Time Machine for non-admins

Is there anyway to access/configure Time Machine if the user is a non-admin? Possibly by editing the etc/authorization file?

Malcolm,
Thanks for getting back to me so soon. While I could do this, I really need to be able to allow non-admins to setup and start Time Machine as they wish. I will be deploying it to about 200 clients, who do not have admin rights. I have edited the authorization file to give non-admins the rights to change time zones, and was looking for something along the same lines, hoping someone has done this already and knows the entry I would need to make.

Similar Messages

Acrobat 7 requires admin password at every launch for non admin users?

acrobat 7 requires admin password at every launch for non admin users?
any one with a solution or similar problem?
thanks for any help.

I've been avidly following all of the threads regarding this issue...yet none of the solutions have worked for me. I've got 11 Mac users that do not use the Creative Suite..only Acrobat, Quark, etc. I've tried installing and re-installing through both Admin and User accounts, I've tried the AdobeBib XML change, I've tried enabling Root and installing, changing permission on the Acrobat folder, etc. all to no avail. I still get asked for Admin Authentication every time Acrobat and Distiller are opened (except on the Admin account side). This is happening on one particular Mac (G4, 1GB Ram, OS 10.4.3) for both Acrobat Standard 6 and 7 as well. The biggest issue that also happens in tandem with the Acrobat installs is the inability to print from Quark. I get the following error when printing: "The process "pictwpstops" terminated unexpectedly on signal 6." Because of the necessity to print Quark documents, I have uninstalled all Acrobat on the machines until we can get a fix. This resolves the printing problem with Quark. The only option left is to set up all users as Admin accounts - which I really do not want to do. Any other suggestions out there? I've got more information available if needed.

Itunes hangs for non admin users

I've got itunes 10.6.3 running on 10.6.8 Macs which are joined to AD and OD for network authentication.
When starting itunes as anything other than an administrator (local or domain) itunes simply hangs - on the very first run you can Agree to the EULA but after that it hangs at the startup. Sometimes you get the authentication dialogue for our proxy server but not always.
I've checked and the proxy isn't even receiving any requests, and it works fine for an admin user. I've taken the proxy out of the users preferences and it still hangs.
So is itunes dead in the water for non admins, or do I have to resort to the Windows 95 days of making everyone an admin of the Mac?

Fgi42 wrote:
The backup destination is an OpenSolaris ZFS directory shared with netatalk.
That doesn't sound like a supported destination for Time Machine backups. See Apple's Disks that can be used with Time Machine.
You'll probably need to find someone familiar with the OpenSolaris OS.

I have chosen to fil migrate from old ibook to new MacBook Pro using Time Machine after establishing admin account. I now have two admin. accounts and wish to delete the later one and transfer files manually. I am worried I will loose both accounts. ??

I have chosen to fil migrate from old ibook to new MacBook Pro using Time Machine after establishing admin account. I now have two admin. accounts and wish to delete the later one and transfer files manually. I am worried I will loose both accounts. ??

Use the Office for Mac and ignore using Parallels for that. If you have PC only apps you have to run that are MS Windows only then consider Parallels. Just transfer your main PC, using Migration Assistant. If you don't know how then simply read over Pondini's article called Lion or Mountain Lion Setup Assistant tips and look for the section on migrating from a PC. Millions have done what you are about to, it's far from leading edge these days, if you go to an Apple Store to purchase they will offer this as a service, something you might be interested in.

Time Machine for shared group folders

Hi,
I would like to set up time machine for a shared group folder on the server. I would like users to be able to use time machine from clients to see backup history of files in the group folder. Is this possible? How?
Gregor

+...would like users to be able to use time machine from clients to see backup history of files in the group folder. Is this possible? How?+
Yes. This is possible, but it isn't touted as one of the features that sells Mac OS X Server. The advertised Time Machine server solution is to host an AFP share point on the Mac OS X Server system which clients then use as a Time Machine backup destination, similar to Time Capsule.
But, what I think you're going for is something like this: You have a share point where multiple users can read and write, and you'd like the server to be able to backup that share point via Time Machine, but also allow its clients to connect and see those backups. This is kind of like "Time Machine for a sharepoint." Again, this isn't really touted, but it's possible. Here is an example which shows you how.
For starters, let's say that your server's disks are well-organized. You have one volume for the server's operating system (Boot), one volume for the share points (Data), and one volume for backup (Backup). Other scenarios could work, but this configuration will make this how-to easier to understand. Let's also agree that your server's hostname is junglecat.amazon.private.
Let's say that the share point (group folder) that we want backed-up is at /Volumes/Data/Group-Folder on the server. Let's also agree that your group members already have access to this folder - e.g. it is already a share point with an ACL entry that grants the group members read and write access.
You'll need to configure Time Machine on the server itself first, just as if it were a client. Open System Preferences, and use the Time Machine pane to choose the Backup volume as the server's backup destination. You'll want to make sure that only the contents of the Data disk (the disk housing the Group-Folder) are backed up. Skip anything on your boot disk, as you're using Time Machine to back up just the share points. Let the server at least start its first backup, which will create the following directory:
/Volumes/Backup/Backups.backupdb/junglecat.amazon.private
...where the server's Time Machine backups will be stored.
Now use Server Admin's File Sharing section to make the /Volumes/Backup disk a share point, with these properties: Share the folder via AFP, and enable it as a Time Machine backup destination. (Your clients will not really be backing up to the folder, but they will be needing to see it as a place that Time Machine can keep a backup. This creates the .com.apple.timemachine.supported file on the share point.)
It's also a good idea to disable guest access and add an ACL deny rule to the share point (/Volumes/Backup) which denies delete and delete_child for everyone:
chmod +a "everyone deny delete,delete_child" /Volumes/Backup.
This prevents people from storing other data next to the Backups.backupdb folder. The Backups.backupdb folder already contains an ACL deny rule that limits its access to read-only.
Back on a client, mount the newly-shared Backup share point. The client's Time Machine may ask permission to use this as a backup location (because it was defined as such), but don't let it. The important thing is that the client recognized it as a backup location.
To browse the server's Time Machine history, the client must right-click on the Time Machine icon in the Dock (or use the Time Machine menu extra) and choose "Browse Other Time Machine Disk," where the user can choose the server's backup volume. Now the client can go back in time on the server, star-field and all. If the user needs to restore a file, Time Machine will ask him/her where to save the restored copy; it will not overwrite the copy on the Group-Folder share point.
Hope this helps!
--Gerrit

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

On imac 10.6.8 using current version of Aperture. How can I access the Aperture Library on my external hard drive that I use with time machine for backup? I can only access the application but not the library..

On imac 10.6.8 using current version of Aperture. How can I access the Aperture Library on my external hard drive that I use with time machine for backup? I can only access the application but not the library..

Go into Time Machine (the program not the bundle on the extrnal disk) and using Time Machine's browser go to the Folder where the library lives. You could look in the library bundle in Time Machine but that won't really tell you much,
If you want to make sure it truely has backed up your library you will need to restore it and open the restored library with Aperture.
If all this still has you confused you need to read up on Time Machine in order to get a feel for how it works, for what it is doing and for how to restore files from it.

How to restart base station from airport utility? I used to be able to do it remotely I currently use a Mac Pro 10.8.4 and have a time machine for wireless 6.3 (630.34). Sometimes I cannot connect to the internet and use network preferences to diagnose t

How to restart base station from airport utility? I used to be able to do it remotely
I currently use a Mac Pro 10.8.4 and have a time machine for wireless 6.3 (630.34). Sometimes I cannot connect to the internet and use network preferences to diagnose the issue. This results in being told to restart the wireless. The airport utility includes the drop down option of restarting but is not clickable so I can't choose it.
With my prior macbook and same time capsule, etc if i had problems connecting to the internet I would run network diagnostics to help out. This included clicking on the airport utility ---> base station --> restart. This worked most of the time.
Bottom line, is there something I am missing in not being able to restart the wi-fi remotely? ]
Thanks in advance

You are likely forgetting a step.
Open AirPort Utility
Click on the Time Capsule icon
Click Edit in the small window that appears
Now click the Base Station menu.....top of the screen....not the Base Station "tab" in the center of the screen
Click Restart

Time Machine for multiple macs - NAS or DAS attached to my iMac, which I then share?

Greetings
I currently have three macs - MBA, MBP and an iMac (newest generation). I'd like to use Time Machine for all of them.
Is it better to set up a NAS for Time Machine or can I use DAS that I woudl share (external HDD) attached to my iMac if they are all on the same network?
Also, is there any need for something like a Drobo or an external RAID array, if it's mostly for backing up and not for video editing? It would be used as a mnusic server to some degree. I've used a Drobo in the past (2nd gen) and find that I've spent a lot of time troubleshooting and fiddling with it over the years.
Thanks,
John

I am looking to add a Seagate NAS TM compatible to my network. I have 8 TB of storage w multiple Macs that I would like to backup to a NAS device.
Any advice would be welcome.
http://www.seagate.com/external-hard-drives/network-storage/business/business-st orage-8-bay-rackmount-nas/

Our iMac (intel, 11.2) freezes up when using Time Machine for Back Ups. We have 16GB of RAM and the BU drive is 1 TB on firewire.

Our iMac (intel, 11.2) freezes up when using Time Machine for Back Ups. We have 16GB of RAM and the BU drive is 1 TB on firewire.

See Pondini's TM FAQs for starters.

I needed a 2tb hard drive for my new iMac whats the best to work with time machine for around £100

Any suggestions about the best 2 tb hard drive to work with my imac,compatible with time machine for around £100

There is no such thing as "best" and "inexpensive", you either want one or the other but you cannot get both. IMHO I'd recommend OWC's Mercury Elite Pro (www.macsales.com) however because you are on the other side of the pond you may want to consider a Lacie product. High quality, not cheap but good stuff for the most part.

HT2497 Using Time Machine for home wifi just fine. Switched to cable modem from DSL. Now having trouble connecting laptops to wifi. ISP says it is not their fault. Mac books won't connect on their own.

Changed from DSL to cable modem. Now Mac book pro won't connect to wifi - Time Machine?
One Mac ok, other not. Help?

Thanks. We have been using an existing Time Machine for wifi. Cable modem replaced DSL router and was hooked up to Time Machine. What's odd is that 3 computers and iPad2 are connecting to home wifi just fine, using exact same network and password as before. My Mac book pro and an older iPad are not. IPhones are also connecting to home wifi just fine. I managed to get my Mac book pro hooked one time by copying ip address from a Mac that was working (entered manually) then turning that one off. That's not what I need.
The error message is "no ip address".

Outlook Connector shared calendar lookup doesn't work for non-admins

First the version info:
JMS 6.2-8.04, Directory Server 5.2, Connector 7.2.402.1
Non-admin users are not able to retrieve a list of users from the GAL with Outlook Connector. I, as an admin, do get the list. Here is the the access log for a non-admin user. Note that in the RESULT, nentries is always zero.
mwilson=535258100062018 (non-admin)
-bash-3.00$ grep -i "conn=425940" access.20080923-112603
[23/Sep/2008:11:37:25 -0700] conn=425940 op=-1 msgId=-1 - fd=93 slot=93 LDAP connection from 209.152.33.8 to 10.10.3.3
[23/Sep/2008:11:37:25 -0700] conn=425940 op=0 msgId=1 - BIND dn="uid=535258100062018,ou=people,o=pcc.edu,o=cp" method=128 version=3
[23/Sep/2008:11:37:25 -0700] conn=425940 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=535258100062018,ou=people,o=pcc.edu,o=cp"
[23/Sep/2008:11:37:25 -0700] conn=425940 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="cn mail uid objectClass"
[23/Sep/2008:11:37:25 -0700] conn=425940 op=1 msgId=2 - SORT cn
[23/Sep/2008:11:37:25 -0700] conn=425940 op=1 msgId=2 - VLV 1:1:1:0 2:19201 (0)
[23/Sep/2008:11:37:25 -0700] conn=425940 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
[23/Sep/2008:11:37:25 -0700] conn=425940 op=2 msgId=3 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[23/Sep/2008:11:37:25 -0700] conn=425940 op=2 msgId=3 - SORT cn
[23/Sep/2008:11:37:25 -0700] conn=425940 op=2 msgId=3 - VLV 0:8:0:0 1:19201 (0)
[23/Sep/2008:11:37:25 -0700] conn=425940 op=2 msgId=3 - RESULT err=0 tag=101 nentries=0 etime=0
[23/Sep/2008:11:39:26 -0700] conn=425940 op=3 msgId=4 - UNBIND
[23/Sep/2008:11:39:26 -0700] conn=425940 op=3 msgId=-1 - closing - U1
[23/Sep/2008:11:39:26 -0700] conn=425940 op=-1 msgId=-1 - closed.
Next, I followed the steps outlined in http://docs.sun.com/app/docs/doc/819-5200/gbnse?l=en&a=view&q=shared+calendar+ldap+lookup.
I set service.wcap.userprefs.ldapproxyauth = "yes"
I have the ACI entries as specified in that document.
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow Calendar administrators to proxy - product=ics,class=admin,num=2,version=1";
allow (proxy)(groupdn = "ldap:///cn=Calendar Administrators, ou=Groups, o=cp");)
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;
acl "Allow Calendar users to read and search other users - product=ics,class=admin,num=3,version=1";
allow (read,search)
(userdn = "ldap:///uid=*,ou=People,o=pcc.edu,o=cp")
The only oddity I see is that the ACI entries are not passed down to the next directory levels.
Any thoughts?
David.

I reviewed the document and I believe the VLV browsing indexes are setup and functional. I've also checked the ACI entries and they look correct. (The document doesn't mention the ACI entries for proxy authentication.) As I said, an admin user can retrieve names from the GAL, a non-admin user cannot. The only difference in the access log is the returned nentries value.
./ldapsearch -h vmpt1 -p 389 -D "uid={uid},ou=People,o=pcc.edu,o=cp" -w {passwd} \
-b "ou=People,o=pcc.edu,o=cp" -x -s "sub" -S "cn" \
-G "1:1:dpelinka" "pdsRole=Employee" uid
results for admin user
-bash-3.00$ grep "conn=838261" access
[25/Sep/2008:14:30:30 -0700] conn=838261 op=-1 msgId=-1 - fd=165 slot=165 LDAP connection from 10.10.3.5 to 10.10.3.3
[25/Sep/2008:14:30:30 -0700] conn=838261 op=0 msgId=1 - BIND dn="uid=311914191753070,ou=People,o=pcc.edu,o=cp" method=128 version=3
[25/Sep/2008:14:30:30 -0700] conn=838261 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=311914191753070,ou=people,o=pcc.edu,o=cp"
[25/Sep/2008:14:30:30 -0700] conn=838261 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[25/Sep/2008:14:30:30 -0700] conn=838261 op=1 msgId=2 - SORT cn
[25/Sep/2008:14:30:30 -0700] conn=838261 op=1 msgId=2 - VLV 1:1:dpelinka 4799:19235 (0)
[25/Sep/2008:14:30:30 -0700] conn=838261 op=1 msgId=2 - RESULT err=0 tag=101 nentries=3 etime=0
[25/Sep/2008:14:30:30 -0700] conn=838261 op=2 msgId=3 - UNBIND
[25/Sep/2008:14:30:30 -0700] conn=838261 op=2 msgId=-1 - closing - U1
[25/Sep/2008:14:30:30 -0700] conn=838261 op=-1 msgId=-1 - closed.
results for non-admin user:
-bash-3.00$ grep "conn=839346" access
[25/Sep/2008:14:32:47 -0700] conn=839346 op=-1 msgId=-1 - fd=226 slot=226 LDAP connection from 10.10.3.5 to 10.10.3.3
[25/Sep/2008:14:32:47 -0700] conn=839346 op=0 msgId=1 - BIND dn="uid=299899598658566,ou=People,o=pcc.edu,o=cp" method=128 version=3
[25/Sep/2008:14:32:47 -0700] conn=839346 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=299899598658566,ou=people,o=pcc.edu,o=cp"
[25/Sep/2008:14:32:47 -0700] conn=839346 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[25/Sep/2008:14:32:47 -0700] conn=839346 op=1 msgId=2 - SORT cn
[25/Sep/2008:14:32:47 -0700] conn=839346 op=1 msgId=2 - VLV 1:1:dpelinka 4799:19235 (0)
[25/Sep/2008:14:32:47 -0700] conn=839346 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
[25/Sep/2008:14:32:47 -0700] conn=839346 op=2 msgId=3 - UNBIND
[25/Sep/2008:14:32:47 -0700] conn=839346 op=2 msgId=-1 - closing - U1
[25/Sep/2008:14:32:47 -0700] conn=839346 op=-1 msgId=-1 - closed.

New IR's not appearing in Views for non-admins

We are in pre-production testing for SM 2012 SP1. We only have a few user roles beside the built in roles. We have a 'standard' group
which has access to just about everything except for sensitive items relating to user termination, legal, etc. We have a group which can see those sensitive items, and then we the built in administrators. <o:p></o:p>
When non-admins create an IR or SR, it sometimes takes up to 5 minutes for the item to show up a custom “all open incidents”
view, or in a custom “my incidents” view. In a few isolated cases, the work item did not appear for over an hour. However, admins can see all of these work items immediately in any view that should, by criteria, be displaying it.<o:p></o:p>
What would cause a work item to display immediately in all appropriate views for admins, but not for non-admins?<o:p></o:p>

Sorry for the delay in updating. Our management team got very frustrated with the performance and nearly killed the whole project. I got them to give SM another chance with R2, hoping that some of issues would be resolved. This issue was
not resolved.
So, I have continued testing. I cleaned up our Queues, so we only have 4 now in the Queues list. When I open the properties of the our custom user role, the Queue section displays our 4 queues, plus one called Work Item Group from the System
Work Item Library. I started with selecting just 1 Incident queue, for this user role. I created a new IR as this user, and it took nearly 15 minutes for the IR to appear in the view.
I then modified the user role and selected the "All work items can be accessed" radio button. I created another IR and it appeared in the view immediately. Now, this is where it gets interesting. I went back to the user role and set it
back to display a single queue, and the IR disappeared from the view. It didn't appear again for another 10 minutes.
The queue that is this IR should be assigned to is quite simple. Right now, I want it to display all incidents. It is not looking at an advanced class, just incident. Initially, I did not upt any criteria on it at all. I then tried
setting it to just Active Incidents, and still the IR's takes 10-15 minutes to appear.
I still don't understand what an aggressive queue is. Does my queue sound 'aggressive?' The view is looking at Incident (typical), not advanced. I don't see any obvious problems in the Workflow Status section of the Admin pane. What
should I be looking for next? I need to have the ability to filter queues by user roles, but it will cripple productivity if new IRs do not appear for 10-15 minutes.

Allowing Shockwave Player to run for non-admins

Hi all, I see the following problem on and off for years now, with Adobe Flash and in particular Adobe Shockwave Player.
I have a school that has a Windows 7 lab. Shockwave Player 11.6 is installed as part of the base image. It shows up in "Programs and Features"
After it was initially installed, I tested the plug-in by going to http://www.adobe.com/shockwave/welcome and it worked fine.
The problem I'm having is with non-admin users. Our students aren't local admins. Say they go to a website that has Shockwave content, for example, http://www.pbs.org/wgbh/aso/tryit/dna/index.html
When I (with a non-admin student account) click on the link to play the Shockwave content, a pop-up window appears. Then IE 9 displays a message "This webpage wants to run the following add-on: "Adobe Shockwave Player 11.6" from Adobe Systems Incorporated. Allow/Allow for all websites?" I don't want to see this again, so I click Allow for All websites. Then I get another window: "Adobe Shockwave Player is now installing....Installing compatibility components." So far, so good. The problem is, once the installation progress bar gets to the end, Windows User Access control pops up prompting for an admin user account and password to complete the install. Since they don't have an admin account, the install can't complete.
How do I get Shockwave Player to "just work" for non admin users? I see for Flash there is this document at http://forums.adobe.com/thread/987370 about registry permissions, etc. Is there a similar solution for Shockwave Player?
Please help, thanks,
Sir_Timbit

If SW is trying to install compatibility components, be sure to run the full installer before creating your base image

Time Machine for non-admins

Similar Messages

Maybe you are looking for