User / Group Problem

WE run a 10.6.4 Server and have an issue with one user…
No matter what we do we cannot seem to get them be be part of a Group.
WE created a group and puut all Office members in the group…
All OK…
(This is using OD)
All services fine DNS Fine, mail fine wikis fine etc…
except for this one user who if we add them to the group they do not get the permissions….
Very Odd…. What could it be ?
If we use dscl to do this in terminal we get this error…
Data source (.) is not valid.

When you say "this User is in fact in the Test group" are you referring to the group created in the admin tool. If the same group Test is created in the presentation catalog which I think you did then when the first time the user logs in BI presentation services he would become member of the Test presentation catalog group. Make sure you check 'show all users and groups' to be able to see the user that logged in.

Similar Messages

  • User groups and permissions problem

    Hello everyone,
    I've been running Arch Linux for about a month now and I have noticed a few things related to permissions associated with user groups that annoy me. My user is part of the storage, wheel and network groups, amongst others. I can see this when I run the `groups` command. From what I could read on the Wiki, the storage group should allow me to mount/umount drives such as my USB key and my iPod when they are plugged in and access the files from my user account without using sudo. The network group should let me manage the network connection via ifconfig, iwconfig, etc. once again without using sudo.
    However, when I run iwconfig as my normal user, I get incomplete and inaccurate information. I get about 2 lines telling me essentially that I am not associated with any Access Point, which I clearly am. When I run it with sudo, I get the full information, including my Access Point's ESSID. iwconfig does not get the same data when run with and without sudo. Same goes with ifconfig. Also, I can not run dhcpcd or wpa_supplicant at all as a normal user.
    I get a similar problem with the storage group. I can not mount or umount drives without sudo and I can not write to mounted drives that I've mounted with sudo. This is particularly annoying when I try to manage my iPod.
    Does anyone have a clue what could be causing this?
    Thanks a lot

    I have searched Google and the Arch Wiki, have tried a lot of the suggestions from the forums, such as the 'how I beat policykit and hal' forum post.  Nothing seems to let me mount my drives.  I can see them in Nautilus, I click them but they don't mount.  I can do it as root.  It's really frustrating because I can't figure it out.  I haven't filed a bug report because I thought it was a problem that I was having.
    I haven't tried the iwconfig or network yet.
    This is pretty much the only thing holding me back from everything working.

  • HT4798 I'm seeing the above problem, how can i open "Users&Groups" if i can't login?

    I'm seeing the above problem, how can i open "Users&Groups" if i can't login?

    If the system is associated with an Apple ID, and you know that account password, the Apple ID can be used to reset your user account password.
    Otherwise, boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
    When the OS X Utilities screen appears, select Utilities ▹ Terminal from the menu bar.
    In the Terminal window, type this:
    resetpassword
    That's one word with no spaces. Then press return. A Reset Password window opens.
    Select your boot volume if not already selected.
    Select your username from the menu labeled Select the user account if not already selected.
    Follow the prompts to reset the password. It's safest to choose a password that includes only the characters a-z, A-Z, and 0-9.
    Select  ▹ Restart from the menu bar.
    You should now be able to log in with the new password, but you won't be able to unlock the Keychain. If you've forgotten the Keychain password (which is ordinarily the same as your login password), there's no way to recover it. You’ll need to reset your keychain in the preferences of the Keychain Access application.

  • Problems with user group

    Hi, i created a new user group with some administrative rights:
    Access Administration
    Advanced Document Submission
    Create Communities
    Create Community Infrastructure
    Create Folders
    Create Portlets
    Edit Own Profile
    Then, i created a user and added to this group.
    When i login with the user i created, the Administration Tab doesn't appear.
    Somebody can help me please.
    IT'S URGENT !!!!
    Thanks

    I thought access administration was all that was required. Did you get it resolved. Usually these things clear themselves up with time.

  • Mac book pro Users & Groups deleting problems

    I have a Macbook Pro, i believe its a 2008 15 inch, thats just come back from the repair shop.
    I added another user (through Users and Groups) changed the settings so that person was the admin and deleted the original user.
    Now after roughly an hour it is still saying that it is "deleting user" and if i try to close the window it says -
         "System Preferences is busy and can't be closed. Users & Groups preferences is removing a user account and saving the Home Directory to a disk image"
    How do i get about this? i do not want it frozen there, is that a way i can cancel all and start again or get it to hurry up and delete?
    Thanks

    You asked it to save the old User's files, and it is converting them to a Disk Image.
    What you asked for is complex, and it will take some time.

  • Problem with user group querys in transaction Ad-Hoc-Quey

    Hello experts.
    I have one doubt, i need to know how when I execute transaction S_PH0_48000510 (Ad-Hoc-Quey), like obtaining that by defect appear querys of a certain user group. I have tried with the user's parameters AQB, AQQ, AQW but nothing works. Can help me somebody?
    Thank you very much.
    Regards.

    Hi Marcos,
    Your approach is correct.  You set the User Parameters AQW for the Query Area (Standard or Global)AQB for the User Group and AQS for the Infoset.  This is set for each individual in their own User Parameter tab (System --> User Profile --> Own Data).  This will default the infoset and queries you want.  The first screen will appear blank as you enter Ad Hoc Query, but if you click on the Open Folder icon you will see the list of saved queries for that User Group and Infoset.  AQQ will give you a particular query every time.
    You must make sure the User is assigned to the User Group via SQ03. 
    Paul

  • HT3231 Problem with User & Group panel

    I cannot open the 'User & Group' panel.  I get Could not load Users & Groups preference pane."  How do I fix this?

    Launch the Console application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
    Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select
    View ▹ Show Log List
    from the menu bar.
    Click the Clear Display icon in the toolbar. Then try the action that you're having trouble with again. Select any messages that appear in the Console window. Copy them to the Clipboard (command-C). Paste into a reply to this message (command-V).
    When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.
    Please do not indiscriminately dump thousands of lines from the log into this discussion.
    Important: Some private information, such as your name, may appear in the log. Anonymize before posting.

  • Neat OAM Trick (showing users' groups), but a problem...

    Hi,
    I took an OAM class this week, and the instructor showed us a way to show users' group membership in User Manager.
    To do this, create a derived attribute for the inetorgperson attribute, e.g., named "ThisUsersGroupMembership", and configure it with:
    Self
    groupofuniquenames
    uniquemember
    Then, add the derived attribute to the user panel, and then go into User Manager and display an individual user's profile. The user's group membership should be displayed as the "ThisUsersGroupMembership".
    I thought that this was pretty nice, but I noticed that if I go to the User Manager's main page and customize it to display the "ThisUsersGroupMembership" attribute,
    the attribute name is shown, but no values are shown for that attribute.
    I'm trying to figure out why the values for the derived attributes are not being displayed on the main User Manager page, and also if it's possible to get that working?
    Thanks,
    Jim

    Jim,
    Yes even I am not able to list users. I did not understand what you were exactly pointing to in your earlier mail.
    This seems to be a bug with OAM but before we arrive at this conclusion. I think we should try and look at the xml response sent by OAM for search result. I am not able to recall how we can see the xml response in the browser. If you know then you can try and see if the Groups of the user are returned? If groups are returned then you will have to look at the stylesheet being used and modify it to display the groups.
    If groups are not fetched then it must be a bug with OAM.
    Thanks
    Preetam

  • Trash and user group help!

    why do i need to type in password when i delete things? how do i remove it?
    and i can't delete items directly from the dock as well. like opening from the downloads folder and dragging the file to trash. i have to bring open up Finder and delete from the folder directly.
    another issue is that am i able to remove the gues user from my start up screen? i've already disabled it from the user groups but i still see it in my login screen.
    one last problem, is it a norm to have current leakage for the MBP? i've been having frequent shocks from the 2 bottom corners of it when i plug it in to a power source. i bought it from an authorized retailer and using it in the country where i've gotten it from. i've just gotten my mbp about 3 weeks back.
    thanks for replying my queries!

    Hi,
    Yeah in ACS 3.1 its under the Shared Profile Components page. In ACS 4.1 its directly under the user groups or under SPC page.
    You need to check the box for "define ip based access restriction" and deny access for all other groups to the wireless access points network device group.
    ACS 3.X)
    1. Denied Calling/Point of access restrictions
    2. AAA Clients =UPS_PDU (Power Supplies)
    3. Port = just put a * for all
    4. Src IP address = just put a * as well
    SUBMIT to SAVE
    Create a second one for the other group like so:
    1. Denied Calling/Point of access restrictions
    2. AAA Clients =Routers_Switches
    3. Port = just put a * for all
    4. Src IP address = just put a * as well
    Click submit to save it.
    Go to the ACS User groups section and select the Network Administrators Group " that don't need access to the UPS's" and apply the NAR you created to that group. Do the same for the other grouping.
    (ACS 4.X)
    Go directly under the "user groups" and create the NAR under there. No need to go under the Shared Profile Components section
    Hope this helps and let me know if you need further assistance or explanation.
    Craig

  • How to find user group from tcode

    Hi Experts,
    I have custom tcode from this i found report name as AQIDSYSTQV000001SD_RR_03======
    I am unable to find Queryname in SQ01 from this.
    When i saw some of the forums i  understood that IDSYST is the user group for my query but i am unable to trace such user group in SQ01.
    Please guide me how to find user group for my report
    Thanks&Regards,
    narasimha.

    Hi ,
    I found in table AQGQSTRUC but i didnt find the specified query
    Previously 401 client is there but at present it is not there .How can you justify it that it is 401 client.
    As 401 client data is moved to someother client is it the problem why i am not able to find query??
    Thanks&Regards,
    narasimha.
    Edited by: narasimha02 on Dec 7, 2010 9:54 AM

  • Populating the user group instead of the group ID in MFA

    Hello all,
    I am trying to Populate the user group instead of the group ID in MFA. I want to use this to create authorization permissions, after authentication. I am running into the problem of not getting any info after authentication in the attribute dump.  Are
    there settings that I can change in order to Populate the attribute dump? are there settings that I can change to get all of the groups that each user is in?
    Thanks,
    Levi Williams
    IT professonial
    Intern

    Hi Levi Williams,
    Thanks for posting here!
    Refer to the solution in this  thread link:
    https://social.msdn.microsoft.com/Forums/en-US/df060757-8190-4083-a162-0876cd4b8d15/group-based-radius-return-attributes?forum=windowsazureactiveauthentication
    Additional reference:
    http://www.rdsgurus.com/uncategorized/step-by-step-using-windows-server-2012-r2-rd-gateway-with-azure-multifactor-authentication/
    Hope this helps!
    Regards,
    Sadiqh

  • HELP - Modify user group by bulk un CUCM 8.6

    Hi guys,
    I am having problem by update/modify user group on CUCM.
    There are already some users within user group with admin privileges. That should be changed, so I created a group with some privileges and then I tried to change the usergroup by bulk. but the bulk ADDS the usergroup to the correct and maintain both.
    After that I decided to have 2 rows, for the same user, one for the group with empty space (to delete it), and another with the new usergroup. But CUCM does not either do that. it sills maintain the user group..
    Does anyone has successfully changed the user group by bulk?
    I will appreciate your advices.
    Update Users - Custom File
    Begin Time : 04/29/2015 13:46:41
    Query :
    Update Users in CUCM_1L_Template.csv
    Failure Details :
    users Error Code Error Description
    ******** NO ERROR FOUND ********
    Result Summary :
    UPDATE for 2 USERS passed.
    UPDATE for 0 USERS failed.
    End Time : 04/29/2015 13:46:41
    Kind Regards.
    Juan Gerardo Hernandez
    CCNP Voice

    That's correct, what you're seeing is WAD, this topic has been discussed plenty of times before, the only option you have is SNR

  • TFS says {oldaccount} is not a member of the Team Foundation Valid Users group, but I am

    I'm trying to check in changes to TFS using VS2013. When I hit the submit button, TFS returns the following error, "TF14002: The identity {domain} \ {oldaccount} is not a member of the Team Foundation Valid Users group."
    Background: my account name has been changed to {newaccount} from {oldaccount}.  And when the sys-admins changed my account name they did not update my computer itself, so I'm still using C:\Users\{oldaccount}. I can't believe that would make a difference
    but you never know....
    When I first started working at this company I'm almost certain I set up my TFS Workspace with my old account. But I thought I deleted all that stuff related to my old account and reset everything to my new account (Workspaces and TFS server). My lead tech
    has even shown me the account mgmnt screen with my new account name. And I've been able to check out items with my new account name.
    I performed the following steps to try to "clean out" TFS:
    • I copied all of my changed files to a back-up location.
    • I undid all changes in TFS (note that TFS has been allowing me to check out files to edit).
    • I deleted the TFS entry in Credential Manager per a suggestion online.
    • I deleted my Workspace.
    • I even deleted my TFS server.
    • I Rebooted my computer.
    • I reconnected to the TFS server.
    • I rebuilt my Workspace.
    • I restored my changed files from my back-up location.
    At this point I tried checking-in my changes again but got the same error message as above.
    Next, I deleted everything in this folder:
    C:\Users\ ...\AppData\Local\Microsoft\Team Foundation\5.0\Cache
    ... but I'm still seeing the error.
    Also, we'd been informed that a number of us need to downgrade from "Ultimate" to "Professional".  I did my downgrade to VS2013 Pro (after the steps above) but I am still seeing the same error.
    A comment on another question
    here suggested that I shelve my changes without preserving changes locally, then un-shelve and attempt to check-in.  This also did not work, I could shelve my changes and un-shelve, but doing so did not fix the original problem.
    Note that I do NOT have access to the TFS server itself - much less permissions to perform any sort of admin on it (and I don't know the person who would) - but might there be a table in the TFS database that still has an entry for my old account that could
    be joining to my computer name &/or new account name when TFS goes to look up my account info when I check in my changes? I am getting desperate for an answer!
    Any suggestions?
    Thanks,
    D. Kelley

    Hi D. Kelley,
    Thanks for the details. Based on your description, you might need to change or update the SID for users. Try identity command to change the username if you never use the new username in TFS. Check this page for more information about
    identities command in this
    page.
    You can also check the table "tbl_Identity" in the tfs_configuration database to see if the new user exists, or it has the old user. Another option is have a check on other machines to see if it works fine. Refer to links below for more information:
    https://social.msdn.microsoft.com/Forums/en-US/93568425-a877-4d21-8497-1adc4561b6d3/unable-to-check-in-code-to-tfs-due-to-tf14002-the-identity-old-user-name-is-not-a-member-of-the?forum=tfsversioncontrol
    https://social.msdn.microsoft.com/Forums/en-US/acc56859-624f-41bc-b698-cbb5e0b8f525/cant-check-in-code-the-identity-devoldusername-is-not-a-member-of-the-team-foundation-valid?forum=tfsversioncontrol
    Best regards,
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Restricting certain users groups to read only for certain folders

    Hi
    I'm not sure if this is the correct forum, but hey, hopefully someone might now the answer or direct me to the correct one.
    I'm writing a VB program to amend ACLs for specific user groups.
    Effectively, I make all prior year folders read only, whereas the default for the group is Modify, Delete etc.  This means they can continue to work in the "new year folders", but historic years is List/read only.
    I've got to the point the program does everything I want, i.e. stops folder creation7deletion, file & folder name changes, copying for the historic years, but does not prevent deletion of files in the folder.  Effectively I set Deny access on the
    historic folders.
    Testing using the Windows GUI would appear to resolve the problem is I change the Deny Special Permission (for the group) from "This folder only" to "This folder & files".
    Question then is how to I set this in VB, the default appearing to be "This folder only"
    Here's extract of my code
    Thanks
    IfvarDirectoryName.IndexOf("\"&
    Date.Now.Year) = -1
    Then
                FileAcl3.AddAccessRule(
    NewFileSystemAccessRule(GroupAdmin(0),
    FileSystemRights.Modify,
    AccessControlType.Deny))
                FileAcl3.AddAccessRule(
    NewFileSystemAccessRule(GroupAdmin(0),
    FileSystemRights.DeleteSubdirectoriesAndFiles,
    AccessControlType.Deny))
                FileAcl3.RemoveAccessRule(
    NewFileSystemAccessRule(GroupAdmin(0),
    FileSystemRights.ReadAndExecute,
    AccessControlType.Deny))
                FileAcl3.RemoveAccessRule(
    NewFileSystemAccessRule(GroupAdmin(0),
    FileSystemRights.ListDirectory,
    AccessControlType.Deny))
    Dim FileInfo3 As IO.FileInfo = New IO.FileInfo(varDirectoryName)
    Dim FileAcl3 As New FileSecurity
    If varDirectoryName.IndexOf("\" & Date.Now.Year) = -1 Then
    FileAcl3.AddAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.Modify, AccessControlType.Deny))
    FileAcl3.AddAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.DeleteSubdirectoriesAndFiles, AccessControlType.Deny))
    FileAcl3.RemoveAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.ReadAndExecute, AccessControlType.Deny))
    FileAcl3.RemoveAccessRule(New FileSystemAccessRule(GroupAdmin(0), FileSystemRights.ListDirectory, AccessControlType.Deny))
    FileInfo3.SetAccessControl(FileAcl3)
    End If

    Ho Rohn
    Your right, when I added the flags I got the following error at execution
    {"No flags can be set. Parameter name: inheritanceFlags"}
    I've developed a work around, which gives me exactly - subject to further testing - what I want.  I simply mark each file in the relevant folders with a Deny Delete option.
    I will however explore the DirectorySecurity class option, but initial review of the www seems a little shy on VB examples.
    Thanks
    Perry
    You should be able to use FileSecurity and DirectorySecurity the same way (they have identical methods). Since this is a scripting forum, I'll provide a PowerShell example (which is fairly close to C# and VB; they all use the exact same classes):
    $varDirectoryName = "c:\folder"
    $GroupAdmin = "Admin Group"
    $FileInfo3 = New-Object System.IO.DirectoryInfo $varDirectoryName
    $FileAcl3 = $FileInfo3.GetAccessControl()
    $FileAcl3.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule (
    $GroupAdmin,
    [System.Security.AccessControl.FileSystemRights]::Modify,
    ([System.Security.AccessControl.InheritanceFlags]::ContainerInherit -bor [System.Security.AccessControl.InheritanceFlags]::ObjectInherit),
    [System.Security.AccessControl.PropagationFlags]::None,
    [System.Security.AccessControl.AccessControlType]::Allow
    $FileInfo3.SetAccessControl($FileAcl3)
    I could have taken a lot of shortcuts when using the enumerations, but I think keeping it verbose helps show how similar the code can be.
    Does that make sense?

  • Issue with Migration of Users/groups in Essbase

    Hi,
    am trying to migrate the users specific to the application using Advanced option through Migration Wizard (EAS 716)..But i see the users with the application on old box and when i check it after migration, am not able to see the users related to that application..
    Moreover, i have copied the users specific to that application on old box into new box and after that tried of migrating the same application from old to new box...Even then am not able to see the users with application access..
    Is this the right approach which am following? or Kindly suggest me the best way of migrating users/groups...
    Thanks

    If you chose the advanced option, you should have no problem migrating users and groups along with the application. You probably may have omitted those groups or members from the list. When you migrate do not change anything except server, App and DB names.

Maybe you are looking for