ABE Access based enumeration not working

Hello there,
we have a brand new Windows 2012 R2 file server with one share \\server\share1, ABE enabled on this share.
Read access for all Domain users on share.
This share has 2 subfolders, folder1 and folder2.
User Jon has set NTFS read write rights on folder1, but no access rights on folder2 (all set on security tab)
Now when User Jon connects to this share he still sees both folders, but access denied on folder2.
Why can he still see folder2 even when ABE is enabled? Also checked effective rights on folder2, no access.
Thanks in advance

Hi,
Please try to recreate the folders to check if it could resovle thie issue. Do you share the subfolder? If so, the subfolder can still been viewed when browsing the server.
For more detailed information, please refer to the thread below:
Does Access Based Enumeration work with NTFS permissions?
https://social.technet.microsoft.com/Forums/windowsserver/en-US/fd9b8e65-f519-4c24-b721-5a1b9d61f13f/does-access-based-enumeration-work-with-ntfs-permissions
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

Access Based Enumeration not working Windows 2012 R2 Datacenter

I am having a hard time figuring out why Access Based Enumeration is not working for me. I have set and re-set the settings and I'm still able to see folders I should not. I do get denied access on folders I don't have access to.
I have checked effective access which say everything is denied to me but I can still see the folder(s) listed.
I have the share permissions set to authenticated Users - Full Control
I have the NTFS permissions set to the correct Dept. Groups. - Modify, and Domain Admins - Full Control and Guests - Deny Full Control
Any idea's?
--------Update--------
I believe I had found the issue. It was a rights issue with a group that added to the local admins group.

Hi,
It seems that you have resolve the issue.
Please feel free to let us know if you need further assistance.
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Error attempting to enable ABE (Access Based Enumeration)

Hello,
While attempting to enable ABE, I am getting an inconspicuous error:
The error is not clearly defined and there are no event logging corresponding to this issue. So I am bit perplexed to comprehend what exactly 'Expression evaluated to false' means? Any assistance on this matter would be greatly appreciated.
Regards,
Horace
Update: Additionally, I am not able to apply any settings through the dialog, this appears to be a bug?

Hi,
1. Same error regardless the account. (With administrator rights)
2. No GPO polices were applied at the time of that error. Further more, GPO policies that are currently applied after the fact pertain to only Roaming Profiles and Folder Redirection.
3. The server is setup as Role Based: AD, IIS, DHCP, DNS, and File and Storage Services. I don't have another system to install Windows Server 2012R2 to test with.
4. I am not sure what you mean by test on a shared folder?
Mean time, this is a fresh install, I will run 'sfc' and 'DISM' for verification purposes.
Yes, I would consider this as a bug (In terms of the 'error message'). The error resembles a programing issue. Is there a place to report bugs?
Update: I installed Remote Administration Tools for Windows 8.1 on a client computer. Error still persists.
Regards,
Horace

Access Based Enumeration on CAD /Design Files 2008 R2

Hi,
I'm currently having some issues with our Windows Server 2008 R2 File Cluster, where the System Process is chugging along @ 80-95% CPU, which I personally find strange. After 2-3 hours of this type of resource utilization, we experience a failover to our
passive node. After a few hours of user connectivity and build it the same thing happens again.
Using ProcessExplorer I have been able to identify the srv2.sys driver having massive amounts of threads being created, with several running at 10-15% + CPU utilization per thread. srv2.sys driver is for SMBv2 Connectivity from my research and troubleshooting
of these issues.
I have had a ticket opened with MS Premier Support and I have completed installing all of the latest srv2.sys file updates to the latest version for 2008 R2, but we still seem to be having the issues, although it is intermittently. One of these fixes was in
relation to enabling Access Based Enumeration to a certain level within your File System/Structure (http://support.microsoft.com/kb/2732618/en-us)
Other hotfix installed is
http://support.microsoft.com/kb/2831154/en-us
We have users who run multiple image and CAD applications (Adobe InDesign, AutoCAD, MicroStation, Revit etc) across our network drives, as well as what I would call "standard" File Server access (word docs, spreadsheets, PDF's, powerpoint presentations
etc).
We have ABE enabled across all volumes.
At the moment, I am praying for the server to again reach 100% CPU capacity due to the System Process using these resources.
What I was wanting to ask is, are there any known issues with using Access Based enumeration of Drives for users/applications that use these InDesign/AutoCAD like applications?
The reason I ask this is that when we experience this issue I notice more activity on our volumes that host these CAD/Design files, compared to when we experience a period of stability on the system.
I have read on a few articles regarding Microstation that if it is a specific version, that you should disable SMBv2 via registry to revert to SMBv1 for better use/stability. I am going down the path of disabling SMB2 for all users who use these CAD applications
to see if this assists in resolving the issue, but I'm trying to explore all other options/potential issues to better configure our File Cluster
Looking for guidance on troubleshooting this issue further.
Thanks in advance.

Hi,
After the hotfix is installed, did you create a new registry entry? If not, please following the steps below to create a new registry entry:
1. Open Registry Editor. To do this, click Start, type regedit in the Start Search box, and then press Enter.
2. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\
3. On the Edit menu, point to New, and then click DWORD (32 bit) Value.
4. Type ABELevel, and then press Enter.
5. On the Edit menu, click Modify.
6. In the Value data box, type a number according to the level that ABE is enabled on the shared folder, and then click OK.
7. Exit Registry Editor.
Note: The ABELevel value specifies the maximum level of the folders on which the ABE feature is enabled. For example if you enable ABE on \\Server\share, you must set the ABELevel value to 1. If you enable ABE on \\Server\share\share, you must set the ABELevel
value to 2. If the ABELevel value is not set or has value of 0, then this hotfix is not enabled.
The value of the above mentioned key is set as follows:
Value = 0: ABE is enabled for all levels (default behavior without key as well)
Value = 1: ABE enabled for depth of 1 (\server\share)
Value = 2: ABE enabled for depth of 2 (\server\share\folder)
And so on for multiple levels.
Please configure this registry key with the value that’s most suitable for your environment.
Regards,
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SMB Share with Access Based Enumeration & Mac OSX 10.8/10.9

Hello,
I've been working on a bit of a problem related to some SMB Shares on Windows Server 2012 with Access Based Enumeration with Mac OSX 10.8 & 10.9.
Basically, we have one network share that mounts for all of our Students & Faculty on campus. Then, based on which security group the user is inside of in Active Directory, they gain access and visibility to different folders. (Basically, if they are members of the graphic design department, they get access to the Graphic Design's folder). All of that is working fine, no problems. From there we have 3 folders that branch off. We have a Distribution, an Open, and a Dropbox folder.
Distribution is setup as a spot for instructors to have full access, students have read access, They're able to drop files into this locations, to distribute them to their students. This folder is working fine, no problems.
Open is setup with everyone read/write access across the board. This folder is setup for students to share data to each other, work on projects, etc. This folder is working as intended, no problems.
Dropbox is the only folder we're having trouble with, i'm assuming because it's settings are the most complex out of the three. The purpose of the drop box is for students to have read/write control over their own content, but not others, and instructors to have read/write over this entire folder.
Now that I've laid out our Setup, the problem we've encountered, is ONLY occurring inside of the Dropbox folder. When I try to Drag/Drop OR Copy/Paste from another location on the computer into the Dropbox folder, I get a permission error. HOWEVER, if I have a file open, and I click "save as" browse to the dropbox folder, I can save the file into that location without any trouble. Also, on our windows computers, with the same exact users, drag/drop & Copy/Paste work normally.
Things I've Tried:
Disabling the .DS_Store - I figured in the drop box, the .DS_Store would be created by the first user who copied a file in, then subsequent users would not have access to the .DS_Store.
CIFS/SMB1 - I've read that SMB2 can cause some trouble while connecting to SMB Shares, so I tried both connecting via CIFS, and also by forcing back to SMB1, with no fix.
Am I missing something with this? I've read a lot about people having trouble connecting to SMB Shares, but for us it had not been a problem up until this point. Does anyone know what a possible fix might be for this? I'm sifting through internet searches right now, trying to find a solution, however MOST of the responses I see are regarding the two things I've already tried.
Any suggestions would be greatly appreciated.
Thanks!

hi everybody
I really need some help so here is a little up !
thanks !

OSX 10.8 and SMB Shares with Access Based Enumeration.

Hello,
I've been working on a bit of a problem related to some SMB Shares on Windows Server 2012 with Access Based Enumeration with Mac OSX 10.8 & 10.9.
Basically, we have one network share that mounts for all of our Students & Faculty on campus. Then, based on which security group the user is inside of in Active Directory, they gain access and visibility to different folders. (Basically, if they are members of the graphic design department, they get access to the Graphic Design's folder). All of that is working fine, no problems. From there we have 3 folders that branch off. We have a Distribution, an Open, and a Dropbox folder.
Distribution is setup as a spot for instructors to have full access, students have read access, They're able to drop files into this locations, to distribute them to their students. This folder is working fine, no problems.
Open is setup with everyone read/write access across the board. This folder is setup for students to share data to each other, work on projects, etc. This folder is working as intended, no problems.
Dropbox is the only folder we're having trouble with, i'm assuming because it's settings are the most complex out of the three. The purpose of the drop box is for students to have read/write control over their own content, but not others, and instructors to have read/write over this entire folder.
Now that I've laid out our Setup, the problem we've encountered, is ONLY occurring inside of the Dropbox folder. When I try to Drag/Drop OR Copy/Paste from another location on the computer into the Dropbox folder, I get a permission error. HOWEVER, if I have a file open, and I click "save as" browse to the dropbox folder, I can save the file into that location without any trouble. Also, on our windows computers, with the same exact users, drag/drop & Copy/Paste work normally.
Things I've Tried:
Disabling the .DS_Store - I figured in the drop box, the .DS_Store would be created by the first user who copied a file in, then subsequent users would not have access to the .DS_Store.
CIFS/SMB1 - I've read that SMB2 can cause some trouble while connecting to SMB Shares, so I tried both connecting via CIFS, and also by forcing back to SMB1, with no fix.
Am I missing something with this? I've read a lot about people having trouble connecting to SMB Shares, but for us it had not been a problem up until this point. Does anyone know what a possible fix might be for this? I'm sifting through internet searches right now, trying to find a solution, however MOST of the responses I see are regarding the two things I've already tried.
Any suggestions would be greatly appreciated.
Thanks!
iMac, OS X Mountain Lion (10.8.5)

Just thought I'd post this in case it helps someone. This could be the same problem we have (had) here so try this:
When it asks for name and password put this in the name field: sharename\name
So if the share is called "WWW" and your login name is "Bob" you'd put "www\Bob" in the name field and then normal password in the password field.
Works perfectly for us. I cant remember when it started 10.7 or 10.8 but this was the only solution. Hope it helps someone else!

Powershell: Set Access Based Enumeration on share in Failover Cluster

Hi guys,
I'm facing the following problem. Below you see my script to create a shared folder. (My folder share is visible in failover cluster manager, underneath clustergroup TESTSTO01.)
Now I need to enable Access Based Enumeration on this share. Has anyone a clue how to do that in powershell? (Version 2).
I also need to make sure that the files and programs are not available offline.
Thanks in advance!
$SHARE_READ = 1179817 # 100100000000010101001
$SHARE_CHANGE = 1245631 # 100110000000100010110
$SHARE_FULL = 2032127 # 111110000000111111111
$SHARE_NONE = 1 # 000000000000000000001
$ACETYPE_ACCESS_ALLOWED = 0
$ACETYPE_ACCESS_DENIED = 1
$ACETYPE_SYSTEM_AUDIT = 2
$ACEFLAG_INHERIT_ACE = 2
$ACEFLAG_NO_PROPAGATE_INHERIT_ACE = 4
$ACEFLAG_INHERIT_ONLY_ACE = 8
$ACEFLAG_INHERITED_ACE = 16
$ACEFLAG_VALID_INHERIT_FLAGS = 31
$ACEFLAG_SUCCESSFUL_ACCESS = 64
$ACEFLAG_FAILED_ACCESS = 128
# New Trustee
function New-Trustee($Domain, $User)
$Trustee = ([WMIClass]"\\TESTSTO01\root\cimv2:Win32_Trustee").CreateInstance()
   $Trustee.Domain = $Domain
   $Trustee.Name = $User
   if ($User -eq "Administrators")
{$Trustee.SID = @(1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0,32,2,0,0)}
else
{$Trustee.SID = @(1, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0)}
   return $Trustee
# New ACE
function New-ACE($Domain, $User, $Access, $Type, $Flags)
$ACE = ([WMIClass]"\\TESTSTO01\root\cimv2:Win32_ACE").CreateInstance()
   $ACE.AccessMask = $Access
   $ACE.AceFlags = $Flags
   $ACE.AceType = $Type
   $ACE.Trustee = New-Trustee $Domain $User
   return $ACE
# Get SD
function Get-SD
$sd = ([WMIClass]"\\TESTSTO01\root\cimv2:Win32_SecurityDescriptor").CreateInstance()
$ACE1 = New-ACE -Domain $null -User "Everyone" -Access $SHARE_CHANGE -Type $ACETYPE_ACCESS_ALLOWED -Flags $ACEFLAG_INHERIT_ACE
$ACE2 = New-ACE -Domain $null -User "Administrators" -Access $SHARE_FULL -Type $ACETYPE_ACCESS_ALLOWED -Flags $ACEFLAG_INHERIT_ACE
[System.Management.ManagementObject[]] $DACL = $ACE1, $ACE2
$sd.DACL =$DACL
return $sd
# Create-Share
function Create-Share($ShareName, $Path, $Comment,$Access)
   $checkShare = (Get-WmiObject Win32_Share -Filter "Name='$ShareName'")
   if ($checkShare -ne $null) {
   # "Share exists and will now be deteted!!!"
   get-WmiObject Win32_Share -Filter "Name='$ShareName'" | foreach-object { $_.Delete() }
   $wmishare = [WMIClass] "\\TESTSTO01\ROOT\CIMV2:Win32_Share"
$Access = Get-SD
   $R = $wmishare.Create($Path,$Sharename,0,$null,$Comment,"", $Access)
   if ($R.ReturnValue -ne 0) {
   Write-Error "Error while creating share: " + $R.ReturnValue
   exit
   # Write-Host "Share has been created."
# Create first share with permissons **********************************
$ShareName = "$Company$"
$Path = "$Driveletter" + ":\$Company"
$Comment = ""
$Domain = $Null
Create-Share $ShareName $Path $Comment $Access

Unable to find type [CmdletBinding(SupportsShouldProcess=$TRUE)]: make sure tha
t the assembly containing this type is loaded.
At C:\Script Nathalie\Everyware2.ps1:294 char:45
+ [CmdletBinding(SupportsShouldProcess=$TRUE)] <<<<
   + CategoryInfo : InvalidOperation: (CmdletBinding(S...dProcess=$T
   RUE):String) [], RuntimeException
   + FullyQualifiedErrorId : TypeNotFound
The term 'param' is not recognized as the name of a cmdlet, function, script fi
le, or operable program. Check the spelling of the name, or if a path was inclu
ded, verify that the path is correct and try again.
At C:\Script Nathalie\Everyware2.ps1:295 char:6
+ param <<<< (
   + CategoryInfo : ObjectNotFound: (param:String) [], CommandNotFou
   ndException
   + FullyQualifiedErrorId : CommandNotFoundException
The term 'begin' is not recognized as the name of a cmdlet, function, script fi
le, or operable program. Check the spelling of the name, or if a path was inclu
ded, verify that the path is correct and try again.
At C:\Script Nathalie\Everyware2.ps1:304 char:6
+ begin <<<< {
   + CategoryInfo : ObjectNotFound: (begin:String) [], CommandNotFou
   ndException
   + FullyQualifiedErrorId : CommandNotFoundException
Get-Process : Cannot evaluate parameter 'Name' because its argument is specifie
d as a script block and there is no input. A script block cannot be evaluated w
ithout input.
At C:\Script Nathalie\Everyware2.ps1:331 char:8
+ process <<<< {
   + CategoryInfo : MetadataError: (:) [Get-Process], ParameterBindi
   ngException
   + FullyQualifiedErrorId : ScriptBlockArgumentNoInput,Microsoft.PowerShell.
   Commands.GetProcessCommand
The term 'end' is not recognized as the name of a cmdlet, function, script file
, or operable program. Check the spelling of the name, or if a path was include
d, verify that the path is correct and try again.
At C:\Script Nathalie\Everyware2.ps1:345 char:4
+ end <<<< {
   + CategoryInfo : ObjectNotFound: (end:String) [], CommandNotFound
   Exception
   + FullyQualifiedErrorId : CommandNotFoundException
The term 'set-shareABE' is not recognized as the name of a cmdlet, function, sc
ript file, or operable program. Check the spelling of the name, or if a path wa
s included, verify that the path is correct and try again.
At C:\Script Nathalie\Everyware2.ps1:348 char:13
+ set-shareABE <<<< TESTSTO01 $Company$ -Enable
   + CategoryInfo : ObjectNotFound: (set-shareABE:String) [], Comman
   dNotFoundException
   + FullyQualifiedErrorId : CommandNotFoundException

"access restrictions" did not work sometimes when using 3-tier DeskI.

My customer found that "access restrictions" did not work sometimes when using 3-tier DeskI.
But this issue can be solved by logging on from another machine, or restarting the DeskI.
For I can reproduce this issue, so I just want to know that:
1.What is it probably related to?
2.If this issue happens again, what can I suggest my customer for tracking it?
For example, get some log files from servers etc.
Thanks!

Hi Sarah,
Also you can try the following solution.
1. Import the universe.
2. Go to manage access restrictions
3. Remove the restriction .
4. Again create the rescrition and unchecked the " limit size of result set to"
5. Now assign it to the unlimited results group ( this is the name of
the group we have given to those users who should be able to retrieve
more than X rows)
6. Now we save the universe. (Dont export the universe).
I hope this will help you.
Regards,
Sarbhjeet Kaur

Windows 8 Last Access Time Stamps not working

Hi I have been trying to fix a issue with last access time stamps not working when I open a file
so will have time on created modified and accessed from when created but some are wrong like one file
saying
created ‎Sunday, ‎September ‎14, ‎2014, ‏‎5:19:32 AM
modified ‎Sunday, ‎September ‎14, ‎2014, ‏‎5:19:32 AM
accessed Sunday, ‎September ‎14, ‎2014, ‏‎5:19:32 AM
I'm not sure what can cause this please help thank you

Hi whowhatwere,
Are you only confused about the last access time not change when you open a file?
If you want to know more details about modified and created time, we can refer to the following KB.
http://support.microsoft.com/kb/299648/en-us
About the accessed time, please refer to the following blog.
How do I access a file without updating its last-access time?
http://blogs.msdn.com/b/oldnewthing/archive/2011/10/10/10222560.aspx
The blog mentioned that: In fact, the intuitive definition of access is more specific: It's "the last time I opened, modified, printed, or otherwise performed some sort of purposeful action on the file."
Best regards,
Fangzhou CHEN
Fangzhou CHEN
TechNet Community Support

Some folder is empty when enabled access-based enumeration + Deduplication

Hi Everyone,
Background:
Recently we migrated the file server to win2012 r2. We have enabled dedupication and enabled access-based enumeration.
The data stored in D drive vm, so we just connected the D drive to the new 2012 r2 server. Security rights all the same as before.
Problem:
People reported that they can see their files and folders directly under their client folders, however some of the sub-folders are empty. when we checked from our file server, those sub-folder have files
inside.
We did some test, we tried to disabled access-based enumeration, checked from user shared drive and see the files are visible again inside the folder.
Has anyone experienced that before and can give me the solution?
Thanks!!
MT

Hi,
From the symptom it should related to Access Based Enumeration which means it is affected by NTFS permission settings. Please help list the NTFS permission settings on folders and an affect file.
Meanwhile you can try to create another share folder with basic NTFS permissions such as:
Domain Admins: Full Control - This folder, subfolders and files.
Creator Owner: Full Control - subfolders and files only.
A testuser group: Modify (on a specific subfolder and its files).
Everyone - Read - This folder only.
Then add the additional permissions which is added on your real shares to the test share one by one to see which one causes the issue.
If you have any feedback on our support, please send to [email protected]

Registry Based Discoverying not working

Good day, I try to discovery a server which has a unique / special registry key (service name) . not sure why the discoverying is not working...
Here is the xml of the management pack
<?xml version="1.0" encoding="utf-8"?>
<ManagementPack SchemaVersion="2.0" ContentReadable="true" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<Manifest>
    <Identity>
      <ID>Test.First</ID>
      <Version>1.0.0.12</Version>
    </Identity>
    <Name>Test First</Name>
    <References>
      <Reference Alias="InstanceGroup">
        <ID>Microsoft.SystemCenter.InstanceGroup.Library</ID>
        <Version>7.5.8501.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="SC">
        <ID>Microsoft.SystemCenter.Library</ID>
        <Version>7.0.8433.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="Windows">
        <ID>Microsoft.Windows.Library</ID>
        <Version>7.5.8501.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="Health">
        <ID>System.Health.Library</ID>
        <Version>7.0.8433.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="System">
        <ID>System.Library</ID>
        <Version>7.5.8501.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
    </References>
</Manifest>
<TypeDefinitions>
    <EntityTypes>
      <ClassTypes>
        <ClassType ID="Test.First.Group.Servers" Base="InstanceGroup!Microsoft.SystemCenter.InstanceGroup" Accessibility="Public" Abstract="false" Hosted="false" Singleton="true"
/>
        <ClassType ID="Test.First.Class.Role" Base="Windows!Microsoft.Windows.ComputerRole" Accessibility="Public" Abstract="false" Hosted="true" Singleton="false"
/>
      </ClassTypes>
    </EntityTypes>
</TypeDefinitions>
<Monitoring>
    <Discoveries>
      <Discovery ID="Test.First.Discovery.Servers" Target="Test.First.Group.Servers" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal">
        <Category>Discovery</Category>
        <DiscoveryTypes>
          <DiscoveryRelationship TypeID="InstanceGroup!Microsoft.SystemCenter.InstanceGroupContainsEntities" />
        </DiscoveryTypes>
        <DataSource ID="Discovery" TypeID="SC!Microsoft.SystemCenter.GroupPopulator">
          <RuleId>$MPElement$</RuleId>
          <GroupInstanceId>$MPElement[Name="Test.First.Group.Servers"]$</GroupInstanceId>
          <MembershipRules>
            <MembershipRule>
              <MonitoringClass>$MPElement[Name='Windows!Microsoft.Windows.Computer']$</MonitoringClass>
              <RelationshipClass>$MPElement[Name="InstanceGroup!Microsoft.SystemCenter.InstanceGroupContainsEntities"]$</RelationshipClass>
              <Expression>
                <Contains>
                  <MonitoringClass>$MPElement[Name='Test.First.Class.Role']$</MonitoringClass>
                </Contains>
              </Expression>
            </MembershipRule>
          </MembershipRules>
        </DataSource>
      </Discovery>
      <Discovery ID="Test.First.Discovery.Role" Target="Windows!Microsoft.Windows.Computer" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal">
        <Category>Discovery</Category>
        <DiscoveryTypes>
          <DiscoveryClass TypeID="Test.First.Class.Role" />
        </DiscoveryTypes>
        <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">
          <ComputerName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
          <RegistryAttributeDefinitions>
            <RegistryAttributeDefinition>
              <AttributeName>Installed</AttributeName>
              <Path>SYSTEM\CurrentControlSet\services\DCM_Bauteiltest</Path>
              <PathType>0</PathType>
              <AttributeType>0</AttributeType>
            </RegistryAttributeDefinition>
          </RegistryAttributeDefinitions>
          <Frequency>120</Frequency>
          <ClassId>$MPElement[Name="Test.First.Class.Role"]$</ClassId>
          <InstanceSettings>
            <Settings>
              <Setting>
                <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>
                <Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>
              </Setting>
              <Setting>
                <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>
                <Value>First Role ($Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$)</Value>
              </Setting>
            </Settings>
          </InstanceSettings>
          <Expression>
            <SimpleExpression>
              <ValueExpression>
                <XPathQuery Type="String">Values/Installed</XPathQuery>
              </ValueExpression>
              <Operator>Equal</Operator>
              <ValueExpression>
                <Value Type="String">True</Value>
              </ValueExpression>
            </SimpleExpression>
          </Expression>
        </DataSource>
      </Discovery>
    </Discoveries>
    <Monitors>
      <AggregateMonitor ID="Test.First.Monitor.Services.Availability" Accessibility="Internal" Enabled="true" Target="Test.First.Class.Role" ParentMonitorID="Health!System.Health.AvailabilityState"
Remotable="true" Priority="Normal">
        <Category>AvailabilityHealth</Category>
        <Algorithm>WorstOf</Algorithm>
      </AggregateMonitor>
      <UnitMonitor ID="Test.First.Monitor.Service.DCM_Bauteiletest" Accessibility="Public" Enabled="true" Target="Test.First.Class.Role" ParentMonitorID="Test.First.Monitor.Services.Availability"
Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.CheckNTServiceStateMonitorType" ConfirmDelivery="false" Comment="First DCM_Bauteiletest">
        <Category>AvailabilityHealth</Category>
        <AlertSettings AlertMessage="Test.First.Monitor.Service.DCM_Bauteiletest.AlertMessage">
          <AlertOnState>Error</AlertOnState>
          <AutoResolve>true</AutoResolve>
          <AlertPriority>Normal</AlertPriority>
          <AlertSeverity>Error</AlertSeverity>
          <AlertParameters>
            <AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetbiosComputerName$</AlertParameter1>
          </AlertParameters>
        </AlertSettings>
        <OperationalStates>
          <OperationalState ID="Running" MonitorTypeStateID="Running" HealthState="Success" />
          <OperationalState ID="NotRunning" MonitorTypeStateID="NotRunning" HealthState="Error" />
        </OperationalStates>
        <Configuration>
          <ComputerName />
          <ServiceName>DCM_Bauteiletest</ServiceName>
          <CheckStartupType />
        </Configuration>
      </UnitMonitor>
    </Monitors>
</Monitoring>
<Presentation>
    <Views>
      <View ID="Test.First.View.Alerts" Accessibility="Public" Enabled="true" Target="Test.First.Class.Role" TypeID="SC!Microsoft.SystemCenter.AlertViewType" Visible="true">
        <Category>Custom</Category>
        <Criteria>
          <ResolutionState>
            <StateRange Operator="NotEquals">255</StateRange>
          </ResolutionState>
        </Criteria>
      </View>
      <View ID="Test.First.View.Performance" Accessibility="Public" Enabled="true" Target="Test.First.Class.Role" TypeID="SC!Microsoft.SystemCenter.PerformanceViewType" Visible="true">
        <Category>Custom</Category>
        <Criteria />
      </View>
      <View ID="Test.First.View.Roles" Accessibility="Public" Enabled="true" Target="Test.First.Class.Role" TypeID="SC!Microsoft.SystemCenter.StateViewType" Visible="true">
        <Category>Custom</Category>
        <Criteria />
        <Presentation>
          <ColumnInfo Index="0" SortIndex="0" Width="100" Grouped="false" Sorted="true" IsSortable="true" Visible="true" SortOrder="Descending">
            <Name>State</Name>
            <Id>Test.First.Class.Role</Id>
          </ColumnInfo>
          <ColumnInfo Index="1" SortIndex="-1" Width="23" Grouped="false" Sorted="false" IsSortable="true" Visible="true" SortOrder="Ascending">
            <Name>Maintenance Mode</Name>
            <Id>InMaintenanceMode</Id>
          </ColumnInfo>
          <ColumnInfo Index="2" SortIndex="-1" Width="200" Grouped="false" Sorted="false" IsSortable="true" Visible="true" SortOrder="Ascending">
            <Name>Name</Name>
            <Id>Name</Id>
          </ColumnInfo>
          <ColumnInfo Index="3" SortIndex="-1" Width="100" Grouped="false" Sorted="false" IsSortable="true" Visible="true" SortOrder="Ascending">
            <Name>Path</Name>
            <Id>Path</Id>
          </ColumnInfo>
        </Presentation>
      </View>
      <View ID="Test.First.View.Servers" Accessibility="Public" Enabled="true" Target="Test.First.Class.Role" TypeID="SC!Microsoft.SystemCenter.StateViewType" Visible="true">
        <Category>Custom</Category>
        <Criteria />
        <Presentation>
          <ColumnInfo Index="0" SortIndex="0" Width="100" Grouped="false" Sorted="true" IsSortable="true" Visible="true" SortOrder="Descending">
            <Name>State</Name>
            <Id>Microsoft.Windows.Computer</Id>
          </ColumnInfo>
          <ColumnInfo Index="1" SortIndex="-1" Width="23" Grouped="false" Sorted="false" IsSortable="true" Visible="true" SortOrder="Ascending">
            <Name>Maintenance Mode</Name>
            <Id>InMaintenanceMode</Id>
          </ColumnInfo>
          <ColumnInfo Index="2" SortIndex="-1" Width="100" Grouped="false" Sorted="false" IsSortable="true" Visible="true" SortOrder="Ascending">
            <Name>Name</Name>
            <Id>Name</Id>
          </ColumnInfo>
          <ColumnInfo Index="3" SortIndex="-1" Width="100" Grouped="false" Sorted="false" IsSortable="true" Visible="true" SortOrder="Ascending">
            <Name>Path</Name>
            <Id>Path</Id>
          </ColumnInfo>
        </Presentation>
        <Target>$MPElement[Name="Test.First.Group.Servers"]$</Target>
      </View>
    </Views>
    <Folders>
      <Folder ID="Test.First.Folder.Role" Accessibility="Public" ParentFolder="SC!Microsoft.SystemCenter.Monitoring.ViewFolder.Root" />
    </Folders>
    <FolderItems>
      <FolderItem ElementID="Test.First.View.Alerts" Folder="Test.First.Folder.Role" ID="Id_Role_1" />
      <FolderItem ElementID="Test.First.View.Performance" Folder="Test.First.Folder.Role" ID="Id_Role_2" />
      <FolderItem ElementID="Test.First.View.Roles" Folder="Test.First.Folder.Role" ID="Id_Role_3" />
      <FolderItem ElementID="Test.First.View.Servers" Folder="Test.First.Folder.Role" ID="Id_Role_4" />
    </FolderItems>
    <StringResources>
      <StringResource ID="Test.First.Monitor.Service.DCM_Bauteiletest.AlertMessage" />
    </StringResources>
</Presentation>
<LanguagePacks>
    <LanguagePack ID="ENU" IsDefault="true">
      <DisplayStrings>
        <DisplayString ElementID="Test.First.Group.Servers">
          <Name>Test First Servers</Name>
          <Description>Test First server group</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Class.Role">
          <Name>First Server Role</Name>
          <Description>First Server Role</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Discovery.Servers">
          <Name>Discover First Servers Group</Name>
          <Description>Discover First Servers Group</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Discovery.Role">
          <Name>First Server Role Discovery</Name>
          <Description>Discovers a First Server role</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Monitor.Services.Availability">
          <Name>Services</Name>
          <Description>First role services</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Monitor.Service.DCM_Bauteiletest">
          <Name>First DCM_Bauteiletest</Name>
          <Description>First DCM_Bauteiletest</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Monitor.Service.DCM_Bauteiletest.AlertMessage">
          <Name>First DCM_Bauteiletest</Name>
          <Description>The First DCM_Bauteiletest Service is not running on host '{0}'.</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Monitor.Service.DCM_Bauteiletest" SubElementID="Running">
          <Name>Running</Name>
          <Description>Running</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Monitor.Service.DCM_Bauteiletest" SubElementID="NotRunning">
          <Name>NotRunning</Name>
          <Description>NotRunning</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First">
          <Name>Test First</Name>
          <Description>Monitoring Management Pack: Test First</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.Folder.Role">
          <Name>Test First</Name>
          <Description>Test First root folder</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.View.Alerts">
          <Name>Alerts</Name>
          <Description>Test Enterprise Alert Alerts</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.View.Performance">
          <Name>Performance</Name>
          <Description>Test First Performance</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.View.Roles">
          <Name>Roles</Name>
          <Description>Test Enterprise Alert roles state view</Description>
        </DisplayString>
        <DisplayString ElementID="Test.First.View.Servers">
          <Name>Servers</Name>
          <Description>Test First server state view</Description>
        </DisplayString>
      </DisplayStrings>
      <KnowledgeArticles></KnowledgeArticles>
    </LanguagePack>
</LanguagePacks>
</ManagementPack>

Hello Martin,
How you create you registry discovery?
You can follow this blog post to do this: http://blogs.technet.com/b/kevinholman/archive/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents.aspx

Frame access from servlet not working

Dear all,
I am running my servlets on Tomcat 5.5 and using JDK 1.6. I have a small program that uses codecs to access frames from a video file. PreAccessCodec implements Codec interface and PostAccessCodec extends PreAccessCodec. I set the two codecs into the processor's codec chain. The program is implemented as a thread and once started grabs frames and stores the images in a certain interval. The problem is this: whenever I start the thread from a main program, everything runs without a glitch. However, when I put the code in init() method of the servlet, I get the following error message:
The input format is not compatible with the given codec plugin: com.mapper.utils.PostAccessCodec@69d02b
Failed to realize: com.sun.media.ProcessEngine@1478a43
Cannot build a flow graph with the customized options:
    Unable to add customed codecs:
      com.mapper.utils.PreAccessCodec@15356d5
      com.mapper.utils.PostAccessCodec@69d02b
Error: Unable to realize com.sun.media.ProcessEngine@1478a43 I am using netbeans 5.5.1 to deploy my servlets. I doubt that the problem is with classpaths because the servlet doesn't complain when I am using JMF's classes like Processor.
I would really appreciate any help.
Thank you.
Message was edited by:
calculemus

The GE.iH() method should return false for
a ..head-full ..en-headed, not headless
environment, and I expect (from what you
reported above) that will return false for both
your servlet and application, and is apparently
not the problem.It returned false when I tried GE, and it was not the problem as you suggested. However, I now noticed in the logs:
java.awt.HeadlessException
I use Netbeans for the development, and I tried using -Dheadless=true and -Dheadless=false, it did not change anything...
I think it is time to check that assumption
more carefully.
My impression is that PreAccessCodec and
it's 'Post' equivalent are mentioned a lot in JMF
example code, but are custom classes,
built to suit the use at the time. Did you write the
Pre/PostAccessCodecs for this app.?Yes I customized them from the JMF sample codes. They are in the classpaths and are correctly read by the servlet. I did some logging and I actually saw that the code inside Pre/PostAccess was logging when my servlet was run.
>
So, what I am thinking, is that while the JMF
based Processor class may well be on the
server's
classpath, perhaps Pre/PostAccessCodec classes
are not.
oes a jar appear in the WEB-INF/lib directory,
that contains the Pre/PostAccessCodec.class?
Failing that, are the classes themselves in
WEB-INF/classes/(sub-dir according to package name)/ ?Nevertheless, just to double check I checked WEB-INF directory and the classes appear correctly in their appropriate 'package-folders'.
I figured out where exactly the thread was not running. In my PostAccessCodec class, I had overloaded getSupportedInputFormats() function to return RGB format.
public Format [] getSupportedInputFormats() {
Format [] fomats = {new RGBFormat()};
return fomrats;
When I changed it to return {VideoFormat()}, the codec initializes, but I get nothing when I want to access the frame.
I guess I will have to start another thread.
@moderators, please move the post if it is inappropriate to put it in this thread, my apologies.
The problem is still there and I am not able to get the frame access not working from the servlet. :(
Message was edited by:
calculemus
Message was edited by:
calculemus

Web based worklist not working...

Hello,
(on wlpi 2.1 on weblogic sp2)
I've created a process that utilizes a stateless session bean. Every thing works
fine when using the fat-client worklist.
I wanted to use the web-based worklist with my process, so I did the following:
1.) Installed the %wlint_home%/samples/bpm_api/jsp/worklist.war from the weblogic
console.
2.) Tweaked the "startWeblogic.cmd" file (I'm in NT) to add the wlpi-worklist.jar
file into the classpath. (this is all in the reamde file in %wlint_Home%/samples/bpm_api/jsp/)
This works at first, as I can get to the login screen, but as soon as I log in, I
get a "Classnotfound error" saying it can't find my home interface for my session
bean.
So, I figured, "Must not be in the classpath (somehow)". I added my bean .jar file
into the classpath, and then try again. I get a different error that says "Classnotfound
error" for the EJBHelper. Same error happens on the fat client in both cases.
I can simply take out my startWeblogic classpath changes, and restart the server,
and the fat-client works again (but the jsp worklist doesn't not -- no surprise.)
Has anyone been able to get the jsp-based worklist to work with a process that uses
an EJB?
dave

I totally lost my internet connection via the router WRT54GS V6
I am connected directly into the computer from my cable modem.
I have tried everything. Upgarded firmware, factory default reset, setting the software again and again.
When I run Easylink Advisor it always reads, no internet...like I said the modem is working when plugged directly into my computer.
All proper lights are working on the router and modem.
Could the router be just be broken?
It seems to be getting worse and worse.
help please.

Location based reminders not working in IOS8 on iphone 5s, please help?

Location based reminders are not working when using Siri since upgrading to IOS8. Asking Siri to "remind me when I get home" also turns off reminders in Location Services. Please help

I have the same issue with Siri turning off the location setting for reminders. In fact my location based reminders do not work at all. IPhone 5s, ios 8.1, upgraded to 8.1.1 and that did not fix these issues.
SEems like Apple does not test the location setting every other upgrade to iOS. They break it, then fix it then break it etc...

Location based wifi not working as expected

I would expect that location based wifi would either turn wifi off if not in a place with saved networks, or turn wifi on if arriving in a place with saved networks, but it does neither. I have tested this by turning wifi on when at home, then periodically checking status in places with no networks saved or open, and it's still on, and also by turning wifi off when away from home, then checking at home to see if it's turned on, and it isn't. So doesn't seem to be working either way. I have stamina mode active, and some people have said that location based wifi won't work with this.but most say works just fine, and would have expected Sony to say if different power saving options were incompatible. Always have location sensing GPS turned on. Often have mobile data off. Some have said that this is necessary for location based wifi to work, but others not, and to my way of thinking, location based wifi should turn wifi off whenever out of range of saved network, and add long as phone has some way of knowing where it is to wake up wifi, then it shouldn't matter which location modality it uses. Can anyone shed any light on this? Google's not being very helpful. Thanks

Hi and welcome to the community! Since you're new please be sure that you have checked out our Discussion guidelines.
You do need to have data turned on and as such you must also have Stamina mode turned off for this to work sorry.
What are your thoughts about this forum? Let us know by doing this short survey.
- Official Sony Xperia Support Staff
If you're new to our forums make sure that you have read our Discussion guidelines.
If you want to get in touch with the local support team for your country please visit our contact page.

ABE Access based enumeration not working

Similar Messages

Maybe you are looking for