Can not get access files from Windows 7 to Claims-based file authorization share

We have AD level 2012R2, DCs running 2012R2 of course, and we have clustered File Server (3 FSNodes running 2012R2).
We enabled 2 policies 
KDC Support for claim
Kerberos support for claim
We created 1 claim type in ADAC (For example "Division" Source Property). Filled this property to all IT AD Accounts by our value "IT"
On FS made a share folder ITDivision:
- set permissions  Domain Users can Modify if User.Division equals "IT"
so on Windows 8 IT Users can access files on this share and on Windows 7 they cant
=\ . We know from many presentations about Dynamic Access Control that File Server must enroll user claims if client do not support this claims (Service-for-User-To-Self)

Hi,
>>so on Windows 8 IT Users can access files on this share and on Windows 7 they cant
=\ . We know from many presentations about Dynamic Access Control that File Server must enroll user claims if client do not support this claims (Service-for-User-To-Self)
How is it going? Was there any error message? As far as I know, Dynamic Access Control (DAC) should work for downlevel clients. It’s backwards compatible. As Florain explains in the following blog:
For non-Windows 8 and non-Windows Server 2012 boxes accessing DAC-protected file shares, the users do not carry any claims. For them, the Server 2012-based file share will query Active Directory and proxy the claims request to figure out what claims
the user and machine bring. The file server checks in the name of the user, whether they should have claims. With that information, the file server evaluates the access to the file share. So yeah – DAC works for downlevel clients, too. It’s backwards compatible.
And totally transparent to Windows 7.
Questions regarding Dynamic Access Control (FAQ)
http://www.frickelsoft.net/blog/?p=293
In addition, regarding dynamic access control, the following blog can also be referred to for more information.
Dynamic Access Control in Windows Server 2012
http://www.infoq.com/news/2012/10/Dynamic-Access-Control
Please Note: Since the above two website are not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Frank Shen

Similar Messages

  • I am new and can not get my file to inport from ny doc to adobe

    I am new and can not get my file to inport from ny doc to adobe

    What is your Adobe? Please give full name and version.
    What do you try?
    What happens? Please give any error messages in full.

  • My 1st ipod was lost. My library is on a Dell with Windows.  I registered my new ipod to a Mac.  How can I get my library from Windows onto my new Ipod?

    My 1st ipod was lost. My library is on a Dell with Windows.  I registered my new ipod to a Mac.  How can I get my library from Windows onto my new Ipod?

    Thank you for your help.  I am still having trouble.  As you can tell, I am not technologically advanced AT ALL.  My music is all showing up in the library but when I go to file in the top left corner, Sync is greyed out and I cannot select it.  I'm gonna continue to try this.  It's been a long time since I had my 1st ipod and things have changed so much I will probably need to research this stuff.  Thanks again for your help.

  • HT1454 Can not get video out from my ipod touch 3rd gen. Any ideas? It should nt be diffiicult to do this on the 21 st century, or not?

    After having spent EUR 130 on cables from apple, i still can not get video out from my ipod touch 3rd gen. Any ideas? It should nt be diffiicult to do this on the 21 st century, or not?

    Backing up an iOS device will copy some data to a backup file within iTunes, but this excludes all media.  You can also transfer iTunes Store purchases from the iDevice to iTunes but, without using a third-party tool, nothing else.  As long as you do not sync the iPod with your new library, the media that's on it will remain ... for as long as it keeps functioning, is not lost, stolen, eaten by the dog, ...
    You may also have an option to recover your previous library from your old laptop; as long as its hard drive isn't fried, a computer repair store or technician may be able to extract the drive, mount it in an external enclosure, and copy your data to another PC.  Whatever you choose, there is no real alternative to having all your media on your computer, managed by iTunes, and regularly backed up to another device/location.

  • Can not get movies purchased from iTunes to my computer

    Can not get movie purchases from iTunes to my computer

    Is the manually manage music and videos option still selected from under the iPod's Summary tab?  What happens when you try to drag files over to your iPod Classic?
    B-rock

  • I can not get link-value  from af:tree.

    Hello.
    I use jdeveloper 10g.
    I can not get link-value from tree.
    I use following code:
    <f:facet name="nodeStamp">
    <h:panelGroup binding="#{backing_dialogDic_dic_ETS.panelGroup1}"
    id="panelGroup1">
    <h:outputText value="#{item.vidNum} #{item.vidName}"
    binding="#{backing_dialogDic_dic_ETS.outputText1}"
    id="outputText1"/>
    <af:commandLink
    binding="#{backing_dialogDic_dic_ETS.commandLink2}"
    id="commandLink2"
    action="#{backing_dialogDic_dic_ETS.returnObject}">
    <af:setActionListener from="#{item.idVid}"
    to="#{processScope.ETSId}"/>
    <af:objectImage source="/images/icons/10.gif"
    shortDesc="Выбрать"
    binding="#{backing_dialogDic_dic_ETS.objectImage2}"
    id="objectImage2"/>
    </af:commandLink>
    </h:panelGroup>
    </f:facet>
    </af:tree>
    //in java bean:
    public String return_Object() {
    Object ob = JSFUtils.getManagedBeanValue("processScope.ETSId");
    System.out.println(o);
    return null;
    In console I see null.
    How I get this value???
    I can get this value if i use treeTable instead of tree.
    Thx, Dema.

    Hi,
    not that I think it matters, but the processScope is not a managed bean but a memory scope. So if
    JSFUtils.getManagedBeanValue("processScope.ETSId");
    assumes a managed bean then this may be incorrect as most likely there exist no managed bean with this name. You should be able to access the process scope from AdfFacesContext.getProcessScope(), which then returns a Map, which you call get("ETSId") on
    Frank

  • I can not get my songs from i tune in to my i phone?

    why I can not get my songs from my itune in to my phone?

    Hi hakankirma,
    Thanks for visiting Apple Support Communities.
    Make sure to use these steps when setting up syncing between iTunes and your iPhone:
    iTunes 11 for Windows: Set up syncing for iPod, iPhone, or iPad
    http://support.apple.com/kb/PH12313
    If you see errors when syncing over USB, the troubleshooting steps in this article can help:
    iOS: Troubleshooting USB-related alerts when syncing
    http://support.apple.com/kb/TS5254
    Regards,
    Jeremy

  • HT1454 why i can not get video out from my ipod touch after i did the upgrade

    why i can not get video out from my ipod touch after i did the upgrade

    why i can not get video out from my ipod touch after i did the upgrade

  • HT4352 How can I get Home Sharing turned on my Apple TV if I have lost my remote control and my remote apps on my ipad and iphone can not get access to my apple tv, only my itunes.

    How can I get Home Sharing turned on my Apple TV if I have lost my remote control and my remote apps on my ipad and iphone can not get access to my apple tv, only my itunes.

    You can't, you will need to get a new remote.

  • I have just recently installed ios6 to my iPad 3 an iPhone 4 my iPhone works fine but my iPad is not working at all I can not get a response from it, it seemed to download an then install but did not reset and turn on and will not turn on HELP!! Withdrawa

    I have just recently installed ios6 to my iPad 3 an iPhone 4 my iPhone works fine but my iPad is not working at all I can not get a response from it, it seemed to download an then install but did not reset and turn on and will not turn on HELP!! Withdrawal or what!! Lol

    Hi there,
    Firstly, try a hard reset. Hold the sleep/wake and home buttons together until the Apple logo appears.
    If this doesn't work, try restoring your device. Put it in recovery mode if iTunes doesn't recognise it, and restore it from there. I have linked to instructions below.
    Recovery Mode and Restore - Apple
    Let me know if this helps,
    Nathan

  • Can i get my music from windows media onto my iPod shuffle

    I lost all the music on my ipod shuffle. It seems that my itunes library is empty. Can I get the music from Windows media player on a pc running windows xp and put it on my ipod? Thanks

    your itunes account is your email address. you can try to see if you can sign in. you can always use one of these programs yamipod or music rescue.

  • Can not get the agent from rule determination

    Dear expert,
      We have a PR workflow,for one step, the agent is determined by one rule,In our Q system,everythink is ok to get the agent correctly,and the workflow also can works.but in our P system,can not get the agent from the rule,when we simulate the rule,the agent can be get smoothly,but in workflow,realy can't get the agent(after trace the workflow), so would you like to give me sone suggestion, whant had happen in our workflow?
    Many thanks!
    Best Regards,
    Kerry

    Tks!
    I have one question,how to check the agent assignment is active?
    and also want to say,the rule that determin the responsible agent is used at one step of the workflow,not for possible agent of task ,and the rule's type is RESPONSIBILITIES.
    Best Regards
    Edited by: Kerry Wang on Jun 25, 2010 3:14 AM

  • Good Evening, I bought a Mac Book Pro in Miami and with Apple Care that was recorded in the Apple Store - Lincoln Road. Now I can not get access to Apple Care here in Brazil. Someone tell me what happens? Please help me solve this problem.

    Good Evening, I bought a Mac Book Pro in Miami and = with Apple Care thatwas recorded in the Apple Store - Lincoln Road. Now I can not get access toApple Care here in Brazil. Someone tell me what happens? Please help mesolve this problem.

    Call Apple Care

  • Accidentally changed the path of the home directory and now I can not get access my profile.

    before the way was /valumes/macintosh hd/igor but then i decided  to remove a space between macintosh and HD then I restarted my mac and after reloading I can not get access my profile. Thanks for the helping.

    Boot up holding command-r keys into your Recovery Volume and re-install OS X on the volume.
    This will be an install "in place" and shouldn't effect any of your own data or settings.

  • Can not get an ip from pppoe server

    Hello,
    i have this problem with linksys WRT54GL it's can not get ip from server but the problem with with the router not the isp coz i used another router WRT54S it's work great,
    i'm using the last update for WRTS54GL V1.1 (4.30.14).
    THE PROBLEM FROM ROUTER I THING FROM THE SOFTWARE 
    IS THERE ANY SOLUTION FOR THIS ???
    THANKS 

    Thanks for replay 
    first the modem work as bridge 
    the router can not connect to the server 
    in status page the error is "can not get an ip from pppoe server" when i used the WRT54GL
    if i used other router (WRT54GS) it's connect and get ip and DNS on the status page 
    the user and password is correct .
    the router(WRT54GL)  work when i used DHCP  but not connect when i used PPPOE protocol 
    1.WORKING     modem(bridge)------>router (WRT54GS)PPPOE----------> Router (WRT54GL)DHCP-------> PC
    2.WORKING     modem(bridge)------>router (WRT54GS)PPPOE-------> PC
    3.NOT WORK   modem(bridge)------>Router (WRT54GL)PPPOE-------> PC
    i need the third scenario.
    i think the problem with the router not with the configuration.
    Thanks

Maybe you are looking for