Anywhere access domain users and rights

Hello,
I am working with anywhere access on server 2012 R2, and I am wondering if it has the ability to use the existing domain user rights to existing file share's and folders instead of using its own system.
For example I added a new share and pointed it to an existing folder thinking it would be able to see all of the files in it. That did work, but then it also gave all users in my domain rights to that folder. So it is not using the existing domain
user rights to the folder that was already existing. Is this a bug or a feature?
Also I cannot add a folder on our storage cluster. The cluster servers and the clustered server doesn't show up in the list.
It could be that this is the wrong product for what I am trying to do, but it seems like it has all of the features that I want.
Dan.

Hi Dan,
What is the shared folder’s NTFS permissions? If the domain users group have permissions to access the shared folder, all users in domain can access the folder.
For more detailed information, please refer to the article below:
File and Folder Permissions
http://technet.microsoft.com/en-us/library/bb727008.aspx
For storage cluster, I suggest you ask for help from cluster forums to get more better and accurate answer to the question.
http://social.technet.microsoft.com/Forums/en-US/home?forum=winserverClustering
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Difference between AD domain user and local user

Hello, I think the title is self explanatory. I am trying to figure out difference between AD domain user and local user. SAP Help wasnt very helpful.
Thanks.

Hi,
It's about where the user accounts are kept. Domain users are users that are entered into the domain users group on a domain controller. These domain users can be centrally managed at the server. Whereas the local users are the users created in the local system.
In BPC, you can select users from either of them or in combination as well. However, If you want to make change in the local user credentials, you need to login to the system in which the user has been created and make the changes there. On the other hand, changes to domain users can be made from any domain connected machine with the right software and the necessary rights. The changes only need to be made once.
Hope this helps.

VBS: Add domain user and group to local administrators

I have a piece of VBS code that I have modified that basically adds a specified domain user and group to the PCs local Administrators group. It works on Windows 7, but not on Windows 8 at all.
Call AddUserToGroup("./Administrators", "myDomain.net/NetworkAdminis")
Call AddUserToGroup("./Administrators", "myDomain.net/Domain Admins")
Call addDomainUser("myDomain", "myUserGroup")
Sub AddUserToGroup(local, domain)
Dim objLocalGroup
Dim objDomainGroup
Dim server
For Each server in servers
Set objLocalGroup = GetObject("WinNT://" & local & ",group")
Set objDomainGroup = GetObject("WinNT://" & domain & ",group")
With objLocalGroup
.Add(objDomainGroup.AdsPath)
.SetInfo
End With
Next
Set objLocalGroup = Nothing
Set objDomainGroup = Nothing
End Sub
Sub addDomainUser(strDomain, strUser)
Dim strComputer
Dim objWshNet
Dim objGroup
Dim objUser
Set objWshNet = CreateObject("WScript.Network")
strComputer = objWshNet.ComputerName
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators,group")
Set objUser = GetObject("WinNT://" & strDomain & "/" & strUser & ",user")
If Not objGroup.IsMember(objUser.ADsPath) Then
objGroup.Add (objUser.ADsPath)
End If
Set objWshNet = Nothing
Set objGroup = Nothing
Set objUser = Nothing
End Sub
I have debugged the code line by line using VBA's IDE and there seems to be no error condition firing. It executes all lines, but it is not adding the users and groups as it did with Windows 7 and below. The script is being run as local administrator.

Hi,
The first step is to comment out your On Error Resume Next line and try again.
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing)

Accessing Sharepoint 2013 externally for domain users and customers

Just an FYI I am not a SP administrator by any means but have be tasked with taking over this project and could use some assistance.
Sharepoint 2013 is working fine internally. Users access the site and login with their domain credentials. Our client is moving one of their departments to another building down the street and we'd like them to be able to access local resources without the
use of another server or site to site vpn or standard vpn.
My question is, how do we make Sharepoint accessible outside of their local network?
If we open up a port on the router and have it forward all request to Sharepoint server will we be able to access it?
Also, how will they authenticating with the Sharepoint Server? Do they use the same user credentials?
I forgot to mention this is Sharepoint 2013 Enterprise Edition. We are also using Project Server 2013 as well.
Thanks in Advance

Hi 3s1k,
According to your description, my understanding is that you want to access the SharePoint site from Internet.
You need to first ensure that you enable Anonymous Access for your web application. You'll then need to set up DNS for the domain you own to point to your web front end server (or virtual IP if it's load balanced). Then set up the appropraite IIS bindings
for the web application, and finally you'll need to extend your web application to an Internet Zone and give it the appropriate domain name.
There are some similar posts for your reference:
https://social.technet.microsoft.com/Forums/en-US/2277d710-ed05-4613-bd66-fd12e4d64b61/sharepoint-intranet-site?forum=sharepointadminprevious
https://social.technet.microsoft.com/Forums/sharepoint/en-US/fd968a08-393b-41c0-a916-c48ce0f83104/configure-sharepoint-2013-for-accessing-over-internet?forum=sharepointadmin
http://sharepoint.stackexchange.com/questions/54315/sharepoint-2013-extranet-acces-outside-the-internal-network
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Difference between Domain\Domain Users and Everyone Group in SharePoint

Hi,
In SharePoint 2013, is Everyone Group an AD group ? Please help with details.
Thanks
srabon

Hi All,
Domain Users, Authenticated Users, or Everyone
Domain Users
The Domain Users is the only real group of the 3 listed above. By that I mean you can add and remove members from this group. Domain Users is a Global Group in the domain, and it can only contain users that are members of same domain the Domain
Users group resides in. By default all users created in the domain are automatically members of this group. However, the default Guest account in the domain is NOT a member of Domain Users, instead it is placed in the Domain Guest group.
Because Domain Users is generally considered the most secure group of the three listed above.
Authenticated Users
Authenticated Users was first introduced in Windows NT 4.0 SP3. This is a built-in group and cannot be modified. The Authenticated Users group contains users who have authenticated to the domain or a domain that is trusted by the computer domain.
Authenticated Users contains all manually created user accounts in all trusted domains regardless of whether they are a member of the Domain Users group or not. Authenticated Users specifically does not contain the built-in Guest account, but will contain
other users created and added to Domain Guests.The Authenticated Users group also includes the local computer account (computername$) and the built-in SYSTEM account.
Everyone group
The Everyone group includes all members of the Domain Users, Authenticated Users group as well as the built-in Guest account, and several other Built-in security identifiers like SERVICE, LOCAL_SERVICE, NETWORK_SERVICE, etc. NULL session connections (aka
anonymous logon) used to be included in this group but were removed in Windows 2003. This is a built-in group that cannot be modified.Because the Everyone group contains the Guest account, and several other Built-in security identifiers like SERVICE,
LOCAL_SERVICE, NETWORK_SERVICE, etc. is generally considered the least secure of the three groups.
Short Answer is there isn't much to worry about unless folks are logging I with a guest account or you have removed a bunch of folks from the domain users group
-Ivan

How to migrate stored procs accessing columns "LEFT" and "RIGHT"

Hello!
I have to migrate a SYBASE11-Database to Oracle 8.1.7.
How can I migrate Stored Procs that access tables that contain columns 'LEFT' and 'RIGHT'?
OMWB reports a parse error "encountered: ,". If ommit the words 'left' or 'right' or if I write 'left()' or 'right()', it works. But I have to use these columns and we cannot change the database model.
It doesn't work with quoted column names like this: "LEFT" or "RIGHT".
I use OWMB 1.3.1.0.0. Anybody any ideas? Thanks in advance.
Yours, Heiko Kaschube

This is a simple matter to fix.
As the words LEFT and RIGHT are treated as reserved words by the stored procedure parser, they cannot be used successfully as column names within Oracle PL/SQL.
In order to get the stored procedure to parse, you can append an underscore to all references to LEFT and RIGHT e.g.
left_
then right click on the stored procedure name and select 'parse procedure' from the drop-down menu. The procedure will now parse and the generated PL/SQL can be viewed within the Oracle model menu tab.
It will now be necessary to remove all the underscores previously appended to the words 'left' and 'right' from the PL/SQL version of the stored procedure in question. Again, this can be done within the Migration Workbench.
Hope this helps.

Domain users and local users can't login to reporting service web environment

Hello,
We installed reporting services at one of our customers but aren't able to use domain users to login. We've tried to login with a domain user, a local user but both aren't working. We set the proper permissions for the users on the reports folders.
We can only login with the buildin/administrator account on the local url: http://servername/reports
How can we allow login with domain users on other report manager url's?

Below link may be helpful,
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/623da309-21fa-42a8-905f-1424144a347d/setting-up-a-user-in-ssrs?forum=sqlreportingservices
Regards, RSingh

Return 504 Gateway TimeOut when access exchange service by domain/user and password

hi,
here is the scenario: a user of our app is in ntdev domain, and his exchange server located at apj.cloudmail.microsoft.com. our backend api is deployed at the Azure servers at US West.
our api get 504 Gateway Timeout when calling the
FindFolders API of exchangeService. does anyone know how to fix this issue? the following is the core code:
var
service = newExchangeService(ExchangeVersion.Exchange2010);
service.Credentials =
newNetworkCredential(username,
password, domain);
service.AutodiscoverUrl(emailAddress, RedirectionUrlValidationCallback);
service.FindFolders(
WellKnownFolderName.Root,
newFolderView(1));

That doesn't sound like its an EWS issue more an issue with the Network path your trying to traverse to the Exchange Server. My suggestion is that you test EWS using the EWSeditor
https://ewseditor.codeplex.com/ (eg it sounds like you may have proxy server that expecting authentication etc.).
Cheers
Glen

Trouble with UTL_FILE user and rights

Hi,
I have a user ETU35 who writes a file with UTL_FILE.
The file written has PUB02 as owner on Linux Red Hat and these rights: "rw-r--r--"
Is there an environment Linux/Oracle variable to set to fix this problem?
(Documentation says the file is owned by the account that started the instance?)
Many thanks for your help
Edited by: JeanParis on May 9, 2009 7:21 AM

Hi,
From [UTL_FILE|http://download.oracle.com/docs/cd/B28359_01/appdev.111/b28419/u_file.htm#BABGGEDF]:
On UNIX systems, the owner of a file created by the FOPEN function is the owner of the shadow process running the instance. Normally, this owner is ORACLE. Files created using FOPEN are always writable and readable using the UTL_FILE subprograms. However, non-privileged users who need to read these files outside of PL/SQL may need access from a system administrator.
In such similar cases my approach is build a simple shell script and call it after the generation of the file to change the file ownership.
Regards,

Users and Rights

How to find out which users other than SYSTEM have rights to access tables that SYSTEM can access? <tables like dba_users, dba_roles, all_tab_columns, all_objects, dba_sys_privs, dba_tab_privs, role_role_privs, dba_role_privs etc.,> Thanks!!

I will show you simple example to analyze this issue. if you login as scott and want to see information about those tables which scott is not owner but have athentications then you will query those views which start with all_views-name like all_tables,all_indexes. these views show you all tabele which scott can access. by putting where clause in query you can see other objects.

BI+ Reporting on access for Users and Groups

BI+ 9.2.0.2, is there a way to report on the permissions associated to a report or a folder? If so, how do you do it? Would like to get all the access permissions for all the folders and all the reports on one report, if possible. Would be nice if you could do this in Shared Services, like Planning does. Thank you! 

Now that you mention it, when I provisioned all users at the orgn scope, I had visibility issues of team workspaces created inside the organization also.
I am not going to do anything with organizations until things can be accurately accessed and viewed across organizations, seeing as I must go live NOW, I am also going to have to find a way to "move" Personal Workspaces into the desired organizational scope post go-live. I opened an SR about this previously and was told there is no way to do it, I did a rip-and-rebuild on my LDAP'ed users with an updated scope on my Directory Profile.
I imagine multiple enterprises and multiple organizations and cross visiblity controls for GAL and entities via the various interfaces is going to have to be in place before large complex organizations can adopt beehive, I can't imagine having ALL your users in one container!

Security Settings on Domain Node in Users and Computers

When I open Active Directory Users and Computers (dsa.msc) and right click on the domain node (top node of the tree) and select Properties, there is a security tab with the usual dialog for setting permissions.
I assume the Domain Administrator account, Domain Admins, and Enterprise Admins should have full control. But what other groups or users should have what permissions? Are the permissions I set here applicable only to the folders and OUs
in the tree? Why would anyone but Domain/Enterprise Admins need permissions to these objects?
Are there any KB articles or best practices that offer guidance regarding how to set permissions here?

Hi,
Thanks for your posting.
Please check the following articles,
Security Groups
http://technet.microsoft.com/en-us/library/cc960640.aspx
Managing Domain Users and Groups
http://technet.microsoft.com/en-us/library/cc759353(v=ws.10).aspx
http://ss64.com/nt/syntax-groups.html
Regards.
Vivian Wang

Give a windows domain user local administrative rights?

I'm familiar with managing servers/computers in a windows environment, and I can't seem to find a tool to do something similar in OS X 10.5. I'm getting ready to ship a macbook pro to an employee who will be authenticating against our active directory windows domain for login. The machine is already setup to allow this (and I'm able to log in using my network credentials currently). However, I'd like to also give the user administrative rights so he can install software as he sees fit. In windows, I would just goto the groups section and add the user by typing in his account as : Domain\user and it would add him to that group. I haven't been able to find anything similar with the MacBook so far. Any help would be greatly appreciated.
Message was edited by: vlitsupport
Also.. if this needs to be in another section of the forum, please let me know.
Thanks!
Message was edited by: vlitsupport

found a good tutorial:
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/Article ID/234/PageID/359/Default.aspx

Export list of users and passwords for migration to new domain

Hello,
i am in the planning phases of moving a SBS2008 domain to Windows Server 2012 AD domain. i have looked into ADMT but it refuses to install on SBS2008 (error: not a valid win32 application). is there another avenue i can look into that will help
me export all SBS domain users and their passwords, and import them into my 2012 domain?
cheers,
Jonathan Horne

Hi,
Regarding your request, if you want to migrate SBS 2008 to Windows Server 2012 Standard, please refer to the following article.
Transition from Small Business Server to Standard Windows Server
http://blogs.technet.com/b/infratalks/archive/2012/09/07/transition-from-small-business-server-to-standard-windows-server.aspx
As it mentioned, you could first join the Windows Server 2012 Standard server to the current SBS domain and promote it as an additional DC, then it will have the user objects on it.
Hope it helps.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

Issue with users accessing video card and /dev/nvram

Hello,
I have Lenovo x60s and i can't access with normal user (group users) the file
/dev/nvram
ever I restart de computer have execute "chmod 777 /dev/nvram" for fallowing access for users
and with users i can't use video i810 alone use vesa
with root i can use driver i810 on xorg, why??
I don't understand?!?!?!

The problem with my video is with root i can play games 3D, with users i can't, my config video card on xorg:
Section "Device"
### Available Driver options are:-
### Values: : integer, <f>: float, <bool>: "True"/"False",
### <string>: "String", <freq>: "<f> Hz/kHz/MHz"
### [arg]: arg optional
#Option "ShadowFB" # [<bool>]
#Option "DefaultRefresh" # [<bool>]
#Option "ModeSetClearScreen" # [<bool>]
Identifier "Card0"
Driver "vesa" ---->> Now I write "VESA", while I write i810 i can't execute "startx" with normal user
VendorName "Intel Corporation"
BoardName "Mobile 945GM/GMS, 943/940GML Express Integrated Graphics Controller"
BusID "PCI:0:2:0"
EndSection
the /dev/nvram is device when i use especial keys of keyboard on my notebook,
ever restart my pc the permissions change, I have execute "chmod 777 /dev/nvram" else i can't use with normal user.
i think the udev always create this device on start and always create with the permission alone read and write for root, but I just find that the group is kmen and I add my user in the group.
I restart system and verify the result.

Anywhere access domain users and rights

Similar Messages

Maybe you are looking for