User has system admin rights but...

hi
i have given another user System Administrator rights, but he cant view other users requests when he try to find requests, except his own
EBS 12.1.3 (2 nodes)
Windows 2008 Server Enterprise SP2 on both nodes
Regards

plz see notes by Hussein Sawwan
profile option is obsolete in R12

Similar Messages

  • File Vault Useless when Other User Has Full Admin Rights?

    Question:
    I'm about to send my MacBook Pro in for service. I've backed it up to a bootable clone, but I'd still rather not erase all my stuff, in case they send it back as-is (they do sometimes do that if they don't have to reinstall OSX).
    So, I've given the guest user account full admin privileges on this machine and created it without a password so the AppleCare boys can do what they need to do.
    My question is, is my account secure if it is password protected and encrypted with File Vault?
    Or, if somebody was feeling malicious, couldn't they just reset the password for my account in the guest account preferences or create a new master password for the machine, since the guest account has full admin rights?
    Thanks for any quick answers!

    Hi bscepter;
    If you are that paranoid about your data, the best
    thing for you to do is to remove it off of the
    machine before you send it in.
    Allan
    I'm not "that paranoid" about my data. I was merely curious if File Vault would protect my data should somebody with another admin account want to access or delete it. I mentioned this in my initial post.
    But thanks, anyway.

  • Diffculty downloading JRE version if user has no admin rights on the box...

    If you try to load in your own JRE version using the j2se tag in the JNLP file, and you don’t have Admin Rights on the computer, java webstart client will give you the following error:
    The application has requested a version of the JRE (version xxxx) that currently is not locally installed. Java Web Start is unable to automatically download and install the requested version. This JRE must be installed manually.
    The underlying reason for this, is because the user doesn’t have admin rights, the Java Control Panel->Advanced->JRE Autodownload option is set to Never AutoDownload, where as with a user with admin rights this option is set to Always AutoDownload. Once you switch this to Always AutoDownload, the JRE version is loaded correctly as specified by the j2se tag in the JNLP file.
    Is there any way to set this option programmatically, or via the JNLP API? Any other suggestions on how this can be done?
    Thanks,
    Amado

    odama94 wrote:
    ..Is there any way to set this option programmatically, or via the JNLP API? If there was a way, it would be a security bug.
    .. Any other suggestions on how this can be done?Talk to your System Administrator.

  • BUG: Installer of Internet Explorer 9 breaks Active Setup, if first user logging on has no admin rights

    Hello,
    I just stumbled across an issue when deploying the Internet Explorer 9 on Microsoft Windows 7 SP1, like many others before me. See here for example:
    http://www.butsch.ch/post/Internet-Explorer-9-Setup-Breaks-Active-Setup-of-further-MSI-Packages.aspx
    The Internet Explorer 9 setup creates the REG_SZ "NoIE4StubProcessing" with the value "Y" under HKLM\Software\Microsoft\Active Setup\Installed Components. This blocks all Active Setup components from being executed, when a user logs on. This seems to
    be part of the preparation for the reboot during the IE 9 setup and is supposed to be reversed afterwards.
    To re-enable the Active Setup processing, the IE 9 installer places a command in the RunOnce-Key under HKLM. This command is also labeled "NoIE4StubProcessing" and contains the following command line:
    reg.exe DELETE "HKLM\Software\Microsoft\Active Setup\Installed Components\NoIE4StubProcessing" /f
    In theory, this command will be executed as soon as the first user logs back on, remove the registry entry blocking the Active Setup process and thus enable it again.
    However, this only works, if the first user has local admin priviledges on the machine. If an unpriviledged user logs on, the command is still executed and the entry under "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" is
    removed, but the "NoIE4StubProcessing" entry under "HKLM\Software\Microsoft\Active Setup\Installed Components" remains - resulting in a permantely disabled Active Setup on the machine.
    I am not sure, that this is a bug of the IE 9 installer or the way the commands under  "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" are executed. Nevertheless, a fix for the problem would be great instead of shitty workarounds, that may
    break other things.
    Due to other means of contacting the developers / program managers in charge, could some moderator pass the issue along? - Please!
    ----------------------- Greetings from Germany, Martin

    Hi Martin,
    all feedback/issue reports for IE(10) go through a formal issue tracking portal that MS use. http://connect.microsoft.com/ie
    you may appreciate that this helps ensure the issue is formally documented and that resources can be allocated to its resolution.
    I have posted your feedback there on your behalf...
    https://connect.microsoft.com/IE/feedback/details/754350/ie9-installer-registry-key-switches-flaw-reported-on-technet
    Rob^_^

  • Macbook crash when trying to autorize user with system admin account  in maverick

    macbook crash when trying to autorize user with system admin account  in maverick,
    Please help

    Hi Frank,
    Please refer to following operations and check if can help you.
    1.
    wmic /node:"HOSTNAME" /user:"ADMIN_USER" /password:"PASSWORD" logicaldisk
    Please replace HOSTNAME with IP address, then monitor the result.
    2. Please open Control Panel, select User Accounts and click Manage another account. Then select the user account which you will use in WMIC command. Then please select Change
    the account type and check if you have set it as Administrator. If no, please set it as Administrator and check if this issue still persists.
    3. Please refer to the following thread and check if can help you.
    WMI
    Remote "Access Denied"
    If this issue still persists, please let me know the edition information of Windows OS that this issue occurred
    in. Meanwhile, you described “The user account is a member of Administrators.” Would you please let me summarily know how operate?
    Hope this helps.
    Best regards,
    Justin Gu

  • How to get actual user name without admin rights from AD?

    Hi,
    I have set up WebLogic Portal 8.1.2 to point to Active Directory, using ActiveDirectoryAuthenticatorMBean I'm trying to retrieve the actual user name e.g. John English. Can someone give me some advise what is the proper function to use. I tried getUserDescription but it requires AD admin rights. I can't get admin rights! Is there any workarounds?
    Thank you very much.
    Regards,
    Damon

    You might use GLOBAL_NAME, but the result could be not what you need. If you can login to DB server you can use "lsnrctl services" to see how the DB is registered with the listener. See this example :
    SQL> sho user
    USER is "TEST"
    SQL> select * from v$instance;
    select * from v$instance
    ERROR at line 1:
    ORA-00942: table or view does not exist
    SQL> col GLOBAL_NAME for a60
    SQL> select * from global_name;
    GLOBAL_NAME
    ORA9.US.ORACLE.COM
    SQL> exit
    Disconnected from Oracle9i Enterprise Edition Release 9.2.0.4.0 - Production
    With the Partitioning, OLAP and Oracle Data Mining options
    JServer Release 9.2.0.4.0 - Production
    $ lsnrctl services
    LSNRCTL for Linux: Version 9.2.0.4.0 - Production on 25-FEB-2008 18:21:10
    Copyright (c) 1991, 2002, Oracle Corporation.  All rights reserved.
    Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
    Services Summary...
    Service "foo" has 1 instance(s).
      Instance "ora9", status READY, has 1 handler(s) for this service...
        Handler(s):
          "DEDICATED" established:1 refused:0 state:ready
             LOCAL SERVER
    The command completed successfully
    $in this case "foo" is what you'd need.
    Of course you can always grant SELECT ANY DICTIONARY privilege to that user....

  • Deployment Software on user with no admin rights

    Hello,
    We are using SCCM 2012 R2 and our environment machines are Windows 8.1 with no admin rights for all users.
    We are trying to deploy some sprecific software but with no luck.
    On the Deployment method we specify "Install for User" and what happens on User side is "Past due it will be retried".
    If I modify my script and instead of /qn I use /qb I have the UAC control that pops up.
    But from my understanding SCCM should install the software as system account.
    How can we do to make it work?
    Thank You,
    Chris

    Hello,
    I have already bypass my problem using the "install for system".
    Creating 2 deployment method. One for the application (msi) "Install for system" and the second for the settings (cmd) "Install for User" and it works like a charm.
    But there is no way for SSCM to elevate the privileges when installing an application with "Install for user" set?
    Chris

  • User with no admin rights can not  authenticate on wikis or blogs

    I just set up my OD and proceeded to add users in the workgroup manager. I create an account for myself and gave it full admin rights under the privileges tab (in work group manager). I then created a test user account and gave it no privileges. My admin account can log on to wiki's and create blogs but my test account can not, It wont let me log in to any of the wiki's it's assigned to or set up a blog. I set the test account to have full privileges and then I was able to do these things.
    I had this set up correctly before the 10.5.2 update came out and crashed my server, I had to re-install the OS and start from scratch again.
    Any thoughts on what's wrong?
    Thank You,
    Message was edited by: pixelmnky

    Are the users and groups local or in an OD master?

  • User with Farm Administrator rights, but NOT in Farm Administrators Group

    I have an account that we recently discovered has Farm Administrator rights and was used to access Central Admin and cause some harm.  When I use the "Check Permissions" on the Central Admin site, it says that account has Full Control via
    the Farm Administrators Group.  However, that account is not in the Farm Adminstrators group.
    There is an entry in the Farm Administrators group for "BUILTIN\Administrators" and this account is in the Local Admin group on this server.  However, there are other accounts in the Local Admin group too, and when I "Check Permissions"
    for them, it returns 'None'. 
    I am confused as to how this one account has Farm Administration level access, while others in Local Admin do not, and how can I remove this accounts Farm Administration rights if it is NOT in the Farm Adminstrators Group?
    What are the potential problems/issues if I remove the "BUILTIN\Administrators" entry from the Farm Adminstrators Group?
    Thanks in advance for any feedback/help.

    If you have BUILTIN\Administrators as part of the Farm Admins, any user that is a Local Administrator will have Farm Admin rights. SharePoint doesn't enumerate groups when checking permissions, so the behavior you're seeing is correct. If you do not want
    Local Admins to have Farm Admin rights, remove BUILTIN\Administrators from the Farm Admins group in SharePoint.
    There should not be any issue with removing the group from Farm Admins, only that users will need both rights to fully manage SharePoint.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Weblogic user lost its Admin rights in Content Server

    Hello,
    I happened to change auth type for weblogic to Local. After logging in as weblogic, I couldnt see the Administration tab. This was the only user with admin privileges.
    I tried logging in as sysadmin/idc, but i could not. Logging in as sysadmin/idc was working in 10g but in 11g it does not work.
    Is there a way to get back the admin privileges foe weblogic user?. Please help as I cannot work without the Admin Utilities.
    Regards,
    Richa

    Hi Richa ,
    I did not update the sysadmin password.
    update users set dpasswordencoding='' where dname like 'sysadmin';
    update users set dpassword='idc' where dname like 'sysadmin';
    Open SystemProperties.
    Go to the “Database” tab.
    Select Oracle Thin JDBC Driver.
    JDBC Connection String = jdbc:oracle:thin:@hostname:1521:orcl
    JDBC User Name = dev_urmserver (ucm schema user)
    JDBC User Password = <pwd set>
    This will let you access the standalone applets from /bin directory .
    login with sysadmin/idc after launching user admin applet and then change the auth type for weblogic user to External from Local .
    I did not update the weblogic password but did change its type from External to Local in Content Server.
    Same as point above .
    Unfortunately, I did not give admin rights to any of the accounts and so I cannot access the User Admin Applet.
    Test after step 1 is completed .
    I have installed UCM in my laptop running win7. Surprisingly, i cannot see Oracle Content Server in my start->All programs menu.
    There will be no Content Server munu with UCM 11g . It will be the managed server under Weblogic that will be needed to start UCM.
    Hope this helps .
    Thanks
    Srinath

  • Giving an OD Network User/Group local admin rights.

    Is there a way to manage workstation admin rights from the server?
    I ran into a problem with Lightroom that requires admin privileges to change the program preferences. We have alot of graphic art students with roaming profiles, spread out across 5 labs, that need to make this change. I would like to be able to add a group or all network users to the local admin group, for a few days, so the students can make the changes.

    This works on 10.5, not sure about 10.6.
    As root on the client.
    Upgrading legacy group for local admin group - this is from 10.4 days, not sure if you still need to do it.
    dseditgroup -o edit -f n -t group -n /Local/Default admin
    Nest OD group in local admin group
    dseditgroup -o edit -a DirectoryAdminGroup -t group -n /Local/Default admin
    Gen

  • HT1277 why i cannot set up my exchange account into my iphone 4s.  everything that needs to input has been provided right, but error says cannot get email not connected to the srver.where seems to be the problem?pls help.btw,i have an outlook for macbook

    please help me find out the solution to the problem.
    My iphone 4S was not able to fetch mails from the server ( outgoing and incoming)
    I was trying to configure my exchange account and follow all the procedures correctly but am having trouble in sending and receiving mails as the error says " cant get mails cannot connect to the server?  where seems to be the problem?
    Have read from the support services that if you using a Pop3 account into another device which I did ( my email was configured via outlook for mac in my macbook) there might be a lock out problem and cannot get emails on the second device which is my iphone?  ( I want to set up my exchange account to my iphone so wherever and whenever i go i cant still access to my email easily. Please help.

    No one seems to be hearing what Big Q is saying.
    He can pair his iPhone to his Macbook, but cannot CONNECT. He's NOT asking for alternative solutions, like Wi Fi.
    I am able to both pair and connect my one one Macbook to my other one, but I can only pair but not connect my iPhone or iPad to either Macbook. So I have the same problem. But I can pair and connect my Macbooks to other Bluetooth devices, like my ancient Nokia cellfone, or my Bluetooth HP printer.
    It's irrelavent that I can instead use a direct USB cable or Wi Fi between my Macbooks and my iPhone/iPad - why can't I use Bluetooth? If Apple does not allow Bluetooth between it's Macbooks and other Mac devices, then why have Bluetooth at all? Does my iPhone have Bluetooth only so that I can pair and connect to my my non Apple mobile handsfree car kit, or communicate easily with the dreaded Apple enemy Samsung, or what?
    Make no mistake , I am a diehard Apple fan, but this Bluetooth non compatibility issue appears shortsighted and seemingly pointless. Why does Apple not just say why they created the non compatibility, or have a message on the Bluetooth setup programme which simply and clearly says "don't bother wasting hours of your time trying to pair and connect your iPhone to your Macbook, because we don't allow that anymore, reason being that............"?
    As a first time user of this Forum I am surprised at the intolerant and highhanded tone of some of the replies  to what is a legitimate question, that is obviously plagueing many, many other Apple users.

  • Uploads big lists to user tables without admin rights

    I have an Oracle database which operates like follows:
    1) users upload lists of customers/regions/products in their tables using MS Access + ODBC connection (just copy-paste to open window with linked table)
    2) they press a button and Pass-thru query returns results based on step 1
    Could I move this GUI to ApEx?
    Step 2 is simple SQL Report, but how should step 1 be done?
    Users should not be allowed to modify database structure, so standard 'upload from file/spreadsheet' is not a good idea..

    Could you describe Step 1 in a little bit more detail? Do users paste a list of customers into a text box, click a button, and then see that list? Or are they using the text box as a filter to limit a larger list?
    In any of these cases, it's quite possible that APEX will be able to handle this. But some more details would allow us to confirm that it actually can.
    Thanks,
    - Scott -

  • If a user is no admin, airplay does not work in iTunes

    I am using maverick and iTunes 12.0.1.26. All works well, apart from a strange bug. The airplay in iTunes does not work when the user has no admin rights. The icons show correct blue and it even states that it is connecting to the Apple tv, but the sound is never played on the Apple tv. The airplay of the speaker icon of the OSX works. Giving the user admin rights solves the issue. (tried it several times, it seems to be consistent). Any ideas? I would prefer to have the account for my wife as a standard user. No problems with the older versions of iTunes.

    It is not any OS administrator that can connect as sysdba. It is only the user who installed Oracle that can connect as sysdba this way.

  • Active Directory: user has admin rights when logs in for the first time

    I have an Xserve server running OS X server 10.5.8 and trying to host _open and active directory_ for both Mac and PC machines. The open directory works fine but what happens on the active directory side is that, when a user logs in from a windows machine he/she can access all the other users folders. In other words, he/she almost has *admin rights*. Is this normal or there is some settings that I can look into to fix this?
    Details: The first time user logs in, his only effect on the server is the password change. What this means is that his changes dont get uploaded to the server. It is only the second time the user logs in from ANOTHER computer that the server starts saving the his profile. Also, after the second login the user doesnt have admin rights anymore.
    Thanks,
    MR

    If you've just changed your login password in Recovery mode, follow these instructions. Otherwise, see below.
    At some point, you may have reset your keychain to default in Keychain Access. That action would have caused your login keychain to be renamed.
    Back up all data before proceeding.
    In Keychain Access, delete the login keychain from the keychain list. Choose Delete References when prompted, not Delete References & Files.
    Triple-click anywhere in the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
    ~/Library/Keychains
    In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar, paste into the box that opens (command-V), and press return. A folder will open. Rename the file "login.keychain" in that folder to something like "login-old.keychain". Rename the file "login_renamed_1.keychain" to "login.keychain". You can then close the folder.
    Back in Keychain Access, select 
              File ▹ Add Keychain...
    from the menu bar. Add back the file now named "login.keychain". If any of your needed keychain items are missing from it, also add back the file you named "login-old.keychain". I suggest you transfer any needed items from that keychain to the login keychain, then delete it. The transfers are made by drag-and-drop in Keychain Access. You'll need to enter your password for each item transferred.

Maybe you are looking for