Domain access issue with limited user access

Hi all,
I have to deploy a flex site (without the flex data services,
unless essential) that acesses xml data from servlets that arent
neccessarily under the same domain, and some will be physically
located on different servers.
I am using the cross-domain policy file, and this works fine
provided the server is logged in with Administrative privlidges.
However if it is logged in under a domain (with some limited
access) I can no longer access the required data. This data is
still available if I access it direct by typing the location into
the browser address bar. So there is definately something stopping
me from accessing the data within flex.
If anyone has encountered similar problems and come up with
solutions (which does not involve forwarding data using additional
servlets) then your tips and advice would be much appreciated.
Thanks!

It was issue due to some configurations in 'External Facing Extension Service' inside configuraton-content management-global service.

Similar Messages

Satellite M40-307: Accessibility utility doesn't work with limited user account

Hello everybody,
I have got a Satellite M40-307 (PSM44E), and I have got a problem with the "accessibility" utility, that displays an icon in the Windows XP notification bar, to let the user know whether the "Fn" key is active or not.
That this utility would not work for the administrator would not worry me a lot, as the administrator is supposed to know what he does. But the limited user does not have access to it, this more bothering.
In an administrator session, this utility works pretty fine. But in a limited user session, if I try to launch it by [runas /user:admin "C:\Program Files\TOSHIBA\Windows Utilities\TACSPROP.exe"],
I am answered that the file TCMSVR.DLL cannot be found. If I launch it normally, a message tells me that this utility requires I am connected as an administrator.
So, what can I do to use this utility normally, i.e. in a limited user session*?

Hello Markus,
Did you read ?
I executed TACSPROP with the admin rights, and it does not run.
So, to follow you, I had a look, on TACSPROP.EXE and TACSPROP.DLL, the users had "read/execute" and "read" rights. I provided "full rights", and it solved nothing.
Obviously another program must be launched before, that is by default launched only by the administrator, and I am searching what program it is.
Thank you.

Issues with Remote Users, VPN Connections, etc.

Hi there,
A few weeks ago I was asked to enable EWS and Outlook Anywhere which had not been previously enabled. I did so, but this seemed to cause issues (they may not have been implemented correctly) for users in remote offices; they would be prompted
for credentials to log into Outlook 2010, but no issues with OWA. I disabled Outlook Anywhere as it turned out we didn't need it, and this has caused VPN users to now not be able to open Outlook.
At this point I'm not sure what the issue is. I've tried implementing a few fixes from Googling around but haven't been able to determine the root cause and actually caused more issues this morning, where many local users were being prompted for credentials,
which was alleviated by creating new mail profiles for them.
We're using Exchange 2010 and Outlook 2010, with OWA being served by Forefront TMG.
I've seen in some other cases where results of the following queries were asked for, so here they are:
Get-OutlookProvider | fl
RunspaceId : a71467aa-c7ca-4a71-a349-41c860cb6db9
CertPrincipalName :
Server :
TTL : 1
OutlookProviderFlags : None
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : EXCH
DistinguishedName : CN=EXCH,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Business Name,CN=Microsoft Exchan
ge,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : EXCH
Guid : 0e397d7f-fecc-451f-8774-3b4225cce8c9
ObjectCategory : sunrype.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass : {top, msExchAutoDiscoverConfig}
WhenChanged : 10/10/2013 2:56:34 PM
WhenCreated : 9/28/2011 2:42:58 PM
WhenChangedUTC : 10/10/2013 9:56:34 PM
WhenCreatedUTC : 9/28/2011 9:42:58 PM
OrganizationId :
OriginatingServer : server.domain.com
IsValid : True
RunspaceId : a71467aa-c7ca-4a71-a349-41c860cb6db9
CertPrincipalName : msstd:*.domain.com
Server :
TTL : 1
OutlookProviderFlags : None
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : EXPR
DistinguishedName : CN=EXPR,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Business Name,CN=Microsoft Exchan
ge,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : EXPR
Guid : 3bed6181-e70e-4c93-ac2d-bc57605cbeae
ObjectCategory : domain.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass : {top, msExchAutoDiscoverConfig}
WhenChanged : 8/20/2014 9:32:10 PM
WhenCreated : 8/20/2014 3:21:11 PM
WhenChangedUTC : 8/21/2014 4:32:10 AM
WhenCreatedUTC : 8/20/2014 10:21:11 PM
OrganizationId :
OriginatingServer : server.domain.com
IsValid : True
RunspaceId : a71467aa-c7ca-4a71-a349-41c860cb6db9
CertPrincipalName :
Server :
TTL : 1
OutlookProviderFlags : None
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : WEB
DistinguishedName : CN=WEB,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Business Name,CN=Microsoft Exchang
e,CN=Services,CN=Configuration,DC=domain,DC=com
Identity : WEB
Guid : 659f40b8-815e-43ac-95ed-49bed9766ebc
ObjectCategory : domain.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass : {top, msExchAutoDiscoverConfig}
WhenChanged : 10/10/2013 2:56:34 PM
WhenCreated : 9/28/2011 2:42:58 PM
WhenChangedUTC : 10/10/2013 9:56:34 PM
WhenCreatedUTC : 9/28/2011 9:42:58 PM
OrganizationId :
OriginatingServer : server.domain.com
IsValid : True
Get-OutlookAnywhere | fl
No output.
I've also run the Microsoft Connectivity Analyzer locally, which appears to fixate on Outlook Anywhere connectivity and fails because OA isn't enabled. Specifically it reports that "The EXPR Provider section is missing in the Autodiscover response.
RPC over HTTP may not be enabled."

Hi Steve,
According to the description, my understanding as below:
1. To make users use Outlook externally, you want to enable Outlook Anywhere. However cannot connect to Exchange server via Outlook, it prompts password again and again.
2. Because Outlook Anywhere doesn't work, so you disable it and enable VPN. But it doesn't work neither.
Please correct me if there is any misunderstanding.
Based on the result of running Microsoft Connectivity Analyzer, it means that the Outlook Anywhere is disabled. However it isn't an error.
I suggest enable Outlook Anywhere on Exchange server 2010 and configure Outlook Anywhere on Outlook.
Find an article related Configuration on Outlook for your reference:
Configure Outlook Anywhere in Outlook 2013
http://technet.microsoft.com/en-us/library/cc179036(v=office.15).aspx
Thanks
Mavis
Mavis Huang
TechNet Community Support

Issue with AD users restricted to certain machines.

Hi all,
So, we seem to have a bit of an issue with user accounts that are restricted to logging in to certain machines only. While the user is permitted to log in to the machine (Windows lets them), our ISE server denies the login and the trace looks like this:
24430 Authenticating user against Active Directory
24441 Account not permitted to log on using the current workstation
22057 The advanced option that is configured for a failed authentication request is used
22061 The 'Reject' advanced option is configured in case of a failed authentication request
11823 EAP-MSCHAP authentication attempt failed
12305 Prepared EAP-Request with another PEAP challenge
11006 Returned RADIUS Access-Challenge
5411 No response received during 120 seconds on last EAP message sent to the client
Has anyone seen this?
Version 1.1.1.268.
Thanks!
-Ryan

Well, as soon as I posted this, the idea hit me.
We added the two ISE servers' machine accounts in AD to the machines that this user is permitted to log in to, and it works like a charm now. Apparently when a user logs in, ISE passes through a generic machine name (of itself) to AD, and it wasn't matching the list of allowed machines.

Adobe Reader will not run with limited user account.

I am trying to upgrade our Citrix Server Farm, from Reader 8.0 to 9.1, and am running into some issues. First I uninstalled Adobe Reader 8.0 and then installed 9.1 from Adobe's site. Aftter the install completed I was able to run 9.1 without any problems. However today, when some limited users started working, they started getting runtime errors. This only happens with non-administrator user accounts.
the error messages are attached.
After clicking OK, Adobe Reader terminates.
Any insight would be greatly appreciated.

I do believe that I solved my own problem... almost.
http://kb2.adobe.com/cps/404/kb404597.html
"The affected user has a redirected Application Data folder and as a result the network path containing the Application Data uses a UNC path that begins with \\. This UNC path causes Acrobat 9.0 or Adobe Reader 9.0 to incorrectly parse the Application Data path and give the error message."
The article tells me to upgrade to Adobe Reader 9.1... WTF!!! 9.1 is when this problem started, 8.0 worked great! I would stay with 8.0 if I could, but some of our programs require 9.1.

Logitech Keyboard Issues with Fast User Switching

I'm running OSX 10.4 on an 800 MHz iMac, and using a Logitech Cordless Navigator keyboard. The keyboard's main feature (for me) is the ability to have the function keys (F1-F12) automatically open applications and folders and such. When I have multiple accounts running though, this feature seems to be tied to whichever one I first logged into. If I switch accounts and try to use one of the keyboard shortcuts nothing happens where I am, but when I switch back to the original account I find that the keyboard has opened the program there. The keyboard types fine in the new account, and I can even change the preferences so the function keys do different things in the different accounts, but the extra functionality seems to be only available for whichever account logs in first.
I realize this may just be a Logitech bug, but any ideas how to fix this? (Also even though I'm the only one using my computer this seems like a mild security issue, if theoretically another user could activate programs on my account without the password.)
800 MHz iMac G4 Mac OS X (10.4.3) 768 MB RAM

Logitech support is frustrating:
Dear tajmahall14,
Thank you for your recent inquiry about your Keyboards.
I understand you are having issues with the settings for the function keys becoming non-functional when fast switching from one user account to another.
Depending on the system configuration, the Fast User Switching may or may not work. Unfortunately this is not an issue I can address. You may need to contact Apple to see if they have a possible solution to your problem.

Firefox issues with multiple users on a single computer.

I have an issue with Firefox and multiple users on my computer. There are two users setup and I'm running Win7 Ultimate x64. When the other user logs in, my settings in Firefox get screwed up somehow. Even if that user does not open Firefox.
Examples of problems this causes:
Gmail - Cannot load the standard interface, however it will load the HTML only interface.
Facebook - Cannot post anything.
vBulletin Forums - Some forums will no longer normally load - a text-only version loads as if I was browsing from a mobile device.
There may be other issues, but these are the main ones. If I clear my cookies, cache and browsing and download history, then restart Firefox, everything works again.
This seems to happen most often when the other user logs in, and uses Firefox to log on to their Gmail account.
How can I fix this?

Create a new profile as a test to check if your current profile is causing the problems.<br />
See [[Basic Troubleshooting#Make_a_new_profile|Basic Troubleshooting: Make a new profile]]
There may be extensions and plugins installed by default in a new profile, so check that in "Tools > Add-ons > Extensions & Plugins"
If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files)
See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

HP Pavilion 15t Issues with Limited Internet Connectivity on Windows 8

So, I just received my new HP Pavilion 15t-e000 CTO Notebook PC last week, it runs Windows 8, & it's a 64 bit.
The only problem I've had is staying connected to my wireless Internet. The connection will cut out at random intervals saying "Limited" instead of "Connected". I constantly have to disconnect and connect to my wireless Internet. It is especially frustrating when I am trying to download something that takes longer than a couple of minutes because the Internet connection cuts out and I have to start the process all over again.
I have tried pretty much every "fix" people have posted that have worked for some people. No such luck for me. Sometimes it seems like it will stay connected and then I try to connect to a web page or download something and it goes out again.
- Turning off the "Allow computer to turn off this device to save power" under Power Management in the Properties section of my Wireless connection.... DID NOT WORK
- Using the command prompt to reset the network adapter ... DID NOT WORK
- Running the Network and Internet and whatever else Troubleshooters ... DID NOT WORK ***Update: If I run the network connection test via the HP Help/Support center on my desktop while the connection says Limited, I receive the notice that the "default gateway was not available" and the router was reset and issue fixed, etc. BUT, if I run the test while the wireless says Connected, the test always says there is no problem. And even though the test "fixed" the issue, it didn't because the Internet always cuts out again.
- Windows Updates has installed new updates a few times ... DID NOT WORK
- Forgetting the Wireless Network and Setting it Up as a new one again ... DID NOT WORK
- Using my computer right next to my wireless router ... DID NOT WORK
The wireless router being used is: Cisco Linksys Wireless-G 2.4GHz Broadband Router and our network is WPA with a security code. We also have a SpeedStream DSL Internet thing (sorry, I don't know what it is called). The compatibility center says this router is compatible with Windows 8 by the way. Other computers running Windows 7 and Windows Vista, iPhones, and iPads all work fine.
My laptop uses Intel(R) Centrino(R) Wireless-N 2230 and the light is on and it always says "device is working properly" in Properties.
Any help or suggestions would be greatly appreciated because I am at my wits end.
Thanks
This question was solved.
View Solution.

So, it seems my issue with the Limited Internet connection has been resolved. I didn't use my computer for two days and this afternoon when I turned it on I was still having issues. However, I went into the HP Support Assistant and it popped up that I had some updates to download and install, so I let it do its thing. It took a while because the Internet kept cutting out, but once the update for the Intel Wireless finally installed, my connection has STAYED CONNECTED. Finally!
I don't know why when I went into the wireless properties it said "device is working properly" and when I tried to Update the driver it said "your driver is the latest version" or whatever.
I suggest you go to the HP Support Assistant and check for updates in the "Updates and Tune-Ups" section. It was kind of random, but knock on wood my Wireless connection issue looks to be gone.
Hope this helps
P.S.
Here's a screen shot of what the HP Support Assistant (it is the one with the big question mark logo) main screen looks like :

Issue with "unknown user type 6" on Coherence 3.5.2

Having an issue with a cluster which is running using an internally developed cluster starter tool. This tool, and the associated cluster, all use POF, and upon attempting to connect a non-storing member to the cluster from java, the following exception is raised...
2011-07-11 15:54:58.338/2.469 Oracle Coherence GE 3.5.2/463p2 <Error> (thread=Cluster, member=n/a): This cluster node is
configured to use serializer com.tangosol.io.pof.ConfigurablePofContext {location=application-pof-config.xml}, which ap
pears to be different from the serializer used by Member(Id=1, Timestamp=2011-07-11 15:34:30.779, Address=10.74.82.193:8
088, MachineId=11188, Location=site:INTRANET.BARCAPINT.COM,machine:ldnpsm020006423,process:80976,member:ldnpsm020006423:
cacheserver:1).
java.io.StreamCorruptedException: unknown user type: 6
at com.tangosol.io.pof.PofBufferReader.readAsObject(PofBufferReader.java:3289)
at com.tangosol.io.pof.PofBufferReader.readObject(PofBufferReader.java:2600)
at com.tangosol.io.pof.ConfigurablePofContext.deserialize(ConfigurablePofContext.java:348)
at com.tangosol.coherence.component.util.daemon.queueProcessor.Service.readObject(Service.CDB:4)
at com.tangosol.coherence.component.util.daemon.queueProcessor.service.Grid$ServiceConfigMap.readObject(Grid.CDB
:1)
at com.tangosol.coherence.component.util.daemon.queueProcessor.service.Grid$MemberConfigResponse.read(Grid.CDB:1
3)
at com.tangosol.coherence.component.util.daemon.queueProcessor.service.Grid.onNotify(Grid.CDB:123)
at com.tangosol.coherence.component.util.daemon.queueProcessor.service.grid.ClusterService.onNotify(ClusterServi
ce.CDB:3)
at com.tangosol.coherence.component.util.Daemon.run(Daemon.CDB:42)
at java.lang.Thread.run(Thread.java:619)
There is no serialiser configured in the cache config, instead we just set tangosol.pof.enabled=true, and set the pof config file to what is seen above. The thing which is very confusing about this error is that unlike other clients which we connect, and in fact the servers they connect to, this client never attempts to load the cache configuration file. The point at which this should happen, prior to pof loading, shows:
2011-07-11 15:54:57.260/1.391 Oracle Coherence GE 3.5.2/463p2 <Info> (thread=Main Thread, member=n/a): Loaded cache conf
iguration from "jar:file:/C:/Program%20Files/Oracle/coherence/3.5.2b463P2/lib/coherence.jar!/reports/report-group.xml"
I have tried every combination of classpath entries I can think of, and no matter what, it never shows an attempt to load the application-cache-config.xml supplied in the startup. Does anyone have any experience with something like this?

I guess your non-storing JAVA code does not specify -Dtangosol.pof.enabled=true and the -Dtangosol.pof.config =<POF file location> on joining the cluster. Post the startup java command and the complete logs.
If application-cache-config is not loaded then coherence-cache-config.xml should be loaded by default and set -Dtangosol.coherence.cacheconfig=<application-cache-config>
Cheers,
NJ

Fail to connect on Citrix with Limited User but succeeds with Admin user

On one of our customer's installations which is on a Citrix server, the users cannot connect to the database when they are Limited users. But if the same user is promoted to Administrator it can connect.
The Application uses ODP.Net to connect. Other tools in the installation that use ODBC works for limited users.
The OracleConnection.Open method throws an exception without an error message.
The stack trace is:
at Oracle.DataAccess.Client.OracleException.HandleErrorHelper(Int32 errCode, OracleConnection conn, IntPtr opsErrCtx, OpoSqlValCtx* pOpoSqlValCtx, Object src, String procedure)
at Oracle.DataAccess.Client.OracleException.HandleError(Int32 errCode, OracleConnection conn, IntPtr opsErrCtx, Object src)
at Oracle.DataAccess.Client.OracleConnection.Open()
On the server we have installed Oracle Client 10.2.0.1 where the .Net provider also is installed (otherwise it would not work for the admin user either).
Anyone who has a clue on why this strange behavior happens?
/ Nils

That was a known issue in 10201, and should be resolved by patching the client up to 10204. You do that by applying the database patch to the client, and you can get the 10204 database patch on Metalink.
Cheers,
Greg

Email issues with PC users

I am a web project manager and email daily with both PC & Apple users. I use Apple Mail as my default program. I have had countless issues with the formatting of my email appearing differently to PC users on Outlook when sending or forwarding Rich Text emails. I try to stick with plain text but sometimes Rich Text is required.
My current issue is orphan "B" characters are appearing through out the body of my email text when sending or forwarding Rich Text emails to PC users. This is NOT visible at all in my Apple mail program. This does not occur in plain text. I recently switched to sending in UTF-8 format - could this be the issue and if so what is the best solution.
I am interested in feedback on the best way to efficiently communicate with PC users using mail and what the appropriate configurations to do so would be. I really don't want to have to switch from Apple mail to use another program but when dealing with co-workers and clients who are not tolerant of these errors I must find a solution.
Thanks in advance to anyone that can help!
Powerbook G4 (1.67 GHz PowerPC) Mac OS X (10.4.8)

current issue is orphan "B" characters are appearing
through out the body of my email text when sending
or forwarding Rich Text emails to PC users. This is
NOT visible at all in my Apple mail program. This
does not occur in plain text. I recently switched to
sending in UTF-8 format - could this be the issue
and if so what is the best solution.
See this note and see if Fix C helps:
http://homepage.mac.com/thgewecke/woutlook.html

Issue with create user and issue with Java Development tab

I have two issues with EP,
1. When i login with Super Admin user, i am unable to Create any user from User Admin tab. Do i have to change the settings of the Super Admin? or is there any criteria for creating the user?
2. How to assign any user the Java Development tab. Though i login with a super admin user i am unable to see the Java Development role and when tried to assign the role, there were no searches for that Java....

Hi Adi,
by default the super administrater has got all permissions. Thus you should be able to create portal users when using a user assigned to the portal group Administrators.
In order to help you with your first question we need more information. Please describe the malfunction in detail. Have a look into the log files and post related error messages.
Regarding your second question: You will find the java development role in PCD
pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.pct.pdk/Roles/com.sap.pct.pdk.JavaDeveloper.
If not, then you haven't installed the PDK business package in your portal.
Go to service.sap.com, choose downloads and search the package (PDK should do it). Download the package, and deploy on your portal using SDM.
Best regards,
Martin

Toshiba Power Saver doesn't work with limited user account

Hello,
this same question was posted in 2006 - not by me - with no successful answer. I try again.
If you create a user with restrictions account (member of the local USERS group) in XP, then he cannot manage either the embedded Windows power options, and the Toshiba Power Saving tool.
I managed, working on file and registry permissions, to have the Windows power options working. But I still can't launch the Toshiba Power Saving tool, it always pop-ups the "you don't have rights" box.
Is there really nothing I can do to work around this?
thanks

I have the exact same problem on my Tecra 9100 (PT910E) just accquired on Ebay with minimum XP Pro SP2 installation.
Akuma I tried to your advice with my Power saver version 5.04.00 (file 20071126153401) without success.
The only way I could find to run Power saver is directly from the icon in the Admin account, or through the console. I could not then find "setup options" only "Details" of the various power schemes. No "Allow Limited User to change settings" box/button anywhere.
Can you clarify further ?
thanks
Ken

ITunes with Limited User

I'm trying to set up iTunes to work with a limited user account on XP. Most things seem to work ok, but it is showing the click-through EULA every time I run iTunes.
If I change the user to an Administrator, the EULA doesn't show up after one run, but if I change the user back to Limited, it starts showing up again.
Anyone have any ideas? I'd prefer not to have it run in an Administrator account on this particular machine.
PC Windows XP Pro

Turn on iTunes sharing. Enter "sharing" in iTunes' Help menu for instructions.

Finder Wants Permission Every time File is moved on Server (issue with multiple users)

The Situation: I have a team of seven coworkers that uses a file structure on a server to move job folders from the 'active jobs' folder to "coworker x's" folder and then to a "waiting" folder once the job has been completed. Pretty much just moving folders into different folders. Seems pretty simple.
The Problem: At times, some folders will not move from one folder to another, and a message pops up asking "Finder wants to make changes. Type your password to allow this" and then it shows my computer's name and asks for a password. Now if typing in the password meant that the file would be moved, I would be fine with it, but when I type in my password in and accepts it, it does nothing! Like I said, there are seven of us that are using this system, and everyone has the same issue with the same folders, it is not like one person can move it and another cannot. To make it even harder to define where the issue is coming from: if you go back after a few minutes / hours, the folder will randomly be able to move with no issue. If you take the files out of the folder, you can move them, and when you move the now empty folder, it will gladly move into any folder, but when the files remain in the folder it asks for the password. And in some cases, folders that were just made and are empty have the same issue, which leads me to believe that this issue is not a result of the contents of the folder, but something else.
It is seemingly impossible to nail down the cause of our dilemma so I have come here in hopes of a great break through. The worst part is is that we are not doing anything that difficult, we are simply moving folders around. This is a windows based server, that might be important. Also, some of us are running Mavericks and others are still on Snow Leopard. Thank you for any information you might have! ( I have already tried the boot in recovery, resetpassword trick with no luck >_< )

If we're going to fix this, we will have to concentrate on one person to start with. Can that be you?
Some more information is required, only from you, your Mac and your windows user account on the server:
On the Windows server, are the 3 folders in question within the one shared folder?
What is the name of the Volume (share) that appears in Finder?
Are any of the folders being copied or moved to the local drive of the Mac?
On the windows server, what are the permissions that you have to:
The top-level shared folder
The 3 folders underneath the top-level shared folder
Do a Get Info of the Volume (share) in Finder and do a screen shot of both the area above Preview and the area below Preview (Preview itself is not required. Make sure all right-pointing arrows are expanded to down-pointing arrows so all info in each section can be seen.
(Did this discussion get re-assigned to the OS X Server Community? I've never been there, and I thought I found it in the OS X Mavericks community.) Are you actually running OS X Server on the Macs?
Message was edited by: SilverSkyRat: Additional Question

Domain access issue with limited user access

Similar Messages

Maybe you are looking for