VPP end user account creation

I am a VPP program manager, i created a facilator account but i can't find out how to create a end user account to download the apps that the facilator purchases. In the VPP video training they talk about creating both types of accounts but I am not seeing where to do it.

When you create a new user and leave the password fields blank, you should see a warning similar to the following one. Clicking "OK" will continue to create the account, but if you press Return/Enter or click "Cancel" then the account will not be made.

Similar Messages

Send Email on User Account Creation in OIM 11g

Hi All,
We are working on email notifications for the user account creation. we followed the following procedure:
1) Creation of email template
2) Creation of resource object
3) Creation of notification process
4) Create Customer Rule
5) Create Customers Role and Assign Rule
6) Create Access Policy.
After assigning AD account to the user we are getting following errors..
1> Class/Method: tcEmailNotificationUtil/parseEmail encounter some problems: Data Access Error
Supplemental Detail com.thortech.xl.dataaccess.tcDataSetException: Data Access Error
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:952)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1523)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:903)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1490)
at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.parseEmail(tcEmailNotificationUtil.java:1213)
at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.constructEmail(tcEmailNotificationUtil.java:235)
at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.constructEmail(tcEmailNotificationUtil.java:269)
at com.thortech.xl.dataobj.tcScheduleItem.checkForEmailNotification(tcScheduleItem.java:3765)
2> *Class/Method: tcEmailNotificationUtil/sendEmail encounter some problems: [EOF]*
Supplemental Detail javax.mail.MessagingException: [EOF]
at com.sun.mail.smtp.SMTPTransport.issueCommand(SMTPTransport.java:1481)
at com.sun.mail.smtp.SMTPTransport.issueSendCommand(SMTPTransport.java:1512)
at com.sun.mail.smtp.SMTPTransport.mailFrom(SMTPTransport.java:1054)
at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:634)
at javax.mail.Transport.send0(Transport.java:189)
at javax.mail.Transport.send(Transport.java:118)
at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.sendEmail(tcEmailNotificationUtil.java:850)
at com.thortech.xl.dataobj.tcScheduleItem.checkForEmailNotification(tcScheduleItem.java:3782)
at com.thortech.xl.dataobj.tcScheduleItem.eventPostUpdate(tcScheduleItem.java:741)
3) And I am also getting error related to FAX like..
select Fax from orc orc, usr usr where usr.usr_key=orc.usr_key and orc.orc_key =293
Supplemental Detail java.sql.SQLSyntaxErrorException: ORA-00904: "FAX": invalid identifier
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:95)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:135)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:210)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:473)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:423)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1095)
at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:193)
at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:856)
4) Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00904: "FAX": invalid identifier
Supplemental Detail java.sql.SQLSyntaxErrorException: ORA-00904: "FAX": invalid identifier
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:95)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:135)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:210)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:473)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:423)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1095)
at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:193)
Plaese provide quick resolution to our issue..
It will be very helpful to us.
Thanks

Thanks alot.I have configured this requirement.
Regards
A Abhinay

End user account

Dear all,
I have created an application in the HTML DB repository and create a developer account to access the application. After logging in, the developer account user can use the standard feature such as SQL Workshop and Data Workshop of HTML DB. My question is if there is any method to control the priviledge of a user to use functions designed the application only and prohibit him to use any standard feature.

Hello "73719",
even the developer account won't see the edit links when calling the application link directly...
Assuming your host is called myhost, your port is 7777, your DAD is called htmldb, your application is number 125 and your application's start page is 1, the URL you call to go directly to the app would be
http://myhost:7777/pls/htmldb/f?p=125:1
You may setup end user accounts inside HTMLDB by making them neither admin nor developers for the workspace. However, for a larger numer of users on production applications, it is recommended to perform authentication against an LDAP server (e.g. OID or Active Directory) and configure the apps accordingly.
HTH,
Holger

CRM 5 : New B2B User Account Creation

Hi all
I am in the proceess of Creating User Account using ISAUSERADM application.
I am able to create a new Use Account and assign Authorization for the created USer Id.
But do not know what is the Initial Password for the created User Id. Since there is nowhere in the ISAUSERADM that request the initial Password !!!
Any idea ???
Thanks
Jack
Message was edited by: Jack

Hi Jack,
the ISA USER ADMIN TOOL shows you the generated password when the new user is created. It also sends an email to the user using his/her email address.
You can see the email in transaction code SOST although it's contents are encrypted.
I hope this information helps you.
Best regards,
Nacho.

What is a good way on a resume to say you created End user accounts

I also created in-house solutions of telling the users how to correct the most common problems they may encounter.

and also deleted their accounts on termination.
Basically I want to say that I have administered user accounts when they are hire and I have closed out their accounts upon their termination/departure.
Thank you
This topic first appeared in the Spiceworks Community

Mitigating risks during new user account creation

I have a requirement for AC 10.
Is it possible to send a message from the security admin stage to role owner stage to know whether to mitigate the risk or not without approving the request at security stage. I am unable to understand the stages to be configured so the mitigation risks can be done during the new/change account request type.
I would like to know who should be responsible for mitigating the risks while creating the request for new or change user account. If we assume that the risk is not mitigated already. Is security admin or role owner will mitigate it.

Is it possible to send a message from the security admin stage to role owner stage to know whether to mitigate the risk or not without approving the request at security stage.
It is not possible to send a notification. However, the mitigation options can be used to identify the same in the request.
I would like to know who should be responsible for mitigating the risks while creating the request for new or change user account..
This is purely based on the process that you follow in your organization/project. Here are some instances:
1. If the role framework is properly maintained (risks are mitigated at the role level, and only composites are assigned to user) - Niether the business owner nor the security person needs to mitigate the risks at users level, since all the risks are already mitigated at the role level.
2. If the role framework is not properly maintained and single roles are assigned to users - Migitation is required. However, in a few instances, the BPOs or the functional owners will perform a risk analysis, mitigate if necessary and then raise the request. This can be done in RAR manually or also can be done in CUP.
3. The mitigation tasks are completely owned by Security team and BPOs or functional owners will only approve/review.
Hope this answers your question.
Regards,
Raghu

IWeb sites - allow user account creation on your site?

Hey,
Are you able to create a sort of a user account on your iweb site, so people who visit the site can create an account, upload a avatar, and see it everytime they visit it?
Cheers!

You can link forum/message board. But, as far as setting up accounts within iWeb I do not know of any way to do so at this time.

Windows 8 Sysprep - Can't skip local account creation and autologon fails, wrong admin password.

Using Windows 8 x64 Enterprise, Sysprep pauses to ask me to create a local user, which I don't want.
If I enable SkipSystemOOBE and SkipUserOOBE in OOBE under Microsoft-Windows-Shell-Setup sysprep (in oobe mode) will skip user creation and autologon works. But it only works correctly once. If I run sysprep again, when it tries to autologon
it will say that I have the wrong password for the local account. After I type in the password manually it works. If I use the same password for the local administrator account as for the autologon account, it looks to have the encrypted password
twice with an equal sign after it.
What I need to know:
How to skip local user account creation (we run on a domain but I have it connect through scripts later)
How to fix the autologon issue
Do I need the local administrator account enabled for this to work?
I have my unattend.xml file attached.
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<AutoLogon>
<Password>
<Value>[removed]</Value>
<PlainText>false</PlainText>
</Password>
<Username>[removed]</Username>
<LogonCount>2</LogonCount>
<Enabled>true</Enabled>
</AutoLogon>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<Order>1</Order>
<CommandLine>c:\folder\abatchfile.bat</CommandLine>
<RequiresUserInput>false</RequiresUserInput>
</SynchronousCommand>
</FirstLogonCommands>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
<NetworkLocation>Work</NetworkLocation>
<HideLocalAccountScreen>true</HideLocalAccountScreen>
<ProtectYourPC>3</ProtectYourPC>
</OOBE>
<TimeZone>Eastern Standard Time</TimeZone>
<DisableAutoDaylightTimeSet>false</DisableAutoDaylightTimeSet>
<RegisteredOrganization>Company Name</RegisteredOrganization>
<RegisteredOwner>CompanyName</RegisteredOwner>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<UserLocale>en-US</UserLocale>
<UILanguage>en-US</UILanguage>
<SystemLocale>en-US</SystemLocale>
<InputLocale>en-US</InputLocale>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<ComputerName>*</ComputerName>
</component>
</settings>
<cpi:offlineImage cpi:source="wim:[removed]/sources/install.wim#Windows 8 Enterprise" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>

The user accounts-creation page in Windows Welcome is suppressed if a user or a group is added to a local security group. Add a user or a group to a local security group by doing one of the following:
Create a local user.
Add a domain user to a local security group with the Microsoft-Windows-Shell-Setup | UserAccounts unattended installation setting.
To suppress the user accounts-creation page in Windows Welcome, without creating a local user, use one of the following workarounds:
Workaround 1
If the computer is already joined to a domain, use the following XML example to add the Domain Users security group to the Local Users security group.
<DomainAccounts>
<DomainAccountList wcm:action="add">
<DomainAccount wcm:action="add">
<Group>Users</Group>
<Name>Domain Users</Name>
</DomainAccount>
<Domain>FabrikamDomain</Domain>
</DomainAccountList>
</DomainAccounts>
Because joining a domain automatically adds the Domain Users security group to the Local Users security group, the DomainAccounts command does not affect the membership of the Local Users group. However, using this XML example to join a domain will also suppress
the user accounts-creation page in Windows Welcome.
Workaround 2
Use the Sysprep/Quit command to set the following registry value to 1:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OOBE\UnattendCreatedUser
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

Unable to Create End User in Apex 4.0.2

I want an End User to use an application without seeing Development links at the bottom (like 'Edit page x' or 'Session' or 'Debug'). I go to the Administration tab, click 'Manage Users and Groups', and click Create User. In the Account Priveleges section I specify 'No' for User is a Workspace Administrator. I specify 'No' for User is a developer. I fill in the mandatory fields and click 'Create User' at the top.
It processes the action BUT on the following page, for the row created representing the new user, the Account Type says Workspace Administrator and not End User. If I log in with the new user I see developer tabs at the bottom.
How do I create an End User?
I obtained APEX 4.0.2.00.08 by downloading Oracle Express 11g if that helps.

Custom Authentication is behaving like an End User account, which is good - no developer tabs at the bottom. I used something similar to Chapter 11 of the Advanced Tutorials guide:
CREATE OR REPLACE FUNCTION acl_custom_auth (
p_username IN VARCHAR2,
p_password IN VARCHAR2)
RETURN BOOLEAN IS
BEGIN
FOR c1 IN (SELECT 1
FROM acl_employees
WHERE upper(userid) = upper(p_username)
AND upper(last_name) = upper(p_password))
LOOP
RETURN TRUE;
END LOOP;
RETURN FALSE;
END;
/

End user? in apex 4.2.3

hi
i have searched forum but could not understand the solutions yet
i have create an user without admin and developing rights
how should i enable applications created for view only?
a step by step ...instructions pleaseeeeeeeeee

hemu wrote:
sir
when i logged in with newly created user
i do not see any of my applications i have created
Unsurprisingly:
i have create an user without admin and developing rights
An "end user" account without admin or developer access to the app builder obviously can't access applications through the builder. They access applications directly using an application URL containing the application ID/alias and page ID/alias supplied by an admin or developer user.

DPM 2012 still requires put end users into local admin groups for the purpose of end user data recovery?

On client computers that are protected by DPM 2010 and prior versions, you had to put the end users account in the local administrators group. If you did not add the end user account to the local administrators group you would get this error after opening
the recovery tab in the DPM client: “DPM found no recovery points which you are authorized to restore on the specified DPM server. You can restore only those recovery points for which you were an administrator at the time the
backup was taken. To restore other recovery points, contact your DPM administrator, or attempt to restore from another DPM.” This is not ideal on many networks because the end users are not allowed to have local administrator access.
Ths fix to this was included in hotfix 2465832 found here: http://support.microsoft.com/kb/2465832.
This hotfix (a hotfix rollup package for DPM 2010) resolves other issues with DPM 2010 as well. You can find the full list of what this hotfix corrects on that link.
One would think this issue should have been resolved in DPM 2012, however I am encountering the same exact issue, had to include end-users into the workstation local admin group before they can search for recovery points on the DPM server. This is not acceptable
practice.
Is there a new hotfix for the same issue on DPM 2012? I am hesitated to apply KB2465832 since it also includes many other fixes for DPM 2010, which may not appicable for version 2012.
Please help.
Thanks,

This is a hands off solution to allow all users that use a machine to be able to restore their own files.
1) Make these two cmd files and save them in c:\temp
2) Using windows scheduler – schedule addperms.cmd to run daily – any new users that log onto the machine will automatically be able to restore their own files.
<addperms.cmd>
Cmd.exe /v /c c:\temp\addreg.cmd
<addreg.cmd>
set users=
echo Windows Registry Editor Version 5.00>c:\temp\perms.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection]>>c:\temp\perms.reg
FOR /F "Tokens=*" %%n IN ('dir c:\users\*. /b') do set users=!users!%Userdomain%\\%%n,
echo "ClientOwners"=^"%users%%Userdomain%\\bogususer^">>c:\temp\perms.reg
REG IMPORT c:\temp\perms.reg
Del c:\temp\perms.reg
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.
That's a good one! Thanks for that.
I've been scripting on KIX for some time, so here is mine, hope it helps to someone... (it's probably not the best, but it works)
========================================================================
$RC=setoption("WOW64AlternateRegView","on")
$DPMkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection"
$uservariable = "%userdomain%\%username%"
If KeyExist ($DPMkey)
$Userstring=ReadValue($DPMkey, "ClientOwners")
If $Userstring == ""
WriteValue($DPMkey,"ClientOwners", $uservariable, "REG_MULTI_SZ")
? "Key created"
else
If not instr($Userstring,$uservariable)
$Userstring = "$Userstring,$uservariable"
WriteValue($DPMkey,"ClientOwners", $Userstring, "REG_MULTI_SZ")
EndIf
Endif
EndIf
==========================================================================
The problem actually is that you still need to use an admin account to write on the registry, so ensure you configure it properly on the schedule task.
In case you use a service account on the schedule task... the "$uservariable" will get populated with that account. As a work around to this... I changed it for the following line:
=========================================================
$uservariable = ReadValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI", "LastLoggedOnSAMUser")
=========================================================
The only problem with that, is that key gets created/updated only if user gets logged phisically on that PC, but will not work for anyone connecting through RDP.

Need to automatically add newly created user account in an existing active directory group.

Hi All ,
In my environment we are having window server 2012 active directory environment.We need to have the newly created active directory user account to get added automatically to the existing active directory group after that new user account creation.
Please tell us the possible ways to achieve this scenario.
Regards
S.Nithyanandham
Thanks S.Nithyanandham

Hi,
Can you please confirm your requirement,
When you create a new user account in AD, based on the user's property like Department, Job or Location, the user need to be added to your specific AD groups?
Regards,
Gopi
JiJi
Technologies

Removing Active Directory Synchronization - will it delete all end-users?

I need to split our company across two AD Forests and do not want to setup AD LDS for Dirsync and authentication. Can I disable LDAP synchronization on CUCM 8.5.1 and have it leave the current users objects? I would look to add passwords to each of the users in the Cisco directory and have Cisco perform the authenication locally.

The threads recommend that I remove LDAP synchronization and authentication on CUCM Admin. Then run this command:
You can conver the users back to standard CUCM users using sql query update...Ths is easy to do
run sql update enduser set status=1
Will this procedure work?
1) remove LDAP sync and auth from CUCM Admin (stay signed in)
2) run the update on the enduser table (before the 3:15am garbage collection run)
3) I assume that none of the end user accounts can be used now since the passwords were stored on AD and not in the enduser table. I would have to update each of the enduser entries and add a password.
What could go wrong?

User accounts locking out.

I have recently upgraded to APEX 3.1.0.00.32 and have discovered that my users are now able to lock themselves out of my app.
I found settings both at the apex level as well as the workspace level to disable this feature, however the accounts are still locking out. Is there a setting somewhere else that I need to change?
Thanks,
Joel

Kathryn,
The feature has no Disable/Enable control. It can be required of workspaces (toggled at the site level) with respect to the epiration/locking policy for end-user accounts, or not. If not required, individual workspaces can enable or disable the feature, again, with respect to end user account expiration and locking.
For developer/admin accounts, the feature is always "on". If you prefer a longer expiration period, say 24 years, set the Account Password Lifetime (days) value to 8766. If you want to allow a large number, say 1000, of invalid consecutive password attempts, set the Maximum Login Failures Allowed value to 1000.
Scott

**want to create a user account from "Crypted Password" to "Open Directory"

I have create a user account with "user password type: Crypted Password"
is there any way I can script it to "user password type: open directory"
I've use perl-ldap to create user account but I don't know how to change user password type to open directory,
because my script will add a new node in the directory, I just need a way to make the "user password type" to "Open Directory" AT CREATION TIME, not modifing it after a have a user account, the script below will generate a node in the directory with "Crypted Password" as User Password Type,
is there any attribute I need to add to make it "Open Directory" or perl command, applescript, bash, objective c(hopefully not)....
thank for reading...
$res = $c->add(dn => 'uid=testing,cn=users,dc=microsoft,dc=info',
attr => [
'cn' => 'testing',
'gidNumber' => '20',
'homeDirectory' => '99',
'objectclass' => 'inetOrgPerson', 'posixAccount', 'shadowAccount', 'apple-user', 'extensibleObject','organizationalPerson','top','person',
'sn' => 'testing',
'uid' => 'testing',
'uidNumber' => '5000',
1. 'apple-generateduid' => '27318931-B341-4364-91B4-84E4AAAD1234', #026F",
'givenName' => 'testing',
1. 'loginShell' => '/bin/bash',
'userPassword' => 'testing' ,
1. 'homePhone' => '555-2020',
2. 'mail' => '[email protected]'
die "unable to add, errorcode #".$res->code().$res->error if $res->code( );
thanks

Since this question isn't Xserve specific a better place to get an answer is probably in the Directory Services forum: http://discussions.apple.com/forum.jspa?forumID=1353
That being said if you are trying to migrate Crypt accounts to OD accounts then the short answer is no. You need an unencrypted password to put the password into OD via a script do short of cracking the encrypted password, inserting it in plain text into the OD user account creation process then I don't think you can.
You should be able to dictate the password (and any other settings you can do from the GUI) but the password is the missing piece. Under really old OS X systems I actually suspect you can get passwords to export (hinted at by an Apple engineer I discussed this with) but there is probably a faster and more straightforward solution.
What I have done is export from NetInfo, clean the accounts via script and then reimport the accounts into the new system. I usually assign a password and dictate "Must change password at next login" and then email people the temporary passwords. It's been a while but I believe you can mass select and then dictate password settings so if that works for you create accounts with all the same password and then you can select by group and make changes - eg Must change password at login.
Good luck,
=Tod

VPP end user account creation

Similar Messages

Maybe you are looking for