ORA-31050:Access denied when trying enabling the database-native Web servic

Dear all,
I'm trying to follow the instruction of OBE about "Using Oracle XML DB Web Services for Service-Oriented Architecture " as this url http://st-curriculum.oracle.com/obe/db/11g/r1/prod/datamgmt/xmldb2_b/xmldb2_b.htm#http .
I would like to enable the database-native Web service end point in Oracle XML DB and I already execute the script to create Web Service Endpoint.
Anyway, I got the following error.
ORA-31050: Access denied
ORA-06512: at "XDB.DBMS_XDB", line 528
ORA-06512: at "SYSTEM.ADDSERVLETMAPPING", line 91
I found that this procedure was created on system schema but the problem occur when I tried to call ADDSERVLETMAPPING procedure.
This is a code that I used to enable.
set pagesize 100
set linesize 132
set long 20000
set echo on
-- conn sys/oracle as sysdba
create or replace procedure addServletMapping (pattern varchar2,
servletname varchar2,
dispname varchar2,
servletclass varchar2,
servletschema varchar2,
language varchar2,
description varchar2,
securityRole xmltype) as
xdbconfig xmltype;
begin
xdbconfig := dbms_xdb.cfg_get();
select deleteXML
xdbconfig,
'/xdbconfig/sysconfig/protocolconfig/httpconfig/webappconfig/servletconfig/servlet-list/servlet[servlet-name="' || servletname || '"]'
into xdbconfig
from dual;
if (language = 'C') then
select insertChildXML
xdbconfig,
'/xdbconfig/sysconfig/protocolconfig/httpconfig/webappconfig/servletconfig/servlet-list',
'servlet',
xmlElement
"servlet",
xmlAttributes('http://xmlns.oracle.com/xdb/xdbconfig.xsd' as "xmlns"),
xmlForest
servletname as "servlet-name",
language as "servlet-language",
dispname as "display-name",
description as "description"
securityRole
into xdbconfig
from dual;
else
select insertChildXML
xdbconfig,
'/xdbconfig/sysconfig/protocolconfig/httpconfig/webappconfig/servletconfig/servlet-list',
'servlet',
xmlElement
"servlet",
xmlAttributes('http://xmlns.oracle.com/xdb/xdbconfig.xsd' as "xmlns"),
xmlForest
servletname as "servlet-name",
language as "servlet-language",
dispname as "display-name",
description as "description",
servletclass as "servlet-class",
servletschema as "servlet-schema"
into xdbconfig
from dual;
end if;
select deleteXML
xdbconfig,
'/xdbconfig/sysconfig/protocolconfig/httpconfig/webappconfig/servletconfig/servlet-mappings/servlet-mapping[servlet-name="' || servletname || '"]'
into xdbconfig
from dual;
select insertChildXML
xdbconfig,
'/xdbconfig/sysconfig/protocolconfig/httpconfig/webappconfig/servletconfig/servlet-mappings',
'servlet-mapping',
xmltype
'<servlet-mapping xmlns="http://xmlns.oracle.com/xdb/xdbconfig.xsd">
<servlet-pattern>'||pattern||'</servlet-pattern>
<servlet-name>'||servletname||'</servlet-name>
</servlet-mapping>'
into xdbconfig
from dual;
xdb.dbms_xdb.cfg_update(xdbconfig);
end;
call addServletMapping(
'/orawsv/*',
'orawsv',
'Oracle Query Web Service',
null,
null,
'C',
'Web Services Servlet',
xmltype(
'<security-role-ref>
<role-name>XDB_WEBSERVICES</role-name>
<role-link>XDB_WEBSERVICES</role-link>
</security-role-ref>'
call addServletMapping(
'/orawsdl/*',
'orawsdl',
'Oracle WSDLs',
null,
null,
'C',
'WSDL Servlet',
xmltype(
'<security-role-ref>
<role-name>XDB_WEBSERVICES</role-name>
<role-link>XDB_WEBSERVICES</role-link>
</security-role-ref>'
--grant XDB_WEBSERVICES to oe
grant XDB_WEBSERVICES to TESTDB
-- For 11g only
--grant XDB_WEBSERVICES_OVER_HTTP to oe
grant XDB_WEBSERVICES_OVER_HTTP to TESTDB
--grant XDB_WEBSERVICES_WITH_PUBLIC to oe
grant XDB_WEBSERVICES_WITH_PUBLIC to TESTDB
-- Clean up afterward
drop procedure addServletMapping
Regards,
Zenoni
Edited by: zenoni on Jan 28, 2011 10:18 AM

Test if you can access the generic WSDL using a browser
http://server:port/orawsv?wsdlYou should get prompted for a username and password. If you provide the username and password of a database user who was been granted the Web Services Roles you should see the query service WSDL
<definitions name="orawsv" targetNamespace="http://xmlns.oracle.com/orawsv"
    xmlns="http://schemas.xmlsoap.org/wsdl/"
    xmlns:tns="http://xmlns.oracle.com/orawsv"
    xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://schemas.xmlsoap.org/wsdl/ http://schemas.xmlsoap.org/wsdl/">
<types>
  <xsd:schema
        targetNamespace="http://xmlns.oracle.com/orawsv"
   elementFormDefault="qualified">
   <xsd:element name="query">
    <xsd:complexType>
     <xsd:sequence>
      <xsd:element name="DDL_text" type="xsd:string"
       minOccurs="0" maxOccurs="unbounded" />
      <xsd:element name="query_text">
       <xsd:complexType>
        <xsd:simpleContent>
         <xsd:extension base="xsd:string">
          <xsd:attribute name="type">
           <xsd:simpleType>
            <xsd:restriction base="xsd:NMTOKEN">
             <xsd:enumeration value="SQL" />
             <xsd:enumeration value="XQUERY" />
            </xsd:restriction>
           </xsd:simpleType>
          </xsd:attribute>
         </xsd:extension>
        </xsd:simpleContent>
       </xsd:complexType>
      </xsd:element>
      <xsd:choice minOccurs="0" maxOccurs="unbounded">
       <xsd:element name="bind">
        <xsd:complexType>
         <xsd:simpleContent>
          <xsd:extension base="xsd:string">
           <xsd:attribute name="name" type="xsd:string" />
          </xsd:extension>
         </xsd:simpleContent>
        </xsd:complexType>
       </xsd:element>
       <xsd:element name="bindXML">
        <xsd:complexType>
         <xsd:sequence>
          <xsd:any/>
         </xsd:sequence>
        </xsd:complexType>
       </xsd:element>
      </xsd:choice>
      <xsd:element name="null_handling" minOccurs="0">
       <xsd:simpleType>
        <xsd:restriction base="xsd:NMTOKEN">
         <xsd:enumeration value="DROP_NULLS" />
         <xsd:enumeration value="NULL_ATTR" />
         <xsd:enumeration value="EMPTY_TAG" />
        </xsd:restriction>
       </xsd:simpleType>
      </xsd:element>
      <xsd:element name="max_rows" type="xsd:positiveInteger" minOccurs="0"/>
      <xsd:element name="skip_rows" type="xsd:positiveInteger" minOccurs="0"/>
      <xsd:element name="pretty_print" type="xsd:boolean" minOccurs="0"/>
      <xsd:element name="indentation_width" type="xsd:positiveInteger" minOccurs="0"/>
      <xsd:element name="rowset_tag" type="xsd:string" minOccurs="0"/>
      <xsd:element name="row_tag" type="xsd:string" minOccurs="0"/>
      <xsd:element name="item_tags_for_coll" type="xsd:boolean" minOccurs="0"/>
     </xsd:sequence>
    </xsd:complexType>
   </xsd:element>
   <xsd:element name="queryOut">
    <xsd:complexType>
     <xsd:sequence>
      <xsd:any/>
     </xsd:sequence>
    </xsd:complexType>
   </xsd:element>
  </xsd:schema>
</types>
  <message name="QueryInput">
   <part name="body" element="tns:query"/>
  </message>
  <message name="XMLOutput">
   <part name="body" element="tns:queryOut"/>
  </message>
  <portType name="ORAWSVPortType">
   <operation name="XMLFromQuery">
    <input message="tns:QueryInput"/>
    <output message="tns:XMLOutput"/>
   </operation>
  </portType>
  <binding name="ORAWSVBinding" type="tns:ORAWSVPortType">
   <soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
   <operation name="XMLFromQuery">
    <soap:operation soapAction="http://localhost/orawsv"/>
    <input>
     <soap:body use="literal"/>
    </input>
    <output>
     <soap:body use="literal"/>
    </output>
   </operation>
  </binding>
  <service name="ORAWSVService">
   <documentation>Oracle Web Service</documentation>
   <port name="ORAWSVPort" binding="tns:ORAWSVBinding">
    <soap:address location="http://localhost/orawsv"/>
   </port>
</service>
</definitions>Edited by: mdrake on Jan 27, 2011 8:42 PM

Similar Messages

  • ORA-31050: Access denied when try to register XMLSchema

    Dear All
    I got ORA-31050: Access denied
    when tried to run to load XML schema with DBMS_XMLSCHEMA.registerSchema
    Can you advise me what privilege should I grant to the user?
    I tried grant XDBADMIN role but it does nto help
    Thank you in advance
    Artem Rodin

    Dear Mark!
    I realy need you help!
    I can successfully register schema which has complexType declaration as root element, like
    <schema targetNamespace="http://www.oracle.com/PO.xsd"
         xmlns:po="http://www.oracle.com/PO.xsd"
         xmlns="http://www.w3.org/2001/XMLSchema">
    <complexType name="PurchaseOrderType">
         <sequence>
              <element name="PONum" type="decimal"/>
              <element name="Company">
                   <simpleType>
                        <restriction base="string">
                             <maxLength value="100"/>
                        </restriction>
                   </simpleType>
              </element>
              <element name="Item" maxOccurs="1000">
                   <complexType>
                        <sequence>
                             <element name="Part">
                                  <simpleType>
                                       <restriction base="string">
                                            <maxLength value="1000"/>
                                       </restriction>
                                  </simpleType>
                             </element>
                             <element name="Price" type="float"/>
                        </sequence>
                   </complexType>
              </element>
         </sequence>
    </complexType>
    <!--element name="PurchaseOrder" type="po:PurchaseOrderType"/-->
    </schema>
    But I failed if in the root there is element like
    <schema targetNamespace="http://www.oracle.com/PO.xsd"
         xmlns:po="http://www.oracle.com/PO.xsd"
         xmlns="http://www.w3.org/2001/XMLSchema">
    <complexType name="PurchaseOrderType">
         <sequence>
              <element name="PONum" type="decimal"/>
              <element name="Company">
                   <simpleType>
                        <restriction base="string">
                             <maxLength value="100"/>
                        </restriction>
                   </simpleType>
              </element>
              <element name="Item" maxOccurs="1000">
                   <complexType>
                        <sequence>
                             <element name="Part">
                                  <simpleType>
                                       <restriction base="string">
                                            <maxLength value="1000"/>
                                       </restriction>
                                  </simpleType>
                             </element>
                             <element name="Price" type="float"/>
                        </sequence>
                   </complexType>
              </element>
         </sequence>
    </complexType>
    <element name="PurchaseOrder" type="po:PurchaseOrderType"/>
    </schema>
    I got the following error stack
    ORA-01031: insufficient privileges
    ORA-06512: at “XDB.DBMS_XDBZ0”, line 218
    ORA-06512: at “XDB.DBMS_XDBZ”, line 6
    ORA-06512: at line 1
    ORA-06512: at “XDB.DBMS_XMLSCHEMA_INT”, line 0
    ORA-06512: at “XDB.DBMS_XMLSCHEMA”, line 26
    ORA-06512: at “XDB.DBMS_XMLSCHEMA”, line 131
    ORA-06512: at “DVLP.PRIME_BRIDGE”, line 73
    ORA-06512: at line 7
    I guess you can reproduce this in-house,
    It's not my schema it is taken from
    XML Database Developer’s Guide - Oracle XML DB
    Structured Mapping of XMLType 5-3
    Example 5–1 XML Schema Definition, po.xsd
    As far as I understand in the second case Oracle tries to create a table to store XML content and fails to do it.
    User that I used has DBA role. What other privileges should I grant to the user? And/or I should grant some additional privileges to "XDB" user?
    This issue has become critical for me, so I am highly appreciate any assistance
    Many thanks in advance
    Best regards
    Artem Rodin

  • Why do i get access denied when trying to download CS6 Design & Web Premium?

    I have a serial number for CS6 Design & Web Premium. I have a new computer I want to set it up on. I went to download it from Download CS6 products but I keep getting:
    Access Denied
    You don't have permission to access "http://trials2.adobe.com/AdobeProducts/DSST/CS6/win32/DesignWebPremium_CS6_LS16.7z" on this server.
    Reference #18.d1e1a60.1425598287.217a0f4
    Does anyone know what I'm doing wrong?
    Thanks for any help,
    Noah

    Make sure you have cookies enabled and clear your cache.  If it continues to fail try using a different browser.

  • Photoshop cs4 access denied when trying to install from disc in Windows 7 64bit.

    Photoshop cs4 access denied when trying to install from disc in Windows 7 64bit. I tried it in
    safe mode and it starts to install but get an error there as well.
    What do I do?

    So when you put the disk in it won't run correctly? When the disk is inserted you should have a window pop up with 2 options. 1 to install and the other to see what is on the disk. Choose to explore or open the disk. Go to the CS4 folder where the photoshop .exe file is (that will run the setup), right click on the .exe file and choose run as Admin and it should start. See if it will install. If not then read below.
    I am not sure how far you got in the install before so chances are you will have to run the CS4 cleanup utility. 2 levels to run at but don't use 1 or 2 just type in the number 3.
    http://www.adobe.com/support/contact/cs4clean.html
    You may need to run the windows installer cleanup utility too
    http://support.microsoft.com/kb/290301
    Before you try to reinstall the software ensure that adobe reader is not installed. If it is remove it. It has caused issues in the past with vista and CS4 installs.
    Also turn off windows Defender and any anti-virus software. You can keep UAC on in Windows 7.
    During the CS4 install at 90 percent it will almost stop and may take 5 to 10 mins to finish. This is normal. What a pain huh......
    After install is finished, reboot
    After reboot, go to the CS4 64 bit or 32 bit icon (depends on 32 or 64 bit Windows 7) in start area, right click on CS4 64 bit (if you have windows 7 64 bit) and choose properties, compatibility tab and then check run as Admin at the bottom area. Hit apply, ok to close out.
    Now start CS4 and run the updater.

  • I receive "Database access denied" when trying to add component 4543BD

    I receive "Database access denied" when trying to add component 4543BD to my schematic. This component was added from a previous version. I'm using Multisim version 12.0.0  Student edition.
    Solved!
    Go to Solution.

    Hi Diarra,
    I checked my database and  the  4543 is not in the Student Edition. If you opened a schematic that was created in a higher version such as the Educaiton Edition and copied the part to your database, when you place this part you will get the access denied message. 
    Attached is a schematic with the part, you can open it and build you circuit around it.
    Tien P.
    National Instruments
    Attachments:
    4543.ms12 ‏62 KB

  • Access Denied When Trying To Install Printer - Windows 7

    Good Day
    I have a serious problem on a client's computer. All I need to do is connect the laptop to a network printer, but I am having a lot of difficulty in doing so.
    First the details of the laptop: Windows 7 Professional 64-bit connected to network using ETH cable. Avira Professional antivirus running, firewall disabled on pc, user is member of administrators group only.
    Details of the printer: Xerox Workcentre 3220, connect to network using ETH cable, but also shared on pc also running Windows 7 64-bit Professional.
    I am able to ping the printer and have connected all the other pcs on the network to the printer without any troubles whatsoever. Printing, scanning - everything is working fine for the other pcs. I am also able to connect to shares from the laptop to any
    other pc.
    So here is my issue with this specific laptop:
    Firstly, when using the "Add Printer" wizard, the "Add a local printer" option is greyed out.
    So I tried connecting to the printer using the"Add a network, wireless or Bluetooth printer" option, which seemed to be working, but during installation it gives an Access Denied error and undoes the installation.
    Then I tried connecting to the share of the printer on one of the other pcs, which had the exact same result.
    I then tried to modify an other printer, by firstly trying to add a new Local Port, but the I recieve the following error: "Specified port cannot be added. Access is denied."
    I tried then adding the driver using the Windows Print Server, but the buttons were unavailable.
    After reading on many forums, I accessed the Print Management console (Control Panel -> Administrative Tools -> Print Management)m and tried adding the printer and ports there, but recieved an "Access Denied" error every time.
    Basically whatever I tried, I recieved "Access Denied" errors. I created a new user, which is only a member of the Administrators group. Logged in with new user, without any success in connecting to the printer. I then tried adding security permisssions
    for "everyone" to the folder C:\Windows\System32\spool\PRINTERS, as I read on another forum. I tried modifying the group policy using gpedit.msc and also using the Local Security Policy, although I could have missed some things in these two places,
    but basically with a quick glance, everything seemed fine. I am sure there are no virusses, etc on this laptop and as I have said all the other pcs connected to the printer very easily.
    How can it be that I cant install a printer on this laptop, while I was able to do so a year or so back?
    I have gotten a few suggestions that it will in the end just save me time by formatting the pc and reloading all the data and programs, but this isn't an option I really want to take. And then I have previously had issues with the "Add a local printer"
    option greyed out and unable to add printers, etc, but then I was able to solve the problem by creating a new user and then switching to that user - which indicated a possible user profile corruption. But in this case even that did not work.

    Hi,
    please check your below configuration:
    1.Start the policy editor (Control Panel -> Administrative tools -> Local security policy)
    2.Select “Local policy” item
    3.Find the item “Devices: Prevent Users from Installing Printer Drivers” in the section Security Settings -> Security Options and change it to Enabled
    4.Go to “Security Settings -> User Rights Assignment” section and check, that “Load & Unalod Drivers” option contains the active user group. It important, that even if it has “All Staff” already, it still could miss “Administrators” group, so it’s necessary
    to add it manually.
    In addition, this thread could be referred:
    http://social.technet.microsoft.com/Forums/en-US/8c3c3d97-9d85-4ab0-9fc8-4b7aba202fb2/windows-cannot-connect-to-the-printer-access-is-denied-please-help?forum=itprovistaprinting
    Karen Hu
    TechNet Community Support

  • Access denied when trying to connect client cd rom to vm

    Hey guys,
    One of my users is using the client to build a vm, tries to connect their cdrom using the client and gets access denied.  What is the minimum permissions needed to be able to connect a remote physical cd rom to a vm?  VC 2.5, esx 3.0, I believe they currently have virtual machine power user role on the object.
    Respectfully,
    Matthew
    Kaizen!

    Hey Guys,
    I think there is something else going on here Probably not permissions or roles, maybe a service needs restarting?  The user gets the following error:
    Exception of type Vmomi.fault.no permission' was thrown
    Ideas?
    Respectfully,
    Matthew
    Kaizen!

  • Generation Error - when trying to publish a Java web service

    Hi All,
    I keep getting the following Generation Error -- java.util.NoSuchElementException_ when I'm trying to create a Java Web Service using the jdeveloper wizard.
    I have 2 entities and 2 stateless session beans acting as their facades. One entity has a One-One(FK) relationship with the other entity. I test out the entities and session beans using the test client and the OC4J embedded container and everything seems to work. When I try to generate a Java WebService from one of the entities I keep getting the "Generation Error". Could someone please provide me with some insight into why I'm facing this problem, because it seemed fine when I published J2EE web services previously and now this happens and I cant seem to publish web services anymore. Everytime I keep getting the same GenerationError. Thanks in advance.

    Without going into any technical discussion about the code, my first question is what JDK version was used to create this which was imported into the form? Understand that Forms 10 runs on JDK 1.4.2, so if you used any newer JDK version, likely there will be problems.

  • SOAP Fault when returning null from a Native Web Service Stored Procedure

    I have a stored procedure which I can successfully invoke via soapUI
    However, if one of the Stored Procedure's OUT arguments is set to null the native web service returns the following fault :
    <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Body>
    <soap:Fault>
    <faultcode>soap:Client</faultcode>
    <faultstring>Error processing input</faultstring>
    <detail>
    <OracleErrors xmlns="http://xmlns.oracle.com/orawsv/faults">
    <OracleError>
    <ErrorNumber>ORA-19202</ErrorNumber>
    <Message>Error occurred in XML processing</Message>
    </OracleError>
    <OracleError>
    <ErrorNumber>ORA-01405</ErrorNumber>
    <Message>fetched column value is NULL</Message>
    </OracleError>
    </OracleErrors>
    </detail>
    </soap:Fault>
    </soap:Body>
    </soap:Envelope>I can see how to control the processing of null values when invoking orawsv (using the null_handling element).
    Is there an equivalent for Stored Procedures ?
    Thanks,
    PD
    versions as follows :
    Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
    PL/SQL Release 11.2.0.1.0 - Production
    "CORE     11.2.0.1.0     Production"
    TNS for Linux: Version 11.2.0.1.0 - Production
    NLSRTL Version 11.2.0.1.0 - Production

    Without going into any technical discussion about the code, my first question is what JDK version was used to create this which was imported into the form? Understand that Forms 10 runs on JDK 1.4.2, so if you used any newer JDK version, likely there will be problems.

  • Access Denied when trying to access shared folders on the server with administrative privileges

    I have problem accessing shared folder on the server machine from Windows 7 machine even if I try to access it with administrative privileges (server Administrator account). I will try now to explain better my situation.
    In my company, we have small network infrastructure with one main server machine (HP ProLiant server) with Windows Server 2012 R2 installed and couple of desktop machines. The network is administrated by me.
    On Windows Server we have installed and setup DHCP, DNS, Remote Access and Routing, File and Storage and Active Directory services. Desktop machines are having Windows 8.1 Pro, Windows 8.1 or Windows 7 Home Premium installed on them. In Active
    Directory I have created domain, User groups and Users for employees in my company and so far, I didn't added desktop machines to the domain.
    Also, I've created one folder on the server which should contain different projects data for network users and I have set access permissions and security for this folder and shared it on the network (I've added couple of users to one user group and I
    gave Full control to this group over this folder). When I try to access this folder from network, I've been asked for login credentials (normally), where I just type in one of users username and password who has been given access permissions to (who is member
    of group with full control over the folder). From Windows 8.1 Pro and Windows 8.1 machines I can access and work on this folder without any problems.
    The problem comes with Windows 7 machines. On Windows 7 machines (I have also tried this with Windows 7 Ultimate in VMWare) I can access server, I can see its shares, but as soon I try to access folder I've created for projects, I get Access Denied message
    with request for User login credentials. Whichever user account I use (even servers main Administrator account) I keep getting this message over and over and I'm unable to access it at all.
    I have also tried to access the server through VPN (from local or outside) but I'm getting the same error again. Also I've tried to add these Windows 7 machines to the domain and login with domain user but the result is the same. Turned off both firewalls
    (on server and desktop machines, which I know is unnecessary, but lets try it), still same case. I've tried couple more things with registry editor on desktop machines which I found on different forums and websites but still no luck. And now I don't know
    what else I can do.
    Does anyone knows what's the problem here, have I set something wrong, have not set something I should?

    Hi MeipoXu,
    thanks for your response. I will first answer on your question.
    Yes, the main issue is that we can see the folder when we access the server but we cannot access its contents from Windows 7 machines. I have tried on two machines, one with Windows 7 Home Premium version and the other one with Windows 7 Ultimate version
    and the situation is the same.
    As you recommended, I've checked Network Discovery and File and Printer Sharing and the situation is next: File and Printer Sharing is turned on all layers (Private, Public and Domain) while Network Discovery is off for all layers too. I don't know if this
    is normal thing but Network Discovery cannot be turned on in Windows Server (I'm able to select Turn on Network Discovery and apply the changes, but when I get back to this settings page, I again see that it's turned off, so I assume this can't be changed
    at all).
    I also tried with icacls in command prompt and everything seems to be ok there regarding permissions. Share permissions are set to Full control to Everyone and Security permissions are set to Full control only for Administrators and the user group I've created
    for employees in my company. The confirmation for this is that on Windows 8 machines you can access this folder without any problem and without getting any message connected with access permissions with any user account within this user group. This share is
    created through File and Storage Services service in Server Manager panel.
    And then something came up on my mind. I went in Server Manager to check shared folder settings in File and Storage Services and under Settings page I saw that "Encrypt data access" has been enabled (I enabled this option because I thought
    I will get more security with this option). I asked my self what would happen if I disable it, tried it and now everything works ok on Windows 7 machines too. Now I assume that Windows 7 doesn't have this feature implemented or there are some
    settings which needs to be set on Windows 7 machines to make this encryption thing work with Windows Server. So basically, I will let this feature off for now until I find out more about it and how to implement it to work with all operating systems.
    I want to thank you once more for your kind help!

  • Access Denied when trying to open a file that is encrypted on network share with EFS

    I just recently enabled EFS on the default domain policy and created a new network share, encrypted a file and added myself to that file and tried to open the file from my workstation.  I then receive an error "Access denied", I also tried
    to create a file and encrypt it on that same share and get an error "The requested operation cannot be completed.  The computer must be trusted for delegation and the current user account must be configured to allow delegation."  
    My steps.
    1. Enable group policy for EFS, removed the expired certificate that was already there and Created a new Data recovery agent.
    2. Created a network share, created a test file, enabled encryption on the file 
    3. certmgr.msc, personal and requested a new certificate, Basic EFS
    4. On the network share and properties of file, advanced, details and added the user
    5. from the workstation tried to access the file, Access Denied.  I can create any file I won't just can't add attributes to encrypt the file or open an encrypted file
    Now if I go to the server where the CA is located which is also the AD server and create share and run the same process it works as expected.  I'm guessing I have to export the cert from the CA server as a pfx and import that to both the server that
    has the network share and the workstation but that still doesn't seem to work.  Maybe I don't understand how EFS works and this is not possible?  Any suggestions would be appreciated.

    You are correct in not understanding how EFS works.
    When you connect to an encrypted file via a network share, the encryption/decryption takes place *on* the server. To enable over the network access, the server's computer account must be trusted for delegation.
    The server actually impersonates the user and creates a user profile on the server (containing the defined EFS certificate and private key). The important thing to remember is that the files is transmitted in clear text from the server to the client.
    See http://blogs.technet.com/b/instan/archive/2010/08/11/remote-efs-decryption-and-trusted-for-delegation-requirements.aspx
    Brian

  • Access denied when trying to install itunes on windows 7

    when trying to install itunes I get a message access denied. using win 7 i have read that a certain windows update can cause this. can anyone  provide any information on how to fix this?  I've tried to remove this, but in control panel-update history, it say it was installed 08/22. when i look at the list to uninstall it, i don't see it.
    KB2918614

    Go to Control Panel > Programs and Features > View installed updates then search the list for Security Update for Microsoft Windows (KB2918614). You may need to adjust the column widths to read the full titles. Uninstall it if you have it, then reboot and try installing iTunes again.
    If you have further issues see Troubleshooting issues with iTunes for Windows updates.
    tt2

  • Access denied when trying to use PDF printer as normal user

    I have Acrobat 8 professional installed on a computer running Windows XP SP3. When i try to print a document to pdf from any program as Administrator it performs just fine. When i log on as a normal, restricted, user i get the window popup asking for a file name and location and whereever i try to save a file i get "access denied" error.
    Users have right to write and modify in all of the folders i've tried to save to (desktop, my documents, custom made folders), but i think the problem is with the temp file being written to some system folder where restricted users don't have permission to write. Did anyone encounter a similar problem, and how did you solve it? What directories do the normal users need access to in order to perform printing.
    Thank You

    The forum added some nice links and i found my answer here http://forums.adobe.com/message/1179199#1179199 - changed the registry key permissions and it's working like a charm. Thank you.

  • Error Message access denied when trying to install on SD Card

    Hi,
    I got this errormessage whan I'm trying to install the image about CMD (run as Admin):
    C:\FFUTEST>dism.exe /Apply-Image /ImageFile:flash.ffu /ApplyDrive:\\.\PhysicalDr
    ive1 /SkipPlatformCheck
    Access is denied.
    Does anybody know a solution?

    Are you able to see the SD card in file explorer?  When you performed the diskpart command sequence:
    diskpart
    list disk
    exit
    Did your SD card show up as physicaldrive1?
    Is the SD card either 8 or 16 GB in size and Class 10?
    Also, are you running this command on a Windows 10 install?
    You might check that explorer or cmd don't have a reference to the SD card still.  If a program is accessing the card that might prevent DISM from accessing it in exclusive mode.
    Jonathan Tanner | Microsoft | Windows 10 IoT Core Insider Preview Support | This posting is provided 'as is' with no warranties and confers no rights.

  • ACCESS DENIED when trying to use custom site template to create new Subsite

    I am trying to create a new site using a custom template. I am the new admin here at the company. Other also are having "access denied" errors when trying to create the site using these custom templates. 
    However I can still create a site using the out of the box templates. I have given myself site collection admin (primary) and I am a farm administrator as well. Any ideas on why I keep getting access denied to specific templates?
    The entire site collection is using the custom template. When I try to create a new site under the site collection with a custom template now, it says "access denied". Any ideas?
    Thanks!
    Note - I am able to use the Custom Site Templates in the test environment without any issues. Only in the production/live environment am I getting the access denied error.

    I am not finding anything that comes up in the ULS logs about the access denied. I tried creating the site in the test environment using the custom template and it worked. I go to the production environment and try to create the site with the same template
    and get "error:access denied - current user domain\user" I checked in the ULS logs as soon as the access denied appears (pretty quickly after pressing create) and there is nothing at that specific time. This is a huge problem, is there any way to
    work around or fix this? I'm a new admin.

Maybe you are looking for

  • Cinema Display not detected

    I got my 20" Cinema Display back from repair today (backlight problem) and now I can't get my MacBook Pro to detect that it's attached. While it was at the repair center, I used a CRT as a second monitor. So today, I just closed the MBP (didn't shut

  • System error in program SAPLRSOA

    Hello All, I tried to execute a query and it resulted in the following error: System error in program SAPLRSOA and form FUNC RSOA_VCUBE_READ_REMOTE_DATA[6] (see long text). In BI, the data is readfrom the remote cubes. And there seems to be error in

  • In USER_EXIT_MOVE_FIELD_TO_VBKD problem of updating XVBKD

    Hi all, I have a requirement of assigning valid inco terms and fetching cust inco terms in this USER_EXIT_MOVE_FIELD_TO_VBKD user exit. Problem is when we get the valid inco terms, after that updating it into XVBKD but for the next line item ,only XV

  • Need for idempotent stateless session beans

    I'm trying to find a solution for failovering method calls on a stateless           session bean, even for method calls that already have started.           I understand that failover services for failures that occur while the method           is in

  • 802.1x router loses ARP entry

    Firs of all, Hello All. In new to this community. A have a strange problem i want to share with you. Possibly a bug but maybe it is me who does something wrong. My network looks like this: [RADIUS] --- [C881] --- [SG200 Switch] ---[WinXP] One of SG20