System has amnesia about non-admin access to system log

Time Machine Buddy often doesn't show current backups. So I used the tip from Pondini to give my user account system log access. That worked fine.
But it doesn't "stick." I fired up the Console app this morning, and the system log is grayed out.
Any idea why, and what to do?
Thanks,
Harv

Hey James,
I did indeed get a reply in the Unix forum, and it worked fine. Here's the content:
*BobHarris posted "Re: System has amnesia about non-admin access to system log" in "System has amnesia about non-admin access to system log" on Jun 2, 2010 6:21:28 PM.*
*You could try*
*sudo /bin/chmod +a "harv47 allow read,file_inherit" /var/log*
*This assumes that your usename is 'harv47' on your Mac. This also assumes that the log files are created in the /var/log directory.*
*In theory this will make sure that any file created in /var/log will inherit an ACL that allows harv47 read access to that file.*
*However, I have not spent much time working with Mac OS X ACLs, so your mileage may vary.*
*BobHarris posted "Re: System has amnesia about non-admin access to system log" in "System has amnesia about non-admin access to system log" on Jun 2, 2010 8:13:24 PM.*
*Oh yea. You can view the ACL you applied, and see if the inherit_file worked using*
*ls -leO@a /var/log*
*again, assuming /var/log is the directory containing the log you are trying to read.*
The system log continues to be accessible, even after the midnight "rollover."
I'm a happy camper. I'm not sure if it's a coincidence or not, but TM Buddy has so far continued to show the log excerpts after the rollover as well.
BTW, the SpamSieve app (Bayesian spam filter for Mail) is one of those database apps mentioned in your tips. It accounts for about 1 GB every backup.
Thanks!
Harv

Similar Messages

Why do I get "The system has recovered from a serious error" after system shut down

Every time when start/restarting the computer using the attached .vi I get a window with "The system has recovered from a serious error." Although this does not seems to have any effect on application and I am able to use the test equipment but could someone explain why this is happening?
LV 8.2
TestStand 3.5
MAX 4.1
NI DAQ Card PXI-4461
Many Thanks
Mehran
Mehran Fard
Attachments:
System Shutdown.doc ‏63 KB

Hi Fardm,
how should we answer that question when you don't attach the VI, but only a picture hidden in some proprietary file format?
Attach the VI!
You also have some Rube-Goldberg in your code:
IF not zero THEN use ErrorCode ELSE use zero
Why not just connect errorcode directly with BundleByName? You don't need the Select function here...
Best regards,
GerdW
CLAD, using 2009SP1 + LV2011SP1 + LV2014SP1 on WinXP+Win7+cRIO
Kudos are welcome

Since I installed the latest version of Firefox, my Google search system has forgotten about my past entries and is not adding on each search topic etc as I search. Is this a GOOGLE or a Firefox issue?

Example. I searched for NYT.COM. In past the system remembers and when I start typing ny it immediately fills in nyt.com and other options related to nyt.

Make sure that you allow pages to choose their colors and that you haven't enabled High Contrast in the Accessibility settings.
*Tools > Options > Content : Fonts & Colors > Colors : [X] "Allow pages to choose their own colors, instead of my selections above"
*http://kb.mozillazine.org/Website_colors_are_wrong
*https://support.mozilla.org/kb/Websites+look+wrong

Can't run programs from non-admin account: redux

Background: I have years of experience with PCs, very little with Macs. I work with children in a group home. The tech support people who set up this iMac (OS X 10.2) have long since departed, and no one in the organization has any clue as to what changes they made to this system, and I'm sure that those tech people made some changes. For example, in admin accounts other than "root," either there is no access to the Utilities folder or the folder has been well hidden.
The Problem: The boys in this home will use a non-admin account. The programs I have installed for them will run under admin accounts but not under the "boys" account, which is non-admin. The system tells me that the account does not have enough access privileges to run the programs. (Program that had been installed before I got access to this iMac will run under the "boys" account.)
In discussions on this forum several months ago, I thought the answers I got here had helped me solve the problem. Then, for administrative reasons, I did not touch the iMac until last week. What I thought had been solved is not solved.
From "root," using the "Capabilities" option in the Accounts folder, I have added to the "Add other applications..." section the programs I want "boys" to have access to. But this doesn't work. When I log in to "boys," access is denied: insufficient access privileges.
If I give up on this system, the boys will not be able to use this iMac, and that would be a shame.

I realize that it sounds like I ignored all the previous advice before I drafted this latest post. But the first thing I did when I returned to the iMac was to look at the posts.
I didn't touch the system for six months. I was waiting for approval from administration to upgrade the OS. By the time I got the approval, upgrading was no longer an option -- according to the manager of the local Genius Bar. This system is not capable of running 10.5, and Apple will no longer sell 10.4. I can find 10.4 on the Net, but those are private sellers and the price is too high.
Now that I've got that out of the way, the current task: I have no idea why, but the gains I accomplished six months ago have disappeared. The "boys" account can run none of the software I installed. No one else has touched the system. (I live alone.)
I logged on as "root" and went to Accounts. Using 10.2's Capabilities function, I tried to check all the boxes for "boys." But when I close the screen and then re-open it, the system has unchecked "Open all System Preferences"; "Change Password"; and access to "Utilities."
At this point I cannot create new folders under "boys." "boys" can run software that was installed before I got the machine, but that's all.
I have to assume that I inadvertently did something that wiped out my previous gains. But I ain't got a clue.

Since downloading version 5, system has almost ground to a halt and "times out" all the time

Since downloading the upgrade, my system has slowed to almost stop, accessing Googlemail takes forever and freqently gets "timed out" as do most attempts to access the internet and web pages.
This has rendered the system all but useless. I have checked the cable connection, modem and router and all are working fine.
I am not technically competent with computers so at a loss to know what to do next.

Probably an extension
The last extensions I disabled were extensions that I did not use much so haven't looked to see which ones:
The following extensions were disabled 2011-06-26 so that Firefox 5 could run quicker. Their functions were not added to Firefox 5, just another case of losing more extensions and functionality due to updates. about:accessibility, about:me, Dom Inspector, FxIF, GoogleEnhancer, InspecterWidget, LinkChecker, Location Navigator. ''I'll have to check out Dom Inspector, specifically''
: I will check them out later first one I'll putting back will be GoogleEnhancer, which I only took out because all similar extensions have been a problem at one time or another some are now replaced by others (customize google, optimize google, mcafee site advisor, wot)
I am using 72 extensions now:
* http://dmcritchie.mvps.org/firefox/infolister_listing_fx4.htm#extensions
Be sure to check your extensions against
* http://kb.mozillazine.org/Problematic_extensions

File Sharing to Non Admin Users ?

I would like to share directories on an external Firewire drive to other Apple network users. Normally only users with admin privileges can 'see' external drives. My unix is pretty rusty but I've been told that you can set the ownership to 'everyone' ? and allow non admin access to the external drives (directories). Can anyone confirm this ?

Yes, but a safer bet is to use Sharepoints, which sets the file permissions in a far more controlled manner.
Matt

Logical system has not been assigned to any business grp

We have converted R/3 system (4.6c) from EBCDIC to ASCII. R/3 is integrated with SCM 5.0. Everything was fine before conversion. After Conversion, in SCM qRFC Monitor Inbound Queue (TCODE = SMQ2), we are getting the
error "Logical system &##ä<+è### has not been assigned to any business
system gr".
Error Message no. SR053
The problem happens because the logical system has strange value
in the inbound queues.
Preblem still persists even after performing various things:
Re-created and Activated the CIF Integration Models
Checked all settings in both systems
Ran CCR
Checked table CIFLOOKU
Any ideas are highly appreciated? Thanks

thanks。 I have the same issues. like this:
Logical system I11CLNT800 has not been assigned to any business system group
Message no. /SAPAPO/CIF007
System Response
The data cannot be assigned to a logical system.
Procedure
Check if the logical system has been maintained, and assign the logical system to the business system group.
the I11CLNT800 is my ECC logic system. I had assigned it to ECC Client 800,and a BSG I11800 in APO system.
Can u give me any suggestions?
before, someone had suggested me to define partner profile in WE20 and WE21, but they does not work.
waiting on desk
thanks
Edited by: Xinyou Dong on Jun 3, 2011 1:01 PM

Other system has higher release than XI syst. in landscape

Hi,
We are running an XI 3.0/NW04 system and we're currently planning to upgrade our BW 3.5/NW04 system to BI 7.0/NW04s.
In the Master for NW04s you can read the following :
"For PI, it is a prerequisite that no other system in your system landscape has a higher release than the PI system. If you want to upgrade or install an application in your system landscape, you first have to make sure that the current release of the PI system is on the same release level ‒ if required, you have to upgrade the PI system first to the new or a higher release."
After having read this, my understanding is that we have to upgrade our XI system before upgrading the BW system.
What are the consequences/implications running a system landscape where a system has a higher release than the XI-system ?
Thanks in advance for help and hints.
Rgds,
Christian

Hi Christian,
The implications are, PI as the highest release is the only supported combination. It is possible that other combinations may work, but they are not tested by SAP and, in the case of any issues, SAP Support will tell you to upgrade your PI system to the highest release.
Best Regards,
Matt

Can't login to local NON-admin accounts-Directory Access set to server

I have a strange problem on a set of laptops that I cannot resolve and am hoping someone can help me.
Here is the issue:
I have a set of building laptops (PowerPC, OSX.4.11) that seemingly will not "search locally" in the authentication process. The logins seem to work fine for NETWORK logins to our Open Directory Master xserve, but these machines will not login to any LOCAL non-admin accounts. The local root and local admin account logins do, however, work fine. ?? The remainder of the building computers (Intel iMacs OSX.4.11) appear to have the exact same settings and login fine both locally and via the network home directories.
I have tried the following:
Deleted DirectoryService preferences folder (MacintoshHD-->Library-->Preferences->DirectoryService)
Deleted the mcx cache in Directory Access
Tried adding a new non-admin user to test (still will not login)
Removed and re-created LDAP configuration (all set to custom)
Tried setting the LDAP to the automatic settings ("Add DHCP-supplied LDAP servers to automatic search policies")
Disabled all network connectivity (turned off Airport and disconnected the ethernet cable), still cannot login to local accounts
Tried to bind in LDAP configuration (when I did bind the machine, it would no longer authenticate to the network authentication server, so I did an "unbind" and restarted and it went back to performing the network logins, but still will not login to local non-admin accounts).
Reset passwords in System Prefs and also re-typed them in NetInfo Manager
Deleted login keychains
Deleted mcx.plist
Reinstalled the OS from disk and local logins worked TEMPORARILY--UNTIL I set the LDAP directory access to authenticate to our server (which I also need for the network logins to work),then, the issue started again.
*Same results with both ethernet and wireless connectivity enabled.
*Note: I also manage these local accounts via WGM (installed on the local machine) and even tried disabling that and still no luck.
Please help...I have spent hours and hours trying to find a solution and nothing seems to work! What am I missing??

Mostly just a bump...
How about that .local extension, or trailing / ?

Multi-user system, non-admin-users get "error 46" when downloading quicktim

Thanks in advance if you have some idea about where the root cause is.
Error message:
"Error 46: Could not load or find the QuickTime ActiveX control."
Context:
- WinXP SP2 fully patched (as of 06/20/2006)
- Multiple users: 1-Admin, all others a member of the Users group
- Simple File Sharing is enabled (this problem does not change when this option is disabled)
- iTunes 4.9.x and QuickTime 7.1 installed
- Programs have been uninstalled and reinstalled several times, with no change
Symptoms:
- All system users can view quicktime movies when they are embedded in web pages.
- Administrator can launch quicktime and view *.mov files, all others get Error 46 (see above) when attempting to launch quicktime or double-clicking on .mov files
- File association properties (under Contorl Panel | Folder Options | File Types) shows .mov opens with QuickTime Player (deselecting this displays WMP as the application)
- Users Browsing to a directory where .mov files are located, displays the WMP icon instead of quicktime (as under folder options)
This all used to work. It appears that this became broken in the last month or two, after either patching XP, or installing QuickTime 7.1 to gain H.264 codec functionality.
Is there a guaranteed way to force system wide file assoc that is reliable?
Is there a tool that parses the registry and displays what activeX controls are in use for a particular system operation?
Thank you!
Windows XP Pro
Windows XP Pro

Fixed this using http://www.sysinternals.com/Utilities/Regmon.html and regedit.exe.
On my system, found that non-admin users were being denied access to these registry keys:
HKEYCLASSESROOT\QTOControl.QTControl
HKEYCLASSESROOT\QTOControl.QTControl.1
fix (both): add group users: read
That's because the non-admin accounts are members of the "users" group on my system. You may need to adjust this to match what is on your system.
Regedit can modify these permissions (but don't do it unless you are confident you can recover if you cause a problem). An easy fix, once the problem is identified. Some of you have already figured this out already.
Use regmon to get comfortable with how it works, make sure you grok the filtering, it's your friend.
Modifying the registry at your own risk. Remember to use a registry backup utility! I used http://www.fixregistry.com/download.htm "Registry Healer"
All non-admin users are operational at this time. I did not have to update iTunes and H.264 content works!
So it looks like this is a bug in the QuickTime 7.1 installer? Anyone have any insight about why this is happening with some regularity (at least according to the message board posts I'm seeing this month...)
Maybe the info is some help,
gwG
Windows XP Pro

Non admin user - changes not saved (Safari settings, system prefs, etc.)

iMac, 2 users, one is administrator and other is standard user. Recently, in the non-admin user account, it has become impossible to make any changes. For example, adding an application to the the Dock, after logging out and back in next time, the application is not in the Dock any more. Also, making changes to the prefs in Safari, changes are not saved.
I noticed this after installing FireFox v4. I installed it as admin whilst in the non-admin users account. However, I don't believe that the installation of FF has anything to do with the problem, it just highlighted it. I've checked the permissions for the various directories that hold prefs info such as user/libraries/application prefs/etc. etc. and also Safari prefs. Nothing I can see that has changed in system prefs.
Any ideas on what has caused the problem (kids are known to fiddle from within the non-admin account) and any ideas on how to fix it?
Thanks

Hi PPRuNe,
You could try making the standard user an Admin too. To do this, make sure you are logged in to the standard user, go to System Preferences > Accounts > Standard user (you may have to unlock the padlock) > Allow user to administer this computer
This will allow changes to be made without being prompted for a password all the time.
However, if you had Parental Controls on, they probably won't work on an admin account because as an admin you have complete control over a computer, so the computer thinks there is no point in having the controls turned on. And if the kids are known to "fiddle," just think carefully!
Hope this helps you.
Chris.

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

How do I allow non-admin accounts to have access to the player?

I need help please. First I want to say that I did read the "Read this first" sequence, but I have no idea how to find out where all those posts are or how to browse for them, so PLEASE do not be cross with me if I am asking something already addressed. Here is my problem: I downloaded and installed the latest version of flashplayer according to the instructions. That gave me the flashplayer debugger and it all works like a charm on my administrator account. But as soon as I switch to a regular user account (any non admin, acct) it is as if I had not installed anything that is the videos do not get displayed instead I get a blank space, My computer Operating System is a windows 7 and I use Internet Explorer version 8. the win 7 runs both the 32 version and the 64 version of the IE8 but I never use the 64 (because I read somewhere that does not work), Thank you very much!

First thing(s) to try:
on the limited account, can you see the Flash animation at http://www.adobe.com/software/flash/about/ ?
if yes, can you right-click on the Flash object, select Settings, then disable Hardware Acceleration?
if still not working, can you check IE Tools | add-ons, if Shockwave Flash object is enabled?
If it still fails, can you try the following:
download the executable installer http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe (save to disk)
still on the limited account, right-click on the downloaded installer, then select 'Run as Administrator')
Does it work now?

When clicking websites my Avast 5.0 antivirus notifies me that a malicious URL is trying to access my system or that a Trojan has been prevented from access. The attempted Malware/Trojan is always from the same address:[Ticon.in/nte/kuz/.exe/xhdoe515bvo3

suspicious Maleware / Trojan.
== This happened ==
Every time Firefox opened
== I tried to access a website

Hello "Morbus",
Thank you for your quick and informative reply. First I would like to provide more information on this attempted Malware/Trojan. I have copied the full addresses for you and/or anyone who may have interest. It follows below.
28.06.2010 07:38:00 Network Shield: blocked access to malicious site 楴祣湯椮⽮瑮⽥畫⹺硥e [ C:\program files\Mozilla Firefox\Firefox.exe ( 5436 ) ]
28.06.2010 08:14:44 Network Shield: blocked access to malicious site 楴祣湯椮⽮瑮⽥畫⹺硥e [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 4476 ) ]
28.06.2010 13:32:53 Network Shield: blocked access to malicious site 楴祣湯椮⽮瑮⽥畫⹺硥e [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 1988 ) ]
28.06.2010 17:51:53 Network Shield: blocked access to malicious site 楴祣湯椮⽮瑮⽥畫⹺硥e [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 5400 ) ]
29.06.2010 13:31:03 Network Shield: blocked access to malicious site ticyon.in/nte/kuz.exe [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 2444 ) ]
29.06.2010 23:15:14 Network Shield: blocked access to malicious site ticyon.in/nte/kuz.exe [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 480 ) ]
30.06.2010 09:36:22 Network Shield: blocked access to malicious site ticyon.in/nte/kuz.exe/wHd0e51a5bV03006f36002Ra38dbe4f108T9ccfa9f8Q000002fe901801F0035010aJ14000601L656e2d55530000000000 [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 5164 ) ]
30.06.2010 22:31:52 Network Shield: blocked access to malicious site ticyon.in/nte/kuz.exe/wHd0e51a5bV03006f36002Ra38dbe4f108T9ccfa9f8Q000002fe901801F0035010aJ14000601L656e2d55530000000000 [ C:\Program Files\Mozilla Firefox\Firefox.exe ( 3600 ) ]
I had failed to mention in my previous comments that each time the attempted attacks took place, a blank Adobe PDF page appeared. As you suggested, I disabled the Adobe add-on and have had no further attacks. I am extremely dilligent in keeping my SuperAntiSpyware Pro, AvastAntiVirus 5.0, ThreatFire, Vista Firewall Control, Malewarebytes and Windows Defender up to date. However, after any attack I always run these in safe mode just as a precaution. I had suspected the Adobe drop-in may have been the culprit because of the page that appeared and your suggested fix has in fact fixed it!
Thank you again for your unselfish time in coming to my rescue. "Deaf Dave"
From: [email protected]
Date: 7/1/2010 12:53:40 PM
To: [email protected]
Subject: Reply notification: when clicking websites my Avast 5.0 antivirus notifies me that a malicious URL is trying to access my system or that a Trojan has been prevented from access. The attempted Malware/Trojan is always from the same address:[ticon.in/nte/kuz/.exe/xhdoe515bvo38d
"Morbus" has posted a reply to a thread you're watching.
You can view the thread and reply at the following URL:
https://support.mozilla.com/en-US/forum/1/714170#threadId714337
Message:
Hello Deaf Dave.
It's possible that you are having a problem with some Firefox add-on that is hindering your Firefox's normal behavior. Have you tried disabling all add-ons (just to check), to see if Firefox goes back to normal?
Whenever you have a problem with Firefox, whatever it is, you should make sure it's not caused by one (or more than one) of your installed add-ons, be it an extension, a theme or a plugin. To do that easily and cleanly, run Firefox in [http://support.mozilla.com/en-US/kb/Safe+Mode safe mode] (don't forget to select ''Disable all add-ons'' when you start safe mode). If the problem disappears, you know it's from an add-on. Disable them all in normal mode, and enable them one at a time until you find the source of the problem. See [http://support.mozilla.com/en-US/kb/Troubleshooting+extensions+and+themes this article] for information about troubleshooting extensions and theme and [https://support.mozilla.com/en-US/kb/Troubleshooting+plugins this one] for plugins.
If you need support for one of your add-ons, you'll have to contact its author.
Also, it's possible that your system is infected with malware. To scan for malware, install, update and run these programs ''in this order''. They are all free for personal use, but some have limited functionality in their "free mode", but the features you'll miss are not really needed to find and remove the problem you have. Remember that ''not all programs detect the same malware''!
Malwarebytes' Anti-Malware - [http://www.malwarebytes.org/mbam.php malwarebytes.org/mbam.php]
SuperAntispyware - [http://www.superantispyware.com/ superantispyware.com]
AdAware - [http://www.lavasoftusa.com/software/adaware/ lavasoftusa.com/software/adaware]
Spybot Search & Destroy - [http://www.safer-networking.org/en/index.html safer-networking.org/en/index.html]
Windows Defender - [http://www.microsoft.com/windows/products/winfamily/defender/default.mspx microsoft.com/windows/products/winfamily/defender/default.mspx]
Dr. Web Cureit - [http://www.freedrweb.com/cureit/ freedrweb.com/cureit]
If these don't find it or can't clear it, please tell me and I'll provide you with further assistance.
Did this response solve your problem with Firefox?
Yes, this solved my problem (click here):
https://support.mozilla.com/tiki-feedback.php?id=714170&hash=6d5f163b3092b464aa15d04188b5cca2&type=forum_topic&feedback=Firefox%20Support%20Forum&commentId=714337
No, this did not solve my problem (click here):
https://support.mozilla.com/en-US/forum/1/714170?hash=6d5f163b3092b464aa15d04188b5cca2#form
If you no longer wish to receive notifications for this thread,
visit the following URL to cancel your subscription:
https://support.mozilla.com/tiki-cancel_watch.php?section=forum&hash=6d5f163b3092b464aa15d04188b5cca2

Non Admin System User in Oracle Linux

When installing OL 6-3 I am asked to specify the root user and at the end of the installation a non admin system user.
I am slightly confused as to the purpose of this non admin system user.
Q1. What is if for / not for and how does it differ from root ?
Q2. Is is really just the Desktop Admin user ( whereas root is the superuser for the server as a whole ) ?
Q3. Now that I have specified this non admin user - how do I change this role to another user I have created ( I made a poor choice of username in the first place ! ) i.e. does this non system admin user have any specially designated roles or privileges at Linux level, which I need to enable on the other user that I now wish to be the non admin system user ?
Advice greatly appreciated,
Jim

Jimbo wrote:
When installing OL 6-3 I am asked to specify the root user and at the end of the installation a non admin system user.
I am slightly confused as to the purpose of this non admin system user.
Q1. What is if for / not for and how does it differ from root ?The viewpoint on modern *nix is that:
- Logging in remtoely directly as root is often a bad thing to be discouraged, and may pose a security threat.
- Generally logging in as root is a bad thing; best practice is to acquire superuser privileges only when needed.
This is so much so that some (most?) distributions are preventing a direct login by root at all, and then need a
>
Q2. Is is really just the Desktop Admin userNo really, essentially each user can maintain (administer) his own desktop ... though I expect there are ways of restricting this.
( whereas root is the superuser for the server as a whole ) ?This is essentially true.
>
Q3. Now that I have specified this non admin user - how do I change this role to another user I have created ( I made a poor choice of username in the first place ! ) i.e. does this non system admin user have any specially designated roles or privileges at Linux level, which I need to enable on the other user that I now wish to be the non admin system user ?most gui tools running on root will realise root privileges are needed and ask for it.
From a terminal window:
To change to the root user use:
su -
to check to another user you may:
su - otheruser
...... However this user may have trouble running a graphical program ...
( The alternative ssh -X otheruser@localhost .... is a simple way round this)
>
Advice greatly appreciated,
JimJust as I finished preparing this I noticed Dude has already answered. I think we're saying essentially the same thing. I've fleshed things out a little more. Please be aware I could be had up for technical/conceptual inaccuracies in my reply; so please take as a general direction.

System has amnesia about non-admin access to system log

Similar Messages

Maybe you are looking for