AD RMS user specific permission

Hi
I have installed and configured AD RMS in Windows 2008 server.
Currently all users can apply templates / assign permissions for any office files / outlook mail.
Now my requirement is to restrict this access to a group of people who can actually set the permissions for any office file or outlook mail.
How to achieve this ?
In group policy, i can either restrict everyone or none. But not for group of people.
This is because, if i enable for all, every outlook client will have access to set permissions for every mail they send and it will become a routine for each mail that comes with do not forward restrictions.
regards Sundaresan.C

I made it by creating a separate OU and move specific users to this OU. And created a GP for this OU and provided Access to apply RMS templates . For all other OU's, i have made the option "Prevent users to change the RMS permissions" under Office 2010 ADM
template in GP.
It works..
Only thing is that i cant separate outlook and Office files with RMS permissions.Both are combined.
regards Sundaresan.C

Similar Messages

  • RAGITT_ALV01 managment standard & user-specific layouts

    Hi Guru,
    How can I manage the report's layouts f.g. report RAGITT_ALV01, F8, ctrlF9 or CtrlF12
    My users notoriously save theirs layouts as standard layout /RAGITTALV01 so I should close their permission to change standard layout. How can I do it?
    Moreover where can I manage all layout so I have to do some order. I am adm.
    Regards,
    Betta

    Hi,
    They are'nt the helpful transactions.
    The user runs report Asset History Sheet Based on Posted Depreciation (program RAGITT_ALV01) and there is the layout (CtrlF8) which is save (CtrlF12) as no user-specyfic with name begins /          The users should only create own layout with 'Z' or 'Y' first letter name and mustn't create with the first letter name '/'
    I have to take off the access (for particulary users) to save as the name begins sign '/' (=no user specific) so that the users can only save layout user-specific
    Moreover I have to delete some incorrect or useless layouts which were saved by users.
    Do you know how can I do it?
    Regard,
    Betta

  • Control User Specific button in ALV report

    Hi,
    Can anybody please suggest me how to control "USER SPECIFIC" button in ALV report layout using authorization object. I mean if you can tell me which authorization object is responsible to control the "USER SPECIFIC" button.

    additional info to what Lakshmi already said:-
    normally the restrictions for saving layouts/display variants are done at 2 levels:
    1) The developer of an ALV list first predetermines the authorization in the 'i_save' parameter within the code.
    I_SAVE = ' '     -
    layouts cannot be saved
    I_SAVE = 'A'   -
    user-specific and cross-user layouts can be saved
    I_SAVE = 'X'   --- cross-user layouts can be saved
    I_SAVE = 'U'  ---  user-specific layouts can be saved
    2) The second level comes to us restriciting the S_ALV_LAYO which gives access to users to save global layouts if I_SAVE for that particular transaction is A or X.
    for example, a report has I_SAVE= 'A', which means
    it will allow to save  User-specific  layouts without any restrictions.
    and if user has S_ALV_LAYO then he can save both User-Specific and Global Layouts(variants).
    it would be better to keep this object separate.

  • How to restrict users to not default layout while creating a user specific?

    Hi all,
               I have a problem with frequent changes in report layout setting. When users trying to create a user specific layout in the window "Default" is set, out of "User specific" & "default" checkbox defaultly, so users saving the layouts. so it's overwritting on existing layout. we are ossing the old data. how to restrict end users to create new one with out changing the existing one.How to change that default check in "Default" check box to user specific defaultly. where i have to do settings for this. Thanks in advance.
    Pradeesh

    Hi ,
    My problem is still not resolved. I tried applying the people picker property and set a specific field(an email id field) to be available to only admins. Now the field is not visible to the normal users but only admins which is good but that email field
    should be able to take normal users as wel as admin's email ID. currently due to the people picker property it only takes admin's ID and not normal user's ID - which is not as per expectation.
    What this email ID field does is - when a normal user is logged in he/she wont see this field in that view. But when an admin logs in he/she can switch to admin view and see this field . The admin can put any user's ID in this field and pull out the required
    resource's Time Report for modification.
    Please let me know how do i overcome my problem. Detailed step description will be very helpfull .
    As per Cameron's suggestion (add a rule on the "additional admin section") , i am not sure how exactly that is done. Would help a lot if i got to know how this works.
    Regards,
    Guru

  • Setting user specific contract data while creating sales order using BAPI

    Hi all,
    I am creating sales order using BAPI - BAPI_SALESORDER_CREATEFROMDAT2.
    Now my problem is that there is no structure for contract data (i.e. VEDA), system automatically set contract data using customization values.
    I am doing some validations on cotract data in MV45AFZZ which fails, because these validations are performed on standard values, user specific values r not set.
    How to handle this issue, your small clue may help a lot.
    Regards,
    S@meer

    HI
      Pricing will be carried basing on the pricing
    procedure.
    Case1: Prices will be carried out automatically if
    necessary condition records are maintained for the
    condition type.
      For this you can go to Sales Order-> Item Conditions
    In the screen you can click on command button Analysis,
    which gives you the list of condition types associated
    to the pricing procedure. By clicking on the condition
    type you can know the action that has taken place.
    Case2: Manually forcing prices for Items.
      To do this, you have to populate ORDER_CONDITIONS_IN &
    ORDER_CONDITIONS_INX. Also note to identify the item
    numbers, you manually pass the item number for each item
    in the sales order, use the same item number for
    populating conditions.
      Parameters required:
    ORDER_CONDITIONS_IN:
      ITM_NUMBER, COND_TYPE, COND_VALUE, CURRENCY
    ORDER_CONDITIONS_INX:
      ITM_NUMBER, COND_TYPE, UPDATEFLAG, COND_VALUE,CURRENCY.
       Hope the above info helps you. Do revert back if you
    need more info.
    Kind Regards
    Eswar

  • Layout in Report: User Specific Indicator

    Hi Friends,
    I want to remove the "user Specific" Indicator from my layout and make it global but this indicator is in display mode. How can i do it? Please advice.
    Regards,
    CK

    Hi
    Which report are you refering to?
    Regards
    Sidi

  • 'Unable to check credentials of user. Permission denied...'

    Hi everyone, i have this problem when i try to login in a jsp that connects with WCC to check user and password.
    oracle.stellent.ridc.protocol.ServiceException: Unable to check credentials of user. Permission denied. Address 'xx.xx.xx.xx' is not an allowable remote socket address.
         at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:142)
         at oracle.stellent.ridc.protocol.ServiceResponse.getResponseAsBinder(ServiceResponse.java:108)
         at wcc.WccConnection.checkUser(WccConnection.java:597)
    The Address 'xx.xx.xx.xx' is a the IP Address of the VM where i mounted the WCC Server.
    I can access from another machine to the Control panel of the WCC with http://xx.xxx.xx.xx/cs so it has connectivity.
    Somebody said i had to change the file config.cfg in the WCC and add that address to the "SocketHostAddressSecurityFilter" variable, but it still doesnt work.
    Anyone has idea about this error?
    Thanks a lot!

    Check how Incoming Socket Connection Address Security Filter is configured. For more info see http://docs.oracle.com/cd/E23943_01/doc.1111/e14495/config.htm#INECM1695
    (don't forget to restart the server after changing the value)

  • Getting a list of users and permission from a folder

    I run this command to get a a list of users and permission from a folder
    $project_folder = "\\servername\foldername"
    get-acl $project_folder | %{ $_.Access  } | ft -property IdentityReference, AccessControlType, FileSystemRights > folder.csv.
    This only lists information for 1 folder.
    If i have multiple folders how should the code be modified?

    this is the code i am looking for 
     $project_folder
    = "\\servername\foldername\foldername1"
    get-acl $project_folder | %{ $_.Access  } | ft -property IdentityReference, AccessControlType,
    FileSystemRights > folder.csv.
    I  run this code and this gives me the information for only the folder 'foldername1'.
    Ex. i need a list of users who have permmission in \\servername\foldername\foldername2.
    i run the code and it gives me the permissions and list of users in foldername2.
    This is the issue
    IF there are multiple folders \\servername\foldername\foldername2, \\servername\foldername\foldername1,
    i need to run the code each time for 1 folder. 
    is there a command where i can combine the path of these 2 or more folders and export
    it to csv
    Ex.  $project_folder
    = "\\servername\foldername\foldername1",
    "\\servername\foldername\foldername2"
    get-acl $project_folder | %{ $_.Access  } | ft -property IdentityReference, AccessControlType,
    FileSystemRights > folder.csv.
    This will give me the list of users and the type of access they have in foldername1 and
    foldername2

  • Transaction SE16: Field selection (User-Specific Settings) is NOT working for ALL tables

    Hi Guru’s,
    I have an issue in Transaction SE16, Field selection (User-Specific Settings) is NOT working in Tables (ALL tables).
    Following is the screenshot attached for your kind reference,
    That is in the initial screen of transaction SE16 if I choose Filed Name or Filed Label only the technical details (Field Names) are appearing and not the descriptions like Client, Purchasing Doc, and Company Code Doc. Category Document Type etc…
    Right now I am using ECC6 and EHP7 SAP system.
    Please help me to resolve this issue by implementing any OSS note or User Role creations or any technical changes required in system.
    Hope the requirement is clear and in case need any clarification please revert back.
    NOTE: Right now in Development System we don’t have any successful user to compare the settings.
    Regards,
    Kumar.S

    Thanks Patra.
    Even I searched in SAP portal and couldn't able to find the relevant OSS note.
    Following is my BASIS team response,
    "Only you can view Table Field values from higher release"
    Can you suggest / guide on this comment as well.
    Looking forward to your speedy response.
    Regards,
    Kumar.S

  • Strange user-specific display problem

    I use my MacBook with an external AG Neovo F-419 19"screen. I have one screen at work and another at home. It works beautifully except for one strange phenomenon: when I log into my account and watch the screen during start up, whereas it starts out having nice even-contrast graphics with a good color range, as the boot progresses it goes through two changes. At the first change the color balance changes, probably reflecting a calibration that I have done in the past kicking in from the Display Preferences info. But then it goes through a second change in which the contrast becomes extreme and the color range perhaps reduced and this then stays and I cannot reverse it by changing the settings in Display Prefs (I can alter the contrast, brightness, color balance etc. but I can't restore the normal color and contrast whatever I do). Bizarrely, however, I can restore things to normal just by rotating the screen and then Reverting to normal orientation.
    This is user specific as it doesn't happen if I login as another users and it reappaears when I log back in (andagain gets undone by rotating the screen). It seems not to be a function of a particular Display Profile as I have tried changing them and deleting, ditto for the Prefs file in my User Library. Moreover, the external display does not need to be connected - it happens when I use the Macbook on it's own, which is very annoying because then I cannot rotate the screen to get rid of it!
    If anyone has any ideas I would be very grateful as I do not want to transfer thousands of files into a new User account (I should say that I thnk this problem first arose in Tiger when I had another machine and it has migrated along with the User settings!!). Help!!
    Andy

    Hi,
    I think you can only display a maximum message of 128 characters. There is also another function module SCCA_TH_POPUP which also has a message size of max 128 characters.
    Danish.

  • User specific default variant in  a selectio screen

    Is it possible to provide an option to create user specific default variant in a selection screen?
    I have developed a custom report program. Now I want to allow users to choose one of their variants as default variant ?  Please help.

    Hi very Simple and easy solution:
    In SE93 when u are creating the transaction for the program use the option 'Start with variant' and give your own vaiant name for the program start. This will help you in starting your proam always with your default variant.
    Hope That Helps
    Anirban M.

  • Fb50 line item level  user specific filelds

    hi,
    FB50 transaction leven i want specify user specific fileds for perticular fields
    i have to make it default  the specific fields for that perticular  user
    even iam trying in administrator
    but i uable to crete the variant for specific user
    kindly explain me how  to creat  variant for user specific filelds for defult values
    thanks in advance
    regards,
    Jyothi

    thnaks

  • Disabling User specific/Default Setting

    In the output of CV04n selection while 'Save Layout' how is it possible to enable/disable
    'User Specific' or 'Default setting'

    Hi,
    Did you mean Set or enable / disable? Anyways if you want to set, you can do it as follows:
    1. Global: I.e. Available for all
    Selection Variant: Global     do not toggle the User specific box
    Description: XYZ
    2. User Specific: Available only for the user
    Selection Variant: aaa   Toggle the user specific box.
    Description: uvw
    If this doesn't answer your query, please explain further.
    regards
    C

  • User specific default variant setting

    Hi gurus,
    My requirement is Report should get executed with default  user specific Variant.
    For example while running MB51 system should pick the corresponding variant based on the user who is executing the report.
    Based on threads i created variants with U_userid like U_RAM & U_LAX.
    I checked with user ids of RAM and LAX, But system is not picking automatically.
    can u help me

    hi,
    see this.
    https://forums.sdn.sap.com/click.jspa?searchID=14929390&messageID=5872211

  • User- Specific screen sequence in MMR

    Hi
    I need to create a User-specific screens in Material master record.That is for one user the basic data 1 should be there and for the other user it has to be blocked i.e he should not do any changes to that field.
    Kindly suggest me a solution ..........
    Regards
    Siva

    Hi
    You can achieve it by following configuration steps in SPRO
    1.Define Structure of Data Screens for Each Screen Sequence
    2.Assign Secondary Screens
    3.Maintain Order of Main and Additional Screens
    4,Assign Screen Sequences to User/Material Type/Transaction/Industry Sector.
    5.Maintain User Settings
    Custamization path for the above configuration in SPRO is
    Implementation Guide for R/3 Customizing (IMG)> Logistics - General>Material Master-->Configuring the Material Master
    Please let me know if you need further inputs.

Maybe you are looking for

  • Link button does not link to the right record.

    Hi, I have created a matrix, and I have made one of the column type as link button. The matrix is loaded with Sales Quotation record, and the DocNo column is a link button. For example, when i pressed the link button of record with DocNo = 10, but th

  • Using & in a text string

    How can I use & in a text string so that the system doesn't ask for the user to enter a value. eg the string is Joe Blogs & Co. Currently the system asks for the user to enter text.

  • Maintenance of serial number profile for a material

    Hi, We need to maintain serial number profile for a material. Presently there exists stock for this material. Could you please let us know the prerequisites for maintaining the serial number profile for a material where stock exists. System should no

  • HtmlConverter refuses to work

    I have followed the instructions from the sun website but when I try to launch HtmlConverter it produces the following error message. My OS is win95. command line entry java -jar htmlconv1_3.jar -gui Error failed to load Main-Class manifest attribute

  • Implementing an EDI scenario with XI

    Hi, I need to implement an EDI scenario with a non SAP system. I would like to know what are the "components" that I should have in order to acomplish the task ? (how is it different from an ALE scenario) I'm new to EDI ! (so take is slow...)   Thank