File Share crawl - NetApp Servers - Permission Issues

hello,
There are many file share contents hosted on NetApp, which are being crawled by the SharePoint 2013 Search engine in our organization.
The Search Crawl account is granted Read and Execute permissions on the Shared Drive. The crawler reads the content and the permissions correctly for the first time.
But once the permissions are modified, like adding new users or removing the existing users, and after triggering a full crawl, the changes w.r.t permissions are not being reflected on the sharepoint search results. However, the same scenario works fine
on a local windows shared drive.
I have learnt that the crawl account should be a part of the group policy Manage Audting and permissions, but also learnt that NetApp doesnt have such a thing. I hope am not the only one with such an issue. Please suggest.
Sreeharsha Alagani | MCTS Sharepoint 2010 |
Linkedin | Blog

Hi Sreeharsha,
As I understand, you are using NetApp for file share, and you would like to know about permission needed for crawl files.
Since the issue is related to third party product, there is no sufficient resource here. Please contact their support engineer. For your convenience:
https://communities.netapp.com/welcome
In addition, I found some articles might help:
https://communities.netapp.com/community/netapp-blogs/msenviro/blog/2013/10/30/best-practices-for-sharepoint-2013-search-service-application-for-smsp
https://kb.netapp.com/support/index?page=content&id=3013718&pmv=print&impressions=false
Regards,
Rebecca Tu
TechNet Community Support

Similar Messages

Setting File Share Permissions with GUI

Hello Team
I have an idea, i would like to create a GUI input box to help in setting user access to files shares on different servers.
the different text fields are as follows;
first field/box: searchable employee number (query AD to populate the name and surname field)
second field/box: User first name
third field/box: User surname
fourth field/box: Tick box for read only permission
fifth field/box: server name (once this is entered it querys the the target server and populates a small table somewhere and in sixth field allows you to select the file share name)
Sixth field/box: file share name on targeted server.
after this tabs at the bottom to run additional powershell commands to grant the user access to the file share locally or add the user to security groups on AD.
Regards Clarence

Hello Team
I have an idea, i would like to create a GUI input box to help in setting user access to files shares on different servers.
the different text fields are as follows;
first field/box: searchable employee number (query AD to populate the name and surname field)
second field/box: User first name
third field/box: User surname
fourth field/box: Tick box for read only permission
fifth field/box: server name (once this is entered it querys the the target server and populates a small table somewhere and in sixth field allows you to select the file share name)
Sixth field/box: file share name on targeted server.
after this tabs at the bottom to run additional powershell commands to grant the user access to the file share locally or add the user to security groups on AD.
Regards Clarence
I recommend hiring a consultant to build this application for you. You can also take the time to learn PowerShell and Windows Forms:
Here is a sample: http://1drv.ms/1HcZKFV
¯\_(ツ)_/¯

Searching windows file shares

I'm searching for a method or a program which allows me to search windows shared drives without having to connect to each shared drive individually.
Is this possible?
I know in Windows there are programs which can search the contents of all shared drives visible on your network. I was hoping that a similar program existed for the Mac.
Any help would be greatly appreciated.

Hi Dave,
They can open files as well? Or just see search results?
As with most search results they should be security trimmed by SharePoint automatically. The Crawler and Indexer should apply security permissions to the search entries, so that when the Query component provides the security context the results returned
are only the ones the user is able to (at minimum) read.
I have seen similar issues when the security account for search isn't set up quite right. If the search query service is using the search account or an admin account it may be returning all results that it has access to, rather than just the results the
user has access to. But if users are also able to get to the files as well, that might be something a bit strange with the file share instead?
RE permissions on the File Share, instead of the Microsoft Support article is there another account you can use to crawl the content instead? Sometimes I have created a separate File Share crawl account that has read access to the file share to be crawled/indexed.
I then add a Crawl Rule to add alternate credentials for crawling:
http://technet.microsoft.com/en-us/library/jj219686(v=office.15).aspx
Regards,
Gavin McKay

Weird file renaming permission issues

Hi!
We have a file rename permission issue. Here is the background:
We created a 2008 R2 DFS namespace called UserData with Read/write share permissions for Administrators, Everyone and System. UserData has been granted NTFS permissions as follows:
Everyone (This folder only): Traverse folder / Execute files, List folder / Read data, Read attributes, Create folders / Append data
CREATOR OWNER (Subfolders and files only): Full control
SYSTEM (This folder, subfolders and files): Full control
Domain Admins (This folder, subfolders and files)
We then enabled folder redirection for users My documents folder through GPO, setting the following:
Setting: Basic - Redirect everyones folder to the same location
Target folder: Create a folder for each user under the root path
\\domain\UserData
We also unchecked Grant the user exlusive rights to documents.
So, now to the really weird behaviour. We logged on to a Windows 7 (x64) client computer with a user who gets this GPO settings and that is not local administrator on the client. The folder is redirected as expected and we can create, delete and write to
files in anyway we want. We can also rename files if we choose an entirely different name and if we choose a longer or a shorter file name,
but we cannot rename the file to something with the same letters but different casing.
Examples of what will work:
"test" to "testing"
"test" to "cool"
"test" to "COOL"
Examples of what will NOT work:
"test" to "Test"
"test" to "tesT"
"test" to "TEST"
We the get this error: "File Access Denied. You need permission to perform this action. You require permission from S-1-5-21-220..... to make changes to this file."
Eventhough I'm pretty sure the share and NTFS permissions of the share are correctly set we have of course checked all the permissions when logged in and the user has Full NTFS control and Read/Write Share permissions.
We have encountered the same problem on a customer company as well, with a different domain with no links to our domain what so ever. I have also seen similar problems from other people when trying to find the answer on internet. Here is an example:
http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/35ced5bb-ab13-4e28-8c48-7c68ce0b775c
Anyone have any thoughts?
/Leyan

Resent discoveries:
If I log onto a Windows 7 (x86) Enterprise I face the same Issues.
If the same user logs on to one of the DFS servers holding the namespace and accesses his folder we experience
no problems renaming files.
Customer company states that all is working fine when user logs on to a Windows XP with SP3.
/Leyan

File Share Cluster Transfer Issues - Windows 2012 R2 - Two Nodes

Hi There,
I am having some issues in creating a simple file share on a 2 node cluster.
Each "File Server" is Windows 2012 R2 Standard.
Each server has 4 Nic Ports, 2 are configured as a Control Team and the other 2 as a Media Team. The media team is specifically for any storage and file sharing traffic, the control team is purely for access to the server via RDC.
The storage is from a NetApp SAN connected via SAS cables to the 2 "File Servers" and transfer speeds to and from that are good (1GB/s)
I have looked at different step-by-steps to get this working, they all are similar to: https://robertsmit.wordpress.com/2012/06/26/clustering-fileserver-on-windows-2012-step-by-step/
The share permissions are configured with Everyone with Full Control.
Once the file shares are all set up, I can browse the shares and any current folders and files.
I can download any files that exist on these shares...
The issue is when I try to put a file on the share from a "client" server (win 2008 r2) or even from the other node (connecting to the file share location as I would on another machine)
I just get the copying dialogue attached, which sits there for about 3-4 minutes and then just finishes with a Network Error.
This only occurs during an upload of a file to the share.
All servers can ping each other, there are no cluster event errors..
Can anyone help, I need to get this fixed ASAP.
If you need more info then please ask.
Thanks,
-Tim

Hi Tim,
Did you run the cluster validation before you create this cluster? Please disable any firewall or AV soft and install the recommended hotfixes and updates for Windows Server
2012 R2-based failover clusters update to narrow down the issue first.
Recommended hotfixes and updates for Windows Server 2012 R2-based failover clusters
http://support.microsoft.com/kb/2920151
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

I'm trying to share to Media Browser a 20 minute still slide show with music and text. I have tried several times to save at 1080 HD, but just before it's finished, a message box pops up saying "File already open with write permission." What's this mean?

I'm trying to finalize/share to Media Browser a 20 minute still slide show with music and text. I'd like to finalize it 1080 hd and have tried several times, but just before it's finished, a message box pops up saying it can't be done because "File already open with with write permission." What does this mean? All files are closed; this iMovie project is the only thing open. Does it mean one of the song files from iTunes? And should I just settle for saving it as a "large" file, which is what I'm trying right now?
Thanks,
Jamie

Hi
Error -49 opWrErr File already open with write permission
Trash the preference files while application is NOT Running.
from Karsten Schlüter
Some users notice on exporting larger projects from within iMovie that this operation is aborted with an 'error -49'
This issue occours only on MacOs machines using 10.7x
try switching-off the Local Mobile Backup
in Terminal copy/paste
sudo tmutil disablelocal
Re-launch Mac
See also this post
https://discussions.apple.com/thread/4434104?tstart=0
Yours Bengt W

Why am I getting the message "project could not be prepared because an error occurred. (File already open with write permission)" when trying to share my imovie to media browser?

Why am I getting the message "Project could not be prepared because an error occurred. (File already open with write permission.) when trying to
share to the media browser? I have done this many times before and never got this message. This is very frustrating. Can anyone help me?

Hi
Error -49 opWrErr File already open with write permission
Trash the preference files while application is NOT Running.
Easiest way to find out if this is the problem is by:
• Create a new User-Account
• Log out of Your old one and into this
• Re-try iMovie
If it now works OK - then 99.9% the problem is iMovie pref. file that needs to be trashed.
from Karsten Schlüter
Some users notice on exporting larger projects from within iMovie that this operation is aborted with an 'error -49'
This issue occurs only on MacOs machines using 10.7x
try switching-off the Local Mobile Backup
in Terminal copy/paste
sudo tmutil disablelocal
Re-launch Mac
Yours Bengt W

Find the relevant crawled properties when index file share

Hi,
I found some great reference regarding the sharepoint crawled properties
http://blogs.technet.com/b/anneste/archive/2008/11/20/mystery-solved-crawled-properties-in-sharepoint-part-1.aspx
However, i'm looking for that MSDN reference of system properties
http://msdn.microsoft.com/he-il/library/ff518152.aspx
now how i can get the system properties as a crawled properties in sharepoint? (in order to use later for refinement)?
i'm trying to search the GUID of the system property in the sharepoint crawled properties but it doesn't always shown there.
Actually i want to get the "tags" and "copyright" and "comments" properties which are available to edit in windows file share that i am indexing.
keren tsur

I assume it is there in properties it self.
http://technet.microsoft.com/en-us/library/jj219630%28v=office.15%29.aspx
DocComments
DMSDocAccessRight
owstaxidmetadataalltagsinfo
http://office.microsoft.com/en-in/sharepoint-server-help/about-document-profile-properties-in-the-backward-compatible-document-library-HA001160637.aspx
http://office.microsoft.com/en-in/sharepoint-server-help/view-and-edit-document-properties-and-profiles-in-the-backward-compatible-document-library-HA001160688.aspx?CTT=5&origin=HA001160637
If this helped you resolve your issue, please mark it Answered

An issue whereby Photoshop .PSD files disappear when saved to a network file share

It has been reported and reproduced by Support, an issue whereby Photoshop .PSD files disappear when they’re saved to a network file share.
Upon initial investigations Support have observed the following behaviour when saving a Photoshop file.
The document is initially saved as a new file on the file share.
The original .PSD file is deleted on the file share.
The newly created file is renamed to the same name as the original file.
An issue often arises when steps 1 and 2 complete however step 3 fails. When a file is reported by users as having disappeared, the new file created in step 1 can be renamed from .00_ to the original *.PSD file name on the server as the *.00_ files are normally hidden by the desktop operating system. This allows people to see and open the file from both PC’s and MAC’s using AFP and SMB protocols.
A related issue often reported by users is that they receive an error message “Could not save as” when trying to save a .PSD file. Troubleshooting the issue confirms that the user is able to save the file if they perform a “Save As” operation in Photoshop.
From the reported problems and observations there is clearly an issue with how Photoshop performs a file save operation further exacerbated by the fact the process doesn’t fail safely.

Sounds like you're hitting one of the known MacOS filesystem bugs - worst when working with SMB volumes.
Apple knows about this, and we are pursuing workarounds to the OS bugs.
Yeah, if you value your files, don't save directly to servers, especially on MacOS.

Exchange 2010 SP3 DAG Flip Flop File Share Witness Issue

Hi All,
We are facing one strange issue with Exchange 2010 SP3.
Our environment is as below
a single DAG spanned accross 2 AD sites with 6 MBX server.
Each site have 3 MBx server.
File Share Witness is on Hub server in primary site.
Note: The DAG IP is from Primary DC VLAN and which cant be streched accross DC due to network restrictions/limitations.
It was working fine till date.
But, yesterday onwards we are facing issue.
All DB dismounted and DAG name disappear from EMC and while doing refresh its giving error as below
Exception type: Microsoft.Exchange.Data.DataValidationException
Exception message: Could not convert property WitnessServer to type UncFileSharePath. Error while converting string 'vesthub700.mydomain.com\DAG1.mydomain.com' to result type Microsoft.Exchange.Data.UncFileSharePath: "vesthub700.mydomain.com\DAG1.mydomain.com"
is not an acceptable path. You must use an absolute, local, long file path, that doesn't contain '~', or a UNC path. Parameter name: path
We are not able to execute any cmdlets related to databaseavailabilitygroup from EMS and its giving same error.
Failover Cluster DAG resource is Flip/Flip continuously.
Its only become stable after reboot of the hub server holding FSW and the 1st mailbox server.(Cluster Owner)
We are even not able to move cluster group to different server.
Performed ExBPA no such issues found which related to DAG.
Performed clsuter validation.
Only generic cluster events in Mailbox servers.
Observation:
Its only become stabe if we remove the msExchFileShareWitness Value for DAG1 using ADSIEdit.
And the problem recurs if we set it back again.
Any help or suggestion is appreciated.
Thanks,
soumen
Soumen Ghosh

Hi Belinda,
Thanks! I have checked the Mailbox Server Application Log and found few 2155 Event Id generated at the time of the issue occured.
Process Microsoft.Exchange.ServiceHost.exe () (PID=9312). Configuration object CN=DAG1,CN=Database Availability Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=xxxxxx,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=com
read from DCTDK35.mydomain.com failed validation. DataValidationException will be thrown. Set event logging level for Validation category to Expert to get additional events about each failure.
One update is that the DAG is stable now after we set an alternate FSW last night.
Regarding the 2nd IP assignment for DAG for the 2nd subnet, we have gone through technet and other sites which refering to add the same from EMC or EMS.
Is it sufficinet to simply adding the 2nd IP to DAG from EMC or EMS? Or do we need to take any other special consideration.
Also, adding another IP it will create one more IP address resource to Failover Cluster, but I belive at a time both the IP wont be online. Do we need to keep it offline manually or its automatically taken care by Exchange.
Please suggest.
Also, regarding executing the CollectOverMetrics.ps1 we are following
http://www.msexchange.org/articles-tutorials/exchange-server-2010/monitoring-operations/monitor-dag-database-failover.html
but failed to execute. Can you suggest the correct parameter.
Thanks,
Soumen
Soumen Ghosh

Mavericks permission issues with Windows Server deduplicated shares.

We have a number of 10.9-10.9.3 - Mavericks - machines installed throughout our facility. Much of the user content is pulled from shares stored on our Windows Server 2012 fileservers with deduplication enabled. I have found that files newly written or unoptimized are able to be accessed without issue - read, written, modified, etc. Once the file gets optomized/deduplicated and Windows adds the P & L attributes - sparse and symlink - the Macs running Mavericks begin to have access issues.
Once the files get deduplicated, users begin receiving read access errors when copying files (see error1 below). This happens when copying to folders within the current folder tree or copying somewhere to the local system. If you 'stop' the copy operation and retry a few more times, it may eventually work for the specific instance but fail again later. I am however, able to copy these files without issue via the terminal.
Other systems running 10.7 do not experience the same issues and are able to access file server resources without issue. Many of the systems having issues are newer and thus not able to be downgraded to 10.8 or 10.7.
I have tried finder replacements such as Pathfinder but the results are the same. I know this is at least similar to the issues many Mac users are already experiencing and posting about but I haven't seen it directly linked to deduplication and the attributes written by Windows server. Has anyone seen this issue? Have any solutions been found?
Error 1:
When copying files after the PL attributes have been set by deduplication.
"One or more items can't be copied to "Foler" because you don't have permissions to read them.
Via the system.log, I am also seeing the following error when accessing these deduplicated file shares. The reparse point tag listed below is "IO_REPARSE_TAG_DEDUP"
Reported error:
"smbfs_nget: filename.ext - unknown reparse point tag 0x80000013"

This is a 'known problem' as discussed on the MacWindows site, see http://www.macwindows.com/More-on-OS-X-conflicts-with-Windows-Server-Deduplicati on.html
It appears to still affect Mavericks 10.9.5 at least from the lack of any positive reports to the contrary. It is perhaps a bit late but it would have been worth signing up for the public beta of Yosemite and testing that and if needed reporting it as an issue for Yosemite as this will be getting more bug fix attention than Mavericks now.
I would agree turning off de-duplication is not a desirable solution, however other possibilities to consider are installing the standard Samba software on a Mac and using that instead of Apple's SMBx software. This is done by using the SMBup installer See http://eduo.info/2013/07/13/smbup-faq it does not officially list Mavericks but I did see at least one report that it still worked. A second possibility is to install ExtremeZ-IP which installs an AFP server on to your Windows Server and also gives the bonus of supporting Spotlight searches.
Note: You should only try SMBup on a test setup first.

File permission issues

I cannot access any printer plug-ins by going the HD>Library>Printer>Epson>Inkjet route. All the plug-ins are grayed out so I cannot load them. I am attempting to add a printer attached to a windows machine. I followed all the instructions, I can see the correct plug-in, but I cannot load the plug-in.
The second permission issue is moving jpeg files to the DVD or to a windows machine on the network. I am the owner of the files and all the folders are marked read and write. I also have checked windows file sharing.
I have also done the repair permission route.
I am new to Macs, so this is probably a simple ix, it just does not show up in the searches I have made in the Help menu or support topics. Any help is greatly appreciated. Thank you.

Thanks for the tip, but I have tried every known fix listed anywhere and still am missing something somewhere. I can access the correct drivers when I connect the epson directly to the laptop and it will work. I can almost access the print drivers if I use IP Print when connecting to the printer across the workgroup. Almost, in that the drivers are no longer grayed-out, but if I select them, I still get generic print driver and it ignores the Epson driver. For some reason, if I try to install the driver for the printer while it is attached to a PC on the windows nworkgroup, using windows print, the print utility will not allow me to use the print driver. It has got to be something silly that I am missing.

Are there any compatibility issues with Mavericks and EMC Celerra File shares, particularly with the SMB protocols?

Our company uses a EMC Celerra file share, but most of our users are Windows based. We have a small production department of 7 macs. Starting with Snow Leopard, we noticed some issues with SMB. We were able to resolve those issues, but had to wait to upgrade to Lion because there were additional SMB or permissions concerns with the Celerra file share and Lion. Now, we are again waiting to upgrade to Mavricks because of the way it handles user permissions. Does anyone using Mavericks now also connect to a EMC Celerra file share? Thanks!

Our company uses a EMC Celerra file share, but most of our users are Windows based. We have a small production department of 7 macs. Starting with Snow Leopard, we noticed some issues with SMB. We were able to resolve those issues, but had to wait to upgrade to Lion because there were additional SMB or permissions concerns with the Celerra file share and Lion. Now, we are again waiting to upgrade to Mavricks because of the way it handles user permissions. Does anyone using Mavericks now also connect to a EMC Celerra file share? Thanks!

Issue with G4 connecting to a Windows File Share

We have a single MAC G4 that our marketing department uses for graphic development. when we first setup the PC we were able to connect to our Windows shares on the network. For better than a year now we have had intermittent problems with connecting to our Windows file share. It would drop the TCP connection to the file share, you would need to go back a re-authenicate to the share. Two weeks ago the problem worsened, we can't connect the to Windows files share at all now. I have tried different users accounts including my own which has domain admin authority. However I have a samba file share and a snap server running on the network and I am able to connect to these machines with no issues. I suspect a configuration problem, but not sure where to look next.
The MAC is running the following OS version and Kernel
OS 10.3.9 (7W98)
Kernel Darwin 7.9.0
Any guidance would be appreciated

I just figured it out myself.

Send to File Share issues

Has anyone successfully gotten the send to file share option to work correctly. Ideally I would like to have some podcasts output to some windows smb shares that we have available on campus. I've mapped these drives on the SL PcP2 server, but no file ever gets written. The farthest I've gotten is that PcP2 will write the day folder in the share but never any of the content. Any ideas?

Tatas,
I have not experienced this problem. This does sound like a permission error to me. Does your Podcast administrator have write permissions for the folder in question? Additionally with SMB, I seem to recall that permissions do not propagate by default. Check that out, also.
Finally, each job will create a diagnostic file that has information about the job; perhaps there will be some clues in it. The diagnostic files are located in /Library/Logs/pcastserverd/DiagnosticReports/ .
Hope this helps,
Stephen

File Share crawl - NetApp Servers - Permission Issues

Similar Messages

Maybe you are looking for