Giving permission to subfolders with ABE
Hi,
I searched in the forum for a similar question but it couldnt find any. I'm migrating from Novell to Windows. In Novell you can give the permission to a sub-subfolder and the user will be able to traverse to this folder only from the parrent. Is this
possible in Windows?
More explination
I Have a Shared Folder called (MainFolder). This folder is mapped through login script. I enabled ABE on this Share with the following permission. . I disbaled inheritance permision on this folders and converted inherited permissions into
explicit permssions on this object. I deleted as well the two "Allow" users permission so that ABE will work and added only domain users (Allow - This Folder Only - Traverse Folder /Execute file, List Folder / Read data, Read attributes, Read Extended
attributes, Read permissions)
The Parents and subfolders are like this.
MainFolder
Subfolder-A
Subfolder-A.1
Subfolder-A.2
I want to give a permission to a user to see Subfolder-A.1 and not see Subfolder-A.2. If i give List Folder permission to the user on Folder Subfolder-A he will be able to view Both Subfolder-A.1 and Subfolder-A.2 which is not what i want. If i give Traverse
Directory without the List Folder to subfolder-A then he will not be able to see the folder. I have hunders of SubfoldersA-1....200 as well as around 10 Subfolder-A...J and i need to set permission to users not to Groups. A user might have access
to seveal SubfolderA.1A.2.....A7 in different Subfolder-A, SubfolderB and so on. So in addition to that im trying to set the permissions using icacls.
Any help appreciate it!
Hi,
I have done a test on my server and I cannot see the Child folders when I don't have read permissions on the folders. There is a shared folder called "root" on my server which contailned two subfolders "folderA" and "folderB",
then I enable ABE and set the permissions on the share folder below:
I disbaled inheritance permision on the folder and give domain users permissions: List folder / read data - This folder only.
Then I give a domain user named "mandy" read permissons on the folderA. After all, if I access the shared folder logged on as "mandy", I can only see the folderA in the root folder.
Hope this helps.
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]
Similar Messages
-
Unable to access UNC path on 2012 R2 file server with ABE enabled
Brief Description:
We have granted access to people via a domain local group on a folder on a file server that is three levels deep from the share, i.e. \\servercluster\share\folder1\folder2\folder3, where folder3 is where the group is granted Read & Execute
access. The share has Access-Based Enumeration (ABE) enabled and the Everyone group has Full Control share permissions. We also use DFS, so the path for that is \\domain\dfsrootname\folderfororganization\share\folder1\folder2\folder3. People
in the aforementioned group only have access to folder3, its subfolders, and files. They do not have any access to folder2 or any of the other folders higher in the tree at all. Also, consider that folder3 contains a subfolder folder4, which is
simply inheriting permissions.
What we have found is that clients running Windows 7 SP1 have strange access issues when attempting to access the folder via either the DFS or cluster name UNC paths.
Detailed Testing Results Accessing Folder3 Directly:
NOTE: "UNC path" in the following test results means either the DFS or the cluster name share path. The results are the same regardless which path is used.
1 - Enter UNC path without trailing backslash in Windows Explorer's address bar:
Windows Explorer seems to do nothing for about 30 seconds and then displays the following error:
"Windows cannot access <UNC path>
Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose."
2 - Enter UNC path with trailing backslash in Windows Explorer's address bar:
The same error encountered in #1 is displayed immediately.
3 - Enter UNC path with or without trailing backslash but contained in double quotes in Windows Explorer's address bar:
Internet Explorer opens and displays the error:
"Internet Explorer cannot display the webpage"
4 - Enter UNC path without trailing backslash in Run dialog box:
An error message immediately appears:
"<UNC path>
The specified path does not exist.
Check the path and then try again."
5 - Enter UNC path with trailing backslash in Run dialog box:
Same as #4.
6 - Enter UNC path without trailing backslash but contained in double quotes in Run dialog box:
Same as #4.
7 - Enter UNC path with trailing backslash and contained in double quotes in Run dialog box:
Windows Explorer opens the correct UNC path location and displays the folder contents. This is the expected behavior for all of these attempts.
8 - Create Shortcut to UNC path by performing #7 and then dragging the folder icon in Windows Explorer's address bar to either to the desktop or the Favorites section, and then attempt to access the folder via
the shortcut.
Same as #7.
9 - Attempt to create a shortcut to the UNC path using the New Shortcut wizard:
Unable to successfully create the shortcut, regardless if you add a backslash at the end or enclose the path in double qutoes. When you press Next after entering the UNC path, you receive the following error:
"The file <UNC path> cannot be found."
10 - Disable ABE on the share and repeat all tests:
All tests with ABE disabled on the share have the same result as #7. There is no issue whatsoever accessing the desired folder when ABE is disabled.
Other Notable Behaviors:
If the aforementioned folder (folder3) contains one or more subfolders (e.g. folder4), you are able to access those subfolders via UNC path directly and then go up one level to folder3 without issue, even when ABE is enabled. You just cannot access
folder3 directly via UNC path unless you attempt to access it via the method used in #7 above or a successfully created shortcut.
Adding a user account directly to the folder3 ACL rather than using group membership makes no difference.
If access is granted to folder4 instead of folder3 (the fourth folder deep rather than the third), accessing folder4 directly via UNC path is not an issue regardless of ABE status or attempted access method.
Windows 8 and 8.1 clients have no trouble directly accessing the folder's UNC path via any method. The unusual, undesirable behavior seen in Windows 7 is non-existent on Windows 8.x clients.
Systems Involved:
Client: Windows 7 Enterprise SP1 x86
Server: Windows Server 2012 R2 Standard in cluster
Other Details About the Systems:
Both the client and the file server cluster are in the domain AD DS domain.
The client and the file server cluster are in different subnets.
There is no firewall or other packet inspection or compression service/device in between the client and server (not even Windows Firewall).
Question:
Is there a way to fix this behavior with Windows 7 clients and ABE enabled on the share so that it works correctly without forcing the clients or server to use SMBv1 or disabling ABE on the shares?7-Zip 9.20
Adobe Flash Player 13 ActiveX
Cisco WebEx Meetings
Java 7 Update 51
It should be noted that I can't repeat the behavior on my test machine again today after some changes were made in our environment.
Today, I found that someone had modified permissions on the folder to give the group my test account was a member of rights to traverse the folder hierarchy from the root of the share. Additionally, in testing something with FIPS mode, I ended up reverting
my virtual machine to an older snapshot.
After removing the extra permissions that weren't present when I was doing my testing and reverting to the older snapshot, I am not having issues accessing the real equivalent of folder3 directly in Windows Explorer via DFS UNC path or creating a shortcut
with the New Shortcut wizard.
Things have been fundamentally changed and I cannot repeat the behavior on this particular folder. I will see if I can recreate the same situation on another folder. -
I was updating my ipad 2 and got it disconnected and its not responding,giving a blank screen with apple logo. when i connect it to itunes then it is giving an error that enter your passcode but the screen is blank how can enter my passcode?
What to Do When Your iPad Won't Turn On
http://ipad.about.com/od/iPad_Troubleshooting/ss/What-To-Do-When-Your-Ipad-Wo-No t-Turn-On.htm
iOS: Not responding or does not turn on
http://support.apple.com/kb/TS3281
iPad Frozen? How to Force Quit an App, Reset or Restart Your iPad
http://ipadacademy.com/2010/11/ipad-frozen-how-to-force-quit-an-app-reset-or-res tart-your-ipad
iPad: Basic troubleshooting
http://support.apple.com/kb/TS3274
iOS: Resolving update and restore alert messages
http://support.apple.com/kb/TS1275
iPad: Unable to update or restore
http://support.apple.com/kb/ht4097
Cheers, Tom -
I'm new to iPad mini and uv I'm trying to get a movie I purchased to where I can watch it offline but when I click the option to download and watch offline it keeps giving me and error with download try again later I have a good wifi connection ??
You have a "good WiFi connection". What does that mean exactly? Can you send and receive email and are other internet related activities working OK for you? Have you tried restarting or rebooting your iPad? Sometimes that helps. If nothing else, it's a good place to start.
Restart the iPad by holding down on the sleep button until the red slider appears and then slide to shut off. To power up hold the sleep button until the Apple logo appears and let go of the button.
Reboot the iPad by holding down on the sleep and home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider if it appears on the screen - let go of the buttons. Let the iPad start up. -
Double subfolders with same name
Hi,
I suddenly into Thunderbird (31.4.0) double subfolders with the same name.
The mail can not be moved to the folders.
Removing conscious folder succeeds. Thunderbird and system then completely stopped and started again.
Situation with double subfolders is back.
Does anyone have an idea? how can I fix this?
I can respond only Sunday through previously planned activitiesHi, Thanks for your response and prompt.
I can restore a single folder a second folder remains intractable return double <- (
What can I do? -
How to backup a rootenv when there are subfolders with DBs?
Hello,
Is there any way to hotbackup a rootenv with databases when there are subfolders with databases?
When I run a hotbackup (with db_hotbackup) on my rootenv, it only backups databases from the root of my rootenv. But, in that root directory, I have some subdirectories with databases too.
Thank you.Hi,
If you have root directory as : */your/root/dir*
and within that you have folders like : */your/root/dir/sub1* and */your/root/dir/sub2* and would want to backup the db files in */your/backup/dir* then, you should invoke db_hotbackup as
db_hotbackup -cv -b /your/backup/dir -h /your/root/dir -d ../dir/sub1 -d ../dir/sub2
Regards,
Debsubhra Roy -
Giving List Permission to users with no access to the main site
On my sub site I have a list (where users from a specific store can report errors). This list I want to share with another group of users, those who will do something about the errors (entrepreneurs). I want them to be able to Edit in this list: they don't
need delete and create items, just being able to change an item is fine.
The problem is, I don't want them to have access to the sub site itself, because there is information on the sub site that they don't need to know about, they should only see this list. So they don't have any access at all to the sub site, but I'm giving
them permission to the list.
However, it seems like since they can't access the sub site, no matter what permission I give them to the list (Edit, Contribute, Full Control), in the end they only have Reading-access to the list and can't even update an item.
This error message turns up whenever they try:
"Unable to communicate with server".
The entrepreneur group is external users, but that shouldn't matter, should it? I've added them to SharePoint groups with the right permissions.
Is there any possible way to solve this problem?Hi ,
Here is the steps you can refer to:
Go to your site ->Site Settings ->Site permissions ->Permission Levels ->Click “Add a Permission Level” and create a custom permission level with following permissions :
Edit Items, View Items, Open Items, View Pages , Open.
Go to your list ->Shared With -> INVITE PEOPLE :
input your group, click “SHOW OPTIONS”
and select the new custom permission level.
Best Regards,
Eric
Eric Tao
TechNet Community Support -
Subclassed EJB with RolesAllowed annotation not giving permission
A servlet is calling a method of an EJB (name EJB B). EJB B is a sub class of EJB A which contains the method and is not overridden by EJB B.
EJB A uses the annotation @RolesAllowed({"user","system","admin"})
EJB B uses the annotation @RolesAllowed({"system"})
When the call is made by the servlet the following error is produced:
JBAS014134: EJB Invocation failed on component EJB B for method xxxx: javax.ejb.EJBAccessException: JBAS014502: Invocation on method: xxxx throws exception of bean: EJB B is not allowed
If I replace the EJB A annotation with @PermitAll then the method is called without the permission problem.
I am wondering why the 'system' role allowed in EJB A is ignored in the annotation and the exception is thrown.
Is this a bug perhaps?Hi Jay Bhaiya,
I am getting the correct output by following the below:
1: Change the SecurityRolesImpl.java to provide the below role that can access the EJB method:
*@RolesAllowed({"TestRole"})*
2: Then build the service as normal using the same build.xml
3: Do not depoly the EAR using ant and try to use the Admin Console to deploy the EAR.
4: While deploying the application through the admin console choose the below option:
Custom Roles: Use roles that are defined in the Administration Console; use policies that are defined in the deployment descriptor.
5: Then create the client stubs using the build.xml
6: Then go to the Admin Console.
Security Realm >> my realm >> users and Groups >> create a user TestUser ( pass- TestUser).
7: Then Click on the RolesAllowedEar under the depolyments tab.
Click on Security >> Roles ..
Create a New Role >>> TestRole.
Click on the Role created (TestRole) >>> Add Condition >>>
Within Add Condition >> select User >> NEXT >>>
Enter TestUser >>> Click ADD .
Click Save.
Now try to access the Web Service using the client code.
Thanks,
Sandeep -
a couple of weeks ago i noticed a real slowdown when playing Zynga games on FB. opened task manager (XP) and saw plugin-container.exe running at 400,000+ k. ran search thru windows and found plugin-container for mozzila. checked and updated all plugins but issue persists. disabled each plugin seperately while playing, with task manager open and disabling shockwave was the only one that had effect on plugin running. unfortunately this also crashed the game. know its not your plugin but any advice or directions would be appreciated. ( my husband's solution is the simplest of course but i really enjoy my games!) Thanks for your time.
a couple of weeks ago i noticed a real slowdown when playing Zynga games on FB. opened task manager (XP) and saw plugin-container.exe running at 400,000+ k. ran search thru windows and found plugin-container for mozzila. checked and updated all plugins but issue persists. disabled each plugin seperately while playing, with task manager open and disabling shockwave was the only one that had effect on plugin running. unfortunately this also crashed the game. know its not your plugin but any advice or directions would be appreciated. ( my husband's solution is the simplest of course but i really enjoy my games!) Thanks for your time.
-
Can i use subfolders with source control for developer ?
We'd like to use the repository as source control for our developer files.
We planned to use the following structure in the repository:
- Application Container
- Folder
- Files
We uploaded the files in the repository.
Now if we open the file through the ron the file will open in form builder, which is pretty good.
The following thing I'de like to do is a checkout of the file ... ok ...i'm going to file - administration - checkout - the message occurs: no versionable object exists ! ... ? :-(.
So I go to file - administration - source control options .. i'd like to say forms that it has to look for the file in a subfolder of the application system .. ok.
After changing this i try again - the same message.
If I return to source control options the container entry has been changed to the application folder.
Are Subfolders not supported by the source control for developer ?
Does anybody have the same effects ?
Background informations ?
Thanks in advance
Mario
null<BLOCKQUOTE><font size="1" face="Verdana, Arial, Helvetica">quote:</font><HR>Originally posted by [email protected]:
Did you check the file in first? When you first put files in Repository, they are initially unversioned until the first checkin...
Brian<HR></BLOCKQUOTE>
Hello Brian
Sorry, for the delay. I worked for some day for another customer.
Yes, i did.
I'm working like this:
- upload file with check in Folder which is under an application Folder (app - fmb )
- then i check out the fmb in the repository
- doubleclick in repository, which opens the form in form builder
- change the file
- File - Administration - check-in - connect to repository - choosing the workarea - and defining the folder (app - fmb ).
- The file will be check-in, but directly under the folder app.
Thanks in advance
Mario
null -
Error while giving permission to the users
hi..
while giving the grants to the users I have created, it is showing "Account not found"..
I have logged in through the credentials of Administrator and went to Administration--> manage interactive dashboards
There when i am clicking on Show Users and Groups, then i can see all those.
But when i am trying to give the users the necessary permissions, it is showing the above error.
please help...Hi,
I dnt understand ur 1st question.what u meant by uniq filed where u create user?
and for ur second question, u can check all ur users from dba_users.for their privilages, to check on permission, it's dba_tab_privs. I dnt knw if this is what ur asking for but here is the script.
SELECT t.grantee "User ID",t.privilege "Privilege",o.object_type, o.object_name, '' column_name
FROM dba_tab_privs t, dba_objects o
WHERE t.owner = o.owner
AND t.table_name = o.object_name
AND NOT o.owner IN ('SYS', 'SYSTEM')
AND NOT t.grantor IN ('SYS', 'SYSTEM')
AND t.grantee in (select username from dba_users
where username not in ('SYS','SYSTEM','))
AND NOT o.object_type IN ('QUEUE', 'TRIGGER', 'DIMENSION', 'CLUSTER',
'INDEX', 'INDEX PARTITION', 'INDEX SUBPARTITION', 'TABLE PARTITION',
'TABLE SUBPARTITION', 'JAVA CLASS') -
Permission/Privilege Issues With Mac OS Lion
I created a new user account after I installed Lion, transferred my files over, and now I'm having issues with my account. I don't know if permissions and privilages are responsible for the issues, but seemingly so. I also have to mention that when I was changing over user accounts, I ended up wanting to change the short names on both my old and new accounts, so I used the root user to do so. Here are some problems I've been experiencing:
- When I open system preferences, it always opens up to the General pane. No matter what.
- After restarting, certain windows that I had open at a certain time keep opening up, no matter if I closed them out and had completely new windows open.
- Preferences in certain applications will not save. Audacity opens up each time I start my computer, there is a tick box for show this screen when starting Audacity, I untick it, but it still opens up each time. Photoshop gives me a message that my preferences can't be saved because I don't have the right privilages. Textedit keeps opening up to a certain file I had open a couple of days ago, and when I try to save a new document, it gives me an error. Safari only remembers history from a couple of days ago. And when I try to reset Safari, and reopen it, the same old history is displayed.
- When I try to move files to my desktop or to the Trash, I have to authenticate it.
I tried Repairing the disk, repairing permissions, inserting my Mac os leopard disk and doing the same, and using the Reset Password utility on the Mac os installation disk to repair permissions to my home folder, but nothing is working.Hi everyone, I have found a solution. This worked for me:
1) Create a new user account. Make sure it has a desireable name, otherwise you're going to want to change it later, and that will cause permission issues. (check if preferences are saving in this temporary new account, if not, I can't help you.)
2) Transfer all the files you want to keep by putting them in the SHARED folder.
3) Change permissions to the folders and files in your shared folder by right clicking and clicking on GET INFO. Then go to the very bottom of the popup menu and unlock the picture of the lock. Next change permissions so that your new account will have permission to view the files. You might have to add your new account to the list by pressing the plus button, or simply allow staff the read and right, or just let everyone read and right. Next click on the gear menu (the one with the little gear on it.) and click on APPLY TO ENCLOSED ITEMS.
4) Go to your new user account and take the things in the shared folder and put them where you had them in your older account.
Now you have a new user with the files you want, the permissions right, and preferences will save!
I really really really hope this works for you. I know how extremely frustrating it was. It worked for me, and I am so relieved now. -
How to create a folder (with subfolders) with Applescript
Good afternoon,
Filemaker has the ability to ake use of AppleScript.
From within Filemaker I want to create a new folder (with the name of a FileMaker field) that holds 6 subfolders.
I am a complete noob where it comes to Applescript.
This is my script so far:
tell application "FileMaker Pro Advanced"
set folder_name to cell "FolderName" of current record
end tell
tell application "Finder"
activate
make new folder at folder "Desktop" of folder "dick" of folder "Users" of startup disk with properties {name:folder_name}
end tell
tell application "Finder"
activate
make new folder at folder {name:folder_name} of folder "Desktop" of folder "dick" of folder "Users" of startup disk with properties {name:"subfolder"}
end tell
My problem is: the creation of "Subfolder1"
What is my mistake there?
Help is much appreciated
Dick
Ps: I need to make 6 subfolders thereWhen you crate a new folder you can define various properties, but when refering to the folder just use the name, for example:
make new folder at folder folder_name of folder "Desktop" of folder "dick" of folder "Users" of startup disk with properties {name:"subfolder"}
Note that the result returned from making a new folder is a reference to that folder, so you can also do something like:
tell application "Finder"
set newFolder to (make new folder at folder "Desktop" of folder "dick" of folder "Users" of startup disk with properties {name:folder_name})
make new folder at newFolder with properties {name:"subfolder"}
end tell -
How to zip a folder containing subfolders with files and download the zip file in silverlght 4
private void hbtnDownloadReceipt_Click(object sender, RoutedEventArgs e)
try
string Docpath = "ClaimsDetails/" + "20tech" + "/" + PaymentAdviceUNo;
string dd = "ClaimsDetails/";
Uri uri = new Uri(Application.Current.Host.Source, "/" + Docpath);
Uri uri1 = new Uri(Application.Current.Host.Source, "/" + dd);
string path = uri.AbsoluteUri.ToString();
path1 = uri1.AbsoluteUri.ToString();
//HtmlPage.Window.Eval("window.open('" + path + "')");
catch (Exception ex)
ex.Data.Clear();
1) Here "path" is D:\\TL 24-12-2014 \\OfficeConnect_17_10\\OfficeConnect.Web\\ClaimsDetails\\20tech\\PaymentAdviceUNo.
2) In path "PaymentAdviceUNo" is the folder containing subfolders which i want to zip.
Thanks in Advance.Hi,
You can download a zip file like any files with the Webclient class, look at the details and examples in the msdn documentation for downloading content on demand it even talks about how to download and get a specific file from a zip archive.
http://msdn.microsoft.com/en-us/library/cc189021(VS.95).aspx
Besides, if you want to list the files,you could check articles below:
http://blogs.msdn.com/b/blemmon/archive/2009/11/25/reading-zip-files-from-silverlight.aspx
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey. -
How do I display thumbnails for subfolders with images in Finder?
Hello. I've settled in quite nicely with OS X but I find there's one thing I couldn't replace with a better alternative from XP and I've looked extensively for a solution but with no luck, so I figured I'd ask.
It's best described with a picture (http://i38.tinypic.com/2j2i1rr.png). All those folders have images in them (at their root, not in subfolders). Instead of the generic folder icon, I'd like a thumbnail of the images in the folder (like this: http://imgsrv.worldstart.com/ct-images/folder-pic-blank1.jpg). The closest I've gotten to this is ticking "Show icon preview" in Finder's view options menu, but this only displays the thumbnails when I actually open the folder which is a bit of a problem when you have 200+ folders and you're looking for a specific one. The only thing remotely like this that I've found is FileBrowse (http://www.filebrowse.com/index.html) but it's too fat and slow to be of much use.
Thanks for any help you might be able to provide.baltwo: Thanks for the tip, I didn't know how easy it was to set up custom icons in OS X. In this case it's a difficult solution because it will have to be done by hand for every single folder, which is a problem if I'm going to have these in two places. I'm new to Automator but there doesn't seem to be a way to have it; 1) Select all the folders in a directory. 2) Copy the first image in each folder to the clipboard and have it use that image as each folder's icon.
Barney-15E: I know it sounds moronic, but yes. I've tried iPhoto but it's not a very good solution in this case. My folder structure is like this:
Root -> 282 image folders with 10 to 60 pictures in each.
All I really need is the ability to see at a glance what each image folder has without opening each individual folder. The folders are numbered sequentially (1-282 in this case) rather than by proper names, so this is the most efficient way.
Maybe you are looking for
-
How to print Header and footer in same page
Hi All, I am using Oracle Report 10g. How can I add header and footer on same page as my body? Right now when a generate a pdf file, it is printing individual pages instead of 1 one page. Please help me. Regards
-
Hi Experts, Is it possible balance sheet by Project wise???? Trial balance, P&L are possible but not balance sheet by project wise .if any one have idea pls suggest me. Regards Sudhir Pawar.
-
I entered my email address wrong. It saved so now when I try to login to a website, the bad address also comes up. How do I delete this?
-
Mozilla Plugin Check gives a vulnerable warning for Java, even though its up to date on the page it sends you to.
-
hi, In extended star schema, master data is stored separately . can this master data be shared across other star schemas as well? thanks. bwlearner