Client Access denied

Hello
I can successfully connect over the VPN to W2003 R2 as Admin and get the desktop. I configure for another client, make make sure "Dial-In" is to allow access, create an Accounting group, add him to Accounting, add Remote Desktop Users to
that group, create a RRAS policy for Accounting, add both him and Accounting to the Remote Desktop Users group, and STILL I cannot access RDP as that user. It says "log on must be enable from Terminal Services..." Again it works perfectly
for Administrator but never for any other created account. Please advise

Hi,
Thank you for posting in Windows Server Forum.
Please add the user under following path and check.
Computer configuration>Windows Settings>Security Settings>User Rights Assignment
Allow log on through terminal services
Add user under that group and check.
If still facing issue, try adding the user as per below snap.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

Financial Reporting 11.1.1.3 Client "Access Denied" connecting to HFM

Hi,
I have installed Financial Reporting 11.1.1.3 Client on a PC running Windows Vista 32 bit SP1. When I try to access to a report created form another PC that connects to HFM, it says "Error connectiong to server" and "Cannot connect to database "X": Access Denied". The native user is the same that created the report; on the same machine, I can succesfully access HFM applications from HFM client and Rule editor.
Any idea?
Thanks

Dear John,
How to install latest Version of Hyperion HFM
1) I had downloaded Hyperion Enterprise Performance Management System Foundation Services, Product specific Essabase and Financial Management , and unzip into common folder . but stll iam not able to see Installtool.cmd
which part i have still dowloaded.
Regards
Amit

[Solved] wicd-curses and -client: access denied???

>> Reboot fixed it, problem resolved.
==================================
after last wicd upgrade, getting these errors trying to start the respective wicd clients:
09:39 PM:~ $ wicd-curses
ERROR:dbus.proxies:Introspect error on :1.7:/org/wicd/daemon: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.136" (uid=1000 pid=24457 comm="python) interface="org.freedesktop.DBus.Introspectable" member="Introspect" error name="(unset)" requested_reply=0 destination=":1.7" (uid=0 pid=2945 comm="python))
ERROR: wicd-curses was denied access to the wicd daemon: please check that your user is in the "users" group.
09:39 PM:~ $ wicd-client
Importing pynotify failed, notifications disabled.
Has notifications support False
Loading...
Connecting to daemon...
Connected.
ERROR:dbus.proxies:Introspect error on :1.7:/org/wicd/daemon: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.137" (uid=1000 pid=24467 comm="python) interface="org.freedesktop.DBus.Introspectable" member="Introspect" error name="(unset)" requested_reply=0 destination=":1.7" (uid=0 pid=2945 comm="python))
ERROR:dbus.proxies:Introspect error on :1.7:/org/wicd/daemon/wireless: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.137" (uid=1000 pid=24467 comm="python) interface="org.freedesktop.DBus.Introspectable" member="Introspect" error name="(unset)" requested_reply=0 destination=":1.7" (uid=0 pid=2945 comm="python))
ERROR:dbus.proxies:Introspect error on :1.7:/org/wicd/daemon/wired: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.137" (uid=1000 pid=24467 comm="python) interface="org.freedesktop.DBus.Introspectable" member="Introspect" error name="(unset)" requested_reply=0 destination=":1.7" (uid=0 pid=2945 comm="python))
warning: ignoring exception org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.137" (uid=1000 pid=24467 comm="python) interface="org.wicd.daemon" member="GetConnectionStatus" error name="(unset)" requested_reply=0 destination=":1.7" (uid=0 pid=2945 comm="python))
my user is in the user group. wicd seems to be working fine, I just can't manage my connections. Any ideas?
Last edited by userlander (2009-09-18 22:38:06)

I did not, but I installed it and wicd-curses is now working. Thank you!
dbus-glib was not listed as a dependency for wicd. I will file a bug report.

Server 2012 R2 File Server - 2008 R2/Win7 Clients Access Denied. SMB 3 Encryption.

I've setup a Server 2012 R2 File Server. When creating shares I selected to enable encryption.
Now Windows 7 and 2008 R2 clients cannot access. Pretty clear that this is SMB 3 encryption the cause.
OK. So can I enable these Windows 7 and 2008 R2 clients to access encrypted SMB 3 shares?
I can find no answer or documentation on this.

So can I enable these Windows 7 and 2008 R2 clients to access encrypted SMB 3 shares?
No, you can't. These Windows 7 and 2008 R2 clients talking to Windows Server 2012 R2, they will negotiate to the lowest common protocol which would be SMB 2.1 enabling communication, while not taking advantage of the SMB 3.0 specific capabilities (encryption
included).
There's no built-in encryption inside SMB 2.1

Access denied report App\Client SDK

Server crashed, therefore I reinstalled Crystal Reports 9 & Crystal Enterprise 9 and attempting to rebuild the ASP pages which pass report parameters. The error received is:
Technical Information (for support personnel)
Error Type:
webReporting.dll (0x80004005)
Access denied. Please check directory setting for files you can access.
/HTMLViewers/reportgenerator.asp, line 31
Browser Type:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.50727)
Page:
GET /HTMLViewers/reportgenerator.asp
Line 31 on the page reads:
.processHttpRequest Request, Response, Session
Running the registry moniter I receive an access Denied for hklm\software\Crystal Decisions\9.0\report App\client SDK
This is my first time on the forum, hope I explained myself properly.

Thanks Shaun, I appreciate your link for the process monitor application. This replaces my older seperate reg mon & file mon apps.
I have now been able to determine that my application is getting to where it is calling the cachemanager.dll and it is experiencing the problem. I tried manually registering this dll and receive the error Loadlibrary("cachemanager.dll")failed. GetLastError Returns 0x00000007e.
If I change the ASP pages to a very simple process, it will run the demo report, and my report. Once I attempt to use the ASP page with the login requesst, and parameter call I receive this error.
Error Type:
webReporting.dll (0x80004005)
The system cannot find the path specified.
/HTMLViewers/reportgenerator.asp, line 31
Browser Type:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.50727)
Page:
GET /HTMLViewers/reportgenerator.asp
The reportgenerator ASP page which is causing this error is:
trace.write(category,message)
trace.warn(category,message)
<%@ Language="VBScript"%>
<%
'Declare variables for the report viewer and the ObjectFactory objects, and create the ObjectFactory object.
Dim ObjectFactory, userName, password
dim clientid
dim reportid
clientid = request.querystring("Clientid")
session("Clientid") = clientid
reportid = request.querystring("reportid")
' open a report
' copy this report to "Report Directory" in RAS Configuration Manager
Session("ReportName") = "C:\Program Files\Crystal Decisions\Report Application Server 9\Reports\logonparm\" & reportid
userName = "SYSDBA"
password = "masterkey"
'Create the ObjectFactory for use in creating other Crystal Objects
Set ObjectFactory=CreateObject("CrystalReports.ObjectFactory.2")
'Instantiate the Server Control object which allows us to collect information about the required
'inputs to run the report
Set ServerControl = ObjectFactory.CreateObject("CrystalReports.CrystalReportServerControl")
With ServerControl
 .ReportSource = Session("ReportName")
 .EnableLogonPrompt = False ' Set this to false so that we can override the controls prompting for logon
 .processHttpRequest Request, Response, Session
End With
Set Session("ReportParameters") = ServerControl.ParameterFields
' Set Login info for all connections
' ***************** Added to logon using Viewer SDK *****************************
Set connectionInfos = serverControl.databaseLogonInfos
For x=0 To connectionInfos.count - 1
 Set connInfo = connectionInfos.Item(x)
 connInfo.UserName = CStr(username)
 connInfo.Password = CStr(password)
Next
For each parameter in Session("ReportParameters")
 Set parameterField = parameter
 paramName = parameterField.Name
 if paramName = "INTERFACE ID" then
 Dim paramValue
 Set paramValue = ObjectFactory.CreateObject("CrystalReports.ParameterFieldDiscreteValue")
 paramValue.Value = session("Clientid")
 parameterField.CurrentValues.RemoveAll
 ' Add this value to current value list
 parameterField.CurrentValues.Add paramValue
 end if
Next
Set clientDoc = CreateObject("CrystalClientDoc.ReportClientDocument")
clientDoc.Open session("ReportName")
set session("oclientdoc")=clientdoc
Session("pathReport") = pathReport
Set Session("connectionInfos") = connectionInfos
Response.Redirect "Viewer.asp"
%>
My appologies if I do not explain my problem well. I am not an ASP programmer, and am desperatly looking for assistance to resolve this problem. If anyone can refer a contract programmer that would be interested and capable of assisting me, that would be appreciated. I believe I am close to resolving this problem. I purchased a support session only to find out that this version is no longer supported.

Client host rejected: Access denied

Getting a ton of bounced back emails most likely the address is no longer in use but I filtered out any of the emails that say so. I'm no professional at this thats why I'm looking for help here. I tried searching for the problem on the forum but found
stuff about server 2003.
Im getting alot of the kickbacks saying Client host rejected: Access denied
I've tried emailing the recipient on my personal Gmail and recieved the same error. can we safely say that the addresses are no longer in use that i'm getting these kickbacks? heres the full header for anyone
who wants to look.
The original message was received at Wed, 5 Mar 2014 15:29:34 -0500 from odbmap07.extra.chrysler.com [129.9.107.35]
 ----- The following addresses had permanent fatal errors ----- <mail address here>
 (reason: 554 5.7.1 <unknown[151.171.97.83]>: Client host rejected: Access denied)
 ----- Transcript of session follows ----- ... while talking to odbmap07.out.extra.chrysler.com.:
<<< 554 5.7.1 <unknown[151.171.97.83]>: Client host rejected: Access denied
554 5.0.0 Service unavailable
We are using someone to host our email server for more information.
I use a program called G-Lock easy mail to send out our newsletter.

Hi,
Which email client are you using to send and receive emails? G-Lock?
Please refer to the links below and check if they help:
http://www.symantec.com/business/support/index?page=content&id=TECH169847
http://support.mailhostbox.com/email-administrators-guide/error-codes
In addition, if you are not using Microsoft Outlook as your email client, it's better to contact the support for your mail client for further assistance.
Best Regards,
Steve Fan
TechNet Community Support

Access denied while loading jar files from client

I am creating a platform
that can be started by JWS
and then load plug-ins from client drive.
I've signed my platform (packaged as a jar file),
and set up the security tag in my jnlp,
so that it can access client files.
The plug-ins are packaged as jar files.
And in one of the plug-ins, there is a class that has a JFileChooser field.
While initializing this field, the AccessControlException is thrown.
I can't figure out what is wrong,
So I tried to sign the plug-in, but the problem stands still.
PS. I have made my own ClassLoader,
and this platform works well without JWS.
Please help me, thanks.
Below is the error message:
Java Web Start 1.4.2 主控台,已啟動 Fri Jul 02 01:31:17 CST 2004
Java 2 Runtime Environment:版本 1.4.2,作者:Sun Microsystems Inc.
/*my own log message*/
2004/7/2 上午 01:31:23 pluginmanager.Activater activate /*this is my own classloader*/
配置: activate jar=\Plugins\Common.jar /*load plug-in Common.jar*/
2004/7/2 上午 01:31:23 pluginmanager.Activater activate
細緻: collect resources /*collect other jar files needed by Common.jar*/
2004/7/2 上午 01:31:23 pluginmanager.Activater activate
細緻: load plugin=\Plugins\Common.jar
2004/7/2 上午 01:31:23 pluginmanager.Activater activate
細緻: activating class name=filemanager.FileManager /*instantiate plug-in component*/
java.security.AccessControlException: access denied (java.util.PropertyPermission user.dir read)
 at java.security.AccessControlContext.checkPermission(Unknown Source)
 at java.security.AccessController.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
 at java.lang.System.getProperty(Unknown Source)
 at java.io.Win32FileSystem.getUserPath(Unknown Source)
 ... /*cut*/
 at javax.swing.JFileChooser.<init>(Unknown Source)
 at filemanager.Open.<init>(Open.java:20)
 at filemanager.FileManager.<init>(FileManager.java:38)
 at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
 ... /*cut*/
 at java.lang.Class.newInstance(Unknown Source)
 at pluginmanager.Activater.activate(Activater.java:120)
 at pluginmanager.PluginManager$ActivateAction.actionPerformed(PluginManager.java:53)

When running under Java Web Start, a security manager is installed.
Since you have created your own classloader, you are responsible for assigning permissions to the classes you load.
You can change you class loader to extend SecureClassLoader, then override getPermissions:
protected PermissionCollection getPermissions(CodeSource codesource) {
PermissionCollection perms = super.getPermissions(codesource);
/* add whatever permissions you want your code to hance*/
perms.add( ... );
/* or just add all-permissions */
perms.add(new AllPermission());
or - you can just remove the Security Manager:
System.setSecurityManager(null);
/Dietz

Error (access denied) when starting Client Runtime Audit Browser

LS,
After starting the OC4J instance, I try to start the Client Runtime Audit Browser. For a brief moment I see a DOS-box, then an IE-page appears saying the following:
======================================================
ERROR
The requested URL could not be retrieved
While trying to retrieve the URL: http://127.0.0.1:8999/owbb/RABLogin.uix
The following error was encountered:
Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.
======================================================
Any idea whether this is a local problem?
I've tried applying the settings as mentioned in the configuration guide, but the Bypass option for the proxy is impossible to set since we do not use a proxy server.
Your thoughts?
Regards, Patrick

Good morning All,
Maybe I've got the wrong idea of what is all needed to be able to run the RAB locally, but I thought that starting the OC4J instance would be sufficient to get started.
In the Installation and Configuration Guide the following is mentioned:
2.7 Step 6. Configure the Web Browser for Design and Runtime Audit Browsers
2.7.1 Add "LOCALHOST" to Your Web Browser Proxy Server Bypass List
2.7.2 Configure the Cache Management in Your Web Browser
2.7.3 Configure Warehouse Builder with a Net Service Name
As said before:
@2.7.1, we do not use a proxy (according to Internet Explorer settings) therefore I can't add 'localhost' to the bypass-list, but then again I think that it does not need to be, since there is nothing to be bypassed in the first place.
2.7.2 has been implemented.
@2.7.3, I added the net service name manually to TNSNAMES.ORA (since I also needed that to be able to get on to the database using TOAD and SQL*Plus).
We do not have 9iAS integration for RAB, nor do we have OEM integration.
Are there other things that need to be implemented? Mentioned so far have been HTTP-server and RTP services, but paragraph 2.7 does not mention anything about this. Maybe there are certain services that need to be running on the server (like HTTP and/or RTP), even though I would like to run the RAB locally?
Where does one actually need RTP for?
Thanks in advance.
Cheers, Patrick

Access denied to client computers

ARD 3.x
client machines have all been updated.
I had ARD 3 up and running smoothly but after changing the administrator password on the client machines I now have "accessed denied" showing on the computer list in ARD on my administrator machine.
If I change the administrator password back to the original one on the client machines ARD once again recognizes the client and works fine.
I'm missing something in the setup I'm sure but don't know what it is.

Good question. Yes, I did clear the list and then created a new Scanner then added the computers from that. No help.
What I finally poked around and found was that double-clicking on the computers in the list opened a window that allowed me to edit the password of the client machine. This took care of the problem. I was not able to change a group of computers so had to change all 27 one at a time.
Thanks Dave.

Access denied against DP for untrusted clients

Hi,
I have an SCCM 2012 R2 environment.
There are a few clients in an untrusted domain behind a firewall.
DP's and MP's are not configured for SSL. The following ports have been opened to the MP and DP's.
TCP 80
TCP 10123
TCP 2710
DNS or AD for the untrusted servers have not been extended with SCCM data.
Clients were installed on the untrusted servers using the SMSMP switch.
After installation the clients appeared in SCCM and were manually approved.
Boundaries exist for the lcients associated with the correct boundary group for site system assignment
Since installation the clients have successfully discovered MP's, DP's and performed inventories
There is however a problem with software deployment.
The clients try to download content as expected from the correct DP's however the log files show 80070005 therefore access denied.
There is anetwork access account configured for the site which definatley works because we have no OSD issues.
Am I right in thinking that these untrusted clients should revert to using the network access account when they get an access denied ?
If so what may prevent them from doing this
Thanks,
Jim

Hi Jason,
The clients are running server 2012 R2
Here are some log snippets with server names and site codes editied.
CAS.LOG
Location update from CTM for content xxx00043.2 and request {D6BA950D-1DB5-4FDE-8B61-C73A3D4A96A6} ContentAccess 11/01/2015 02:06:57 5392 (0x1510)
Download location found 0 - http://server1/SMS_DP_SMSPKG$/xxx00043 ContentAccess 11/01/2015 02:06:57 5392 (0x1510)
Download location found 1 - http://server2/SMS_DP_SMSPKG$/xxx00043 ContentAccess 11/01/2015 02:06:57 5392 (0x1510)
Download location found 2 - http://server3/SMS_DP_SMSPKG$/xxx00043 ContentAccess 11/01/2015 02:06:57 5392 (0x1510)
Download request only, ignoring location update ContentAccess 11/01/2015 02:06:57 5392 (0x1510)
Download started for content xxx00043.2 ContentAccess 11/01/2015 02:06:57 3872 (0x0F20)
Download failed for content xxx00043.2 under context System, error 0x80070005 ContentAccess 11/01/2015 02:06:58 5392 (0x1510)
Download failed for download request {D6BA950D-1DB5-4FDE-8B61-C73A3D4A96A6} ContentAccess 11/01/2015 02:06:58 5392 (0x1510)
Raising event:
[SMS_CodePage(850), SMS_LocaleID(2057)]
instance of SoftDistDownloadFailedEvent
ClientID = "GUID:820D9280-13A5-4295-9250-CF675073FF35";
DateTime = "20150111020658.235000+000";
MachineName = "client";
PackageId = "xxx00043";
PackageName = "xxx00043";
PackageVersion = "2";
ProcessID = 4188;
SiteCode = "S01";
ThreadID = 5392;
ContentAccess 11/01/2015 02:06:58 5392 (0x1510)
Successfully raised Download Failed event. ContentAccess 11/01/2015 02:06:58 5392 (0x1510)
ContentTransferManager.log
Starting CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571}. ContentTransferManager 11/01/2015 06:06:58 6528 (0x1980)
Created CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} for user S-1-5-18 ContentTransferManager 11/01/2015 06:06:58 6528 (0x1980)
Created and Sent Location Request '{0D80A8A2-2E69-47E6-9E22-419F6612DB85}' for package xxx00043 ContentTransferManager 11/01/2015 06:06:58 4672 (0x1240)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA ContentTransferManager 11/01/2015 06:06:58 4672 (0x1240)
Queued location request '{0D80A8A2-2E69-47E6-9E22-419F6612DB85}' for CTM job '{369AA46C-CF9F-4DD2-AE50-45874D28F571}'. ContentTransferManager 11/01/2015 06:06:58 4672 (0x1240)
Persisted locations for CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571}:
(LOCAL) http://server1/SMS_DP_SMSPKG$/xxx00043
(LOCAL) http://server2/SMS_DP_SMSPKG$/xxx00043
(LOCAL) http://server3/SMS_DP_SMSPKG$/xxx00043 ContentTransferManager 11/01/2015 06:06:58 6132 (0x17F4)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} (corresponding DTS job {4E1EF8CA-6985-4D42-99F0-3107B7589CA6}) started download from 'http://server1/SMS_DP_SMSPKG$/xxx00043' for full content download. ContentTransferManager 11/01/2015 06:06:58 6132
(0x17F4)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA ContentTransferManager 11/01/2015 06:06:59 3204 (0x0C84)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} switched to location 'http://server2/SMS_DP_SMSPKG$/xxx00043' ContentTransferManager 11/01/2015 06:06:59 3204 (0x0C84)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA ContentTransferManager 11/01/2015 06:06:59 6528 (0x1980)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} switched to location 'http://server3/SMS_DP_SMSPKG$/xxx00043' ContentTransferManager 11/01/2015 06:06:59 4672 (0x1240)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA ContentTransferManager 11/01/2015 06:06:59 304 (0x0130)
CTM job {369AA46C-CF9F-4DD2-AE50-45874D28F571} encountered error 0x80070005 during download ('Error processing manifest.')- The error maps to denied access. ContentTransferManager 11/01/2015 06:06:59 6528 (0x1980)
Let me know if any other specific log files will give more clues
Thanks,
Jim

Access denied error in a popup for most of the clients.

Hi all,
 i implemented the search help in a popup. its working well in some clients and in some clients it's not .
 here clients means not different browsers different workstations.
 the problem is .
 from the popup i am setting the opener field value.
the code is as follows.
 parent.document.getElementById("XXXXX").value ="XY";
 here i am getting the Access denied error on some clients and some clients the value is getting set.
 how could i overcome this problem,
Regards,
shiva.

Hi
 i tried how was it in the thread mentioned in the above reply, but not getting it .
but what i noticed is
 if my server domain is like ABC.COM it's working .
 if the server domain is like ABC.XXX.COM then it's not working
Any suggestions will be appreciated.
Regards
shiva.

Access denied when trying to connect client cd rom to vm

Hey guys,
One of my users is using the client to build a vm, tries to connect their cdrom using the client and gets access denied. What is the minimum permissions needed to be able to connect a remote physical cd rom to a vm? VC 2.5, esx 3.0, I believe they currently have virtual machine power user role on the object.
Respectfully,
Matthew
Kaizen!

Hey Guys,
I think there is something else going on here Probably not permissions or roles, maybe a service needs restarting? The user gets the following error:
Exception of type Vmomi.fault.no permission' was thrown
Ideas?
Respectfully,
Matthew
Kaizen!

Error 5: Access Denied can not start the DHCP Client service on Local Computer.

Ran into this error problem with both the DHCP and BFE service. Neither will start and both give me the same error code 5 access denied.
Found this little nugget below:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
Right click and choose Permissions. There should be the following:
System = Full Control
Local Service = Read
Network Service = Read
Local Admin = Full Control
Local Users = Read
Dhcp = Read with special permissions
No problem adding the missing Local Service and Network Service. How does one add Dhcp? Is there a way to create this because under permissions there is no way to add this or search it up. Is there a NetSH reset command that will add this in for me?
The Netlogon service was not running and to get the Netlogon service going I ran NetSH int ip reset and it started to work. The other services were not running either and I was hoping they would after resetting IP
Any ideas on to fix this problem? Also, the user turned off the laptop when it was doing updates. Still I do not think it would have created this headache.
TIA
Spammer Hammer

Hi,
Was your issue resolved?
If no, please reply and tell us the current situation in order to provide further help.
Karen Hu
TechNet Community Support

Clients can't save to the server, access denied no permissions, how to give permission?

I set up my school lab with an xserv 10.6.8. Everything was fine in terms of the users logging in to their respective groups. However, they weren't able to save anything to the server , they had access denied errors or you don't have permissions, even the keychain app was giving the users an error that said it couldn't save to reset to default values. Anyhow, I tried using the Server Admin application to propagate permissions, selected the hard drives and propagated permissions by clicking all the selections in the dialog. Now, the server wont start and only shows the grey Apple and the spinning gear, please help, I am so frustrated, I was so close to have this server running. All I want is to be able to have the students in my school log in to the server from the computer lab and save their work on the server. Simple service, I have running AFP, OD, DNS and SMB. I don't knowe if SMB is neccesary either.

Yes, I created the users using WGM home tab and then clicking on the create home now and then save. No, I didn't use terminal with the command, maybe that's one of the things I needed to do so that the problems with permissions wouldn't show. I used the secondary HD to create the sharepoint folder "Users" and that's the folder I used when creating the home directory for that specific part of the setup. My setup is pretty simple, I just want a Groups folder(sharepoint) where I can store the diffrent grades or classes that come to my lab and I have a "Users" folder(sharepoint) where the kids can use to login and save their work. Later, I may add another folder to place videos so that the folder can mount when they log in and all they have to do is go to the folder and double click on the video. Can you ellaborate more on how to use the command with terminal? Would the "a" be the name of the sharepoint? I created the folders using Server Admin, I believe that clicking on the sharepoint button, there is another button that says "new", would that be the correct way to do it? When I get back to school tomorrw I will post more specifics on the way that I setup the server and maybe it will give you a better picture of how I did it.
I really appreciate your assistance, I am trying to use the limited knowledge I have to setup this lab which will enable me to do a lot of things with the kids and make their lives easier, so they don't have to bring flash drives to save their work. Thanks again for your time!

Installation of Client Access role fails on Windows Server 2008 R2 (Execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP")

Hello
I am trying to install Exchange Server 2010 beta 1 onto a Windows Server 2008 R2 (build 7000) machine which has also been set up as a domain controller.
However when attempting to install the Client Access role, setup fails with the error below.
Does anyone know of a way to get around this please?
I have already searched for this error and not found any similar threads.
Also every time I press the code button on this forum it crashes the browser and I keep losing the message! (IE8 from within Server R2). Also the message box is very small, will not expand and keeps jumping to the top.
Thanks
Robin
[code]
Summary: 4 item(s). 1 succeeded, 1 failed.
Elapsed time: 00:00:01
Preparing Setup
Completed
Elapsed Time: 00:00:00
Client Access Role
Failed
Error:
The execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP" -DomainController $RoleDomainController", generated the following error: "Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.".
Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.
Access is denied.
Elapsed Time: 00:00:01
Mailbox Role
Cancelled
Finalizing Setup
Cancelled
[/code]
Robin Wilson

Hello
Thanks for all the replies.
I have since wiped the system and installed everything again and it all worked this time so not sure what was wrong last time. I did try to uninstall all Exchange components and then uninstall IIS and Application server, reboot and re-install but I received the same error still when it came to installing the client access role.
Walter: I just attempted the standard installation which should have used the default self-signed certificate. Everything was a fresh install done at the same time on a freshly formatted PC.
For info last time when it failed to work:
- Installed Windows Server 2008 R2
- Installed Domain Controller role using dcpromo. I set the forest and domain as Windows Server 2008 R2
- Added a forest trust between main domain and test Exchange domain (set up as ex2010.local)
- Installed IIS and Application Server role
- Installed Hyper-v role
- Installed Desktop Experience feature
- Installed Exchange and recieved the error
When it worked I set up the forest and domain in Windows Server 2008 mode (i.e. not R2), installed Exchange first and then set up the forest trust and then Hyper-v. It did say it failed to configure dns which was probably because it started trying to do automatic updates half way through the dcpromo! DNS seems to work ok though.
I did notice this time that Hyper-v gave a warning about the virtual network adapter not being set up correctly and the local network did not work correctly although I could access the internet. Not sure if this could have been related to the cause of the problem previously. For now I have disabled the virtual network until I get time to try and get it working and so the mail will work in the meantime.
I also noticed that Hyper-v added an extra 443 ssl binding to the default website so as it had 2 bindings on port 443 it refused to start. After deleting one it worked.
I decided to install Exchange onto a domain controller as it is only a test and I wouldn't do it in a live environment. I am also short of test machines! It didn't give me any warnings about this actually, I think previous versions warn you that it is not recommended.
Andreas and Chinthaka: I did not know about the requirement to run the domain at 2003 mode. The main domain is running in 2008 mode with Exchange 2007 so I assume this is just a temporary beta related requirement. It does seem to be working (second attempt) so far in a 2008 mode domain although I haven't had a chance to fully test it yet.
Thanks
Robin
P.S. Sorry it's taken me a while to reply!
Robin Wilson

Client Access denied

Similar Messages

Maybe you are looking for