Standard Account must authenticate to modify network preferences?

Hi All. I must be missing obvious in the Network Preferences, but I noticed that a standard account needs an administrative pw to change (edit) or create new Locations? I tried setting up an account using parental controls to (hopefully) enable access to Network preferences. does any one have a work-around perhaps? Thanks, J Langlois

I understand it will remember these, but that wouldn't change the fact that the office settings are probably still completely different to what was required for out of the office.
Saying that, you can however have different settings for the wireless and the ethernet port, within one location, which is one way around it. I don't like this feature, as it means the user can be connected to your secure network at the same time as being connected to a completely open wireless network, be it approved or otherwise.
I do still stand by my comment though (my example wasn't the greatest). If your user was using either both wired or wireless at home and at work, then you would need to change the location as they may require different dns's etc.
Otherwise, what is the point in locations?
Ideally, the locations would work such that the user can change the location, but the admin would have the options to choose which ports were active for any one location, meaning you could prevent them from using wireless and wired at the same time.
All of this is kind of there. The admin can set the ports limited by location, but then the user can't change the location, or you allow multiple ports in one location compromising your security, in the hope that your user will always remember to turn off the airport when connected at the office.
So, back to my original email, am I missing something?

Similar Messages

HT4628 How can I set up a standard account to auto disconnect from the wireless network upon logging out (Using Mavericks)? There used to be a setting for this in previous versions of OSX but I can't find it in the new version.

How can I set up a standard account to auto disconnect from the wireless network upon logging out (Using Mavericks)? There used to be a setting for this in previous versions of OSX but I can't find it in the new version.

How can I set up a standard account to auto disconnect from the wireless network upon logging out (Using Mavericks)? There used to be a setting for this in previous versions of OSX but I can't find it in the new version.

Moving items generates "cannot be modified...must authenticate" message

My mom has a new MacBook Pro running 10.4.11, and she is getting these annoying "cannot be modified...must authenticate" messages when she tries to move files off her desktop into other folders, or into the trash. I have tried the following:
1. repaired permissions (it repaired a few issues)
2. checked permissions on desktop (she had read and write access, and it wasn't locked)
3. checked permissions on the destination folder (ditto)
4. ran Keychain First Aid (no problems found)
5. searched the discussion forums for similar issues, but found no solutions
I'm stumped as to what's causing this. It doesn't stop her from working, as she can authenticate to complete the action, but it's a major irritant for her. Any ideas on what I can do to fix this for her?
Thanks!

That message usually means a permissions issue. Have you checked the permissions on the files, in addition to the folders? You can have permissions for the folder, but if you don't have permissions to change a file, you will get an error when you try to do so (such as trying to copy over it).

Airport network + 1 admin account + 1 standard account on the same Mac

Hello,
I have not succeeded yet in finding in this forum any answer to my problem but I guess this is a quite familiar one and may be some of you could help.
My configuration:
1) one Imac G5 Power PC (OS 10.4.6) + 1 Airport Express base station with firmware 6.3 (mostly to play Itunes on distant loudspeakers and, sometimes, for Ethernet connection).
2) one domestic Airport network protected with a WAP key.
3) 1 admin user account + 1 standard user account, both on the same Mac.
My concern:
1) When I am connected to to the admin account, my Airport network starts automatically (especially, thanks to the configuration settings "automatically connect to to the last network used" (or smthg like that) => so far, so good.
2) When I try to connect to the standard account (even when the admin one is already started), I always receive a window for authentification requiring an admin name and password for Airport (com.apple.airport.allow.network.cha): at this time the Airport icon in the menu bar is gray (no signal nor no activity?) and, in the list of the possible networks, my own one is not marked (meaning "not started"). Of course, as soon as I key in the correct data in the authentification window, the AE network starts for the standard account session => this behavior concerns me since the interest of a standard account is to have it running without the support of the admin user.
3) Last but not least and very strange behavior: when I am at step 2) (connection to the standard account), if I do not fill immediately the authentification form and go back to the admin account, when coming back again to the standard one, the authentification window has disappeared and the AE network is already running => magic but not comfortable in a normal way of doing.
Is this a problem of configuration of the AE network or configuration of the user accounts or a keychain problem? I have investigated in all areas for a while but without success at this time. Hope some of you will be able to help.
Sincerely
Christophe

Hello again,
I have not received yet any answer to my initial post (see above) but, unfortunately, the troubles described keep going. I noticed that, some of you, seem to be very familiar with Airport troubleshooting. May be, some of you will be able to help.
In addition to my initial description here is the content of the authentification window and, especially, the system element which requires an admin password for the standard account. May be it could help for a better understanding of the problem and a better investigation:
" Authorization : com.apple.airport.allow.network.cha
Tool : airport (complete path = Imac G5 de myname / System / Library / PrivateFrameworks / Apple80211.framework / Resources / airport "
Looking forward to hearing from you.
Christophe
Imac (2GHz PowerPC G5) Mac OS X (10.4.7) Airport Express station (firmware 6.3)
Imac G5 (2GHz PowerPC G5) Mac OS X (10.4.6)

Howto test new or modified network infrastructures with standardized testing methods?

Hi,
I'm sure many of you regularly do tests of new or modified network infrastructures before going live. And you developed detailed plans and schedules how to test, how I did too.
Does anybody know if there exist standardized testing methods for this cases?
Like recommendations how to check features, performance, hardware failures, convergence times, software updates, network management etc.?
Does Cisco offer information concerning that?
Especially for software testing there exist many methods to check if it's working properly, but for technical it infrastructures I did not find any informations.
Best Regards
Thorsten

Thorsten
I guess you are looking for something like this -
http://www.ciscopress.com/store/enterprise-network-testing-testing-throughout-the-network-9781587141270
should say I don't own the book or have ever read it.
I have never come across a set of standardised testing methods in the same way software has but that's is not particularly surprising when you consider networking as an industry is a long way behind other parts of IT in that respect.
We are all still using CLI for most of our jobs :-)
I suspect with SDN that there will be a far more extensive range of testing tools available in the long run but we aren't there yet.
Personally I do pretty much what you already have. When I was involved in design we had proof of concept labs where we could test it would actually work and which often fed back into the design.
Then we had to test it with the existing production environment to see how it impacted on what we already had.
If all that went well we then pretty much knew what tests we needed to run when we implemented it into production.
Jon

Can't access standard account in system preferences/Users when logged in to admin account.

I want to delete the account, but when I unlock Users i can't click on the standard account.

I know you have mentioned that you unlocked the users but just to make sure. You clicked the lock in the lower left hand corner. provided your password when prompted and it still would not allow you to select other user accounts?

Why is Admin Approval Needed to Share Folders Between 2 Standard Accounts?

Dear OS X users,
Please give this question due consideration because it's a fundamental question about the underpinnings of OS X which I've asked many people but no one seems to have a good answer. I have 3 accounts on my Mac. They are as follows:
- pete (standard account)
- wanda (standard account)
- mac admin (admin account)
It's logical that if Mac Admin creates a file/folder, he needs to set the permissions for it so that others can read/write to it. But imagine Pete and Wanda collaborate together on a project. Imagine Mac Admin creates a folder called /Swap with read-write permissions for all. Pete then creates a sub-folder without setting any particular permissions and then logs out. Then imagine Wanda logs in and wants to access the Pete's newly created folder. When doing so, an authentication prompt appears asking Wanda to enter an administrator's login details.
*Why doesn't it ask for Pete's authentication details? Why does it need an administrator's login details? Mac Admin has nothing to do with it.*
Now if you extrapolate this scenario to include a business enterprise where you may have lots of groups/teams with members all collaborating. It's ridiculous to involve an administrator for every trivial request of this kind e.g. a file permission change.
Please don't simply recommend sharing via USB or upgrading to Leopard. (I hated Leopard and 'upgraded' back to Tiger). I'm looking more for explanations than workarounds.
Thank you in advance.
MrLinguaFranca.

The short answer, of course, is that admin privileges are not needed (so long as you are the owner).
The long answer is that administrator privileges are required to change the owner of a file or folder, or to change the group of a file or folder (if you are not the owner or aren't a member of that group). To change the permissions on a file, one must be an administrator or the owner of the file.
In your scenario, Pete creates a folder, but forgets to make the folder read-write for others. Wanda is prompted for the administrator password because she doesn't have permission to access the folder until Pete says so. The default behavior on the Mac is to secure the folder.
The reason it doesn't ask for Pete's authentication details is the same as if it were Windows, Linux, Solaris, etc. Wanda is asking permission to override Pete's settings. If Pete wanted Wanda to access the file, he would have done so. So, logically, Wanda requires administrative privilege to supersede Pete's wishes. Wanda should NEVER have to be party to Pete's credentials because doing so compromises Pete's account entirely (nor the administrator's credentials -- if the folder has permissions that deny her access, she needs someone to grant the access, not someone else's credentials so that she can grant access to herself by assuming the role of the other party).
This is different from the case when you are accessing a network share. In that scenario, the connection to the remote machine does not know who's accessing the share and must require authentication to determine who it is dealing with. The correct way to implement network shares would be to have Wanda always authenticate as her self and never use the credentials of another. Once she's logged in as herself, the remote server can determine what she's permitted to access on the basis of her identity and the permissions on the files.
This is how file security works (not just OS X).

MacBook (ML) won't connect to Wi-Fi, no network preferences, no Spotlight

Hi,
First of all, thank you for taking the time to read and help ! :-)
I have not been able to find any kind of solution to my problem, because I did not find anyone with all these problems at once.
Here's what's wrong: out of the blue, my mid-2009 Macbook (white unibody) won't recognize any network (WiFi or Ethernet), refuses to load the Network preferences pane, and won't allow Spotlight to work (is "loading" everything on the right side of the upper bar, including the clock...). The Energy Saver Preferences pane seems to be out too.
I just upgraded my Macbook RAM, and subsequently upgraded from Snow Leopard to Mountain Lion, but it had worked fine for a week (granted, a week of not much use).
Booting seems to take more time too, so I'm considering a system repair or whatever the name is, but I'd like to understand the issue, and how to avoid it in the future !
Moreover, I'm not sure on how to repair my OS without any network .......
Thank you for the help ! ;-)
SV

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode* and log in to the account with the problem. The instructions provided by Apple are as follows:
Shut down your computer, wait 30 seconds, and then hold down the shift key while pressing the power button.
When you see the gray Apple logo, release the shift key.
If you are prompted to log in, type your password, and then hold down the shift key again as you click Log in.
*Note: If FileVault is enabled under OS X 10.7 or later, or if a firmware password is set, or if the boot volume is a software RAID, you can’t boot in safe mode. Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on certain Macs. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

ARD Admin with Standard Account

I log in with a Standard Account on my MacBook Pro under Mac OS X 10.6.8, open Apple Remote Desktop Administrator. I have access to most of the commands in the menu bar except those under Reports (All) and Manage (Copy Items, Install Packages, Send UNIX Command, Empty Trash, Set Startup Disk, Rename Computers, Upgrade Client Software, Change Client Settings).
Is there a way to allow the Standard Account to access all the features of ARD Admin?
I ask because we have a policy in place where everyone must be using a Standard Account and only the Admin account to authenticate installations, etc. I provide support and use ARD to connect with remote computers.
Thanks!

I seem to remember there being a setting in ARD to allow what non administer accounts can do with ARD. But to access these settings you need to first login as an administrator, and set those settings in ARD Prefereces.

Network preferences unlocking itself

After logging in, I'm finding that the Network preference pane has unlocked itself. This is repeatable.
I'm having other odd network issues, and want to keep things locked down as much as possible.
Any ideas? Thanks.

After logging in, I'm finding that the Network preference pane has unlocked itself. This is repeatable.
Why does it matter? I've always found those locks annoying and useless. It's not real security, if that's what you're expecting it to be. If you want to be sure other people aren't messing with your settings, don't let them use an admin account on your machine. Let them use a guest account or give them a standard account.
I'm having other odd network issues, and want to keep things locked down as much as possible.
Locking that lock won't solve network issues... what are those issues? Post details and someone can help.

The lock icon on the network preferences is missing.

Is there a way to get the admin authorization back? I just upgraded to Maverick. The lock icon on the network preferences is missing. Also, below is a permission verification problem.
Group differs on “Library/Java”; should be 0; group is 80.
Permissions differ on “Library/Java”; should be drwxr-xr-x ; they are drwxrwxr-x .
Group differs on “Library/Preferences/com.apple.alf.plist”; should be 80; group is 0.
Warning: SUID file “System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent” has been modified and will not be repaired.
Permissions differ on “System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/libruby.2.0.dyli b”; should be lrwxrwxrwx ; they are lrwxr-xr-x .
Permissions verification complete

ijquest wrote:
but I am able to check and uncheck "Require password immedialy..." box and change my password with the lock icon locked. This should not happen, correct?
Given that you are logged in as that user, and most likely the admin user of the Mac, then it makes sense that you can change your own settings. If you were logged in as a different user, then you would not have access to change the settings for this admin account.
ijquest wrote:
I created another post right after this one after I checked some console logs. Are you able to search for this post by my ijquest user name? I didn't see a reference number associated with the post. I truely appreciate your help.
For your user, I can only see the following posts which appear to have been created one and three hours ago.
USER ACCOUNT PASSWORD CHANGE WITHOUT REQUIRED UNLOCK LOCK ICON REQUIREMENT
The lock icon on the network preferences is missing.

Cannot login into network accounts when there is no network connectivity

Hey guys
quick question here if anyone can help.
What has been done: backuped user's home folder, binded the mac to AD, logged in as the user's AD name, copied everything from the backup into the new user's home folder, users can work flawlessly.
What is wrong is when they leave the office, after a few hours they cannot login anymore to their AD username. Is there something i missed?
The network accounts do not appear in system preferences.
Thanks

On your client machine login screen, type in ">console" (without quotes) in the username field and hit enter. Try and login with your network account username and password. What error messages do you get in console?
Taylor

After Every CLEAN Wipe my APP Store in a Standard Account Downloads Weird Software Automatically, EVERY TIME!!

Hello everyone,
I have a very weird situation that is going on that keeps happening to me and has caused many "Weird" situations on my Retina MBP and other Mac's that I own. I did have some of this in another thread, but most people simply don't think what I am describing is really happening, etc.
To date I have spoken with many Mac Genius's at multiple Apple Stores, I have spoken with many Level 2 Apple Care Rep and now have an Apple Certified IT person that visits my house once or twice a week trying to figure out what is going on.
Anyway....
I will give a quick example and if anyone can explain this to me or has had a similiar experience I would love to hear back!! .....
So I have about 6 macs for my current and past business. Plus I always love grabbing the newest technology. That said this "Problem" occurs with every Mac I own. Even to a brand new MBP Retina that no one has had access to. I keep Firmware PW's on, I only use Eithernet connections, I have a $600 Hardware Firewall configured to let nothing in (No VPN's, etc)... obviously have sharing off, **** I don't even use Bluetooth.
Anyway when I wipe the drive I do it like this...
1.) Take out both the MAC HD and Recovery Partion....
2.) I have 50 MBPS Download Speed so Internet Recovery is very quick. I go through the normal process.
3.) Once I have reached the new recovery partition from the Internet Recovery I partion the SSD a couple times in different formats and then go back to the normal Journaled that I will be using for my single partioned SSD
4.) Then I install and go through all the normal steps, expect I skip everything that I can. I don't add location services, I set time manually and I don't sign into iCloud as this will be my Admin Account. I normally just call the account Main or Admin.
5.) I check for updates and install any that might have not been included in the most recent Internet Recovery.
6). In the Admin Account I set a tough PW and then begin with all the security options. Again all sharing off, Firewall on, Wifi Off and requires Admin Access to Turn on, No Peer-to-Peer Networking without Admin Access, Bluetooth Off, Java and Extensions turned off in Safari, etc. You name it I have done it as far as the GUI goes. I am certainly no expert in Terminal, but can make my way around for some things.
7.) I create a Standard Account "The one in which I will conduct 99% of my business in." Again I create a strong PW for this account and confirm that the security settings that I setup in Admin match those of my Standard Account.
HERE IS WHERE THINGS GO WRONG...
8.) I go into options and login to icloud.
HERE IS WHERE IT IS ABSOULETLY WRONG...
911) I login to the apple store as I want to dowlonad some of the simple apps so I can go to work. IMMEDIATELY, it starts downloading a program called "Mountain" ... please don't confuse this with Mountain Lion (You can see it listed second in the APP Store search "Mountain")... when I look down at my Launchpad bar without hitting anything the 2.1MB file is downoading and then dissapears from my launchpad.
** Also as this is going on "storeagent" with the linux exec box icon next to it shows up saying "storeagent is attempting to install software to your computer" It does ask the for Admin User and PW, but no matter what I hit this "Mountain APP" downloads.
When I first noticed this I thought this was legit, well it certainly is not. I have never purchaed that "APP" however it does show up in my APP store Purchaes. The gateway is obviously not doing it's job and FURTHERMORE I don't have any of the options to "Automatically Download New Apps, etc." I simply just check for updates manually everyday as it is a 2 second process and Mounain Lion doesnt check automatically until every 7 days.
Here is a Screen Shot...
Sorry for the long post... Anyway experiencing the same thing? I can redo my drive over and over again... I have ever purchased a new Mac Book Air a year ago to see if it would happen and the problems eventually started and fairly quickly. The weird thing also is that I have done wipes and renistalls in all sorts of different locations.
So all this said... how could it not be in the EFI or on the machine some how?
Thanks guys... I hope someone has experienced a similiar experince!!! .... as the Mac Store and Apple Care have been of no help!! ... and with a problem like this I think it is way above a level 2 Mac specialist head

Hey etresoft,
I need that firewall for VPN Tunnels. These are not setup yet, but in order to work from home... outside our office, this is a requirement. Money is not really an issue and I do always back up kids / family photos. I have two Thunderbolt backups attached to the Monitors. So the 4TB with Raid 0, was cut down to 2TB and then I have another more movable / durable one that piggybacks off that.
I am considering the new Apple ID, the problem is I have a ton of Apps and a TON of Moview / TV Shows that have been downloaded over the past years.
The movies are easy enough, but it just ****** me off that I won't just be able to have them in the iClould and put on my Apple TV and have it right there with my Apple ID (My 2 year old loves Tom & Jerry )
It might come to the new Apple iD with minimal security, but being a partner in a business that runs the Internet Marketing team... we have very sensitive data that is stored. That said large email list and many other items that make us money and the ability to run a successful business is important to protect. Apple has these security mesaures in place for a reason and really the bottom line is I want to get to the bottom of what is causing this.
If you don't believe me, etc... that is fine. I did start a new forum as you said and I am simply looking for people to throw some feedback my way, if they have any.
When you say thing like "I suspect you aren't telling the Full Story." it is upsetting because I am trying to be as detailed as possible and why would I ever be typing on this forum unless I was just looking for some feedback.
I did start my own forum, but please don't acuse me of not telling the truth or the full story as others were in the last forum. That was a bad thread to jump in on, as it started out way more extreme than what I am trying to explain.
Anyway...
I have never posted on this forum until recently... and I promise you I am telling you the full story and I am simply looking for feedback. This is not fun for me. I would rather be running the business 100% and not have to worry about this and spend time on forums that eat into my day.
Thanks.

Whats the differene between a standard account and an administrator account

Can someone explain to me the difference between these two accounts please. Also I wonder if theres a way to stop the guest account deleting files on exit.

Admin accounts can install and remove applications, Standard accounts can not. The Guest account is designed to delete files on exit, that is because it is a Guest account.
You MUST have at least one Admin account.

Creation of a standard account

Hi everybody,
It's my 1st post here. I have a Mac mini Server with Mac OS X Server 10.6.3. created an Administrator account during the set up process and everything run smooth.
Now I would like to create a plain standard account in order to use the Mac mini Server as a normal machine (I have this particular need). I went in System Preferences > Accounts and just created it without assigning Admin privileges (standard account).
It happens that when I log in as this standard account I am not able to see the HD thus I see the desktop; all the folders in the Dock show a question mark.
It seems that this account hasn't the privileges to see its own folder in Users folder.
Logging in as Administrator account I saw that the account's Users folder has been created properly and, furthermore, that this account has the right privileges.
Any help or advice about this strange behavior? It is a bug? Did I something wrong?
Thanks a lot in advance!
Max

next thing to check is in the serverAdmin tool what the access settings are for your normal user.
To begin with, you may allow all access for that user, see if that gives you back the icons and then restrict what you want via the admin user again.
Note that a normal user on OSXserver would normally have no access to ServerAdmin tool, workgroup manager etc. They should not appear in the dock, or may be when they do, it would show a question mark.

Standard Account must authenticate to modify network preferences?

Similar Messages

Maybe you are looking for