Multiple user use of TC: permissions and mounting

I have an iMac (intel, OSX10.6.7) and Time Capsule [TC]. I have set up Time Machine to use the TC. I also use the TC for additional storage - Photos and Music - to keep the iMac drive fairly free. There are 5 users of this setup (2 Admin). The TC is also accessed from windows machines and so I can not use a sparse bundle for this.
When one person is logged in and the TC drive is "Mounted" for that user, all hunky dory. On the one hand the Time Machine is able to mount, connect backup, and disconnect it's sparse bundle with no issues no matter who is logged in. If another user (admin or not) tries to access the TC drive (not Time Machine) they can not get at the contents, it is marked with a No Entry sign on the Folder Icon.
How oh How oh How can I get the Time Capsule (External Drive) mounted so that all the users can access it without a previous user having to disconnect? Also how can I get it to keep the permissions I set (to inherit) rather than permanently reverting to owner:RW, others:read-only after someone had updated a file?

dobrian wrote:
The remainder of the disk is free and available from Finder, but has to be mounted and then unmounted if a different user wants to use it.
Yes, but as the item I referenced explains, using that free space for something else isn't recommended. You might look into attaching a USB external drive to that Time Capsule.
Another part of the problem you're having might be due to the fact that the applications that use the files you're trying to share aren't designed to allow more than one user to open the files at a time.
This article might describe some options, at least for iTunes.

Similar Messages

Send smartform to multiple users using std. smartform interface

Hello All,
Below is the requirement : -
While doing an external send against the custom output type in transaction VF02, smartform is automatically send to the appropriate email address as pdf attachment. This email address can be sold to party/bill to party etc and it is controlled using configuration.
Now the prb is, using such configuration we can send email to single email id only. I need to send the email to multiple users using the standard smartform interface ONLY i.e by using the parameter MAIL_RECEPIENT in the std. smartform interface.
I have alredy evaluated the below workarounds for the above solution, but we need to implement the above functionality using standard smartform interface only.
1) Convert the smartform OTF data to PDF format data and then send the PDF attachment via email to multiple recipients using the standard FM SO_NEW_DOCUMENT_ATT_SEND_API1.
2) Loop at the recipients table and within the loop pass different recipient to the interface parameter MAIL_RECIPIENT of smartform. Hence in this case smartform will be called within the loop which can cause performance issues incase of multiple recipients. Also the mail will be sent individually to every recipient.
3) I have already checked by passing the distribution list the parameter MAIL_RECEIPIENT but it does not work.
Looking forward for your responses.
Regards,
R.Doshi

Hi
Check if SAP Note 1260015 - Sending mail to multiple recipients is useful for your requirements.
Regards
Eduardo

HT1198 If I share an iPhoto library between multiple users, will the Faces, Events, and Places be automatically usable by all users, or will each user have to tag all the photos (e.g. if a user tags a face, will a different user have to do it in their own

If I share an iPhoto library between multiple users, will the Faces, Events, and Places be automatically usable by all users, or will each user have to tag all the photos (e.g. if a user tags a face, will a different user have to do it in their own iPhoto application??

Have you read this Apple document regarding sharing a library with multiple users: iPhoto: Sharing libraries among multiple users?
OT

TS5223 can I have multiple users use one apple account?

can I have multiple users use one apple account?

I interpreted his post to mean that he meant multiple human users, not multiple devices. Hopefully, he'll clarify.

Chat between multiple users using producer/consumer

Hi All,
I'm working on a chat application between multiple users using producer/consumer in flex(pure flex). But i found that this was basically a broadcast service. How do i make sure that i maintain a private chat between any two users using producer/consumer scenario?

hi,below i write a code,bold lines are properties to use.
//producer component
<?xml version="1.0"?>
<mx:Application xmlns:mx="http://www.adobe.com/2006/mxml">
<mx:Script>
<![CDATA[
import mx.messaging.*;
import mx.messaging.messages.*;
import mx.messaging.events.*;
private function sendMessage():void {
var message:AsyncMessage = new AsyncMessage();
message.headers = new Array();
message.headers["prop1"] = 5;
message.body = input.text;
producer.send(message);
]]>
</mx:Script>
<mx:Producer id="producer"
destination="chat"/>
<mx:TextInput id="userName"/>
<mx:TextInput id="input"/>
<mx:Button label="Send"
click="sendMessage();"/>
</mx:Application>
//consumer component
<?xml version="1.0"?>
<mx:Application xmlns:mx="http://www.adobe.com/2006/mxml"
creationComplete="logon();">
<mx:Script>
<![CDATA[
import mx.messaging.*;
import mx.messaging.messages.*;
import mx.messaging.events.*;
private function logon():void {
consumer.subscribe();
private function messageHandler(event:MessageEvent):void {
ta.text += event.message.body + "\n";
]]>
</mx:Script>
<mx:Consumer id="consumer"
destination="chat"
selector="prop1 > 4"
message="messageHandler(event);"/>
<mx:TextArea id="ta" width="100%" height="100%"/>
</mx:Application>

Can you have multiple users on one apple Id and utilize iCloud?

My family shares an apple Id and we each have multiple Apple devices. When we use iCloud we "cross pollinate" each others devices with contacts, calendar events, etc. is it possible to manage multiple users on one apple Id with iCloud activated or are separate ID's required?

iCloud isn't designed as a multi-user service. Either you all have the same ID, and all your data is available to everyone, or you all have separate IDs and keep your data separate. You can share calendars, so that for example you could all have your own calendars but have one which is common to everyone:
http://help.apple.com/icloud/#mm6b1a9479
If you want to share contacts you will have to do it manually. If you want to do file transfer you will have to find a third-party alternative.

Multiple users using same email account

I'm the computer tech for a volunteer fire department. We have multiple officers using this computer and each one wants access to the same email account under their personal user accounts. Can this be done?

You just need to "move" the profile to a common access location.
http://kb.mozillazine.org/Moving_your_profile_folder_-_Thunderbird

Send email to multiple users using form

I am using following code to send email from forms.
But i want to send email to multiple users like atleast 10 users
It i sworking for one user.
If i give mail_pkg.send('tim@'oracle.com;[email protected]','Testing Oracle forms to send email','Testing oracle forms to send email','c:/x.pdf');
The email is not going
Can anybody help how to send to multiple users
Thanks for your help
T
PACKAGE Mail_pkg IS
session OLE2.OBJ_TYPE; /* OLE object handle */
args OLE2.LIST_TYPE; /* handle to OLE argument list */
procedure logon( Profile IN varchar2 default NULL );
procedure logoff;
procedure send( Recp IN varchar2,
Subject IN varchar2,
Text IN varchar2,
Attch IN varchar2
END;

As said,
Reports9i is better than Reports6i as far as sending emails is concerned. Reports9i allows you to send Reports in different formats as email attachements (PDF v3 is only one option). You can set subject, cc, bcc and some body text the way you want it. The Reports server only needs the address of a SMTP Server and you are ready to go. In Reports6i this is a bit more limited as you are not able to provide your own subject and body texts.
I know that you can do this with PL/SQL from teh databae, but never tried it before.
There is another option, which is to use a Java Bean in Forms for email. Thsi only works on the Web and a demo is included in teh Forms9i demos that can be downloaded from OTN. Though the demo is written for Forms9i it should work with Forms6i as well (not the Forms demo files because they are created in Forms9i).
Fran

Multiple users using iTunes

My wife has had an iPod and has already set up iTunes. I recently purchased an iPod and everytime I link my iPod to the computer, it configures the way she already had her iPod set up. Now when I make changes to the iTunes by setting up new folders or uploading my CDs, she will plug her iPod into the computer and it will change her iPod to what changes I have made. And the samething happens when she makes changes, it effects my iPod. Any thoughts as to how we can set up 2 different accounts and the changes I make will not effect her? Please help my marriage. Thanks.

There are basically two ways of using multiple iPods on a computer and these involve:
a) Sharing a single iTunes library and or user account or
b) Creating multiple user accounts.
Sharing a Library and/or User Account
If you want to share the one library, you can set either or all of the iPods so that they only get updated with only certain playlists (you can update from more than one if you wish):
Loading songs onto iPod automatically - Windows
Choosing the update option "Sync Music - Selected playlists" allows you to create a playlist specifically for the iPod and drag the tracks you want into it. If you tire of the list and want to change it, you just add or remove the songs you don't want. The ones you take out out remain in the library to be used some other time if you choose. You can read more about playlists at these links:
iTunes: Creating playlists of your favorite songs
How to create a Smart Playlist with iTunes
Or you can choose to update any or all of the iPods manually and just drag whatever content you want to them: Managing content manually on iPod
Loading the iPod shuffle differs slightly but it can still be used with the others, for details have a look at this page:
Loading songs onto iPod shuffle - Windows
It's also possible to have multiple libraries in a single account. To create or access a second (or more) library, hold down the Option key (or Shift key in Windows) when launching iTunes 7. In the resulting dialogue you will get the option to create a new library or navigate to the other Library.
Note: You can only have one Library open at a time and iTunes will default to the last library opened if you don't use the keyboard command to choose one. This can prove tricky when using multiple iPods, if you don't use the keyboard command you can risk syncing to the wrong library:
Using multiple iTunes libraries -Windows
Separate User Accounts
Another option is to create a separate User account for each person on your PC or Mac. Different accounts by definition would give you completely separate libraries. Each account has it's own iTunes folder, Library and iTunes Music folder and you load it with CDs etc just as you did with your original one. The iPod can be set to update however the owner chooses, sync all, manual or sync specific playlists
I don't use Windows so I can't give you a step by step on that one, however I can point you to another web page which should help you out. You can read about Windows user accounts here:
Using Windows XP User Accounts

How can multiple users use the same Creative Cloud Individual on one single-machine?

We have one shared graphics workstation, which is infrequently in use by different people - therefore we bought a single-workstation license (which we were referred to "Creative Cloud Individual"). In the FAQs it says it installs locally, but whenever a user different from the installing adminstrator logs in, he is forced to use the trial.
Is there a way to make the local installation usable on that single machine for multiple users?
Thanks in advance for your reply

Serenatasystems do the other users not have administrator access? What happens if they sign in using the Adobe ID tied to your Creative Cloud subscription? Do your Adobe Creative applications then exit trial mode?

How to send multiple Recipients using the mail.jar and activation.jar

hi!
could somebody help me. how do i send multiple Recipient using mail.jar. when i would input 2email address in to Recipient
(example: [email protected], [email protected])
i get a DEBUG: setDebug: JavaMail version 1.3.2
but if i send a single email it just works properly.
heres my code
import java.io.*;
import java.util.*;
import javax.mail.*;
import javax.mail.event.*;
import javax.mail.internet.*;
public class SendMail
 public SendMail(String to, String from, String subject, String body)
 //public SendMail(String to)
 String message_recip = to;
 String message_subject = subject;
 String message_cc = "";
 String message_body = body;
 //The JavaMail session object
 Session session;
 //The JavaMail message object
 Message mesg;
 // Pass info to the mail server as a Properties, since JavaMail (wisely) allows room for LOTS of properties...
 Properties props = new Properties( );
 // LAN must define the local SMTP server as "mailhost" to be able to send mail...
 //props.put("mail.smtp.host","true");
 props.put("mail.smtp.host", "mailhost");
 // Create the Session object
 session = Session.getDefaultInstance(props, null);
 session.setDebug(true);
 try
 // create a message
 mesg = new MimeMessage(session);
 // From Address - this should come from a Properties...
 mesg.setFrom(new InternetAddress(from));
 // TO Address
 InternetAddress toAddress = new InternetAddress(message_recip);
 mesg.addRecipient(Message.RecipientType.TO, toAddress);
 // CC Address
 InternetAddress ccAddress = new InternetAddress(message_cc);
 mesg.addRecipient(Message.RecipientType.CC, ccAddress);
 // The Subject
 mesg.setSubject(message_subject);
 // Now the message body.
 mesg.setText(message_body);
 // XXX I18N: use setText(msgText.getText( ), charset)
 // Finally, send the message!
 Transport.send(mesg);
 }//end of try
 catch (MessagingException ex)
 while ((ex = (MessagingException)ex.getNextException( )) != null)
 ex.printStackTrace( );
 }//end of while
 }//end of catch
 }//end of SendMail
public static void main(String[] args)
 //String t = "[email protected], [email protected]"; - this I think causes error
String t = "[email protected]";
 String f = "[email protected]";
 String s = "Hello World";
 String b = "the quick brown fox jumps over the lazy dog";
 SendMail sm = new SendMail(t,f,s,b);
 }//end of main
}//end of class
could someone please help me im stuck-up with this. thanx!

i need it ASAP
i am a beginner in java and jsp
Need to knw how can I parse the addresss field
Below
is the code
<code>
package
public class EMailBean {
private String smtp,username,password,from,bcc,subject,body,attachments,cc;
 /*setter*/
 public void setSmtp(String str){this.smtp=str;}
 public void setUsername(String str){this.username=str;}
 public void setPassword(String str){this.password=str;}
 public void setFrom(String str){this.from=str;}
 public void setTo(String str){this.to=str;}
 public void setCc(String str){this.cc=str;}
 public void setBcc(String str){this.bcc=str;}
 public void setSubject(String str){this.subject=str;}
 public void setBody(String str){this.body=str;}
 public void setAttachments(String str){this.attachments=str;}
 /*getter*/
 public String getSmtp( ){return this.smtp;}
 public String getUsername( ){return this.username;}
 public String getPassword( ){return this.password;}
 public String getFrom( ){return this.from;}
 public String getTo( ){return this.to;}
 public String getCc( ){return this.cc;}
 public String getBcc( ){return this.bcc;}
 public String getSubject( ){return this.subject;}
 public String getBody( ){return this.body;}
public String getAttachments( ){return this.attachments;}
</code>
Session session = Session.getDefaultInstance(props, null);
session.setDebug(true);
try {
MimeMessage msg = new MimeMessage(session);
msg.setFrom(new InternetAddress(mail.getFrom()));
 msg.addRecipients(Message.RecipientType.TO, InternetAddress.parse(to, false));
 msg.addRecipient(Message.RecipientType.TO,new InternetAddress(mail.getTo()));
 msg.addRecipient(Message.RecipientType.CC, new InternetAddress(mail.getCc()));
 msg.addRecipient(Message.RecipientType.CC, new InternetAddress("[email protected]"));
msg.setSubject(mail.getSubject());
// Create the message part
BodyPart messageBodyPart = new MimeBodyPart();
// Fill the message
messageBodyPart.setText(mail.getBody());
Multipart multipart = new MimeMultipart();
multipart.addBodyPart(messageBodyPart);
// Part two is attachment
messageBodyPart = new MimeBodyPart();
DataSource source = new FileDataSource(mail.getAttachments());
messageBodyPart.setDataHandler(new DataHandler(source));
messageBodyPart.setFileName(source.getName());
multipart.addBodyPart(messageBodyPart);
msg.setContent(multipart);
msg.setSentDate(new Date());
Transport t = session.getTransport("smtp");
try {
t.connect(mail.getUsername(), mail.getPassword());
t.sendMessage(msg, msg.getAllRecipients());
} finally {
t.close();
result = result + "Success!"+" "+"<HR>Mail was successfully sent to : "+mail.getTo()+" ";
if (!("".equals(mail.getCc())))
result = result +"CCed To : "+mail.getCc()+" ";
if (!("".equals(mail.getBcc())))
result = result +"BCCed To : "+mail.getBcc() ;
result = result+" <HR>";
} catch (MessagingException mex) {
result = result + " Error : <HR> "+""+mex.toString()+" <HR>";
} catch (Exception e) {
result = result + " Error : <HR> "+""+e.toString()+" <HR>";
e.printStackTrace();
finally {
return result;
}

How to manage code modifications among multiple users using Project.mpt or Global.mpt

Hi,
There is one copy of a Template.mpt file in the shared drive. Users copy this file to their project folder for a specific project and they save it as Project_n.mpp. There is only one Project_n.mpp file per project. So whoever works on the particular project
will always open the same Project_n.mpp file. There is a lot of projects that users work on and each of them has its respective Project1.mpp, Project2.mpp, Pproject3.mpp etc.file.
These files contain modules that are called on the Project Open and some of them on the Project Close. Current code in modules is used to update the project file with data from a database and also to update database with the data from
the project file.
I am looking now into the solution on how to incorporate any future modifications of the modules so that it can be applied to all project files.
If I modify code in any of the modules of the Template.mpt file that is on the Shared drive I am now sure that modifications will apply only to the new projects (when user initiate the Project_n.mpp and starts from the Template.mpt).
But in the case of already created project files (Project1.mpp, Project2.mpp, Project3.mpp) I also want to apply the modified code in modules, but currently when I open them I have the old code.
I tried using Global.mpt file but ran into some issues such as if I move all modules to the global.mpt the functions called from ThisProject/Project Open are ending having errors since they are not defined. Is there any way of specifying
in the project that modules are defined in the Global.mpt.
I also tried to Move modules from Template.mpt file to the Project_n.mpp file on the opening. Before moving modules I deleted them to avoid having to answer to the question "Do you want to replace the file?", but then some modules wouldn't get deleted
right away because functions that are called in the Project.mpp open event are defined in the modules I want to delete. They get deleted at the end of the code execute and that causes issues when code runs again.
I would appreciate any help, suggestion on how to solve this issue. I am open to any proposition in regards how to share modifications among all users and previous and future projects.
Thanks in advance.

Well, it certainly sounds like you could use Project Server, rather than standalone Project and MPP files stored on hard drives. This would be a perfect example of why Project Server was developed.
Some of the features that may address your needs are...
Project Server permits the creation of "template" schedules, so that users create new projects from existing Templates on the server. There can be as many as you like - different templates
for different types of schedules. Users have a drop down menu to select which "type" of project they want to create. There are other items that can be associated to the project creation.
Project Server also has workflow, which can perform actions (on the server side, not the desktop) to help manage the Project Management process flow.
Project Server allows many users to access the same copy of the schedule via a check-out (for editing) / check-in mechanism. This ensures that everyone is seeing the current and accurate version of
the schedule.
Project Server allows you to automatically keep "archived" versions of your published schedules for backup / restore purposes.
Project Server stores all project information in a SQL server database which permits you to use standard SQL tools to transfer data in / out.
Finally, Project Server still uses a Global.mpt, which is stored in the database and every user gets an automatic update of that file each time they open a project from the server (they get a local
copy, which updates with any changes) so that all changes to Global MPT are pushed out to all project users.
It sounds like you may benefit from Project Server Online, which is quick and relatively cost effective.
http://office.microsoft.com/en-us/project-server-help/get-started-with-project-online-HA102858793.aspx
Pay close attention to your data transfer needs, this area is getting better, but may or may not meet your requirements.
Finally, work with a Microsoft Partner who has "been there and done that" so you get the most benefit from Project Server.
Hope that helps,
Thanks, Eric S. Pcubed

Multiple users access one iPhoto library and view and edit

I have 3 Macs and 5 users in our family. I'd like to have one iPhoto library that any user can access from any of the machines and view and/or edit. I don't need simultaneous access (which from reading posts I can see is not possible in iPhoto).
If I move the library to external HD will I be able to access the libary from each Mac over Wi-Fi? From what I read I'd need to hold ALT when opening iPhoto in each user account, on each Mac, and choose the library on the external drive.
If I set it up like this then once photos imported any user can see them, and edit if they want to? Presumably any Projects would be in the one central library rather tan being specific to a particular user?

Yes and no
the hard drive that the iPhoto sits on must be formatted Mac OS extended (jorunaled)
iPhoto is not a multi user program and if two different people edit atthe same time it will not wrok correctly
Most importantly WiFi is not a reliable connection and has many dropouts - if you edit over WiFi you are highly likely to lose data and corrupt yoru library - it is not a good idea - viewing is slow but will work
LN

Multiple users using One account and issue making calls to 1-800-###...

We have 15 volunteers who are using One account we set up for them. They login at the same time and need to make 1-800 calls (same number) concurrently. Right now, when you start pressing 800 all of sudden the display goes blank (cx300) and can't even finish
entering the number. We have Lync 2010 and 2013 running together and most services moved to Lync 2013. Before we introduced Lync 2013 we did have this problem, but only intermittently. Now with Lync2013 it is consistent issue.
What settings do I change?
Do I need to create more accounts and assign Lync #s respectively?

Hi,
Would you please tell us what did you do with this scenario?
Please check if there is any error message from Mediation Server and FE Server when the issue happen.
Check if it is a performance issue, you can test to login the same Lync account with two users, make call concurrently. If it works work, it may be a performance issue.
The best way is to create more account and assign to these users.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Having multiple problems with script - NTFS Permissions and AD Groups

Hi, all! I'm having multiple problems with my first script I've written with Powershell. The script below does the following:
1. Prompts the user for a corporate division under which a shared folder will be created, and adjusts variables accordingly.
2. Prompts if the folder will be a global folder or an office/location-specific folder, and makes appropriate adjustments to variables.
3. If a global folder, prompts for the name. If an office/location-specific folder, prompts for each component of the street address, city and state and an optional modifier. I've prompted for this information in this way because the information
is used differently later on in the script.
4. Verifies the entered information and requests confirmation to proceed.
5. Creates the folder.
6. Creates an AD OU and/or security group(s).
7. Applies appropriate security groups to the new folder and removes undesired permissions.
Import-Module ActiveDirectory
$Division = ""
$DivAbbr = ""
$OU = ""
$OUDrive = "AD:\"
$FolderName = ""
$OUName = ""
$GroupName = ""
$OURoot = "ou=DFS Restructure Testing OU,ou=Pennsylvania Camp Hill 4410 Industrial Park Rd,ou=Locations,ou=Camp Hill,dc=jacobsonco,DC=com"
$FSRoot = "E:\"
$FolderPath = ""
$DefaultFolders = "Archive","Customer Service","Equipment","Inbounds","Management","Outbounds","Processes","Projects","Quality","Reports","Returns","Safety","Schedules","Time Keeping","Training"
[bool]$Location = 0
do {
$userInput = Read-Host "Enter CLS Division: (W)arehousing, (S)taffing, or (P)ackaging"
Switch ($userInput)
W {$Division = "Warehousing"; $DivAbbr = "WHSE"; $OU = "ou=Warehousing,"; break}
S {"Staffing is not yet implemented."; break}
P {"Packaging is not yet implemented."; break}
default {"Invalid choice. Please re-enter."; break}
while ($DivAbbr -eq "")
write-host ""
write-host ($Division + " was selected.")
$FolderPath = $Division + "\"
write-host ""
$choice = ""
do {
$choice = Read-Host "Will this be a (G)lobal folder or (L)ocation folder?"
Switch ($choice)
G {$Location = $false; break}
L {$Location = $true; $FolderPath = $FolderPath + "Locations\"; $OU = "ou=Locations," + $OU; break}
default {"Invalid choice. Please re-enter."; $choice = ""; break}
while ($choice -eq "")
write-host ""
write-host ("Location is set to: " + $Location)
write-host ""
if ($Location -eq $false) {
$FolderName = Read-Host "Please enter folder name:"
$GroupName = $DivAbbr + " " + $FolderName
} else {
$input = Read-Host "Please enter two-letter state abbreviation:"
$FolderName = $FolderName + $input + " "
$input = Read-Host "Please enter city:"
$FolderName = $FolderName + $input + " "
$input = Read-Host "Please enter street address number only:"
$FolderName = $FolderName + $input
$GroupName = $DivAbbr + " " + $FolderName
$FolderName = $FolderName + " "
$input = Read-Host "Please enter street name:"
$FolderName = $FolderName + $input
$input = Read-Host "Please enter any optional information to appear in folder name:"
if ($input -ne "") {
$FolderName = $FolderName + " " + $input
$OUName = $FolderName
write-host
write-host "Path for folder: "$FSRoot$FolderPath$FolderName
write-host "AD Path: "$OUDrive$OU$OURoot
write-host "New OU Name: "$OUName
write-host -NoNewLine "New Security Group names: "$GroupName
if ($Location -eq $true) { write-host " and "$GroupName" MGMT" }
write-host
$input = Read-Host "Please confirm creation of new site/folder: (Y/N) "
if ($input -ne "Y") { Exit }
write-host
write-host -NoNewLine "Folder exists: "; Test-Path ($FSRoot + $FolderPath + $FolderName)
if (Test-Path ($FSRoot + $FolderPath + $FolderName)) {
Write-Host "Folder already exists! Skipping folder creation..."
} else {
write-host "Folder does not exist. Creating..."
new-item -path ($FSRoot + $FolderPath) -name $FolderName -itemtype directory
Set-Location ($FSRoot + $FolderPath + $FolderName)
if ($Location -eq $true) {
$tempOUName = "ou=" + $OUName + ","
write-host
write-host $OUDrive$tempOUName$OU$OURoot
write-host
write-host -NoNewLine "OU exists: "; Test-Path ($OUDrive + $tempOUName + $OU + $OURoot)
if (Test-Path ($OUDrive + $tempOUName + $OU + $OURoot)) {
Write-Host "OU already exists! Skipping OU creation..."
} else {
write-host "OU does not exist. Creating..."
New-ADOrganizationalUnit -Name $OUName -Path ($OU + $OURoot) -ProtectedFromAccidentalDeletion $false
$GroupNameMGMT = $GroupName + " MGMT"
if (!(Test-Path ($OUDrive + "CN=" + $GroupName + "," + $tempOUName + $OU + $OURoot))) { write-host "Normal user group does not exist. Creating..."; New-ADGroup -Name $GroupName -GroupCategory Security -GroupScope Global -Path ("OU=" + $OUName + "," + $OU + $OURoot)}
if (!(Test-Path ($OUDrive + "CN=" + $GroupNameMGMT + "," + $tempOUName + $OU + $OURoot))) { write-host "Management user group does not exist. Creating..."; New-ADGroup -Name $GroupNameMGMT -GroupCategory Security -GroupScope Global -Path ("OU=" + $OUName + "," + $OU + $OURoot)}
$FolderACL = get-acl ($FSRoot + $FolderPath + $FolderName)
$FolderACL.SetAccessRuleProtection($True,$True)
# $FolderACL.Access | where {$_.IdentityReference -eq "BUILTIN\Users"} | %{$FolderACL.RemoveAccessRuleAll($_)}
$BIUsers = New-Object System.Security.Principal.NTAccount("BUILTIN\Users")
$BIUsersSID = $BIUsers.Translate([System.Security.Principal.SecurityIdentifier])
write-host $BIUsersSID.Value
# out-string -inputObject $BIUsers
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($BIUsersSID.Value,"ReadAndExecute,AppendData,CreateFiles,Synchronize","ContainerInherit, ObjectInherit", "None", "Allow")
$FolderACL.RemoveAccessRuleAll($Ar)
Set-ACL ($FSRoot + $FolderPath + $FolderName) $FolderACL
get-acl ($FSRoot + $FolderPath + $FolderName) | fl
$FolderACL = get-acl ($FSRoot + $FolderPath + $FolderName)
$ADGroupName = "JACOBSON\" + $GroupName
$objUser = New-Object System.Security.Principal.NTAccount($ADGroupName)
$objUser.Translate([System.Security.Principal.SecurityIdentifier]).Value
write-host $ADGroupName
write-host $objUser.Value
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($ADGroupName,"ReadAndExecute","ContainerInherit, ObjectInherit", "None", "Allow")
Out-String -InputObject $ar
$FolderACL.AddAccessRule($Ar)
$ADGroupName = "JACOBSON\" + $GroupNameMGMT
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($ADGroupName, "Modify", "ContainerInherit, ObjectInherit", "None", "Allow")
Out-String -InputObject $ar
$FolderACL.AddAccessRule($Ar)
Set-ACL ($FSRoot + $FolderPath + $FolderName) $FolderACL
} else {
$tempOUName = "cn=" + $GroupName + ","
write-host
write-host $OUDrive$tempOUName$OU$OURoot
write-host
write-host -NoNewLine "Group exists: "; Test-Path ($OUDrive + $tempOUName + $OU + $OURoot)
if (Test-Path ($OUDrive + $tempOUName + $OU + $OURoot)) {
Write-Host "Security group already exists! Skipping new security group creation..."
} else {
write-host "Security group does not exist. Creating..."
New-ADGroup -Name $GroupName -GroupCategory Security -GroupScope Global -Path ($OU + $OURoot)
$FolderACL = get-acl ($FSRoot + $FolderPath + $FolderName)
$ADGroupName = "JACOBSON\" + $GroupName
$FolderACL.SetAccessRuleProtection($True,$True)
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($ADGroupName,"Modify","ContainerInherit, ObjectInherit", "None", "Allow")
$FolderACL.AddAccessRule($Ar)
$FolderACL.Access | where {$_.IdentityReference -eq "BUILTIN\Users"} | %{$FolderACL.RemoveAccessRuleAll($_)}
Set-ACL ($FSRoot + $FolderPath + $FolderName) $FolderACL
My problems right now are in the assignment/removal of security groups on the newly-created folder, and the problems are two-fold. Yes, I am running this script as an Administrator.
First, I am unable to remove the BUILTIN\Users group from the folder when this is an office/location-specific folder. I've tried to remove the group in several different ways, and none are having any effect. Oddly, if I type in the lines directly
into Powershell, they work as expected. I've tried the following methods:
$FolderACL = get-acl ($FSRoot + $FolderPath + $FolderName)
$FolderACL.SetAccessRuleProtection($True,$True)
$FolderACL.Access | where {$_.IdentityReference -eq "BUILTIN\Users"} | %{$FolderACL.RemoveAccessRuleAll($_)}
Set-ACL ($FSRoot + $FolderPath + $FolderName) $FolderACL
$FolderACL = get-acl ($FSRoot + $FolderPath + $FolderName)
$FolderACL.SetAccessRuleProtection($True,$True)
$BIUsers = New-Object System.Security.Principal.NTAccount("BUILTIN\Users")
$BIUsersSID = $BIUsers.Translate([System.Security.Principal.SecurityIdentifier])
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($BIUsersSID.Value,"ReadAndExecute,AppendData,CreateFiles,Synchronize","ContainerInherit, ObjectInherit", "None", "Allow")
$FolderACL.RemoveAccessRuleAll($Ar)
Set-ACL ($FSRoot + $FolderPath + $FolderName) $FolderACL
In the first case, the script goes through and has no apparent effect because afterwards, I do a get-acl and the BUILTIN\Users group is still there, although when looking through the GUI, inheritance appears to have been broken from the parent folder.
In the second case, I get the following error message:
Exception calling "RemoveAccessRuleAll" with "1" argument(s): "Some or all identity references could not be translated."
At C:\Users\tesdallb\Documents\FileServerBuild.ps1:110 char:5
+ $FolderACL.RemoveAccessRuleAll($Ar)
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : IdentityNotMappedException
This seems strange that the local server is unable to translate the SID of a BUILTIN account. I've also tried explicitly putting in the BUILTIN\Users SID in place of the variable in the New-Object line, but that gives me the same error. I've
also tried the solutions given in this thread:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/ad59dc58-1360-4652-ae09-2cd4273cbd4f/remove-acl-issue?forum=winserverpowershell and at this URL:
http://technet.microsoft.com/en-us/library/ff730951.aspx but these solutions also failed to have any effect.
My second problem is when I try to apply the newly-created security groups, I also will get the "Some or all identity references could not be translated." I thought I had found a workaround to the problem by adding the -PassThru option to
the New-ADGroup commands, because it would output the SID of the group after creation, however a few lines later, the server is unable to translate the account to apply the security groups to the folder.
My first Powershell script has been working well up to this point and now I seem to have hit a showstopper. Any help is appreciated.
Thanks!

I was hoping to stay with strictly Powershell, but unless I can find a Powershell solution, I may resort to ICACLS.
As for the problems with my groups not being translatable right after creating them, I think I have solved this problem by using the -Server parameter on all my New-ADGroup commands and this example code seems to have gotten around the translation problem,
again utilizing the -Server parameter on the Get-ADGroup command:
get-acl ($FSRoot + $FolderPath + $FolderName) | fl
$FolderACL = get-acl ($FSRoot + $FolderPath + $FolderName)
# Add the new normal users group to the folder with Read and Execute permissions
$GroupSID = Get-ADGroup -Identity $GroupName -Server chadc01.jacobsonco.com | Select-Object -ExpandProperty SID
$SIDIdentity = New-Object System.Security.Principal.SecurityIdentifier($GroupSID)
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($SIDIdentity,"ReadAndExecute","ContainerInherit, ObjectInherit", "None", "Allow")
$FolderACL.AddAccessRule($Ar)
# Add the management users group to the folder with Modify permissions
$GroupMGMTSID = Get-ADGroup -Identity $GroupNameMGMT -Server chadc01.jacobsonco.com | Select-Object -ExpandProperty SID
$SIDIdentity = New-Object System.Security.Principal.SecurityIdentifier($GroupMGMTSID)
$Ar = New-Object System.Security.AccessControl.FileSystemAccessRule($SIDIdentity, "Modify", "ContainerInherit, ObjectInherit", "None", "Allow")
$FolderACL.AddAccessRule($Ar)
Set-ACL ($FSRoot + $FolderPath + $FolderName) $FolderACL
Going this route seems to ensure that the Domain Controller I'm creating my groups on is the same one that I'm querying for the group's SID to use in the FileSystemAccessRule. It's been working fairly consistently.
Still having issues with the translation of the BUILTIN\Users group, though.

Multiple user use of TC: permissions and mounting

Similar Messages

Maybe you are looking for