Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Help me, please, set up a General user account in addition to the Admin account

Brand new iMac running Snow Leopard.


I figure this is the best time to learn about Admin Accounts and not using them for day-to-day work. We've been Apple users for 25+ years now and never done anything besides work from the Admin Account, but now is the time to learn. I suspect I ought to make a similar change to our MBP, which is running Tiger and therefore perhaps more vulnerable to invasion.


So - I've done my homework and read a lot of threads here on the subject - this fairly recent one was very helpful - https://discussions.apple.com/thread/3034237?answerId=15142231022#15142231022.


This is what confuses me there (and I hope it's OK to put in a quote from another thread if I site the source's location):


ds store wrote:


...Create another Admin user, log out of your first user and into the new Admin user, turn your first user Admin to General user.


When you have to install OS X updates, programs and alter certain folders it will need your Admin name and password...


If I go to Accounts in syst prefs, I assume it's a no-brainer to create a new Admin user as stated above.


I don't understand the point or logic of turning the first Admin user Account into the General user and making the new Admin Account be the real/working Admin account.


Am I missing something here? I am able to do it this way - I just don't get it.


And, once I am set up logging into the General User account, if I do need to do something that involves (say) installing software, or doing a SuperDuper backup, do I just log out of the General User account and log back into the Admin Account to do it - (and will I be given a nasty reminder something like you don't have permission to do such a thing you General User) and then do I have to log back out of Admin and into General?


Do both accounts have access to the same stuff? It's not like there are suddenly duplicates of every app, doc, photo and everything else in both accounts - is it?


Please help me understand this.

Thanks,

Mrs H

Posted on Aug 21, 2011 12:41 PM

Reply
25 replies

Aug 22, 2011 2:21 PM in response to WZZZ

WZZZ,

Thanks for, metaphorically, holding my hand on this one. Hard to type while holding hands though 😊


You are really kind to do this so very, very thoroughly. I feel like an idiot asking for such specific directions, but I know how easily I could screw this up - see your bold below. Ladies of a certain age should be lunching, playing bridge, and sipping tea (or whatever) and not trying to sort this stuff out...


I'm going to insert my comments within - hope this works for you - easier than any other way I could think of...Follow the blue interleaved comments, please.

WZZZ wrote:


This is really simple. (If the following appears complicated, it's only because, knowing you, I'm trying to include and anticipate every possible variable in advance. 😉)

OK this seems do-able!


We are getting confused by your introduction of the term "general" user account. The account(s) you are going to make standard will be the one(s) that you use every day, or all along. I suppose this is what you mean by "general." Making them, or it, into standard will not have any affect on the contents of the Home Folder(s).

Sorry for the confusion. Standard is a fine term too. General seemed like a neutral term that didn't mean Admin - I probably invented a term that means something else in the world you folks travel.


First, I don't know if you and your husband have separate accounts.

No, one shared account.

...If not, this will be the second account. If you already have another "independent" account not shared by you or your husband, then no need to create another new one.

Under accounts in syst prefs there is currently just the admin acccount and a "Guest Account" that was there from the start I guess (maybe it even was brought over from the G4 in Setting Up the iMac)

If it's new, give it a name, select a password and give it admin rights using the password of the admin account (soon to become standard.) If it's an already created account, but with standard privileges only, then give it admin privileges using the password from your admin (soon to become standard) account.

OK again that's clear.

One question - gulp - current admin on iMac has no password - I just hit return - is that stupid/risky or what??? MBP has a password for Admin Account.


To create the new account, unlock the padlock with the current admin password, if it is locked, and just click on the + button and fill in the required fields.

Clear


Next, take the other account... and make them, if they are not already, into standard accounts by unchecking the "Allow user to...." boxes. These are the "general, everyday" one(s) you have been using all along with your regular Home Folder(s). Don't do this until you have created the new admin account, or given an already established, "independent" one admin rights and created a password. Otherwise you will be locked out.

The part in bold (mine) and underlined (yours) is exactly what I was worried about in this whole process - getting locked out. Still, lost in previous sentence - first I make the newly created account an admin account - so for a brief time in this process there are 2 admin accounts at the same time? From now on - the account we use on a daily basis has access to everything that the former admin account had - docs, apps, photos, all those folders in the current home account? And the admin account has too?

(The reason I ask - on the MBP I had to setup a new account - called which I called "test" when we had trouble faxing and this account had NOTHING in it - no apps, no docs so that it was empty so nothing would conflict with the fax software on Tiger that was giving us trouble - AppleCare helped me set that up and I have no recollection ofhow, though I could find my notes in a folder somewhere I'm sure. But that account is not very useful for anything else...


From now on, you continue using those, now standard, accounts exactly as before, except if you need to install something, or if a password is required to perform some operation, you give the name of the new admin account and its password when prompted.

So no switching back and forth from log out of one and into another. Above someone said something about an item to select to make this happen seemlessly. I can't get there now to the previous posts to find the term (key chain?) without opening a new window and I don't want to lose all this work and it's getting late... this new Apple site doesnt have the nice save draft feature (or at least I can't find it) that the old site did


You don't worry at all about the Home Folder of the admin account, moving anything over to it or installing anything there. Anything that gets installed in the regular, general account, if it requires the admin password, gets installed there, anyway. It's sole purpose is to provide authentication when needed. (Well, maybe not its sole purpose. It can be useful when testing to see if something, some problem exists there in addition to your regular standard user.)

To reiterate-the work we do in the newly created account we use daily is real, and saved and in just one place - the "standard/general" account home folder which is (the same?) accessible one to the admin account.

Why am I having trouble with this???



The standard account(s) will not have their boxes checked for "Allow user to...."


User uploaded file


Everything in your Home Folder (s) remains just as it was before. Nothing changes except the accounts no longer have admin privileges. That's it. The admin account will have its "Allow user to...." box checked.

And there will be 2 home folders with the same stuff in them? Confused again...


That's it. Bob's your uncle.User uploaded file

A few years ago a Brit couple got a flat tire at the bottom of our very long drive. I walked down to see what and the wife said - "Bob is in a tizz" Mrs H is semi-in a tizz, but I'll get through this with your help

WZZZ


I'll be doing this tomorrow with a clearer head than I have now. I think this is all clear - I've asked a lot more which hopefully you can figure out how to answer without this beginning to look like a crazy quilt.


Thanks for your help and patience with me,

Mrs H

Aug 22, 2011 2:29 PM in response to Linc Davis

Linc Davis wrote:

...

Each account has its own home folder. Initially, nothing will be in it except the few default files that are created automatically. The same as when you set up the Mac for the first time.


... can I do whatever I do in SL on the iMac also be done in the same way in Tiger on the MBP to set up the new user account.

It's been a long time, but as I recall it was pretty much the same.


Is that why the directions I originally quoted from ds store have one go through the steps of creating a second admin account and then making the first one a general user and the new one is the new - only? - admin account now?


If I'm understanding correctly what you want to do, you should create a new, empty admin account, which you'll use only for admin tasks, and then demote your old account to non-admin status. That way, you won't have to transfer much data between accounts, which can be tricky.

Thanks Linc,


I didn't see your reply before I began replying to WZZZ above.


Your reply here and the explanation from WZZZ help clarify the process immensely.


"If I'm understanding correctly what you want to do..." What I want to do? All I want to do is what lots of folks here said is a wise thing - don't do your daily work from your admin account. It's that simple - but setting it up has seemed to be so very complicated and it shouldn't be, I know that.


Thanks for the thoughts about Tiger too.

Mrs H

Aug 22, 2011 5:49 PM in response to Mrs H

>One question - gulp - current admin on iMac has no password - I just hit return - is that stupid/risky or what??? MBP has a password for Admin Account.


Set a password


>The part in bold (mine) and underlined (yours) is exactly what I was worried about in this whole process - getting locked out. Still, lost in previous sentence first I make the newly created account an admin account - so for a brief time in this process there are 2 admin accounts at the same time? From now on - the account we use on a daily basis has access to everything that the former admin account had - docs, apps, photos, all those folders in the current home account? And the admin account has too?


Yes, briefly, two admin accounts. Again, nothing changes in the old admin account. Use it as usual. The newly created admin account, the one used only for authentication, has an empty Home Folder. Just make sure you have set up the new admin account -- with a password -- before you turn the original admin into standard.


No need to enable fast user switching. Once in a while, you might need to log in to the admin account.


>To reiterate-the work we do in the newly created account we use daily is real, and saved and in just one place - the "standard/general" account home folder which is (the same?) accessible one to the admin account.

Why am I having trouble with this???


You don't do any work in the newly created admin account. It just sits there all by its lonesome and once in a while gives a nod to a request for an admin name and password. That's all it does.


>And there will be 2 home folders with the same stuff in them? Confused again...


There will be two home folders, but, again, the new admin one will be empty. (Unless you decide to stick something in it.) Except for applications which you install exclusively in the standard account, both accounts will share those.


Note: there will occur certain situations where some things may be off limits to the standard account. You will notice that, if you go to Console in the standard account, some of the logs will be dimmed/greyed out. system.log is one of them. A standard account holder doesn't have permission to look at those. I could give you some easy Terminal commands that will enable you to open those, but I don't want to make this introduction more complicated than it is. If that happens, you just log in to the admin account and look at the logs from there. Another situation will be anything requiring the sudo (superuser) command in Terminal, which, from a standard account, you won't now have permission to execute. There is an easy way around this, but let's leave that for another time. Onyx, if you use that, requires it be run from an admin account. Again, if you need to do this, post back later on. Once you've got this all set up, I can give you the steps to do all of the above directly from Terminal in the standard account without needing to log in to the admin account.


Once in a blue moon you may encounter an application that requires it be installed from the admin account. But once you have installed it in the admin account, it will be present in the applications folder of the standard account. I have only had to do this once and you may never need to.

Aug 22, 2011 6:41 PM in response to WZZZ

WZZZ -

I think I get it! 🙂 Just a few more clarifications.


>To reiterate-the work we do in the newly created account we use daily is real, and saved and in just one place - the "standard/general" account home folder which is (the same?) accessible one to the admin account.

Why am I having trouble with this???


You don't do any work in the newly created admin account. It just sits there all by its lonesome and once in a while gives a nod to a request for an admin name and password. That's all it does.


"the newly created account we use daily" by this I meant the standard acct, not the new admin acct.



>And there will be 2 home folders with the same stuff in them? Confused again...


There will be two home folders, but, again, the new admin one will be empty. (Unless you decide to stick something in it.) Except for applications which you install exclusively in the standard account, both accounts will share those."


Now why/how would I choose to install apps exclusively inthe standard acct and how do I control this so they are in the admin acct - which is where I'm guessing (thinking? hoping I get it?) they belong? Help 😟


Am I right here - oh how I hope you'll say yes: our original acct - lets call it ORIGINAL to be clever, but not in all caps - stays as the account we work in daily, but it no longer has the admin privileges it used to. It keeps its admin status until we set up another admin acct, and it should be given a passsword even if it is just a standard acct. It keeps the name it had before, ORIGINAL, but no longer is an admin account. The second, new account we create - lets call it NEW, is set up from the start as an admin account with a password (can it be the same asthe other one?) and it just sits there. If we have to log into it we'll be told.


When I do a SuperDuper backup - and log out in order to log back in in Safe boot mode (following SD's suggestion) which acct do I log into to do a backup and will the whole iMac HD for both accts be backed up as one volume, which they are, right???


I fear I am trying your patience,

Mrs H


PS I just saw https://discussions.apple.com/thread/2685730?answerId=12769717022#12769717022 which discusses the test account as I mentioned I had set up for the MBP. Is it too late to set this up. How do I do a pristine test account since I've already changed settings but haven't installed any software except Firefox.

Aug 23, 2011 6:07 AM in response to Mrs H

Core concept behind this (from 10.5, but exactly the same):


Accounts with administrator privileges have the ability to make broad changes to the computer configuration. Administrators can make changes to locked preferences in System Preferences, install software, and perform a variety of tasks that other users can’t.


http://docs.info.apple.com/article.html?path=Mac/10.5/en/8673.html



>Now why/how would I choose to install apps exclusively inthe standard acct and how do I control this so they are in the admin acct - which is where I'm guessing (thinking? hoping I get it?) they belong? Help 😟


http://reviews.cnet.com/8301-13727_7-20016015-263.html


If you want to move or first install an application to the default applications folder from the std account (not the user one, if it ever gets created or you make one yourself -- I don't have one) you will need to authenticate with the admin name and pword.


>Am I right here - oh how I hope you'll say yes: our original acct - lets call it ORIGINAL to be clever, but not in all caps - stays as the account we work in daily, but it no longer has the admin privileges it used to. It keeps its admin status until we set up another admin acct, and it should be given a passsword even if it is just a standard acct. It keeps the name it had before, ORIGINAL, but no longer is an admin account. The second, new account we create - lets call it NEW, is set up from the start as an admin account with a password (can it be the same asthe other one?) and it just sits there. If we have to log into it we'll be told.


Yes, the std gets a pword. You have understood the correct procedure for setting this up.


Even if possible, and I don't think it is, DON'T use the same pword for both. That defeats the security. You log in to the std account with the std account pword.


SD will back up the entire volume, which means all users, admin and std.


The "pristine" test account is another matter entirely. You can use the new admin one, if it hasn't been worked in, or when you need one it's quite simple to set up another, brand new account. It can be admin.



Really, you just have to go ahead and do this and see for yourself how it works. It will be OK. Nothing at all risky. And if you don't like it, it's not irreversible. You can always make the std account admin again. Paraphrased saying or proverb: If you want to leave a house you're in, you can first barricade the front door with piled up furniture to block your own exit, then get out by climbing out the window, or you can just open the front door and walk out.


Believe me, I know something first hand about barricading front doors. 😉

Aug 23, 2011 7:27 AM in response to WZZZ

WZZZ-


It's really getting clear now. You are wonderful for sticking with me on this. I feel pretty confident finally.

WZZZ wrote:



1. If you want to move or first install an application to the default applications folder from the std account (not the user one, if it ever gets created or you make one yourself -- I don't have one) you will need to authenticate with the admin name and pword.


2. Yes, the std gets a pword. You have understood the correct procedure for setting this up.


3. SD will back up the entire volume, which means all users, admin and std.


4. The "pristine" test account is another matter entirely. You can use the new admin one, if it hasn't been worked in, or when you need one it's quite simple to set up another, brand new account. It can be admin.


From an earlier post of yours: "Yes, briefly, two admin accounts. Again, nothing changes in the old admin account. Use it as usual. The newly created admin account, the one used only for authentication, has an empty Home Folder. Just make sure you have set up the new admin account -- with a password -- before you turn the original admin into standard."


4. So, could we have 2 admin accounts at one time, permanently? I'm pretty sure your answer will be yes.

What about the first thing I do before anything else, is just set up a new account, call it Test and check off allow user to administer. That would be the "pristine" account I've asked about? And it would be an admin account with a password just in case I do something unbelievably stupid later on...?

I realized my question about "pristine" was moot since although I haven't installed any software, except Ff, I have used Setup Assistant and brought everything (except apps) over from theG4 so this is hardly pristine!


1. Huh? "User" account is not "standard account" it's yet another type and what I'm doing is creating a standard account and an admin account?

Default app folder - is in the home folder? and it's where apps are stored but which can only be changed by admin??


3.What about the business of logging out and logging in with shift down - SD's directions? Do this from the admin acct which I access by logging out and logging back in to admin account?


2. Hurrah!


Mrs H

Aug 23, 2011 2:16 PM in response to WZZZ

mea culpa mea culpa


Too many questions, sorry. I got carried away in my enthusiasm. I know I can be overly demanding sometimes and I think I crossed the line here.


Thanks for the book recommendation. I just ordered it. I found it used, on the cheap - condition described as "Very Good." It arrives in a fortnight. Til then I'll try to refrain from asking anything further.


Thank you, really, thank you so very much for all of your help.

Your replies took a lot of time to compose and required patience with me, and I really am thankful to you for that. 😊


Mrs H

Aug 23, 2011 4:48 PM in response to Mrs H

You're very welcome. I was just beginning to think that, at a certain point, if you try something concrete a lot of what seems intimidating in the abstract just dissolves. And not all mistakes, if they happen, turn into disasters. I know this from my own experience. I thought, perhaps, you needed a push in that direction. The book will be very useful, at least parts of it, I'm sure. 🙂

Help me, please, set up a General user account in addition to the Admin account

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.