Two policies which one is enforced
Win7 64 bit using 11.2.3a pushing policies via Zen. I have a policy that is
restrictive assigned to a folder that generic login for students live in. I
have a unique login for a user that I directly assigned a less restrictive
admin policy to that is in the same folder. These users live in eDirectory.
when checking the properties of ZCM under policies both the restrictive and
less restrictive both show success. Unfortunately the more restrictive
policy that the user is inheriting from the folder level is what is being
enforced. My question is does a more restrictive inherited policy have
precedence over a directly assigned less restrictive policy? Is this proper
behavior?
Thanks. That’s probably the issue. The admin policy is an open policy that
probably as you say is not expressly enabling the disabled features that the
restrictive policy is closing. I'll check it out. Thanks.
"CRAIGDWILSON" wrote in message
news:Qopev.1828$[email protected] .com...
Make sure the Less Restrictive Policy Explicitly Removes any Restrictions.
"Unset" is the default and will not over-ride a previous Enable or Disable.
You need to Explicitly set it to "Enable or Disable" to override.
Alternately, if this is a user assigned policy, you could set a system
requirement such as "Logon Name" <> "HelpDesk", then the restrictive
policy would not apply in the 1st place.
However, for schools i generally would prefer a Student Accessible
device be locked down by default, and then unlocked via a policy that
grants rights. Just too many hackers who can figure out how to
interrupt the policy application process when a device is unlocked by
default.
On 5/19/2014 9:58 AM, CCPS wrote:
> Win7 64 bit using 11.2.3a pushing policies via Zen. I have a policy that
> is restrictive assigned to a folder that generic login for students live
> in. I have a unique login for a user that I directly assigned a less
> restrictive admin policy to that is in the same folder. These users live
> in eDirectory. when checking the properties of ZCM under policies both
> the restrictive and less restrictive both show success. Unfortunately
> the more restrictive policy that the user is inheriting from the folder
> level is what is being enforced. My question is does a more restrictive
> inherited policy have precedence over a directly assigned less
> restrictive policy? Is this proper behavior?
Craig Wilson - MCNE, MCSE, CCNA
Novell Technical Support Engineer
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
Similar Messages
-
Two iphones: which one sends the SMS in Messages?
I have two iphones with different phone numbers, both logged into the same AppleID. Messages works fine and all messages are synced across all devices.
Question:
When I originate a new SMS (not iMessage) from the Mac app Messages, is there any kind of control which device actually sends it respectively which one will be used?
DominikHI,
I see.
The same settings as the iMessages one then (I presume there is not a separate SMS one ?)
This has always worked as you described for iMessages.
You can Set the device (iPhone number or Apple ID ) that the Mac Version should "Start Conversations From".
You can also set similar on the iPhones.
However as you say if an iMessages is sent to a specific iPhone Number that iPhone will return an iMessages using that Number (if you answer it on the Mac it will start the conversation as if it is that number) effectively ignoring the settings made.
Only brand new iMessages follow the Settings/Preferences.
8:05 pm Wednesday; March 4, 2015
iMac 2.5Ghz i5 2011 (Mavericks 10.9)
G4/1GhzDual MDD (Leopard 10.5.8)
MacBookPro 2Gb (Snow Leopard 10.6.8)
Mac OS X (10.6.8),
Couple of iPhones and an iPad -
Tamron 17-50mm 2.8 has two profiles, which one to use?
Hello
Well my Tamron lens loads in Camera Raw since the latest update, but there are two and by the description sound like the identical lens...
Make: Tamron
Tamron SP AF 17-50mm f/2.8 XR Di II LD (raw)
Profile: Canon 40D (I have an XSi / 450D)
Make: Tamron
Tamron SP AF 17-50mm f/2.8 DiII A16E (raw)
Profile: Adobe
So what's the difference between these? Camera Raw chooses the Adobe one. Lens Correction leaves me both options because they both match the image sensor size. Is the Adobe one from forum users and the Canon one from Canon?
ThanksThe one profile with the "Adobe" name in it is the official Adobe profiles. They were created in collaboration with Tamron from the lens design data. The other one is created via the normal calibration method using ALPC on a Canon 40D camera.
You could locate the specific profile on the file system by selecting the profile in PS CS5 lens correction filter and go to the flyout menu Show in Finder/Explorer. You could delete the profile that you don't need or simply put a '~' prefix to the lens profile file name. And PS CS5 will ignore loading the profile the next time.You could also do this to a len profile folder name so that the entire folder is skipped for profile scanning.
-Simon -
Two entries found in TFS DB for one user, how do I know which one to remvoe?
We had issue with an account that TFS reported to there are multiple users with the same display name. I searched the database and found two entries with the same 'displayname'.
First weird thing is that the account names are only different in some letters with or without capital (exactly "SIvakhno" and "sivakhno"), I thought TFS (and Microsoft) is not capital sensitive, right? Why does it consider the two accounts
are different?
My next question is, if I want to remove one to solve the 'multiple user' issue, which entry should I remove from the database? They have different 'Sid', 'Id', 'AccountName' (as above), 'UniqueUserId' (1 and 0, respectively), 'LastSync', 'SequenceId', all
the other fileds are the same in the table.
ThanksHi Peter,
Thanks for your reply.
There’s two users existing in your TFS Server databases, one is Slvakhno and another one is sivakhno, and they have different SID and Login name in your TFS database, right?
What’s the login names of these two users, which one’s Login name is D_Name\sivakhno2, and which one’s Login name is D_Name\sivakhno?
TFS recognize the user using SID value, every user has the unique SID value in AD although they may have the same display name. If the Slvakhno and slvakhno users have different SID value in TFS database, TFS will think they two different users. But you
received the same SID value for the Slvakhno and slvakhno users after executed the tfssecurity /imx command line, that’s an issue in this scenario, please use these two users’ login name value in the tfssecurity /imx command line, then check the SID result
again.
You said it shows the same display name for D_Name\sivakhno2 and D_Name\sivakhno users after execute the tfssecurity /imx command line, which same display name shows in result?
According the D_Name\sivakhno2 False False result, TFS Server think this D_Name\sivakhno2 is not available, please check this D_Name\sivakhno2 user in your AD, ensure it’s available and check its SID value, compare it with value
in database.
For the change user’s display name will affect other AD groups issue, please contact AD experts for the better response.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey. -
I have a 3 year old MacBook Pro with MAC OSX 10.6.8, iPhoto ’09 version 8.1.2 and have downloaded two software programs: one is Aperture 3.2 and the other is Photoshop Elements 9 (which I got from a friend who didn’t need it).
I am totally happy with the way iPhoto organizes my photos and how I can work with iMovie to create slide shows with music from iTunes, etc.
I have been shooting mostly high resolution jpegs and I continue to learn more and more about photography, post processing etc. I realize that the small adjustments I can make in iPhoto are good, and are adequate most of the time. However, a have started to experiment with shooting RAW images and would like to go the next step, ie. post processing.I am totally technically challenged and need SIMPLE, INTUITIVE programs and am certainly NOT anywhere ready for Photoshop CS whatever!
After having these programs sit on my computer, I decided to try to see if I could figure them out. When I opened Aperture, this is what first comes up.
“Welcome to Aperture 3.2
Your library needs to be upgraded to work with this version of Aperture. Once upgraded, you will not be able to use this library with previous versions of Aperture.
Upgrading a library from previous versions of Aperture 3 generally takes a few minutes or less, though larger libraries will take longer. After that, Aperture 3.2 will upgrade your library's thumbnails, but you can use the application during that time.
Tip: To open a different library, quit Aperture and hold the Option key down while starting Aperture
Current Library Location:
Jadzia (home) -----Pictures------Aperture Library
QUIT UPGRADE”
I have heard horror stories about moving your entire library to Aperture, ending up with 2 libraries, etc. etc. hence my previous reluctance in attempting Aperture. In addition, many of my photography friends are saying: Go with Lightroom 3.....you’ll love it!
So here is my dilemma. I don’t want to mess around with my iPhoto library. All I want to be able to do, is to isolate a few photos, export them to Aperture, Elements, and work on them there, then bring them back into iPhoto.
Can I do this? Should I forget about Aperture and Elements and look at purchasing yet another program like Lightroom?Export those few photos via the File ➙ Export ➙ File Export menu option with Kind = Original to the Desktop. Then import them into the Aperture library. That would keep one copy in your iPhoto library and another in your Aperture library to edit, etc.
You can use Photoshop Elements 9 from within iPhoto as your editor of choice. However, if you edit a raw file in iPhoto with PSE9 the resulting edited version must be saved outside the iPhoto Library and imported back in as a new file. For editing jpegs just do a Save (not a Save As) and it all will be kept within iPhoto.
Using Photoshop or Photoshop Elements as Your Editor of Choice in iPhoto.
1 - select Photoshop or Photoshop Elememts as your editor of choice in iPhoto's General Preference Section's under the "Edit photo:" menu.
2 - double click on the thumbnail in iPhoto to open it in Photoshop. When you're finished editing click on the Save button. If you immediately get the JPEG Options window make your selection (Baseline standard seems to be the most compatible jpeg format) and click on the OK button. Your done.
3 - however, if you get the navigation window
that indicates that PS wants to save it as a PS formatted file. You'll need to either select JPEG from the menu and save (top image) or click on the desktop in the Navigation window (bottom image) and save it to the desktop for importing as a new photo.
This method will let iPhoto know that the photo has been editied and will update the thumbnail file to reflect the edit..
NOTE: With Photoshop Elements the Saving File preferences should be configured as shown:
I also suggest the Maximize PSD File Compatabilty be set to Always. In PSE’s General preference pane set the Color Picker to Apple as shown:
Note: to switch between iPhoto and PS or PSE as the editor of choice Control (right)-click on the thumbnail and select either Edit in iPhoto or Edit in External Editor from the contextual menu. If you use iPhoto to edit more than PSE re-select iPhoto in the iPhoto General preference pane. Then iPhoto will be the default editor and you can use the contextual menu to select PSE for your editor when desired.
OT -
I accidentally set up two accounts. One account with my old e-mail address which I've been using for years and has all of my purchases on it. Now I have a new account with my current e-mail address. How do I disable this new account? I need to disable the new e-mail address account so that I can add it as an additional e-mail to my old account. THEN, how do I make this new e-mail address my primary e-mail for this old account?
Did yoo go to Settings>iTunes and App Stores and sign out and sign back in?
Next see:
Frequently Asked Questions About Apple ID -
If I have two or more iTunes Libraries on one computer, how do I know which one is opening when I click on the iTunes icon on my desktop?
You cannot.
When you sync to a new library, it will erase the current content.
Use your backup copy of the old computer to copy everything to the new one. -
Two graphics card on macbook pro which one do I use?
I have two graphics cards on my macbook pro. ADM random 6490m (256mb vram) and Intel HD graphics 3000 (512mb vram). My question is which one should I use? I don't do any hardcore gaming or photoshop. I guess that I am just looking for the best display and least buffering if that even has anything to do with the graphics card. I just want to get the most out of my macbook. I appreciate any advice. Thank you.
Your MBP more or less chooses which graphics card to use automatically. In System Preferences>Energy Saver, check Automatic graphics switching. When it's checked on, it will use the higher power and higher quality dedicated AMD 6490 when you're plugged into the wall, and uses the Intel 3000HD when on battery.
I have downloaded gfxCardStatus to give me more control over which graphics card to use. There are times I might want the AMD while on battery, even though it runs hotter and uses more battery life.
Either card will do well with HD movies, though I notice a lot more artifacts with the Intel 3000 when the movie has a lot of action or explosions or sounds. If you want to do hardcore gaming, you need the AMD of course. Photoshop is more dependent on the central processor rather than the graphics card, so I'm not sure you'd have much issue using either one. -
I want to purchase a two terabyte external hard drive to utilise Time Machine on my new iMac....but which one? Western Digital, Time Capsule, Seagate? Any advice would be most welcome please. Thanks Phil
If you are looking for high quality drives and enclosures I'd recommend these 3:
http://g-technology.com/products/g-drive.cfm
http://www.lacie.com/us/products/product.htm?id=10330
http://eshop.macsales.com/shop/firewire/1394/USB/EliteAL/eSATA_FW800_FW400_USB
I use the LaCie's, I've got three connected to my system and a 4th acting as my TM drive on my MacBook Air. Any of the above would be welcome on my desk though. -
In Photoshop Elements 11 attempting to blend two photos (layering one on another) I click on brush and get a smart brush which doesn't do what the instructions say it will do. I can get the eraser to do what I want. Why the confusion???
I click on brush and get a smart brush which doesn't do what the instructions say it will do.
The Brush tool (Keyboard B) has several different brushes in the same slot. Right click on the brush icon and you will see them, or press B sequentially.
The Smart Brush tool (Keyboard F) has two items in the slot.
Since you did not provide reference to "the instructions", it is difficult to remedy the "confusion." that exists.
I suspect that the recipe calls for a mask, and painting with a black brush to mask out certain areas.
It would help if you post the instructions and what your goal is with more specificity. -
I recently deleted many duplicate files. In the midst of it my Itunes songs are not in Itunes. They are in two different folders. One under 'Music' in my ID. And two under a MyMusic file in Documents. How do I know which one to import?
Thanks, this is not an ideal answer but probably the most sensible one in my case.
I will try it unless someone has a better suggestion, but I'll wait a bit as it will take me a few days anyway (I had actually tried to create a new smaller playlist or download by album, but at this stage the music app is not letting me queue a list of songs for download - I think I will have to disable and re-enable iTunes match which will probably delete all the songs).
I have to say I am not very impressed with Apple here - having an online backup of all your data and beeing able to restore it to a new device easily was a strong selling point of iCloud. For music, they are Definitly not delivering at the stage. -
Two WRT610N Routers Which One to Keep, Which One to Return?
For Christmas I received two WRT610N routers as gifts. While the model number is the same they appear to be different versions, or at least in different packaging.
The first one is in an all blue box and is called N Ultra Range Plus Simultaneous Dual-N Band Wireless Router. UPC# 45883 58520.
The second one is in a blue box with a red banner on the front and a red side panel. On that box the router is called a Simultanteous Dual Band Wireles-N Gigabit Router. The UPC# is also 4583 58520.
Since I want to return one of them, I have not yet opened either box, so here are my questions:
Are these the exact same products?
Is one V1 and the other V2? How can you tell V1 from V2?
Is V2 better than V1 or is it just a firmware update to the same hardware?
If they are not the same product, which one should I keep and which one should I return?
Thanks for your help!I agree with richard - I didn't mention this in my last post
Unless you are in dire need of some other piece of equipment and can exchange the 2nd router for it - I would keep them both -- especially since Santa brought them and you have no actual cost ($$) in them
I maintain two different home networks and help 2 different business keep their small networks running -- I have a spare/extra router for 'each' of my home networks - and the two business' always has a spare router on hand - in case of an emergency
I'm not sure about your chipset question -- but I beieve you may be able to tell the version # by the S/N - google around to check on the S/N--Version question --- or ask Liknsys Chat -- it's faster than a phone call - http://www.linksysbycisco.com/US/en/chat -
If i have two option to select between XI or BW which one in better and why
if i have two option to select between XI or BW which one in better and why
both in terms of money and in terms of my career growth.......Sheetika,
XI if you are good in JAVA.The rest is same for both XI and BW.
K.Kiran. -
On my iphone 5 i have two iTunes ID, one is no longer in use, but keeps asking for a password which I no longer have, whilst the other is still being used. How do I delete the old ID?
Hello steveod2
The main thing to do is to sign out all services on your iPhone, like iCloud, iTunes & App Store, iMessage and FaceTIme. Check out the article below for more information.
iOS 7: If you're asked for the password to your previous Apple ID when signing out of iCloud
http://support.apple.com/kb/ts5223
Regards,
-Norm G. -
Why do I have two versions of lightroom on my desktop and which one should I delete/uninstall
Why do I have two versions of lightroom on my desktop and which one should I delete/uninstall?
Hi,
Lightroom 5.x and CC will be installed side by side. You may uninstall the prior version one you’re comfortable in the new version of Lightroom.
Lightroom CC/Camera Raw FAQ
Regards,
Sumit Singh
Maybe you are looking for
-
HP Laserjet 1020 problem with double-side printing
Hi, everyone! I have a problem with my printer HP laserjet 1020. From the community I know that there is no driver for 1020, but there is for 1022 (http://support.apple.com/kb/DL907). I installed it and everything was fine until I tried to print 2-si
-
theres no update in settings.... I go to iTunes n it doesn't have updates either.....how the **** do I update my software n my iOS to current standards.
-
Operating sparc with a graphics display but no keyboard
Is there a way to operate my sparc embedded controller without requiring the keyboard to be plugged in. The keyboard is used during installation; but, once configured it is impractical to leave the keyboard connected in my application. Our applicatio
-
BAPI to get the new pernr while hiring
Hi Guys, what is the BAPI/FM used to hire a new person and get the pernr created for that person?
-
Shopping cart having purchase organization problem
Dear Experts, We are working on classic sceanario with SRM 5.0 integrated with ECC 6.0. While creating shopping cart for direct material we are having an error message as "System SRDCLNT110 (SRM system) of purch. organization Central Purchasing (purc