Domain users files sharing permission problem

Dear Domain Professional,
We have a three domain controllers 192.168.92 .162,167,150 All domain controller working with
Global Catalog servers ( Root forest ) . All domain controller live synchronize with each others like Users , Group policy , ADS, DNS.
lastnight we had a problem with file sharing permission . it had been asked username & password . why this problem was happened ?
Finally we had restated with all domain controller then file sharing perfectly working fine .i had verified all events in domain controller there is no any error issue .
Note:- we are using juniper firewall is there any security issue ?
happended
Regards
Subash

Hi,
According to the
repadmin results, there isn’t any replication issue.
I was wondering how long did the issue last until reboots of DCs?
If the period is short, then this behavior is normal, because AD replication takes time, this issue could occur before AD replication has completed.
Another possible cause is related to Kerberos authentication and authorization mechanism.
During a logon session, once a user has been authenticated successfully, it gets an
access token containing its SID and group membership and privileges.
The user's access token is subsequently inherited by any application process that the user starts during the logon session.
If we change user’s group membership and privileges
after the access token has been issued, the changes won’t be updated until this user logs off and logs on again.
Here are some related articles below for your references:
How Access Tokens Work
http://technet.microsoft.com/en-us/library/cc783557(v=WS.10).aspx
How the Kerberos Version 5 Authentication Protocol Works
http://technet.microsoft.com/en-us/library/cc772815(v=ws.10).aspx
I hope this helps.
Amy

Similar Messages

File sharing permission problem

i have two machines, an iMac and MacBook Pro both running 10.5.6, and am trying to access (via standard file sharing) files residing on the iMac from the MBP. i log in with correct credentials. when i do a Get Info for the file resident on the iMac from the MBP, the file's permissions are incorrect. in fact, if i perform this same operation several times, i get different results, even though the source file is not being touched. the actual perms are rw-rw-r-- with group "media". the displayed perms are always rw-r--r--; the group name is sometimes "staff", sometimes "media".
i'm simply trying to copy files to the MBP from the iMac, wanting to retain permissions. they are always getting messed up.
anyone had any luck in simply copying files from one machine to another and retaining permissions?

on further investigation, perms are just wrong. sometimes the user is incorrect. if i add extended perms (via ACLs), they just don't appear at all.
is this just a bad leopard bug?

The domain users without administrative permission cannot install printers shared on printer server

Dears
We have a printer server that OS is Windows server 2003 .And all clinets are installed windows 7.Now,the domain users cannot installed printers shared on the printer server.When i logon the clinent computer with a domain user and access printer server by
URL \\192.168.37.1 ,i can see all printers shared on the printer server.Then i double click on printer to install it on client computer.It will ask me to input user name and password of local administrator .
How to install the printers with domain user directly. Thanks

refer step #8:
http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Personal File Sharing + FileVault = Problems?

Hello, sorry my poor english.
I have enabled 'Personal File Sharing' and I have a small index.html file on my 'Sites' folder.
When I try to check my webpage using the supplied link...
http://localhost/~MyUserName/
I get this error (403 Forbidden):
You don't have permission to access /~MyUserName/ on this server.
so I checked Apache's Error Log and this is the info I have got:
(13)Permission denied: access to /~MyUserName/ failed because search permissions are missing on a component of the path
I have already run 'Disk Utility' and repaired all permissions but still no go.
Could it be because I have FileVault enabled on this account? If I create a user and leave the filevault off, the whole thing works just fine! I would like to keep my setup as it is now but to be able to view my pages locally. Is there a work around this problem between the Apache server and the FileVault?
Thank you.

Problem solved.
What I did was to change the permissions to ~MyUserName by control-clicking it in the Finder, choosing Get Info from the menu which appears, looking at the Ownership & Permissions section and setting the Others item to Read Only.
But I've learned something interesting, I can only change the 'Others' field on ~MyUserName by control-clicking on ~MyUserName from Finder's left menu! If I do it from Macintosh HD, then Users, then control-clicking ~MyUserName icon, all options are grayed out (doesn't make much sense, I first thought it was because I have FileVault enabled).
Now everything is working.

File Sharing Permissions Problem When NEW Files Created

My wife & I have a home office network setup for our business, and are having trouble with shared files over the network. We're both on Macs, and all of our client files reside on an internal hard drive in my Mac Pro. I've set her up as a "Sharing Only" user on my computer (which matches the username & password of her account on her iMac), and have properly setup file sharing in both the System Preferences, and in the directory itself that we want shared. I've also applied the permissions to all files & folders below the main folder, and she can view, open and save whatever she needs and it works great.
*Here's where the problem comes in...* If either of us create a NEW file or folder, the other person doesn't have WRITE access to it (we can browse and open it fine). The second I go to update a file she created, it won't let me over-write it, and I have to go into the permissions for that specific file and give myself Read/Write access. I've experimented with "Groups", and assigned both of us a special group, and applied that group access to that directory, but it doesn't make any difference when a NEW file or folder is created - it doesn't copy the parent directory permissions to itself, it makes one of us the owner, and nobody else has access.
Is there any way around this? We're both constantly creating new files, and it really hampers our workflow to have to keep re-applying file permissions every time one of us creates something new. Ideally, any new files created within that main client folder would automatically have the same permissions as the parent directory. Any help would be greatly appreciated! Thanks!!

Here's how to do this with Access Control Lists.
1) Go to System Preferences -> Accounts. Unlock the padlock. Click the + button. Make a new group. Call this group "sharing" for the purposes of this exercise. Add the users you want to the group.
2) Make a new empty folder in /Users/Shared. Call it "sharefolder".
3) Log in to an admin account and paste all three of these lines at once into Terminal:
sudo chmod +a "sharing allow delete,chown,list,search,add_file,\
addsubdirectory,delete_child,file_inherit,directoryinherit" \
/Users/Shared/sharefolder
4) From now on, any files you create or copy to the sharefolder or to any of its subfolders will inherit read+write permission for all users in the group. If you have any existing files that you want to move into the sharefolder, a simple move by drag & drop won't cause the permissions to propagate. you need to hold down the option key while dragging them in. This will copy them over, ensuring that the ACL permission is properly inherited.
One other caveat: Files created by a small number of OS X apps won't inherit the permissions properly if saved directly into the ACL folder hierarchy. TextEdit is one such app. Save TextEdit files in a temporary location first, and then copy them in. Then they will have the correct permissions.

File /folder permission problem

Hi,
I have a share on server 2012 R2 with FULL ACCESS. Now I have problem to write in it when I mounted the network share on a PC booted with WinPE. Even I mounted the share with Administrator Account.
Effective permissions and ownership details seems to look fine.
Have deleted the user and created a new user account , still same problem ,,, isn't it odd? Has someone faced same?
N.A.Malik

Hello,
When you try to write in this folder, did you get any error message?
I want to confirm the administrator account is a domain accout or local account.
Personally, I think it is still a permission issue.
For test, give everyone full confrol for both share permission and NTFS permission.

Mac OS X Server, File Sharing, Permission

Hi All,
          I’m trying to use Mac os X server Maverick in a small team within my
          organization. I was able to successfully install and setup the server, which
          resides in a local network. I did the following setup:
     1 ) Open Directory Setup
      2 ) File Sharing , /Users , available for home directory over AFP
      3 ) Created Network users with home folder pointing to /Users
      4 ) Bound Clients to the server
      5 ) XCode Server Setup with git repository
      Users now can login using their own account and their home folder
      is loaded from the server. Unfortunately there are issues. Clients are having permission issues,
      which we have never encountered on local machines before we switched to using XCode Server.
      Here is a list of some of the issues so far
      Xcode issues on client computer:
           a)   When creating a XCode project, it reports the error “Couldn’t not find build module Drawin” when clicking create
             button.I found online a workaround fix that supposedly works, which is to set "Enable Modules (C and Objective C)"
              to No. But we didn’t have to do this before using XCode server.
           b ) When committing to git repo , the following error happens “fatal: Repository has been updated ,
                but unable to write to new_index. Check the disk is not full or quota is not exceeded ,
                and then "git reset HEAD"   to recover” Another work around we found online is to do on the client,
               cp index backup ; mv backup index
       We don’t want to have to do this every time we create a project, what could be wrong with the setup?

You need to run Server Admin and click on the File Sharing icon at the top. Then click on Share Points, and Browse. You then browse to the folder you want to set the permissions on.
You will see in the bottom half of the window the current permissions. While in theory you can use just POSIX permissions, Snow Leopard prefers using ACL permissions. So as an example to set a folder to be only accessible by members of a specific group and to deny access to everyone else you would do the following.
Click on the + symbol at the bottom
A window will open listing all your users and groups, click on groups at the top
Find the special 'Everyone' group and drag it to the ACL section
Find the group you want to give access to and also drag that to the ACL section but make sure it is above the Everyone group as higher setting override lower settings
Set the Everyone group to Deny Read permission, this will prevent them being able to access this folder
Set the group you do want to have access to Allow Read or Allow Read/Write, the first would let them only be able to read, the second also allows them to create files or modify files.
Now click on the Save button in the bottom right.
You might also want to click on the gear wheel symbol and choose 'Propagate permissions' if you want to apply these permissions to all the files and folders within this folder.

File sharing network problem

I have an Airport Extreme (G) base station with an Airport Express acting as a WDS extender. I have two client Macs - a 24" iMac (Intel Dual Core) and an iBook (G4). There are a variety of other clients as well - 2 wireless-G tivos, a Win XP laptop, a wireless ethernet bridge serving a slingbox.
My problem is with the two Macs. Using Network browser, from the iMac, I can connect to the iBook just fine via AFP. However, when I try to connect to the iMac from the iBook, it tries to use FTP, then I get the error "unable to find alias." Both macs have AppleTalk enabled and both have File Sharing enabled.
I suspect that the root of the problem may be from the fact that the iMac was set up by copying everything over from an older iMac FP (I've learned my lesson and will not use the Migration Assistant again!). But, I can't figure out how to correct this.
Thanks!

Hi franki, I'm glad those web sites were useful.
Unfortunately I can't advise about your remaining problem because I don't have a suitable Windows computer to try things out on. Maybe somebody else here can.
I'd suggest you give a few more details about exactly how far you get and at which point things get stuck.
Also, if nobody on this board can help then you could try another one. There are several boards here related to networking, of which the Tiger Forums Getting Online & Networking one seems to be the most lively.
MacBook (OS 10.4.8) iMac G4 (OS 10.3.9)

Personal file sharing has problems...

I have a very plain, basic network here at home. I have a 8 port switch that connects all of my computers to my network. These include several that are connected wirelessly (2 ibooks, MacBook, PowerBook) and 2 wired connections in a Mac Pro and a Digital Audio 466 Power Mac. All are running 10.4.8. Until just recently I have been able to file share between all computers without problems. Now I cannot connect to or from the Power Mac through any file sharing. The Power Mac has no problems accessing the internet nor do I problems observing the PowerMac with Apple Remote Desktop.
I have checked all network/sharing settings and can't seem to find anything out of the ordinary.
Any ideas?
Paxx

Hi,
In System Preferences/Sharing, has the "Personal
File Sharing" checkbox been un-checked? Or has a
firewall been turned on on the PowerMac ?
Are there any errors in system.log in
/var/log ?
Also, are there any errors posted in
AppleFileServiceError.log in
/Library/Log/AppleFileService ?
Ed
PB G4 Mac OS X
(10.3.9) PM G4 Dual 1.25, PM G4 Dual 867, OSX
10.2.8, OSX Server 10.2.8
Ed, thanks for the suggestions I will have a look tomorrow. System prefs I know are right but didn't think to see if there has been a firewall or errors posted in the logs. thanks for the suggestions.

SCCM 2012 R2 User State Migration Win XP to Win 8.1 does not migrate Domain User Files

Hi @ all
i'm trying migrate Win XP Sp3 to Win 8.1 using SCCM 2012 R2. So i followed the how to from the SCCM Team.
https://blogs.technet.com/b/configmgrteam/archive/2013/09/12/how-to-migrate-user-data-from-win-xp-to-win-8-1-with-system-center-2012-r2-configmgr.aspx
All things worked fine, but the user files from my test Domain user are not restored.
Here some extracts of the loadstate log.
2014-01-07 15:49:16, Info                  [0x000000] User SCCM\test.user maps to S-1-5-21-2486663232-1734351201-1738771205-1113
2014-01-07 15:49:16, Info                  [0x000000] User TEST-COMPUTER\Administrator maps to TEST-COMPUTER\Administrator
2014-01-07 15:49:16, Error                 [0x000000] The account TEST-COMPUTER\User is chosen for migration, but the target does not have account TEST-COMPUTER\User. See documentation
on /lac, /lae, /ui, /ue and /uel options.
2014-01-07 15:49:16, Info                  [0x000000] Failed.[gle=0x00000006]
2014-01-07 15:49:16, Info                  [0x000000]   Unable to create a local account because /lac was not specified[gle=0x00000006]
2014-01-07 15:49:16, Info                  [0x000000] Entering MigCloseCurrentStore method
2014-01-07 15:49:16, Info                  [0x0801dc] Closing catalog file
2014-01-07 15:49:16, Info                  [0x0801dd] Deleting catalog file at C:\Windows\Temp\tmpF6E7.tmp\Temp\tmp9F3.tmp
2014-01-07 15:49:16, Info                  [0x000000] Leaving MigCloseCurrentStore method
2014-01-07 15:49:16, Info                  [0x000000] USMT Completed at 2014/01/07:15:49:16.078[gle=0x00000057]
The user sccm\test.user is my test user but, i cannot see any error in relation to that user.
Has some some an idea?
Thank you
Adrian

Hi,
I found a similar article for your reference.
http://blogs.technet.com/b/sudheesn/archive/2009/12/28/in-place-upgrade-from-windows-xp-to-windows-7.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

File Sharing Password problem

Hi: In Storage and Sharing I have File Sharing and Wi-Wi Sharing turned on. I never noticed that the Password Protect was turned on. I never set a password but now that I want to use it the PB is demanding a password - which I have not got.
Is there any way around this or do I have to do a Security wipe?
Thanks.
Donald

Try a number of your common passwords to see if you can get past it. Try your BBID Password. If you didn't set the password, someone must have had access to your PlayBook and set one. Check with your friends or coworkers. If you have to do a wipe, do a backup first. I don't know of any way around this situation. If you work with jerks, you will have to set a password to keep them out.

Windows File Sharing Permission/Access Issues

I am attempting to apply permissions on a Windows share that is on a server different than the portal.
The system is mounted and the repository is working. But just for myself, the administrator. I only have rights as a base user, that's it. All other users are getting an access denied error. On the log defaulttrace.trc the error is that the portal can't get the system share from the system factory. The error following that is that the portal failed to get the mapping data for the user. That is what I would expect if the user could not "see" the share system.
My question is why? The user has read access to that system. Even at owner, the user still can not use it. I have the Iview set up as a KM navigational iview. The only way I have been able to get users to see information on the share is via system pricipals but, that overides Windows security and they see EVERYTHING.
Has anyone else ran into my situation? I want to a repository based on a Windows share that gives the users rights based on their Windows ID.

I think I have figured it out. As usual first by chance, and then by some clever thinking....
I remebered that I had an access problem some months ago, and that the solution was to grant access to some parts of the repositories to the users in question.
So I gave the everyone group read permission on the whole KM repository ! Quite gutsy, but we are talking development environment here.
And hey presto, the problem is solved !
Then I remebered reading something about this.
Inside my notes from some months back I found a reference to SAP Note 599425 - "Permission for knowledge management repositories".
Why I forgot this I do not know, but this is crucial for correct operations.
In addition it is necessary to add read rights to everyone to other part of the repositories if you create system content in your own structures.
I had a system definition in my own structure without correct rights, and this definition were off limits for the users, resulting in a inaccessible file system repository.
hope this helps,
...if you haven't solved it allready.
regards
Alexander

Newly-created Files & Folders Permission Problem

Hello. I have a Snow Leopard Server 10.6.8 with Snow Leopard and Lion clients.
When all Macs were running Snow Leopard, any client could create new folders and files on the Snow Leopard Server, and all other Mac clients can access and modify them (Read and Write permission).
I updated a few clients to Lion, and now when a Lion client created a new file or folder on the Snow Leopard Server, only that client has Read & Write permission. All other client now cannot modify the newly-created file/folder.
My temporary fix is to change the folder or file permission on the server so everyone can have access.
Does anyone know how to fix this? Is this the Lion client problem or the Snow Leopard Server problem?
Thanks.
Alex.

Hello. I have a Snow Leopard Server 10.6.8 with Snow Leopard and Lion clients.
When all Macs were running Snow Leopard, any client could create new folders and files on the Snow Leopard Server, and all other Mac clients can access and modify them (Read and Write permission).
I updated a few clients to Lion, and now when a Lion client created a new file or folder on the Snow Leopard Server, only that client has Read & Write permission. All other client now cannot modify the newly-created file/folder.
My temporary fix is to change the folder or file permission on the server so everyone can have access.
Does anyone know how to fix this? Is this the Lion client problem or the Snow Leopard Server problem?
Thanks.
Alex.

Encore CS3- Domain User DVD Device Permissions Problems

Encore is unable to see DVD Device and the Adobe utility only corrects for Local computer accounts and not domain accounts. The network administrator must setup an additional account (Local)to the computer that all Premier/Encore user must now log off there domain account and then login to local account so that they are able to burn there project to DVD. I was told by adobe support that they cant help because it works via a local account and that the issue is a domain issue and not an issue with there software. Is there a reg. hack that one could use to correct the problem with Premier/Encore to use windows xp security to allow the application the same permissions that windows give the Domain local user.I was also told by Adobe support that maybe if I had gold support they would maybe have a tech group who could handle network related issues with there software but he was not sure.This would be great to get resolved after buying a site license of the Master collection for a school
Thank You
Allan Shaw

Every message concerning networks is that Encore (and Premiere) are not designed to run on a network... so they mostly do not
I've also read that a non-Administrator user account is usually not going to work well... if at all
The simple fact is (from what I've read in these forums) that Encore and Premiere are written for ONE user on ONE computer... and anything else may work by accident, but not by design

Guest Users & file Sharing

Need help with this one.
I have a new Connect Pro 7 server and i need to be able to configure it as follows if it is at all possible:
most users who use the meeting rooms will be guests
guests need to be able to upload documents from their computer to the "share pod", specifically PPT documents
all guests need to be able to see this
all guests need to have voice capability
Is this even possible?
I keep on hitting a wall on the configuration. I was able to go in as the administrator and set "auto promote participants to presenters" and that seems to allow all guests to have voice capability, but i still cant figure out how to allow them to upload documents to either the "file share" or the "share" pod
Any ideas will be greatly appreciated.

AirPort Utility 5.6 for Mac OS X Lion

Domain users files sharing permission problem

Similar Messages

Maybe you are looking for