User with no admin rights can not authenticate on wikis or blogs

I just set up my OD and proceeded to add users in the workgroup manager. I create an account for myself and gave it full admin rights under the privileges tab (in work group manager). I then created a test user account and gave it no privileges. My admin account can log on to wiki's and create blogs but my test account can not, It wont let me log in to any of the wiki's it's assigned to or set up a blog. I set the test account to have full privileges and then I was able to do these things.
I had this set up correctly before the 10.5.2 update came out and crashed my server, I had to re-install the OS and start from scratch again.
Any thoughts on what's wrong?
Thank You,
Message was edited by: pixelmnky

Are the users and groups local or in an OD master?

Similar Messages

Deployment Software on user with no admin rights

Hello,
We are using SCCM 2012 R2 and our environment machines are Windows 8.1 with no admin rights for all users.
We are trying to deploy some sprecific software but with no luck.
On the Deployment method we specify "Install for User" and what happens on User side is "Past due it will be retried".
If I modify my script and instead of /qn I use /qb I have the UAC control that pops up.
But from my understanding SCCM should install the software as system account.
How can we do to make it work?
Thank You,
Chris

Hello,
I have already bypass my problem using the "install for system".
Creating 2 deployment method. One for the application (msi) "Install for system" and the second for the settings (cmd) "Install for User" and it works like a charm.
But there is no way for SSCM to elevate the privileges when installing an application with "Install for user" set?
Chris

User with Farm Administrator rights, but NOT in Farm Administrators Group

I have an account that we recently discovered has Farm Administrator rights and was used to access Central Admin and cause some harm. When I use the "Check Permissions" on the Central Admin site, it says that account has Full Control via
the Farm Administrators Group. However, that account is not in the Farm Adminstrators group.
There is an entry in the Farm Administrators group for "BUILTIN\Administrators" and this account is in the Local Admin group on this server. However, there are other accounts in the Local Admin group too, and when I "Check Permissions"
for them, it returns 'None'.
I am confused as to how this one account has Farm Administration level access, while others in Local Admin do not, and how can I remove this accounts Farm Administration rights if it is NOT in the Farm Adminstrators Group?
What are the potential problems/issues if I remove the "BUILTIN\Administrators" entry from the Farm Adminstrators Group?
Thanks in advance for any feedback/help.

If you have BUILTIN\Administrators as part of the Farm Admins, any user that is a Local Administrator will have Farm Admin rights. SharePoint doesn't enumerate groups when checking permissions, so the behavior you're seeing is correct. If you do not want
Local Admins to have Farm Admin rights, remove BUILTIN\Administrators from the Farm Admins group in SharePoint.
There should not be any issue with removing the group from Farm Admins, only that users will need both rights to fully manage SharePoint.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Cisco wlc ios 7.2 with clients windows 8 can not authenticate with 802.1x

Hello my name is Ivan:
I have a solution a unified solution wireless with a cisco wlc 7.2 and ap cisco. My issue is the follow:
My users are using laptops with OS windows 8, and they can not access to the network wireless because they authenticate in to the network using 802.1x wpa/wpa2 with tkip or aes.
I find a bug in the ios of the wlc. The number is CSCua29504. I would not to change the drivers in the laptop to join the users in to the solution.
Please is possible to find any software to do the upgrade in the wlc? Or perhaps we need to do an upgrade in to cisco lightweight access point?
Please help me in this issue.
Regards
Ivan

Bug ID CSCua29504 has been fixed in WLC firmware 7.0.235.3, 7.3.101.X or 7.4.100.X.
So if you are NOT running any one of these codes, then yes. Upgrade your firmware is your solution.
Fixed in: (12)
7.4(100.0),7.4(1.20),7.3(112.0),7.3(101.0),7.3(1.67)
7.2(111.3),7.2(111.1),7.2(110.4),7.0(236.0),7.0(235.3)

WPA2 enterprise, Can not authenticate with ACS

Hi, I am setting up WPA2 enterprise for wireless users with PEAP authentication, but can not get authentication server to authenticate them, and failed reason is generic "EAP-TLS or PEAP authentication failed during SSL handshake"
The AP I am using is 1240AG running 12.3(8)JA, Radius server is ACS 4.0, I don't have any problem to get dot1x with PEAP authentication working for wired access, and I have almost identical client side configuration for wired and wireless user.
From ACS's point of view, it should not be aware of any difference between wired and wireless user, but ACS log shows otherwise:
1)AP is connected to a cat4k switch, I suppose AP should be the authenticator for wireless users, but ACS "failed attempts" log for attempted wireless user shows that the NAS IP is cat4k in stead of AP, why?
2)I am using the same laptop for both wireless/wired testing, ACS "failed attempts" log shows that for wired user, it correctly interpreted cached domain\login name, but for failed wireless user, the user-name field is totally different, yet debug on AP clearly shows that correct domain\login has been received by AP.
Debug output on AP is attached, hope experts here can quickly identify the problem.

Got it working by adding radius server configuration under GUI generated configuration:
aaa group server radius your-AAA-group-name
server your-radius-server#1-IPaddress auth-port 1645 acct-port 1646

Active Sync does not start as domain user with no Administrator rights.

Hi all,
Searched the forums and the net but can't find anything about this.
Situation:
In a domain where users only have standard users rights I installed on a PC as a domain admin Active Sync 4.5
When I logon as a user the Active Sync software can not be started.
I disabled the firewall and even set full rights permission on the Active Sync directory both didn't help out.
When I m logged on as this user I can choose to Start the program as a different user.
This only works when I Start it with the domain administrator account.
I hope that I do not have to give that information to this user to make this software work.....
Anyone had the same problems? Anyone a idea?
Thx in advance.
Kind regards,
Aartjan

try this:
1. make sure you install "activesync" from local harddisk (not from network), and do not delete the setup file after
installation
2. local in as "local administrator" and connect your PDA and make sure it can sync, I did not create a profile and just leave PDA connect as "guest" for now
3. log off and re-login as "domain user", connect with USB should work
4. if they still cannot communicate, run "ActiveSync" from start menu
it works for me

How Do I Create User Account with "limited admin rights"?

Hello;
I would like to give a handful of users the ability to login to the DCC and enable them to add/delete/modify users and or hosts only, I.e. People and/or hosts.
Is there anyway to:
1. Make a user with this admin capability?
2. Segregate the containers they are able to modify?
Thanks to all in advance.

BobM53, That would be needed regardless of what front end my users log in with, in my case I was looking for them to access the DIT via the DSCC/DCC, which is not possible. Regardless, thank you for your reply, it is reassuring to know I am headed in the right direction.
I am now looking towards installing something else like Apache Directory Studio, or some other GUI for users to manage the directory.
I will most likely create one or more ACI's to build groups, adding members to those groups as needed; each group being allowed to perform functions such as create users, lockout users, add/modify hosts, etc.
I will most likely follow the steps outlined in:
Directory Server Groups, Roles, and CoS - 11g Release 1 (11.1.1.7.0)
Slightly OT, does anyone have a suitable and similar proven method to "lockdown" root accounts, and who has root access?
Thank you

Can not Authenticate WLSE Express with Active Directory

Hi ,All
I can not authenticate WLSE Express using external database with AD. I have downloaded the agent to the Domain Controller and install it on AD.
At WLSE Express I found log
"Error Server 0 RemoteDomainAuth server domain-auth: Agent API encountered error (1)"
"Error Server 0 Service domain-auth has no active remote servers available"
"Warning Protocol 0 Request from AP101 (10.224.20.143): User insee-wds rejected (ServiceUnavailable)"
"Warning Protocol 0 Request from AP101 (10.224.20.143): User insee-wds rejected (InternalError)"
maybe something wrong on AD ,
If anyone has an idea , please help me.
Thankss.

I got the problem like you.
Do you have any solution to solve this issue?
If you have, please e-mail or post to me and everybody who be like this.
Thank you so much.

How can i create a new user with only read rights ?

How can i create a new user with only read rights ?

You are asking about a Database User I hope.
You can look into the Oracle 8i Documentation and find various privillages listed.
In particular, you may find:
Chapter 27 Privileges, Roles, and Security Policies
an intresting chapter.
You may want to do this with the various tools included with 8i - including the
Oracle DBA Studio - expand the Security node and you can create USERS and ROLES.
Or use SQL*Plus. To create a
user / password named John / Smith, you would login to SQL*Plus as System/manager (or other) and type in:
Create user John identified by Smith;
Grant CONNECT to John;
Grant SELECT ANY TABLE to John;
commit;
There is much more you can do
depending on your needs.
Please read the documentation.
-John
null

If a user is no admin, airplay does not work in iTunes

I am using maverick and iTunes 12.0.1.26. All works well, apart from a strange bug. The airplay in iTunes does not work when the user has no admin rights. The icons show correct blue and it even states that it is connecting to the Apple tv, but the sound is never played on the Apple tv. The airplay of the speaker icon of the OSX works. Giving the user admin rights solves the issue. (tried it several times, it seems to be consistent). Any ideas? I would prefer to have the account for my wife as a standard user. No problems with the older versions of iTunes.

It is not any OS administrator that can connect as sysdba. It is only the user who installed Oracle that can connect as sysdba this way.

Generate a list of users who has admins rights in BO XI.

Post Author: bstn82
CA Forum: Administration
Any one has an idea how to produce a list of users who has admins rights?

Post Author: TAZ
CA Forum: Administration
launch query builder from the admin launchpad
enter this query
select * from ci_systemobjects where si_parentid=19
this will give you a list of all the members of the administrators group.
You can experiment with query builder and possibly ask for help in the DEV forum if you need to write a more complex query.
Regards,
Tim

Deleting users with Delegated Admin

Hope anyone can help with this:
When I delete a user with Delegated Admin (For Messaging 5.x) the user
seems to be deleted in iDA, but it is not deleted in LDAP.
Therefore, I cannot re-use it's attributes (like E-mail address) for
another (new) user.
This causes all kind of problems.
I can go into the Console and through away the user, then everything
works again. But I expected iDA also to delete the user if I use the
delete button.
Any ideas? Did I forget something?
Thanks in advance,
Niels de Troye

Hi..
the nda does not remove the user... is put it in suspend mode...
you have to run the imsimta purge command to remove the user.. or to wait
the server to do that
in a day or so....
take a look at the manual to see how you can do that...
"N. de Troye" wrote:
Hope anyone can help with this:
When I delete a user with Delegated Admin (For Messaging 5.x) the user
seems to be deleted in iDA, but it is not deleted in LDAP.
Therefore, I cannot re-use it's attributes (like E-mail address) for
another (new) user.
This causes all kind of problems.
I can go into the Console and through away the user, then everything
works again. But I expected iDA also to delete the user if I use the
delete button.
Any ideas? Did I forget something?
Thanks in advance,
Niels de Troye--
Over and Out
Giorgos Kiriakidis
Technical Department
NetSmart S.A.
Panepistimiou 58.
Athens 10678
Hellas
Tel +3013302608
Fax +3013302658
Email [email protected]
This message contains confidential information intended for a specific
individual and purpose,
is protective by law. If you are not the intended recipient, you should
delete this message.
Any disclosure, coping, distribution or taking any action based on this
message is strictly prohibited.

I have big problems with mountain lion. you can not have a boot disk system I resulted in the need to re-download the os from scratch impiegandoci 8 hours, it is outrageous even with windows 95.

I have big problems with mountain lion. you can not have a boot disk system I resulted in the need to re-download the os from scratch impiegandoci 8 hours, it is outrageous even with windows 95.
at least that the operator has confirmed to me that he called me. I also have problems with either the start of the mac with the power off. I can not understand if it crashes or is just very very slow.
Finally, I have a problem with the external hard disck. I often said to have been ejected incorrectly (not true) and I start to restore the startup recovery disk because disk utility is ineffective from the normal operating system .. is a shocking thing, but how you reduced. in four years it had never happened. seem to have windows or worse. Wake up.
I am an Italian, alas, and then I would like an answer to my language because my € are the same as German French or English.

You are on Windows 2000, you do not have a "Firefox" button, and should consider yourself to be fortunate in that you still have menus and don't have to do anything to get the menus back instead of the "Firefox" button. (The same applies to Windows XP users).
Use the "File" menu to get to Import. You are not on Windows 7 or Vista, and don't have to put up with the nonsense added for Aero.
If you want the "Firefox" button you can get it with View -> toolbars -> (uncheck) Menu Bar. The menu bar and the "Firefox" button were supposed to be mutually exclusive (which is impossible in some cases without being incompatible).
Once you are using the "Firefox" button ...
Use the "Alt" key to view the menu bar (temporarily) containing File, Edit, View, History, Bookmarks, Tools, and Help. On Windows 7 and Vista, the menu bar was hidden by default in Firefox 4 and above. These menu items are more or less available under the "Firefox" button which has the most used of the built-in Firefox menu items available in a different format.
To get back to having menus again. "Firefox" button -> Options (second column) -> (check) Menu Bar
You can make '''Firefox 7.0.1''' look like Firefox 3.6.*, see numbered '''items 1-10''' in the following topic [http://dmcritchie.mvps.org/firefox/firefox-problems.htm#fx4interface Fix Firefox 4.0 toolbar user interface, problems (Make Firefox 4.0 thru 8.0, look like 3.6)]. ''Whether or not you make changes, you should be aware of what has changed and what you have to do to use changed or missing features.''
* http://dmcritchie.mvps.org/firefox/firefox-problems.htm#fx4interface

Error: A user with the specified SID could not be found in the domain.

Hi All,
I am getting a error as below,
A user with the specified SID could not be found in the domain.
Check the spelling of the account name 'domain\usersAMAccountName' and try again.
-    at Microsoft.Office.Server.UserProfiles.UserProfileGlobal.GetSidFromAccount(String strAccountName, SID_NAME_USE[] IntendedAccountType, SID_NAME_USE& sidUse)
   at Microsoft.Office.Server.UserProfiles.UserProfileGlobal.GetSidFromAccount(String strAccountName)
   at Microsoft.Office.Server.UserProfiles.UserProfileGlobal.GetSidFromAccount(UserProfileApplicationProxy proxy, Guid partitionID, String strAccountName, Boolean isWindowsAccount)
   at Microsoft.Office.Server.UserProfiles.UserProfile.set_SID()
   at Microsoft.Office.Server.UserProfiles.UserProfile..ctor(UserProfileManager objManager, String strAccountName, String strPreferredName)
   at Microsoft.Office.Server.UserProfiles.UserProfileManager.CreateUserProfile(String strAccountName, String strPreferredName)
   at Microsoft.Office.Server.UserProfiles.UserProfileManager.CreateUserProfile(String strAccountName)
Any help?
Thanks,
Mohakk

Hi,
Per my understanding, the code should be OK, I have two suggestions as below:
1. Please ensure that the account of that user is valid in your production environment;
2. Try other accounts in the CreateUserProfile() funciton to see if it can work.
Feel free to reply if there any progress.
Best regards,
Patrick
Patrick Liang
TechNet Community Support

Macbook crash when trying to autorize user with system admin account in maverick

macbook crash when trying to autorize user with system admin account in maverick,
Please help

Hi Frank,
Please refer to following operations and check if can help you.
1.
wmic /node:"HOSTNAME" /user:"ADMIN_USER" /password:"PASSWORD" logicaldisk
Please replace HOSTNAME with IP address, then monitor the result.
2. Please open Control Panel, select User Accounts and click Manage another account. Then select the user account which you will use in WMIC command. Then please select Change
the account type and check if you have set it as Administrator. If no, please set it as Administrator and check if this issue still persists.
3. Please refer to the following thread and check if can help you.
WMI
Remote "Access Denied"
If this issue still persists, please let me know the edition information of Windows OS that this issue occurred
in. Meanwhile, you described “The user account is a member of Administrators.” Would you please let me summarily know how operate?
Hope this helps.
Best regards,
Justin Gu

User with no admin rights can not authenticate on wikis or blogs

Similar Messages

Maybe you are looking for