Using RunAs to enable Lync users

Is it possible to use RunAs on a Windows 7 SP1 x64 workstation to enable Lync users. I have a one line powershell command to enable Lync users but the command the account the person is using doesn't have the correct rights. I played around with the RunAs
command but can't seem to get it to work.

Try this:
$UserCredential = Get-Credential
$a = New-PSSession -connectionuri https://lync01.domain.com/ocspowershell -Credential $UserCredential
Import-PSSession $a
Then run enable-csuser from there.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Similar Messages

Enable lync for user

hello
i want to know how can i enable lync for one user in active directory without creating mailbox .
i am using lync 2013
thanks

A mailbox isn't required for creating a Lync user. You can enable the user for Lync using the Lync Control Panel or running Enable-CsUser in Powershell (http://technet.microsoft.com/en-us/library/gg520961.aspx and/or http://technet.microsoft.com/en-us/library/gg398711.aspx)
The sign-in name will be in an e-mail address format ([email protected]), but a mailbox isn't actually required. You can specify the sign-in address when enabling the user.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer" | Blog
www.lynced.com.au | Twitter
@imlynced

Bulk enable Lync Online for users already synced to Office 365 E1

We already have 8000 users on Office 365 using E1 Exchange Online. We also have a handful who are using E3 with all services. How do I create a powershell script that will enable all users for Lync Online in addition to what ever licenses and services
they are currently using?

Hi Chudly，
For the office365 issue, I also recommend you can post in dedicated forum for more efficient support:
http://community.office365.com/en-us/f/166.aspx
If you want to modify the powershell script, please post the current script and the issue, we will notice and continue to follow up.
If there is anything else regarding this issue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Querying user groups while using @RunAs on a bean

Hi,
I am trying to implement a scenario in which I have three entities:
- bean A - datastore for all users
- bean B - implementing logic, filtering results from datastore for specific user based on groups he is in
- User - calling bean B
Calling chaing is User -> bean B -> bean A.
bean B has to query user groups and filter data based on that. I've implemented that using:
Subject subject = Security.getCurrentSubject();
for (Principal principal : subject.getPrincipals()) {
if (principal instanceof WLSGroup) {
Without any security specified (like @RolesAllowed) it works like charm.
But I want to add security constraints to the beans:
@RolesAllowed("admin")
class A {}
@RolesAllowed("user")
class B {}
The problem is that B cannot acces A methods because it is calling A using 'user' security context.
I've thought I change it to:
@RunAs("application")
@RolesAllowed("user")
class B {}
"Application" is an account in group admin.
Now B can call A. The problem is that security context is switched to "application" on entering B's methods. Inside them I cannot query user groups using method presented above, because I get "application" groups.
Is there a way to change security context on calling other bean methods? Like using Security.runAs( somehowGetApplicationSubject(), runnable) ??
Other method I've thought of, but I have no idea how to implement that, is somehow querying weblogic to get groups of SessionContext.getCallerPrincipal(), which returns user account regardless of using RunAs.
Hope someone made through this problem before,
Krzysiek

getBounds() will only generally make sense while the component itself is being rendered. I wouldn't be completely surprised if the framework which gets that component also resets its size once it's done painting the thing.
If you're calling it from outside the rendering loop, perhaps you could try calling validate() on the component, which should force it to determine its size.
Failing that, you could possible use getPreferredSize() instead, which will likely obtain a similar result in most cases.

HT1528 I can not find the enable root user in, I am using Lion

I can not find the enable root user in, I am using Lion

First off, it is a "Bad" idea to enable 'root', as that is the one known account that exists on every Unix system. If 'root' is enabled, it makes it much easier to break into a Mac via the one account that has absolute control over everything.
Having said that...
i too do not observe in editor section enable root user when I perform what Kappy offered in link.
Did you click on "Login Options" to get the "Join..." button?
Did you click on "Open Directory Utility" ?
Did you go to the Menu Bar and click "Edit"? It should be right there 2/3's of the way down the "Edit" menu -> "Enable Root User"
If you want another way.
Start an Applications -> Utilities -> Terminal session
sudo su -
password: <enter your admin password here>
passwd
Changing password for root.
New password:
Retype new password:
You have now enabled 'root'. I hope you gave 'root' a very VERY STRONG password, as you have just opened yourself up for script kiddies to go after your root account.

Is there a way to enable root user using terminal?

is there a way to enable root user using terminal? i've tried in directory app but its not letting me log in under root since repairing permissions

Hi
If all you're seeing is bash-3.2# you are logged in as root. Type exit followed by a return. What do you see now?
I think most of your questions could be answered with some judicious reading? Download as many admin manuals you can:
http://www.apple.com/server/macosx/resources/
Tony

Using "Run as different user"

Is there a way to make a shortcut to a program so that it will prompt you for credentials every time. I know if you hold down Shift and right click you can get the Run as different user (which is what I want). I just want to save a step because I use the program all the time, but need domain credentials to make any changes. AD, GP Managment etc...
Windows XP had the functionality by setting the advanced properties of the shortcut to Run with different credentials. Windows 7 only has run as administrator in the advanced shortcut properties., which doesn't work because its local admin not domain admin.
Does anyone know how to do this?

Hi
Actually, this command was completely removed in Windows Vista and was added back to the Windows 7 extended right click context menu. :))
You can use the same 'fix' that was used in Vista. Go to the following Microsoft website and download the ShellRunas utility.
Sysinternals - ShellRunas
Unzip the file and place a copy of ShellRunas.exe in the C:\Windows\System32 folder.
Create a shortcut to the executable that you want to run as a different user.
Right click the shortcut and select Properties.
Place the following command at the beginning of the Target line so that the command looks like this.
C:\Windows\System32\ShellRunas.exe <path to shortcut target>
(Be sure to include the space after shellrunas.exe)
You can also add the Run As Different User to the normal right click context menu.
Open an elevated command prompt and enter the following command.
shellrunas /reg
Press ENTER.
Hope this helps.
Thank You for using Windows 7
Ronnie Vernon MVP

How do I enable "Audit user account logons" using PowerShell, to improve security?

With successful hacking attacks more often employing valid Active Directory user credentials, it is quite helpful when administrators can
easily poll user logon events. Rather than query
every domain computer for its logon events, one can alter the Default Domain Controller Policy GPO to enable "Audit user account logons" (Success and Failure) then merely poll
only the domain controller -- quite efficient. PowerShell helpfully has its Group Policy Module, including the following two cmdlets.
1) Get-GPO "Default Domain Controllers Policy" will retrieve the top-level GPO object, but how do I enable that specific setting?
2) Set-GPRegistryValue might be the right tool, but I cannot find any documentation on the values I need to supply to its parameters (-Name -Key -ValueName -Type -Value) to enable "Audit user account logons" -- both Successes and Failures.
One can manually modify this setting using the Group Policy Management console GUI on the domain controller, but I am trying to upgrade my professional work habits to use stored scripts, rather than unrecorded point & clicks, so that my actions are repeatable
and documented.
Any pointers to documentation or an example would be welcome. I originally posted this question in the TechNet PowerShell Forum this afternoon, but someone recommended I copy it to the TechNet Group Policy Forum.
Jeffrey - New Orleans MCITP Enterprise Administrator, Virtualization Administrator

Hi Jeffrey,
>>One can manually modify this setting using the Group Policy Management console GUI on the domain controller, but I am trying to upgrade my professional work habits to use stored scripts, rather than unrecorded point & clicks, so that my actions
are repeatable and documented.
Before going further, although you have expressed that you don't want to use GPMC GUI to configure the audit setting, in fact, it's an easy and comparatively handy method to set the setting. Besides, based on the description, you
want to use PowerShell to do this. However, as far as I know, PowerShell can configure registry-based policy settings and Group Policy Preferences Registry settings, but audit policy security settings are not registry keys.
Nonetheless, if we really don't want to use GPMC console to do this, we can use Auditpol.exe to set the audit setting.
Regarding this point, the following article can be referred to for more information.
Auditpol
https://technet.microsoft.com/en-in/library/cc731451.aspx
Auditpol set
https://technet.microsoft.com/en-in/library/cc755264.aspx
In addition, regarding Group Policy Cmdlets in Windows PowerShell, the following article can be referred to for more information.
Group Policy Cmdlets in Windows PowerShell
https://technet.microsoft.com/en-us/library/ee461027.aspx
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Need help in using [RUN PROGRAM] Activity against a server in another domain

Hi Experts,
We have two domains with two way trust enabled. Orch server exists in DomainA and target server exists in DomainB.
We are trying to execute some scripts(g:IPCONFIG) from orch server to target server using RUN PROGRAM activity. This is running fine and give expected results, if I give Built-in Administrator credentials in Security Tab. But I'm getting some
strange values like chinese/japanese language strings, If I use a DomainB/DomainA user (Part of local admin of the target server) in security tab as well as Advanced tab-->Runas.
Things I tried:
- DomainA/DomainB user in Security Tab as well as RunAs tab  ---> Strange Strings
- DomainA/DomainB user in Security Tab and BuiltIn Administrator in RunAs tab  ---> Strange Strings
- BuiltIn Administrator in Security Tab ---> Expected result
- BuiltIn Administrator in Security Tab and DomainA/DomainB user in RunAs tab  --> ProgramExitCode = -10xxxxxx
But our requirement is to run the script on the target server as Domain User(Part of local admin).
Thanks in Advance
Thanks and Regards, Narayana Babu

Hi Experts,
We have two domains with two way trust enabled. Orch server exists in DomainA and target server exists in DomainB.
We are trying to execute some scripts(g:IPCONFIG) from orch server to target server using RUN PROGRAM activity. This is running fine and give expected results, if I give Built-in Administrator credentials in Security Tab. But I'm getting some
strange values like chinese/japanese language strings, If I use a DomainB/DomainA user (Part of local admin of the target server) in security tab as well as Advanced tab-->Runas.
Things I tried:
- DomainA/DomainB user in Security Tab as well as RunAs tab  ---> Strange Strings
- DomainA/DomainB user in Security Tab and BuiltIn Administrator in RunAs tab  ---> Strange Strings
- BuiltIn Administrator in Security Tab ---> Expected result
- BuiltIn Administrator in Security Tab and DomainA/DomainB user in RunAs tab  --> ProgramExitCode = -10xxxxxx
But our requirement is to run the script on the target server as Domain User(Part of local admin).
Thanks in Advance
Thanks and Regards, Narayana Babu

How to Enable Lync Windowphone agent on Lync Server 2010

How to Enable Lync Windowphone agent on Lync Server 2010 ?

Can you please elaborate. Do you mean to enable a Lync user to use the Lync Mobile Client for Windows mobile devices in a Lync 2010 environment?
If so, in Lync 2010 there is no special enable setup other than allow the user to have remote access. Of course the MCX service needs to be working.
Look forward to more details
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Lync Sorted blog

Script that enables mail users and kicks out two csv files

I am working on a script that will mainly be used as a scheduled task to enabled mailuser by calling the update-recipient command.
But before it calls that command it will get for various issues that can cause errors.
Missing PrimarySMTP
Display name having a space at front or back.
The external email address being blank.
I have IF statements setup to check for those and then call a function that will save into an array the issue for that user.
Here is the script
<#
.SYNOPSIS
Enable-MailUsers Synced Mail Users in the Exchange environment
THIS CODE IS MADE AVAILABLE AS IS, WITHOUT WARRANTY OF ANY KIND. THE ENTIRE
RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS CODE REMAINS WITH THE USER.
Version .9, 30 June 2014
.DESCRIPTION
This script mail-enables Synced Mail Users and creates a CSV report of mail users that were enabled.
The following is shown:
* Report Generation Time
.PARAMETER SendMail
Send Mail after completion. Set to $True to enable. If enabled, -MailFrom, -MailTo, -MailServer are mandatory
.PARAMETER MailFrom
Email address to send from. Passed directly to Send-MailMessage as -From
.PARAMETER MailTo
Email address to send to. Passed directly to Send-MailMessage as -To
.PARAMETER MailServer
SMTP Mail server to attempt to send through. Passed directly to Send-MailMessage as -SmtpServer
.PARAMETER ScheduleAs
Attempt to schedule the command just executed for 10PM nightly. Specify the username here, schtasks (under the hood) will ask for a password later.
.EXAMPLE
Generate the HTML report
.\Enable-MailUsers.ps1 -SendMail -MailFrom [email protected] -MailTo [email protected] -MailServer ex1.contoso.com -ScheduleAs SvcAccount
#>
param(
[parameter(Position=0,Mandatory=$false,ValueFromPipeline=$false,HelpMessage='Send Mail ($True/$False)')][bool]$SendMail=$false,
[parameter(Position=1,Mandatory=$false,ValueFromPipeline=$false,HelpMessage='Mail From')][string]$MailFrom,
[parameter(Position=2,Mandatory=$false,ValueFromPipeline=$false,HelpMessage='Mail To')]$MailTo,
[parameter(Position=3,Mandatory=$false,ValueFromPipeline=$false,HelpMessage='Mail Server')][string]$MailServer,
[parameter(Position=4,Mandatory=$false,ValueFromPipeline=$false,HelpMessage='Schedule as user')][string]$ScheduleAs
# Sub Function to neatly update progress
function _UpProg1
param($PercentComplete,$Status,$Stage)
$TotalStages=5
Write-Progress -id 1 -activity "Mail enabled Objects" -status $Status -percentComplete (($PercentComplete/$TotalStages)+(1/$TotalStages*$Stage*100))
#Sub Function create ErrObject output
function _ErrObject{
Param($name,
$errStatus
If(!$err){
Write-Host "error detected"
$script:err = $True
$ErrObject = New-Object -TypeName PSObject
$Errobject | Add-Member -Name 'Name' -MemberType Noteproperty -Value $Name
$Errobject | Add-Member -Name 'Comment' -MemberType Noteproperty -Value $errStatus
$script:ErrOutput += $ErrObject
# 1. Initial Startup
# 1.0 Check Powershell Version
if ((Get-Host).Version.Major -eq 1)
throw "Powershell Version 1 not supported";
# 1.1 Check Exchange Management Shell, attempt to load
if (!(Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue))
if (Test-Path "D:\Exchsrvr\bin\RemoteExchange.ps1")
. 'D:\Exchsrvr\bin\RemoteExchange.ps1'
Connect-ExchangeServer -auto
} elseif (Test-Path "D:\Exchsrvr\bin\Exchange.ps1") {
Add-PSSnapIn Microsoft.Exchange.Management.PowerShell.Admin
.'D:\Exchsrvr\bin\Exchange.ps1'
} else {
throw "Exchange Management Shell cannot be loaded"
# 1.2 Check if -SendMail parameter set and if so check -MailFrom, -MailTo and -MailServer are set
if ($SendMail)
if (!$MailFrom -or !$MailTo -or !$MailServer)
throw "If -SendMail specified, you must also specify -MailFrom, -MailTo and -MailServer"
# 1.3 Check Exchange Management Shell Version
if ((Get-PSSnapin -Name Microsoft.Exchange.Management.PowerShell.Admin -ErrorAction SilentlyContinue))
$E2010 = $false;
if (Get-ExchangeServer | Where {$_.AdminDisplayVersion.Major -gt 14})
Write-Warning "Exchange 2010 or higher detected. You'll get better results if you run this script from an Exchange 2010/2013 management shell"
}else{
$E2010 = $true
$localserver = get-exchangeserver $Env:computername
$localversion = $localserver.admindisplayversion.major
if ($localversion -eq 15) { $E2013 = $true }
#Get date
$filedate = get-date -uformat "%m-%d-%Y"
$filedate = $filedate.ToString().Replace("0", "")
#Get the valid users that are not mail-enabled
_UpProg1 1 "Getting User List" 1
#$Users = Get-mailuser -ResultSize unlimited -OrganizationalUnit "R0018.COLLABORATION.ECS.HP.COM/Accounts/AbbVienet/Users" | ?{$_.legacyexchangeDN -eq ""}
$i = 0
$output = @()
$errOutput = @()
$err = $False
#2 Process users
ForEach ($User in $Users){
$i++
_UpProg1 ($i/$Users.Count*100) "Updating Recipients" 2
If ($user.ExternalEmailAddress -eq $null){
_ErrObject $user.Name, "Missing External Email Address"
ElseIf($user.DisplayName -NotLike "* "){
_ErrObject $user.Name, "DisplayName contains a trailing space"
ElseIf($user.DisplayName -NotLike "_*"){
_ErrObject $user.Name, "DisplayName contains a Leading space"
ElseIf($user.PrimarySmtpAddress -eq $null){
_ErrObject $user.Name, "Missing Primary SMTP address"
Else{
#Disable EmailAddressPolicy on these users
Set-Mailuser $User.Name -EmailAddressPolicyEnabled $false
#pass to Update-recipient
Update-Recipient $User.Name
$LEDN = Get-MailUser $User.Name | Select {$_.LegacyExchangeDN}
If ($LEDN -ne ""){
$object = New-Object -TypeName PSObject
$X500 = "x500:" + $LEDN.'$_.LegacyExchangeDN'
$object | Add-Member -Name 'Name' -MemberType Noteproperty -Value $User.Name
$object | Add-Member -Name 'x500' -MemberType Noteproperty -Value $X500
$output += $object
#Creating CSVFile Output
_UpProg1 99 "Outputting CSV file 3" 3
$CSVFile = "c:\scripts\Mail-enable\Mailenabled_$((Get-Date).ToString('MM-dd-yyyy_hh-mm-ss')).csv"
If($err){
$ErrCSVFile = "c:\scripts\Mail-enable\ProblemUsers_$((Get-Date).ToString('MM-dd-yyyy_hh-mm-ss')).csv"
$errOutput | Select-Object Name, Comment | ConvertTo-CSV -NoTypeInformation > $ErrCSVFIle
$Output | ConvertTo-Csv -NoTypeInformation > $CSVFile
if ($SendMail)
_UpProg1 95 "Sending mail message.." 4
If($err){
Send-MailMessage -Attachments $CSVFile,$ErrCSVFile -To $MailTo -From $MailFrom -Subject "Enable Mail Users Script" -BodyAsHtml $Output -SmtpServer $MailServer
Else{
Send-MailMessage -Attachments $CSVFile -To $MailTo -From $MailFrom -Subject "Enable Mail Users Script" -BodyAsHtml $Output -SmtpServer $MailServer
if ($ScheduleAs)
_UpProg1 99 "Attempting to Schedule Task.." 4
$dir=(split-path -parent $myinvocation.mycommand.definition)
$params=""
if ($SendMail)
$params+=' -SendMail:$true'
$params+=" -MailFrom:$MailFrom -MailTo:$MailTo -MailServer:$MailServer"
$task = "powershell -c \""pushd $dir; $($myinvocation.mycommand.definition) $params\"""
Write-Output "Attempting to schedule task as $($ScheduleAs)..."
Write-Output "Task to schedule: $($task)"
schtasks /Create /RU $ScheduleAs /RP /SC DAILY /ST 22:00 /TN "Enable Mail Users" /TR $task
The Problem is that when I look at the $errOutput I see things but when I pipe the $erroutput to convertTo-CSV I get this within the CSV file. I think its because I an calling a function to do the updating. But not sure.
Jeff C

Hi Jeff,
Any updates? If you have any other questions, please feel free to let me know.
A little clarification to the script:
function _ErrObject{
Param($name,
$errStatus
If(!$err){
Write-Host "error detected"
$script:err = $True
$ErrObject = New-Object -TypeName PSObject
$Errobject | Add-Member -Name 'Name' -MemberType Noteproperty -Value $Name
$Errobject | Add-Member -Name 'Comment' -MemberType Noteproperty -Value $errStatus
$script:ErrOutput += $ErrObject
$errOutput = @()
_ErrObject Name, "Missing External Email Address"
$errOutput
_ErrObject Name "Missing External Email Address"
$errOutput
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support

Internet Options, LAN Settings don't save when using Run As

Hi,
On Windows Server 2012 RTM with IE ESC off I can log on to the console of the server as UserA, I can open IE, open the Internet Options window, select the Connections tab, click LAN Settings, change a setting (eg specify a proxy server), click OK, and click
LAN Settings again to confirm my changes were saved.
However, if whilst logged on as UserA, I right-click the IE icon on the taskbar, select "Run as different user" and specify credentials for UserB instead, any changes I make in the LAN Settings window are forgotten the moment I click OK.
But, if I log on to the console of the server as UserB and open IE, the LAN Settings window does remember the changes I make, so this is not a user permissions or Group Policy issue.
Additionally, if I use Fiddler's "Tools, WinINET Options" menu to access the Internet Options window, I experience the same variations in behaviour I described above depending on whether Fiddler is run from the console user, or via "Run as different user".
Lastly, using Sysinternals's ProcMon, when the LAN Settings are saved correctly, I can see it is done via DllHost.exe (WinInetBroker) calling GetUrlCacheEntryInfoEx which in turn writes the "Internet Settings\Connections\DefaultConnectionSettings" value
to the registry. I can also see iexplore.exe writing the "Internet Settings\Connections\SavedLegacySettings" key. When attempting to change the LAN Settings when "Run as a different user", ProcMon still shows the successful write to the SavedLegacySettings
key but the other key is never written to, there isn't even an Access Denied.
A reference to "GetAppContainerRegistryLocation" in one of the ProcMon captured stack traces suggests this is behaviour new to Windows 8 as part of the "Metro"-style app isolation, however this is occuring in IE desktop mode and Fiddler (which is not a Metro
app).
I believe this is either a bug that needs to be fixed to allow changes to save correctly or return an error when attempting to save the changes if they will be ignored. At the very least, this behaviour needs to be documented.
Regards,
Jason

Hi Jason,
I have tested in my lab, and got same result with you. below is my test and results.
1. log on with user1>> click "IE" and select "Run as different user">> type user2's credential >>change proxy, click "OK". open "internet option" again, the change was not saved.
2. log on with user2, check proxy in IE, the change was not saved.
Then I tested on "Home Page", zone settings, , I found the changes can be saved.
I have done further test on other applications, such as notepad (enable/disable status base), calculator (View >> standard/scientific/programmer/statistics), the change can be save from "Run as different user".
since this is a behavior of IE, I suggest you submit a post in IE forum and IE experts may give you explanation on that.
Thanks.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Question on LDAPSync Post Enable Provision Users to LDAP task

Hi All,
Can you please clarify my doubt on
I created a user "testaccount" in OIM and via ldapsync, it gets created in OID.
Now, I manaully deleted that user "testaccount" in OID and wants to recreate the user account again in OID. Will this schedule task "LDAPSync Post Enable Provision Users to LDAP" solve my purpose or not?
Regards,
Sunny

I would not expect the account to be re-created. As far as OIM concerned it is in OID, as it was reconciled from OID, and OIM has a record of it's DN and GUID. If OIM later sees the account as disappeared it just treats this as an operation error, and does not update itself to say the account is deleted.
Have you run the LDAP Sync user deletion reconciliation job? If so it should have deleted the user in OIM. You can then create a new user with the same name (but different logon unless you set the system property to allow logon re-use), to create a new OID account.
If you do want to create the same user in OID without deleting and recreating the OIM user, via this post-create scheduled it is possible, but involves messing about with the OIM user record in the database to cleat out its old DN and GUID. In that way OIM thinks the user is not in LDAP and should try to recreate.

Cannot enable root user

When I set up my user account last year when I got this computer, I am pretty sure I remember a shortname being filled in or suggested to me, and it had an uppercase character for its first letter. So, my short name is "Name" -- except, you know, instead of "Name" it's my first name.
Anyway, I haven't had any issues until I installed 1Password. I'm having some trouble keeping it in sync, and ran a troubleshooting app as part of their guidance and I see that they say an issue is that my shortname contains an uppercase letter, when in fact it should be all lowercase.
I find mixed reviews online of whether all lowercase in the short name is still a thing—I've found a few places that say uppercase letters were allowed in 10.6.8, but others say that it should be all lowercase and I need to change my shortname.
I'd really rather not change it, but just to see how I would do it if I ended up having to, I checked out these instructions http://support.apple.com/kb/HT1428. I got hung up on enabling the root user, though, because I'm not able to select "Enable root user" from the edit menu. It's always grayed out.
I then found this Apple doc on enabling the root user in Mountain Lion: http://support.apple.com/kb/PH11331?viewlocale=en_US but it's nothing different. "Enable root user" is still always grayed out in the edit menu.
So... Is there no way I can enable the root user? I'm running 10.8.

FWIW, enabling the root user account to change a user's shortname is taking a sledgehammer to put a tack in a wall to hang a picture. Better is to follow this:
https://discussions.apple.com/docs/DOC-3872.
I've not enabled the root user account since installing OS X in 2002 and I use the Terminal and the CLI routinely.

Steps to enable lync 2013 QOS for audio

Experts,
I am on the way to enable lync 2013 QOS for audio only. We have already decided the ports ranges and make sure that its not override.
I just want to now, what will be happen to existing users using eEnterprise voice during i will lock the ports in servers and clients with GPO.
What is user impact during the implementation. I can't see any TechNet article for same. Do we have some recommended steps to follow to avoid any issue to existing users ??
Anil MCC 2011,ITIL V3,MCSA 2003,MCTS 2010, My Blog : http://messagingschool.wordpress.com

While you configure QoS nothing will happen with existing users or even existing calls. All that happens when you set a port range for Audio in the Lync is the next calls after the user picks up the change (client refreshes policies every 8 hours or
on log out/in) will us that port range.
If you have already decided on the port range you simply need to create the corresponding GPOs for both Server and Client as you mention. There is no harm in doing it mid-day unless you had defined ports before/specific firewall rules across the environment
for those ports - but that doesn't sound like the scenario here.
Thanks,
Richard
Richard Brynteson, Lync MVP | http://masteringlync.com | http://lyncvalidator.com

Using RunAs to enable Lync users

Similar Messages

Maybe you are looking for