MessengerService.NM .GW.<Organization>
3. This can be verified on the Novell Messenger tab of the user objects.
>>> David Hickok<[email protected]> 3/30/2009 10:39 AM >>>
Correction, Messenger 2.0.2.
>>> David Hickok<[email protected]> 3/30/2009 10:35 AM >>>
I'm using Messenger 7.0.2 and have a pretty basic question (I hope). I have the following eDir structure
<Organization>
<School 1>
<Office>
<Staff>
<Students>
<School 2>
<Office>
<Staff>
<Students>
etc.
My LDAPContainer object looks at everything in the tree (O=organization).
I have a DefaultPolicy that permits Messenger Use
I have a DefaultScope profile that includes the entire tree (*,O=organization).
I'm attempting to exclude certain OUs from Messenger use. Toward that end, I've:
1. Created a second scope (e.g., *,OU=Students,OU=Site1,O=organization).
2. Created a second policy and left (and locked) the checkboxes to disable messenger.
3. I've set the "Scope Profile" attribute for the policy for the new scope.
4. I cycled the Messenger agents.
Needless to say it didn't work. When I look at one the "student" users and click the "Novell Messenger" tab, I get a message that there is not policy associated with the Messenger object. I checked the template object but there are no Messenger options. I know I can select a bunch of users, assign the policy, and then it'll work but I have over 10k accounts in 8 different OUs and would like a better option. The documentation says I can go to the "Used By" attribute of my student policy and add them there but that's pretty clunky and requires maintenance.
Any thoughts would be appreciated!

Deploying Custom Windows 7 Logon page and switch user button

I am trying to use ZCM 11 Group Policy management to do two things. 1). Turn off the Windows 7 switch user feature that exists in the start menu and at the initial logon screen, and 2). Add a policy statement graphic to the initial logon screen in Windows 7.
Feature 1 above is done by changing 'Hide entry points for 'Fast User Switching' in Computer Configuration=>Administrative Templates=>System=>Logon. But in order to get rid of the 'Switch User' button on the initial logon screen you also have to enable 'Interactive logon: Do not display last user name' in Computer Configuration=>Windows Settings=>Security Settings=>Local Policies=>Security Options and we only want this enabled for students. There are only two options for this setting - 'enabled' and 'disabled'.
Feature 2, adding a graphic to the initial logon screen, is turned on by enabling 'Always use custom logon background' in Computer Configuration=>Administrative Templates=>System=>Logon and creating a custom bmp file placed in C:\Windows\System32\oobe\info\.
Because the 'Interactive logon: Do not display last user name' setting only has enable/disable options (the default is disable) and because user associated settings overwrite workstation associations Im using two policies, one workstation and one user as inidcated below:
User GPO :
Enable 'Interactive logon: Do not display last user name' in Computer Configuration=>Windows Settings=>Security Settings=>Local Policies=>Security Options
NOTE: This allows me to differentiate between student and staff users.
Workstation GPO:
Enable 'Hide entry points for 'Fast User Switching' in Computer Configuration=>Administrative Templates=>System=>Logon
Enable 'Always use custom logon background' in Computer Configuration=>Administrative Templates=>System=>Logon
Bundle:
Deploys the bmp file to C:\Windows\System32\oobe\info\.
Unfortunately, this setup only works as intended when the user is set up with a volatile DLU policy. When the user associated DLU is non-volatile it doesnt display the graphic and it does not remove the switch user button on the main logon screen. If I logon/logoff as a non-volatile user I get the generic Windows 7 logon page with the switch user button visible, when I logon/logoff as a volatile user I get the custom graphic logon page without the switch user button. Whats even stranger is that when I go into gpedit.msc and look at the settings after I log in, theyre correct for each type of user.
Does anyone have any insight on why I might be seeing this problem?
Ive tried to be complete as possible describing the problem but if didnt describe something correctly or someone needs additional info, please let me know.
Thanks for any assistance.
Dan

Hi Dan,
are you using Novell CLient?
The Tiles on the Login Screen also depend on the Client configuration. If there is only Novell CLient active Windows cannot display other tiles or switch user.
regards
MArkus
Originally Posted by dlietz
I am trying to use ZCM 11 Group Policy management to do two things. 1). Turn off the Windows 7 switch user feature that exists in the start menu and at the initial logon screen, and 2). Add a policy statement graphic to the initial logon screen in Windows 7.
Feature 1 above is done by changing 'Hide entry points for 'Fast User Switching' in Computer Configuration=>Administrative Templates=>System=>Logon. But in order to get rid of the 'Switch User' button on the initial logon screen you also have to enable 'Interactive logon: Do not display last user name' in Computer Configuration=>Windows Settings=>Security Settings=>Local Policies=>Security Options and we only want this enabled for students. There are only two options for this setting - 'enabled' and 'disabled'.
Feature 2, adding a graphic to the initial logon screen, is turned on by enabling 'Always use custom logon background' in Computer Configuration=>Administrative Templates=>System=>Logon and creating a custom bmp file placed in C:\Windows\System32\oobe\info\.
Because the 'Interactive logon: Do not display last user name' setting only has enable/disable options (the default is disable) and because user associated settings overwrite workstation associations Im using two policies, one workstation and one user as inidcated below:
User GPO :
Enable 'Interactive logon: Do not display last user name' in Computer Configuration=>Windows Settings=>Security Settings=>Local Policies=>Security Options
NOTE: This allows me to differentiate between student and staff users.
Workstation GPO:
Enable 'Hide entry points for 'Fast User Switching' in Computer Configuration=>Administrative Templates=>System=>Logon
Enable 'Always use custom logon background' in Computer Configuration=>Administrative Templates=>System=>Logon
Bundle:
Deploys the bmp file to C:\Windows\System32\oobe\info\.
Unfortunately, this setup only works as intended when the user is set up with a volatile DLU policy. When the user associated DLU is non-volatile it doesnt display the graphic and it does not remove the switch user button on the main logon screen. If I logon/logoff as a non-volatile user I get the generic Windows 7 logon page with the switch user button visible, when I logon/logoff as a volatile user I get the custom graphic logon page without the switch user button. Whats even stranger is that when I go into gpedit.msc and look at the settings after I log in, theyre correct for each type of user.
Does anyone have any insight on why I might be seeing this problem?
Ive tried to be complete as possible describing the problem but if didnt describe something correctly or someone needs additional info, please let me know.
Thanks for any assistance.
Dan

My lock screen just shows a black background and a User Name/Password dialog after opening the screen from sleep. How do I get it back to where it blurs my desktop image with the dialog and my account image displayed?

I'm not sure when it began, but now my Macbook Air only shows a black background and a User Name and Password dialog box when I wake it from sleep. It used to show my desktop background blurred with my user name and icon displayed with only a text field for entering my password. I'm currently using Yosemite (OS X 10.10.1) and all updates have been done. Any help or suggestions would be greatly appreciated as I know this isn't a real problem, just an annoyance since I couldn't find how to change it back in the System Preferences.

I just have to point out that after looking at a related post (https://discussions.apple.com/message/22661092#22661092), it brought to memory that my issue most certainly began happening after I added some DoD certificates to the keychain. This obviously has something to do with it, but it still leaves me wondering what actually causes this to happen. :/

How-do-i-use apple calaendar to-allow-my-staff-and-i-to-share-calendars-but-not-have-my-alarms-going-off-on- their-ihones

how-do-i-use apple calaendar to-allow-my-staff-and-i-to-share-calendars-but-not-have-my-alarms-going-off-on- their-ihones
Really annoying can it be done.?
Searched everywhere for an answer surely other people have had this problem
Cheers

https://discussions.apple.com/message/19818985#19818985

Error while creating a workspace and workspace user

Hi Everyone
I have installed oracle 11.1.0.7 on our server and the os is windows server 2008. I tried creating a new workspace and workspace user using the repository assistant on the server itself i mean i am using OWB which comes along with the 11g database. It is installing 60% and at the end it gives me this error:
The warehouse builder workspace installation failed Java.Sql.SQLexception ora -00942 table or view does not exist
How can i deal with this error? any suggestions ?
Thanks & Regards
Subhasree

Hi everyone,
I got the same problem. It is very urgent to get an answer.
Thanks
Siegwin

What is difference between user group and reference user group?

hi
guys,
what is difference between user group and reference user group?
your regards
p.suresh

Hi ,
Chk the link below for your clarifiacation.
http://help.sap.com/erp2005_ehp_03/helpdata/EN/5c/c1c81c445f11d189f00000e81ddfac/frameset.htm
Hope it helps.
Regards,
Amit
Edited by: Amit Kotwani on Sep 2, 2008 2:15 PM

Brand new MBP and the user directory is corrupt?

hi, i just installd my new MBP and did a sync of my G5 settings (all except bookmarks) added a few things to my desktop and when i rebooted the desktop was cleared and the home directory was missing "Movies" "Music" "Pictures" in the left most column. all that is left is "Applications" and my user home symbol.
i tried to create a new user and when i did so was given a message that the "home" folder could not be located. weird.
anyway. i also installed a canon IP4300 driver. can anyone tell me what may be going on? do i need to erase the drive and do a fresh install?
UPDATE: i see what happened! the User directory somehow got into the Applications folder! no idea how. but i can't seem to get it out. can anyone help me out?
thx
Message was edited by: Frank Jacob

Open the Applications folder and drag the Users folder inside to the top level of the hard disk; you may need to press the Command key when dragging the item and/or provide an administrator username and password. When done, log out and back in. If only the home folder is present in the Applications folder, move it to the Users folder. Rename existing items as needed.
(25013)

SRM Post Installation - Webadmin and EBP users

Hello SRM gurus,
I am new to SDN but I am familiar with SAP Basis Administration. I have recently installed the SRM 5.0(NW04s). I configured the shopping cart link and the integrated ITS. I was asked to create userid for webadmin (who creates users through the browser). I searched through SDN but was not able to find it. Please let me know the procedure to get the webadmin and creation of EBP users. I appreciate your time and business. Thanks in advance. Waiting for your replies......
Raj

Hello Raj,
1. Create webadmin user in SU01 transaction, assign SAP_BBP_STAL_ADMINISTRATOR role
2. Go to USERS_GEN transaction and create user from existing SU01 user
3. Go to PPOMA_BBP transaction and search the created webadmin user, Select position level and check the ROLE attributes. If no ROLE attributes are maintained, add SAP_BBP_STAL_EMPLOYEE
4. logon to SRM with webadmin user
Regards,
Masa

How to change the Default login script and the USER login script in Netware3.12

I need to cut down the disk map from Neware 3.12 in Win98 client's PC.
please tell me
how to change the Default login script and the USER login script in
Netware3.12 ?
Or is there any other ways to do this thing?
Thanks a lot!

On 4/6/2006 [email protected] wrote:
> how to change the Default login script and the USER login script in
> Netware3.12 ?
Please repost in the discontinued.forums.
Edison Ortiz
Novell Product Support Forum SysOp
(No Email Support, Thanks !)

How do we reset password for SAP* and DDIC user in SAP R/3 ECC 6.0?

Hi,
How do we reset password for SAP* and DDIC user in SAP R/3 ECC 6.0?
I tried with acual method as below from client '000':
DELETE FROM USR02 CLIENT SPECIIED WHERE BNAME = 'SAP*' AND MANDT = '001'.
After this when I tried to logon '001' using SAP* with password PASS it is giving the message that Incorrect logon and password.
(Also when I checked for 'SAP*' in 001 it looks like it is not got created as I queried as below:
SELECT SINGLE * FROM USR02 CLIENT SPECIFIED WHERE BNAME = 'SAP*' AND MANDT = '001'.)
Can anybody throw some light on this? RewardS is guranteed for solutions!
-B S B

Hi again:
I forget to tell.
You must restart the system. So, that a new user with the name "sap*" gets generated with password "pass"
Hope this wil help,
Eric

Regarding the internet breech as seen on the news. What advice is Apple giving to its computer, iPad, and phone users?

Regarding the internet breech as seen on the news. What advice is Apple giving to its computer, iPad, and phone users?

That does not affect any OS X client or iOS, and there is no action for you or Apple to take.
Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them:
The most serious threat to your data security is phishing. To date, most of these attempts have been pathetic and are easily recognized, but that is likely to change in the future as criminals become more clever.
OS X viruses do not exist, but intentionally malicious or poorly written code, created by either nefarious or inept individuals, is nothing new.
Never install something without first knowing what it is, what it does, how it works, and how to get rid of it when you don’t want it any more.
If you elect to use "anti-virus" software, familiarize yourself with its limitations and potential to cause adverse effects, and apply the principle immediately preceding this one.
Most such utilities will only slow down and destabilize your Mac while they look for viruses that do not exist, conveying no benefit whatsoever - other than to make you "feel good" about security, when you should actually be exercising sound judgment, derived from accurate knowledge, based on verifiable facts.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in Oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Thanks for your advise.
However, I missed to mention that we have two set of users One is for Finished Goods and another for Spares.
Only Spares users need to be prevented from creating Direct/Manual Sales Orders in Oracle.
As you suggested, if this will be done at Form level, that may Disallow FG users also to create Manula Sales Orders which should not be the case.
Further, I tried to test one scenario through Processing Constraints but it did not work.
Application
OM
Validation Type
Entity
Temp
Short Name
TBL
Validation Semantics
Created By
Equal To
User(Myself)
Processing Cosntraint
Application
OM
Entity
Order Header
Constraint
Operation
User Action
Create
Not Allowed
Conditions
Group
Scope
Validation Entity
Record Set
Validation Template
101
Any
Order Header
Order
Above Created
Please advise.

Staff and wheel users ?

Similar Messages

Maybe you are looking for