Access Denied Error Message in KM
Hi,
Whenever we publish a Report from Bex Report Designer using Bex Broadcaster the report is getting published in the right KM Folder we choose, but when we click that link with in KM and choose Details we get a message saying "Access Denied". Due to this error that link is invisible in the actual iview where my KM folder is displayed.
This Problem occurs only with Reports from Report Designer and not with Query from Query Designer and Web Templates from Web Application Designer.
The user I use in BI and EP is the same. I am the owner of the KM folder and so I have full access to the folder.
Any solution for this problem.
Thanks
Sathish
This forum supports setup of the .NET Framework itself.
For best suggestions on your web project configuration issue, I suggest you ask in a topical ASP.NET forum, here:
http://forums.asp.net/
This forum may be best:
http://forums.asp.net/26.aspx/1?Configuration+and+Deployment
Thank you for your understanding.
Similar Messages
-
Receive "Access Denied" error message when attempting to install iTunes
Receive "Access Denied" error message when attempting to install iTunes.
Try the following user tip:
Troubleshooting issues with iTunes for Windows updates -
HT4623 Iphone 4s access denied error message when importing photos
ok got iphone 4s in feb have used windows live photo gallery to import since i got the phone and never had any problems started having problems with itunes not working say it was on a locked disk and/or didint have write permissions fixed this with a total uninstall and reinstall of itunes and now that works fine but at the same time the itunes stopped working i started getting an access denied error when importing photos via usb via windos live photo gallery i was however able to import my husbands photos from his ipad three days ago the same way i do my iphone and it worked fine with the ipad but not my iphone so here is what i do click for click i plug in the iphone via usb and the autoplay and itunes starts. i close itunes and go to autoplay click on import using windows live photo gallery than the pops open i check the folder to import too (which is on an exterial hard drive) and then i click import and it starts to import and on the very first photo and all photos the access is denied error message pops up help please this is driving me crazy that it worked fine one day and now it doesnt work
Good afternoon
There seem to be a number of possibilities.
Here is a thread that conatins a number of solutions. The most common one is to load 50 pics at a time.
https://discussions.apple.com/thread/3947440?start=0&tstart=0
Hope this helps -
Access Denied error message... I want to give alert message
I have Manager service in my portal page. But I don't have the content access from the back end system.
In the portal log viewer it is saying the Access Denied info. So i am getting the below error message in the portal page.
Instead of giving this error message I want to give a alert message like "You are not authorised to view this page...so please contact your Administrator"...
I want to know how to do this. can anyone help me on this
An exception occurred while processing a request for :
iView : pcd:portal_content/com.XYZ.roles.XYZ_Roles/com.XYZ.roles.Human_Resources/com.XYZ.roles.Manager/com.XYZ.hr.wks.se.
Manager_Services/com.XYZ.hr.wks.cl.Overview_MSS/com.XYZ.hr.wks.cl.Compensation_Management/com.XYZ.hr.wks.up.Position_Change_Process/com.XYZ.hr.pag.ac.Select_Team_Member_
and_Form_Pos_Chg/XYZTeamViewerTransfer
Component Name : com.XYZ.hr.pcr.transfer.XYZTeamViewerTransfer.XYZTeamViewerTransfer
The exception was logged. Inform your system administrator..
Exception id: 08:46_17/07/07_0505_24366050
See the details for the exception ID in the log file
Portal log**********
#1.5#000BCD4305DF0043000019C80000290400043574F8F3FA51#1184676416089#com.sap.security.core.util#sap.com/irj#com.sap.security.core.util.
[cf=com.sap.security.core.util.SecurityAudit][md=log(...)][cl=12778]#Guest#192####cd0d7490346311dc931d000bcd4305df#SAPEngine_Application_Thread[impl:3]
_24##0#0#Info##Plain###ObjectID handed over is 'null'!#
#1.5#000BCD4305DF0043000019CA0000290400043574F8F3FC42#1184676416089#com.sap.security.core.util.SecurityAudit#sap.com/irj
#com.sap.security.core.util.SecurityAudit#Guest#192####cd0d7490346311dc931d000bcd4305df#SAPEngine_Application_Thread[impl:3]
_24##0#0#Warning#1#/System/Security/Audit#Plain###Guest | LOGIN.ERROR | NONE = null | | Login Method=[default], UserID=[null], IP Address=[168.133.7.3], Reason=[Access Denied.]#
#1.5#000BCD4305DF0043000019CC0000290400043574F8F4A4CF#1184676416136#com.sap.portal.portal#sap.com/irj#com.sap.portal.portal#Guest#192
####cd0d7490346311dc931d000bcd4305df#SAPEngine_Application_Thread[impl:3]_24##0#0#Error#1#/System/Server#Java###Exception ID:08:46_17/07/07_0506_24366050
[EXCEPTION]
#1#com.sapportals.portal.prt.runtime.PortalRuntimeException: <b>Access is denied:
com.sap.portal.heartbeats.PortalHeartbeat - user: Guest
at
com.sapportals.portal.prt.deployment.DeploymentManager.checkPermissions(DeploymentManager.java:2005)</b>at
com.sapportals.portal.prt.core.broker.PortalComponentContextItem.refresh(PortalComponentContextItem.java:247)
at
com.sapportals.portal.prt.core.broker.PortalComponentContextItem.getContext(PortalComponentContextItem.java:312)
at
com.sapportals.portal.prt.component.PortalComponentRequest.getComponentContext(PortalComponentRequest.java:385)
at
com.sapportals.portal.prt.connection.PortalRequest.getRootContext(PortalRequest.java:435)
at
com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:607)
at
com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
at
com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:522)
at java.security.AccessController.doPrivileged(Native Method)
at
com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:405)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at
com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
at javax.servlet.http.HttpServlet.service
(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
at
com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:95)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:160)
Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: <b>Access denied</b> (Object:
com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.heartbeats/components/PortalHeartbeat)
at com.sapportals.portal.pcd.gl.PcdFilterContext.filterLookup(PcdFilterContext.java:416)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1095)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1101)
at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookupLink(PcdProxyContext.java:1197)
at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookup(PcdProxyContext.java:1144)
at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:918)
at com.sapportals.portal.pcd.gl.PcdGlContext.lookup(PcdGlContext.java:68)
at com.sapportals.portal.pcd.gl.PcdURLContext.lookup(PcdURLContext.java:238)
at javax.naming.InitialContext.lookup(InitialContext.java:347)
at com.sapportals.portal.prt.deployment.DeploymentManager.checkPermissions(DeploymentManager.java:2000)Kindly post how u did it. It will be helpful for others.
Thanks in advance.
Pradeep. -
Access Denied Error Message in KM for the report published from BI
Hi,
Whenever we publish a Report from Bex Report Designer using Bex Broadcaster the report is getting published in the right KM Folder we choose, but when we click that link with in KM and choose Details we get a message saying "Access Denied". Due to this error that link is invisible in the actual iview where my KM folder is displayed.
This Problem occurs only with Reports from Report Designer and not with Query from Query Designer and Web Templates from Web Application Designer.
The user I use in BI and EP is the same. I am the owner of the KM folder and so I have full access to the folder.
Is there any particular authorization required from BI side?
Thanks
SathishThis forum supports setup of the .NET Framework itself.
For best suggestions on your web project configuration issue, I suggest you ask in a topical ASP.NET forum, here:
http://forums.asp.net/
This forum may be best:
http://forums.asp.net/26.aspx/1?Configuration+and+Deployment
Thank you for your understanding. -
Webservice call access denied error message
I am trying to call EWS service using jquery to send mail. I am getting access denied message. Please let me know if there are any suggestions.
var soapMessage = '<?xml version="1.0" encoding="utf-8"?>'
+ '<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+ 'xmlns:xsd="http://www.w3.org/2001/XMLSchema"'
+ 'xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"'
+ 'xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"'
+ 'xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages">'
+ '<soap:Header>'
+ '<RequestServerVersion Version="Exchange2010_SP2" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" />'
+ '</soap:Header>'
+ '<soap:Body>'
+ '<m:CreateItem MessageDisposition="SendOnly">'
+ '<m:Items>'
+ ' <t:Message>'
+ ' <t:Subject>test</t:Subject>'
+ ' <t:Body BodyType="Text">test</t:Body>'
+ ' <t:ToRecipients>'
+ ' <t:Mailbox>'
+ ' <t:EmailAddress>[email protected]</t:EmailAddress>'
+ ' </t:Mailbox>'
+ ' </t:ToRecipients>'
+ '</t:Message>'
+ '</m:Items>'
+ '</m:CreateItem>'
+ '</soap:Body>'
+ '</soap:Envelope>';
var ServiceUrl = 'https://serverName/EWS/Exchange.asmx';
debugger;
jQuery.support.cors = true;
$.ajax({
url: ServiceUrl,
type: "POST",
dataType: "xml",
data: soapMessage,
contentType:"text/xml; charset=\"utf-8\"",
success: processSuccess,
error:processError
function processSuccess(data, status, req) {
if (status == "success")
alert("sucess");
function processError(data, status, req) {
alert(data + " " + status);Thanks for the message. I tried with credentials but still getting the same error message.
jQuery.support.cors = true;
$.ajax({
url: ServiceUrl,
type: "POST",
username:test,
password:test,
dataType:
"xml",
data: soapMessage,
contentType:"text/xml; charset=\"utf-8\"",
success: processSuccess,
error:processError
Also I tried passing the username and password in the SOAP header.
+ '<soap:Header>'
+ '<RequestServerVersion Version="Exchange2010_SP2" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" />'
+ '<wsse:Security>'
+ '<wsse:UsernameToken>'
+ '<wsse:Username>test</wsse:Username>'
+ '<wsse:Password>test</wsse:Password>'
+ '</wsse:UsernameToken>'
+ '</wsse:Security>'
+ '</soap:Header>' -
When I try to download the creative suite i get an "access denied" error message
The exact text follows:
Access Denied
You don't have permission to access "http://trials2.adobe.com/AdobeProducts/DSST/CS6/osx10/DesignWebPremium_CS6_LS4.dmg" on this server.
Reference #18.325d0e17.1405186633.3853723
Any help on this would be greatly appreciated.Rave,
Unfortunately, that's not the case. I am signed in, and my serial number is also registered, but the error continues to come forward. I suppose I ought to provide a bit more background information:
I recieved my serial number from UC Berkeley, where I am a student. There is an online service which the University uses to provide serial numbers to its students, and I used that and then went to download the file. I couldn't, even after I signed in, so I registered the serial number and – still signed in – made the attempt again.
I'm not sure what the issue is; but it could be in part due to the fact that I am spending this semester abroad in Berlin, and my IP is therefore in Europe. What's your take?
Thanks
Max -
Access denied error message when switching from one Mac to another Mac
I use LR on a laptop and a desktop, both Macs running Yosemite. I use the same external drive to store my LR photo catalogs and move it back and forth between computers. If I import pictures on one computer I get a "file access denied" when in the Develop mode on the other computer. In other words, I can only use the Develop mode on the computer where the original download from my camera occurred. I cannot find a solution and would appreciate any help. I am running the latest versions of LR and OS X. Thanks.
Jim ~ These Apple docs may help:
_iWeb: Modifying your site from another computer_
iWeb: Publish to your MobileMe account from more than one computer
And this article:
http://iwebfaq.org/site/iWebTwocomputers.html -
Unable to rename msvcp60.dll in windows server 2008 ( access denied error message)
Dear all,
This is to inform you that, i wanted to replace msvcp60.dll file due to some other configuration purpose, but its not allowing me to changed even using local administrator loing, please help how can i get it done.
Regards,
Kumar V
Regards, Kumar.VPerhaps it is held by the process. Find process, stop it and do what you want. If you still cannot what you need, make a script and run it in Task Schedule with elevated rights as SYSTEM. You may reregister newly named dll.
Perhaps more suitable forum for problem like this one is MSDN forum. If problem persists, addres this forum.
HTH
Milos -
This is for information to help others
KEYWORDS:
- Sharing EFS encrypted files over a personal lan wlan wifi ap network
- Access denied on create new file / new fold on encrypted EFS network file share remote mapped folder
- transfer encryption keys / certificates
- set trusted delegation for user + computer for EFS encrypted files via
Kerberos
- Windows Active Directory vs network file share
- Setting up WinDAV server on Windows 7 Pro / Ultimate
It has been a long painful road to discover this information.
I hope sharing it helps you.
Using EFS on Windows 7 pro / ultimate is easy and works great. See
here and
here
So too is opening + editing encrypted files over a peer-to-peer Windows 7 network.
HOWEVER, creating a new file / new folder over a peer-to-peer Windows 7 network
won't work (unless you follow below steps).
Typically, it is only discovered as an issue when a home user wants to use synchronisation software between their home computers which happens to have a few folders encrypted using windows EFS. I had this issue trying to use GoodSync.
Typically an "Access Denied" error messages is thrown when a \\clientpc tries to create new folder / new file in an encrypted folder on a remote file share \\fileserver.
Why such a EFS drama when a network is involved?
Assume a home peer-to-peer network with 2pc: \\fileserver and \\clientpc
When a \\clientpc tries to create a new file or new folder on a \\fileserver (remote computer) it fails. In a terribly simplified explanation it is because the process on \\fileserver that is answering the network requests is a process working for a user on
another machine (\\clientpc) and that \\fileserver process doesn't have access to an encryption certificate (as it isn't a user). Active Directory gets around this by using kerberos so the process can impersonate a \\fileserver user and then use their certificate
(on behalf of the clienpc's data request).
This behaviour is confusing, as a \\clientpc can open or edit an existing efs encrypted file or folder, just can't create a new file or folder. The reason editing + opening an encrypted file over a network file share is possible is because the encrypted
file / folder already has an encryption certificate, so it is clear which certificate is required to open/edit the file. Creating a new file/folder requires a certificate to be assigned and a process doesn't have a profile or certificates assigned.
Solutions
There are two main approaches to solve this:
1) SOLVE by setting up an Active Directory (efs files accessed through file shares)
EFS operations occur on the computer storing the files.
EFS files are decrypted then transmitted in plaintext to the client's computer
This makes use of kerberos to impersonate a local user (and use their certificate for encrypt + decrypt)
2) SOLVE by setting up WebDAV (efs files accessed through web folders)
EFS operations occur on the client's local computer
EFS files remain encrypted during transmission to the client's local computer where it is decrypted
This avoids active directory domains, roaming or remote user profiles and having to be trusted for delegation.
BUT it is a pain to set up, and most online WebDAV server setup sources are not for home peer-to-peer networks or contain details on how to setup WebDAV for EFS file provision
READ BELOW as this does
Create new encrypted file / folder on a network file share - via Active Directory
It is easily possible to sort this out on a domain based (corporate) active directory network. It is well documented. See
here. However, the problem is on a normal Windows 7 install (ie home peer-to-peer) to set up the server as part of an active directory domain is complicated, it is time consuming it is bulky, adds burden to operation of \\fileserver computer
and adds network complexity, and is generally a pain for a home user. Don't. Use a WebDAV.
Although this info is NOT for setting up EFS on an active directory domain [server],
for those interested here is the gist:
Use the Active Directory Users and Computers snap-in to configure delegation options for both users and computers. To trust a computer for delegation, open the computer’s Properties sheet and select Trusted for delegation. To allow a user
account to be delegated, open the user’s Properties sheet. On the Account tab, under Account Options, clear the The account is sensitive and cannot be delegated check box. Do not select The account is trusted for delegation. This property is not used with
EFS.
NB: decrypted data is transmitted over the network in plaintext so reduce risk by enabling IP Security to use Encapsulating Security Payload (ESP)—which will encrypt transmitted data,
Create new encrypted file / folder on a network file share - via WebDAV
For home users it is possible to make it all work.
Even better, the functionality is built into windows (pro + ultimate) so you don't need any external software and it doesn't cost anything. However, there are a few hotfixes you have to apply to make it work (see below).
Setting up a wifi AP (for those less technical):
a) START ... CMD
b) type (no quotes): "netsh wlan set hostednetwork mode=allow ssid=MyPersonalWifi key=12345 keyUsage=persistent"
c) type (no quotes): "netsh wlan start hostednetwork"
Set up a WebDAV server on Windows 7 Pro / Ultimate
-----ON THE FILESERVER------
1 click START and type "Turn Windows Features On or Off" and open the link
a) scroll down to "Internet Information Services" and expand it.
b) put a tick in: "Web Management Tools" \ "IIS Management Console"
c) put a tick in: "World Wide Web Services" \ "Common HTTP Features" \ "WebDAV Publishing"
d) put a tick in: "World Wide Web Services" \ "Security" \ "Basic Authentication"
e) put a tick in: "World Wide Web Services" \ "Security" \ "Windows Authentication"
f) click ok
g) run HOTFIX - ONLY if NOT running Windows 7 / windows 8
KB892211 here ONLY for XP + Server 2003 (made in 2005)
KB907306 here ONLY for Vista, XP, Server 2008, Server 2003 (made in 2007)
2 Click START and type "Internet Information Services (IIS) Manager"
3 in IIS, on the left under "connections" click your computer, then click "WebDAV Authoring Rules", then click "Open Feature"
a) on the right side, under Actions, click "Enable WebDAV"
4 in IIS, on the left under "connections" click your computer, then click "Authentication", then click "Open Feature"
a) on the "Anonymous Authentication" and click "Disable"
b) on the "Windows Authentication" and click "Enable"
NB: Some Win 7 will not connect to a webDAV user using Basic Authentication.
It can be by changing registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient\Parameters]
BasicAuthLevel=2
c) on the "Windows Authentication" click "Advanced Settings"
set Extended Protection to "Required"
NB: Extended protection enhances the windows authentication with 2 security mechanisms to reduce "man in the middle" attacks
5 in IIS, on the left under "connections" click your computer, then click "Authorization Rules", then click "Open Feature"
a) on the right side, under Actions, click "Add Allow Rule"
b) set this to "all users". This will control who can view the "Default Site" through a web browser
NB: It is possible to specify a group (eg Administrators is popular) or a user account. However, if not set to "all users" this will require the specified group/user account to be used for logged in with on the
clientpc.
NB: Any user account specified here has to exist on the server. It has a bug in that it usernames specified here are not validated on input.
6 in IIS, on the left under "connections" click your computer, then click "Directory Browsing", then click "Open Feature"
a) on the right side, under Actions, click "Enable"
HOTFIX - double escaping
7 in IIS, on the left under "connections" click your computer, then click "Request Filtering", then click "Open Feature"
a) on the right side, under Actions, click "Edit Feature Settings"
b) tick the box "Allow double escaping"
*THIS IS VERY IMPORTANT* if your filenames or foldernames contain characters like "+" or "&"
These folders will appears blank with no subdirectories, or these files will not be readable unless this is ticked
This is safe btw. Unchecked (default) it filters out requests that might possibly be misinterpreted by buggy code (eg double decode or build url's via string-concat without proper encoding). But any bug would need to be in IIS basic
file serving and this has been rigorously tested by microsoft, so very unlikely. Its safe to "Allow double escaping".
8 in IIS, on the left under "connections" right click "Default Web Site", then click "Add Virtual Directory"
a) set the Alias to something sensible eg "D_Drive", set the physical path
b) it is essential you click "connect as" and set
this to a local user (on fileserver),
if left as "pass through authentication" a client won't be able to create a new file or folder in an encrypted efs folder (on fileserver)
NB: the user account selected here must have the required EFS certificates installed.
See
here and
here
NB: Sharing the root of a drive as an active directory (eg D:\ as "D_Drive") often can't be opened on clientpcs.
This is due to windows setting all drive roots as hidden "administrative shares". Grrr.
The work around is on the \\fileserver create an NTFS symbollic link
e.g. to share the entire contents of "D:\",
on fileserver browse to site path (iis default this to c:\inetpub\wwwroot)
in cmd in this folder create an NTFS symbolic link to "D:\"
so in cmd type "cd c:\inetpub\wwwroot"
then in cmd type "mklink /D D_Drive D:\"
NB: WebDAV will open this using a \\fileserver local user account, so double check local NTFS permissions for the local account (clients will login using)
NB: If clientpc can see files but gets error on opening them, on clientpc click START, type "Manage Network Passwords", delete any "windows credentials" for the fileserver being used, restart
clientpc
9 in IIS, on the left under "connections" click on "WebDAV Authoring Rules", then click "Open Feature"
a) click "Add authoring rules". Control access to this folder by selecting "all users" or "specified groups" or "specified users", then control whether they can read/write/source
b) if some exist review existing allow or deny.
Take care to not only review the "allow access to" settings
but also review "permissions" (read/write/source)
NB: this can be set here for all added virtual directories, or can be set under each virtual directory
10 Open your firewall software and/or your router. Make an exception for port 80 and 443
a) In Windows Firewall with Advanced Security click Inbound Rules, click New Rule
choose Port, enter "80, 443" (no speech marks), follow through to completion. Repeat for outbound.
NB: take care over your choice to untick "Public", this can cause issues if no gateway is specified on the network (ie computer-to-computer with no router). See "Other problems+fixes"
below, specifically "Cant find server due to network location"
b) Repeat firewall exceptions on each client computer you expect to access the webDAV web folders on
HOTFIX - MAJOR ISSUE - fix KB959439
11 To fully understand this read "WebDAV HOTFIX: RAW DATA TRANSFERS" below
a) On Windows 7 you need only change one tiny registry value:
- click START, type "regedit", open link
-browse to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MRxDAV\Parameters]
-on the EDIT menu click NEW, then click DWORD Value
-Type "DisableEFSOnWebDav" to name it (no speech marks)
-on the EDIT menu, click MODIFY, type 1, then click OK
-You MUST now restart this computer for the registry change to take effect.
b) On Windows Server 2008 / Vista / XP you'll FIRST need to
download Windows6.0-KB959439 here. Then do the above step.
NB microsoft will ask for your email. They don't care about licence key legality, it is more to keep you updated if they modify that hotfix
12 To test on local machine (eg \\fileserver) and deliberately bypass the firewall.
a) make sure WebClient Service is running
(click START, type "services" and open, scroll down to WebClient and check its status)
b) Open your internet software. Go to address "http://localhost:80" or "http://localhost:80"
It should show the default "IIS7" image.
If not, as firewall and port blocking are bypassed (using localhost) it must be a webDAV server setting. Check "Authorization Rules" are set to "Allow All Users"
c) for one of the "virtual directories" you added (8), add its "alias" onto "http://localhost/"
e.g. http://localhost/D_drive
If nothing is listed, check "Directory Browsing" is enabled
13 To test on local machine or a networked client and deliberately try and access through the firewall or port opening of your router.
a) make sure WebClient Service is running
(click START, type "services" and open, scroll down to WebClient and check its status)
b) open your internet software. Go to address "http://<computer>:80" or "http://<computer>:80".
eg if your server's computer name is "fileserver" go to "http://fileserver:80"
It should show the default "IIS7" image. If not, check firewall and port blocking.
Any issue ie if (12) works but (13) doesn't, will indicate a possible firewall issue or router port blocking issue.
c) for one of the "virtual directories" you added (8), add its "alias" onto "http://<computername>:80/"
eg if alias is "C_driver" and your server's computer name is "fileserver" go to "http://fileserver:80/C_drive"
A directory listing of files should appear.
--- ON EACH CLIENT ----
HOTFIX - improve upload + download speeds
14 Click START and type "Internet Options" and open the link
a) click the "Connections" tab at the top
b) click the "LAN Settings" button at the bottom right
c) untick "Automatically detect settings"
HOTFIX - remove 50mb file limit
15 On Windows 7 you need only change one tiny registry value:
a) click START, type "regedit", open link
b) browse to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient\Parameters]
c) click on "FileSizeLimitInBytes"
d) on the EDIT menu, click MODIFY, type "ffffffff", then click OK (no quotes)
HOTFIX - remove prompt for user+pass on opening an office or pdf document via WebDAV
16 On each clientpc click START, type "Internet Options" and open it
a) click on "Security" (top) and then "Custom level" (bottom)
b) scroll right to the bottom and under "User Authentication" select "Automatic logon with current username and password"
SUCH an easy fix. SUCH an annoying problem on a clientpc
NB: this is only an issue if the file is opened through windows explorer. If opened through the "open" dialogue of the software itself, it doesn't happen. This is as a WebDAV mapped drive is consdered a "web folder" by windows
explorer.
TEST SETUP
17 On the client use the normal "map network drive"
e.g. server= "http://fileserver:80/C_drive", tick reconnect at logon
e.g. CMD: net use * "http://fileserver:80/C_drive"
If it doens't work check "WebDAV Authoring Rules" and check NTFS permissions for these folders. Check that on the filserver the elected impersonation user that the client is logging in with (clientpc
"manage network passwords") has NTFS permissions.
18 Test that EFS is now working over the network
a) On a clientpc, map network drive to http://fileserver/
b) navigate to a folder you know on the \\flieserver is encrypted with EFS
c) create a new folder, create a new file.
IF it throws an error, check carefully you mapped to the WebDAV and not file share
i.e. mapped to "http://fileserver" not "\\fileserver"
Check that on clientpc the required efs certificate is installed. Then check carefully on clientpc what user account you specified during the map drive process. Then check on the \\fileserver this
account exists and has the required EFS certificate installed for use. If necessary, on clientpc click START, type "Manage Network Passwords" and delete the windows credentials currently in the vault.
d) on clientpc (through a webDAV mapped folder) open an encrypted file, edit it, save it, close it. On the \\fileserver now check that file is readable and not gobble-de-goup
e) on clientpc copy an encrypted efs file into a folder (a webDAV mapped folder) you know is not encrypted on \\fileserver. Now check on the \\fileserver computer that the file is readable and not gobble-de-goup (ie the
clientpc decrypted it then copied it).
If this fails, it is likely one in IIS setting on fileserver one of the shared virtual directories is set to: "pass through authentication" when it should be set to "connect as"
If this is not readable check step (11) and that you restarted the \\fileserver computer.
19 Test that clients don't get the VERY annoying prompt when opening an Office or PDF doc
a) on clientpc in windows explorer browse to a mapped folder you know is encrypted and open an office file and then PDF.
If a prompt for user+pass then check hotfix (16)
20 Consider setting up a recycling bin for this mapped drive, so files are sent to recycling bin not permanently deleted
a) see the last comment at the very bottom of
this page:
Points to consider:
- NB: WebDAV runs on \\fileserver under a local user account, so double check local NTFS permissions for that local account and adjust file permissions accordingly. If the local account doesn't have permission, the webDAV / web folder share won't
either.
- CONSIDER: IP Security (IPSec) or Secure Sockets Layer (SSL) to protect files during transport.
MORE INFO: HOTFIX: RAW DATA TRANSFERS
More info on step (11) above.
Because files remain encrypted during the file transfer and are decrypted by EFS locally, both uploads to and downloads from Web folders are raw data transfers. This is an advantage as if data is intercepted it is useless. This is a massive disadvantage as
it can cause unexpected results. IT MUST BE FIXED or you could be in deep deep water!
Consider using \\clientpc to access a webfolder on \\fileserver and copying an encrypted EFS file (over the network) to a web folder on \\fileserver that is not encrypted.
Doing this locally would automatically decrypt the file first then copy the decrypted file to the non-encrypted folder.
Doing this over the network to a web folder will copy the raw data, ie skip the decryption stage and result in the encrypted EFS file being raw copied to the non-encrypted folder. When viewed locally this file will not be recognised as encrypted (no encryption
file flag, not green in windows explorer) but it will be un-readable as its contents are still encrypted. It is now not possible to locally read this file. It can only be viewed on the \\clientpc
There is a fix:
It is implimented above, see (11) above
Microsoft's support page on this is excellent and short. Read "problem description" of "this microsoft webpage"
Other problems + fixes
PROBLEM: Can't find server due to network location.
This one took me a long time to track down to "network location".
Win 7 uses network locations "Home" / "Work" / "Public".
If no gateway is specified in the IP address, the network is set to '"unidentified" and so receives "Public" settings.
This is a disaster for remote file share access as typically "network discovery" and "file sharing" are disabled under "Public"
FIX = either set IP address manually and specify a gateway
FIX = or force "unidentified" network locations to assume "home" or "work" settings -
read here or
here
FIX = or change the "Public" "advanced network settings" to turn on "network discovery" and "file sharing" and "Password Protected Sharing". This is safe as it will require a windows
login to gain file access.
PROBLEM: Deleting files on network drive permanently deletes them, there is no recycling bin
By changing the location of "My Contacts" or similar to the root directory of your mapped drive, it will be added to recycling bin locations
Read
here (i've posted a batch script to automatically make the required reg files)
I really hope this helps people. I hope the keywords + long title give it the best chance of being picked up in web searches.What probably happens is that processes are using those mounts. And that those processes are not killed before the mounts are unmounted. Is there anything that uses those mounts?
-
Access denied error for Java application on 2630
Hello!
I have bought a 2630 recently. Now I have installed a small Java application that tries to store some data in the phones memory. However, each time the application tries to do so, I get a "java.lang.SecurityException Access denied" message and the application states that it could no save its data. I have set the security settings for that particular application so that the phone should ask before each access to the file system. In fact, before I get the error message, the phone asks whether the application may write data to the file system. But still answering that question with "yes" I get the Access denied error message. Now I am puzzled. By the way, the application uses JSR-75 which the 2630 should support.
Anybody any ideas?
Regards,
VolkerRESOLVED!
I was able to create file from java application on Nokia 2630. Here is how:
1. root C:/ is mapped to folder "Downloads"
2. The folders does not show with their names
3. there are 2 folders in C:/ predefgallery and predefjava
4. in predefgallery there are several predefined folders e.g. predefrecordings is one of them
5. I am able to create file inside predefrecordings, creating file in upper folders is denied
6. user created folders aro NOT shown at all
7. I had to manualy confirm reading of data many times and writing data once.
I hope this can help to other Nokia users since I did not find this anywhere.
Luke -
Encore CS3/Windows XP Access Denied error...?
I'm running XP version 5.1 SP3. I'm trying to build a project, but I keep getting the Access Denied error message. I've read the fix for Vista, but I don't have the options listed. This is my first time using Encore, but I know co-workers have successfully used it previously...but none of them have a clue what's going on. Thanks
Any Matrox involved?
Now, how are you getting your PrPro Sequences into En?
As a test, from PrPro, Export as elemental/elementary streams, i.e. one Video-only and one Audio-only file, per Sequence. For the Audio, choose PCM/WAV 48KHz 16-bit*. Import the Video-only file as a Timeline, and the WAV as an Asset. Drag the Audio from the Project Panel to the appropriate Timeline. Do you get Audio?
Good luck,
Hunt
* If you have a DD 5.1 SS Master Audio Track in PrPro, you will then need to Export that with the SurCode DD 5.1 SS encoder plug-in, as an AC3 file. -
hi,
as part of my requirement , i have to perform read and write operations of few files [ using the file upload control in my custom visual web part] and on submit button click.
but while writing these files - with the help of fileupload control - and when i use myfileupload.saveas(mylocation);
- i am saving these files into my D:\ drive of my server , where i am executing my code -, am getting access denied error.
it throws system.unauthorizedexception.
i have given full control on that folder where i was trying to store my attached files. and also after following asp.net forums,
i have added iusr group added and performed all those steps such that, the file is saved in my D:\ drive.
but unfortunately that didnt happen.
also
a) i am trying the code with runwithelevatedprivileges(delegate() ) code
b) shared the drive within the d :drive where i want o save the files.
c) given the full privieleges for the app pool identity- in my case , its
network service.
the other strange thing is that, the same code works perfectly in other machine, where the same sp, vs 2012 etc were installed .
would like to know, any other changes/ steps i need to make it on this server, where i am getting the error.
help is appreciated!vishnuS1984 wrote:
Hi Friends,
I have gone through scores of examples and i am failing to understand the right thing to be done to copy a file from one directory to another. Here is my class...So let's see... C:\GetMe1 is a directory on your machine, right? And this is what you are doing with that directory:
public static void copyFiles(File src, File dest) throws IOException
// dest is a 'File' object but represents the C:\GetMe1 directory, right?
fout = new FileOutputStream (dest);If it's a directory, where in your code are you appending the source file name to the path, before trying to open an output stream on it? You're not.
BTW, this is awful:
catch (IOException e)
IOException wrapper = new IOException("copyFiles: Unable to copy file: " +
src.getAbsolutePath() + "to" + dest.getAbsolutePath()+".");
wrapper.initCause(e);
wrapper.setStackTrace(e.getStackTrace());
throw wrapper;
}1) You're hiding the original IOException and replacing it with your own? For what good purpose?
2) Even if you had a good reason to do that, this would be simpler and better:
throw new IOException("your custom message goes here", e);
rather than explicitly invokign initCause and setStackTrace. Yuck! -
Access denied error while trying to install graphics drivers
Hello,
I have a new toshiba laptop P70-A. I have installed windows 7 and the pc was working excellent up until now. Noticed yesterday that the nvidia automated system failed to install the new update. When I tried to install the new driver manually, even from the
device manager, I got the access denied message.
A day now wasted reading all the possible causes and solutions but with no luck. Read all the forums and all the posts, tried almost everything. Below youll find everything I tried as a solution and failed.
1.Disabled UAC
2.Enabled the administrator account and trying to take control from there
3.Run the subinacl and the reset.cmd
4.Tried manually to take control the folder windows (and access denied while changing the rights)
5. Scanned the system with everything there is available ( Kaspersky, MalwareBytes, RegCurePro, Tuneup Utilities, CCleaner) The system came out clean.
6. Tried restoring the system to an earlier time (got again access denied error code 0x80070005)
7. Checked all the group policies (all seem to be fine)
8. Run a script to take immediate ownership over all of C:
TAKEOWN /A /F C:
then the next one
TAKEOWN /F C:
9. With subinacl I run all the above scripts... (still nothing changed)
@echo off
title Resetting ACLs...
echo.
echo Determine whether we are on an 32 or 64 bit machine
echo.
if "%PROCESSOR_ARCHITECTURE%"=="x86" if "%PROCESSOR_ARCHITEW6432%"=="" goto x86
set ProgramFilesPath=%ProgramFiles(x86)%
goto startResetting
:x86
set ProgramFilesPath=%ProgramFiles%
:startResetting
echo.
cd /d "%ProgramFilesPath%\Windows Resource Kits\Tools"
echo.
echo Resetting ACLs...
echo (this may take several minutes to complete)
echo.
echo IMPORTANT NOTE: For this script to run correctly, you must change
echo the values named Athena to be the Windows user account that
echo you are logged in with.
echo.
echo ==========================================================================
echo.
echo.
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=Athena=f /setowner=administrators > %temp%\subinacl_output.txt
echo.
echo.
subinacl /keyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=Athena=f /setowner=administrators >> %temp%\subinacl_output.txt
echo.
echo.
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %temp%\subinacl_output.txt
echo.
echo.
subinacl /keyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %temp%\subinacl_output.txt
echo.
echo.
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %temp%\subinacl_output.txt
echo.
echo.
subinacl /keyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %temp%\subinacl_output.txt
echo.
echo.
echo System Drive...
subinacl /subdirectories %ProgramFilesPath%\ /grant=administrators=f /grant=system=f /grant=users=e >> %temp%\subinacl_output.txt
echo.
echo.
echo Windows Directory...
subinacl /subdirectories %windir%\ /grant=administrators=f /grant=system=f /grant=users=e >> %temp%\subinacl_output.txt
echo.
echo.
echo ==========================================================================
echo.
echo FINISHED.
echo.
echo Press any key to exit . . .
pause >NUL
Im frustrated really... ANY help at all would be really appreciated.
Thanks in Advance and sorry for the long post
AthenaHello,
Thanks for the replies, i much appreciate it. I tried all of the above with no luck again. Safe mode allows me though to install drivers but thats reverting the moment im entering windows. Im always running commands and programs as a administrator or in
the Admin enabled account.
It seems the problem is solved today. Via tune up utilities I disabled most of the startup programs and services and it seems that 1 service is causing this issue. Although I havent played much with the disabled services but 3 remain to be checked. One of
the three is causing this.
Thanks again guys and Ill keep you posted about the soft. conflict.
Athena -
Timerjob Access denied error while opening web object
Hi Team,
I have created a timer job to get list information on the site. Everything is fine in the development(Stand alone server) . Got access denied error while running same timer job in QA server(one app and one WFE).
Note: This timer job is globally deployed.
Code snippet :
SPSite site1 = webApp.Sites[0];
SPWeb web = site1.RootWeb;
SPSecurity.RunWithElevatedPrivileges(delegate()
using (SPSite site = new SPSite(site1.ID))
using (SPWeb currWeb = site.OpenWeb(web.ID)) // Got access denied error here.
Additional information:
Sharepoint timer service account : Domain\SP_Farm
Site app pool account : Domain\SP_App.
Both accounts have site collection administrative access on the site. Do i need to check access permissions on DB level also this error ?
Waiting for urgent reply..Hi,
1. Please check the link below:
Fixing Access Denied Errors With SharePoint 2010 Timer Jobs
http://www.sharepointsecurity.com/sharepoint/sharepoint-security/fixing-access-denied-errors-with-sharepoint-2010-timer-jobs/
2. Try to set RemoteAdministratorAccessDenied to false using PowerShell
Access denied when deploying a timer Job or activating a feature from SharePoint 2010 content web application
https://support.microsoft.com/kb/2564009?wa=wsignin1.0
3. Check your ULS log for detail error message.
Best Regards
Dennis Guo
TechNet Community Support
Maybe you are looking for
-
Not able to search Product Id replicated from R/3
Hi All, Issue Description: Not able to search the Product Id (Material) replicated from R/3 backend system in SRM Shopping Cart Wizard. The same Product Id(Material) is seen in the transaction "COMMPR01" in SRM. I checked in the tables COMM_PRODUCT a
-
Yosemite: Doesn't Appear On Snow Leopard's Startup Disk Preference Pane
There is a major bug in Yosemite. It doesn't appear in the Startup Disk Preference Pane in Snow Leopard. Is there a solution for this? By the way, I can choose Yosemite by booting with the Option key. Also, how can I change the Recovery HD partition
-
My iPhone4s was recently replaced by apple due to grey out on wifi. when I went to sync with my laptop my iPhoto library disapeared and I was left with an empty library. I cannot find my old library on my laptop. I only get one option for a library w
-
How can i get no. of records in a block?
How can i get no. of records in a block? please advise me................
-
[Running LiveCycle ES2 SP2] I have about 30 XDP's on the server and we have a form guide where the customer will select the forms they would like. Once they have selected the forms a request is sent to LiveCycle to pull the XDP's, merge them and then