IE 11 Enhanced Security improperly enabled for one user in domain

I'm running a small network with two domain controllers which use Server 2008 R2 Standard. The clients all run Windows 7 with the latest updates. Today one user suddenly started having their browser always start in Enhanced Security mode on the Windows
7 clients! This happens for any client in the domain, but it does not happen when then user logs into the terminal server for the domain. I use roaming profiles and redirected folders. I have separate profiles for the Terminal server from those used for the
local computers. I have restored the user's profile to last week when the problem was not happening, but it did not help. It does not happen for any other user in the network, even if the user logs in on the same computer. So there is something in the user's
environment that is causing the problem. I have reset IE 11 to default and it still comes up in with Enhanced Security for that user on the Windows 7 clients. I've searched the internet for this problem without success.

So I figured this out. I think that it is a mis-feature in Server 2008. The particular user is a member of the Backup Operators security group on the domain. Recently they did a backup on the server and then this problem started.
It appears that even though they are not a server administrator or a domain administrator, the Enhance Security settings got put into their roaming profile and when they logged into their workstation, the settings got applied to IE on their workstation.
If I turned of Enhance Security on the server for only users, the problem still happened for this user, even though they are only a Backup Operator, not an administrator. If I turned off Enhanced security on the server for administrators, logged in and out
of the server as this user, then the problem went away.
So it seems that Backup Operators are viewed as "administrators" by Enhanced Security and if you use roaming profiles for such users, Enhanced Security will be enabled for such users on their workstations. Yuck.
Easiest solution is probably to have a separate user account for the backup role on the server.

Similar Messages

What happened to the security login section for one password which allows me to have passwords stored???

what happened to the security login section for one password which allows me to have passwords stored???

* Tools > Options > Security: Passwords: "Remember passwords for sites"
Make sure that you haven't saved Uppercase and Lowercase versions of that name and password.
Remove saved Password(s):
* [[Remembering passwords]]
* [[Protecting stored passwords using a master password]]

JSP page doesnt load for one user on machine1, but does 4 all on same box

Hi,
I have a Citrix application on a box to enable many users to connect remotely to different applications on differnt boxes using the browser on this box. Just like terminal Services or remote desktop
I tested 15 users and all of them are able to login to the machine and able to open a jsp page of an application located on a differernt box using the browser on this box.
But for one user I am facing an issue. For this user, I am not able to get the page and instead I only see a message as "page loading" and nothing more than that, Its getting stuck there itself with no progress.
Please help me,
Thanks a lot in advance,
Srinivas.

Hi,
I suspect there is something missing as far as the JRE for this guy is concerned. Sothing to do with permissions. java policy, security etc.
I am not sure if that helps. I am not in the development of the application, and will check with those guys. I only neeed to provode support on this machine and be able to give access to that application which is on Linux. The browser is in Windows machine,
Thanks,
Srinivas.

Thousands of "mail is not enabled for this user"

Someone is sending my domain email to thousands of non existent mail accounts. It's like they are combining every possible prefix to my domain they know of. It's been going on for weeks. The Mail service, however, is not being brought down by this at all. So I don't know what kind of attack this is or how to stop it.
Can someone help me? Below is a minute section of my System log:
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
Dec 31 15:08:55 nameserver lmtpunix[19165]: warning: unable to post message for user: [email protected], mail is not enabled for this user
------------------

Two possibilities - both fall under the heading 'reconaissance by e-mail'. A spammer or hacker will try 1000's of common names, then look at which ones didn't bounce to determine which ones have accounts on your system.
They then have a comprehensive list of account names on your server, and can proceed to attempt likely passwords for each, or send endless spam to your users. Either one is a Bad Thing, doubly so if you've got any accounts that you created just to test things, and have weak passwords, but you've always counted on nobody knowing they exist.
At one point, I actually had a 'testuser' account that had 'testuser' as the password - I just hadn't remembered to delete it after I was done testing. It's very common for a system to have a couple of these hanging around. I didn't have trouble with it, but looking for and getting rid of these is critical.
Either way, the immdiate solution is to go Server Admin->Mail->Settings->Relay, and add the IP address(es) of the senders to the 'Refuse all messages from these hosts or networks' section. Mail attempts will still show up in your SMTP log, but they'll look like this one I got this morning (one of dozens):
Jan 3 11:07:33 miniserver postfix/smtpd[1440]: NOQUEUE: reject: RCPT from unknown[66.180.115.17]: 554 <unknown[66.180.115.17]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<xptwfs.gov>
Next is to take a look at your password policies - if you've got strong password policies (must include characters and numbers, must be 7 characters or longer, etc., you're probably OK, but if anyone has weak passwords, or god forbid, uses their userid as their password, you're pretty vulnerable.
It's also worth noting that someone with a full list of your users has a fair number of tools for improved odds of phishing, or spear-phishing, where they create finely targeted mails that say things like 'Bob Smith told me to contact you for your password', and look very real. A warning mail to your users to remind them that they need to keep passwords secret, and be cautious about mail, even if it appears to know something about them, would be good. I wouldn't specify that you've been recon'd, just a general 'New Year Security Reminder' or some such.
Hope this helps!

OBIEE/EBS R12 - works, except for one user - ORA-06512 error

OBIEE 10.3.1.4 / EBS 12.0.4
Oracle 11g
HPUX 11.31 64 bit Itanium
We are successfully using EBS integration with OBIEE, but for one user that we have created it doesn't work. When they try to access OBIEE from EBS we get this error in NQServer.log:
*[nQSError: 13011] Query for Initialization Block 'EBS Security Context' has failed.*
*[nQSError: 17001] Oracle Error code: 6510, message: ORA-06510: PL/SQL: unhandled user-defined exception*
ORA-06512: at "APPS.APP_SESSION", line 313
at OCI call OCIStmtExecute: call / 101507300 */ APP_SESSION.validate_icx_session('NIOWQbvOlCFpGilcGDvlBIY-:S').*
*[nQSError: 17011] SQL statement execution failed.*
This is when the query is run against EBS to authenticate the user:
select FND_GLOBAL.RESP_ID,
FND_GLOBAL.RESP_APPL_ID,
FND_GLOBAL.SECURITY_GROUP_ID,
FND_GLOBAL.RESP_NAME,
FND_GLOBAL.USER_ID,
FND_GLOBAL.EMPLOYEE_ID,
FND_GLOBAL.USER_NAME from dual
It is only for one user that has the problem. All others users work fine.
Has anyone else seen this problem?
Our EBS DBA has checked that the above sql can be run with the session set to the problem user, and compared with a user who can successfully connect to OBIEE. The results were the same for both.

I was on the wrong lines with this one.
The error in the NQServer.log was not from the problem user, it was a separate user.
The real cause of a specific user not being able to login was a corrupt web catalog (which we're still trying to resolve)

Upload multiple documents option is not visible for one user in SharePoint 2007.

Hi,
For one user Upload multiple documents option is not visible.
We are using SharePoint 2007 environment.
User is using IE 9 32 bit,Office 2010.
I did repair office 2010.
Active x controls are enabled.
Please anyone help me on this.
Thanks,
Ashok

Hi,
According to your post, my understanding is that after client upgraded to Office 2013 the option for Upload multiple document was grayed out.
I try to reproduce the issue in my environment, however everything works well.
My configuration of system is:
Windows 8.1;
IE11;
Office 2013 32bit.
Please repair the Office 2013 to check whether it works.
In addition, there are many thing you need to check. Please refer to:
http://sharepointknowledgebase.blogspot.com/2013/09/upload-multiple-documents-is-disabled.html
Here is a similar thread for your reference:
http://social.msdn.microsoft.com/Forums/en-US/1a5af332-ed21-41ee-bf64-9122a7439623/sharepoint-not-activating-stsuplddll-upload-mutliple-documents-greyed-out?forum=sharepointgeneralprevious
More information:
"Upload Multiple Documents" is disabled in Document Library
SharePoint 2010 : How to Enable Uploading Multiple Documents Functionality
Best Regards,
Linda Li
Linda Li
TechNet Community Support

How to get number of failed log atempt for one user ( schema )

Hi All,
If one use try to connecte with wrrong password he will get this message ORA-1017. and the nombre of failed log atemp will increase.
Then who can i check this number for one user in my date base ?
Cheers
Fayçal.

Enable the audit by setting
alter system set audit_trail=true scope=spfile;.
Setting this parameter bounce of database
Enable the following audit option
SQL>AUDIT ALL BY ACCESS WHENEVER NOT SUCCESSFUL
Then query AUD$ as the following example
SQL> select returncode, action#, userid, userhost, terminal from aud$
Regards,
Anand

Work flow Icon Is Greyed out for One user

Hello SAP Guru's ,
We are facing issue for one user in SAP easy Access .
Workflow Icon,User Menu ,SAP Menu buttons is Greyed out but user able to access transaction SBWP.
Can you please give solution why those buttons are greyed out and few button's are (Enabled attched In scrren shot)?Do I need to maintain any where user settings
Please let me any user specific settings is missing for that user ?
My Analysis - I have checked with user and I tried to change in SAP Easy Access ->Extras->Settings Still not able to achive any .
I gone thorough the link - http://scn.sap.com/thread/1737679
Still not able to resolve this issue.
Thanks In Advance,
Shiv

Hi,
Please check the following authorization objects are assigned to the user or not in SU24.
S_BDS_DS BC-SRV-KPR-BDS: Authorizations for Document Set
S_OC_DOC         SAPoffice: Authorization for an Activity with Documents
S_OC_FOLCR     SAPoffice: Authorization to Create Shared Folders
S_OC_ROLE        SAPoffice: Office User Attribute
S_OC_SEND       Authorization Object for Sending
S_OC_TCD          SAPoffice: Transaction Code Authorizations
S_WFAR_OBJ    ArchiveLink: Authorizations for access to documents
Regards,
Murali Krishna.

UWL Subview does not show for one user

Hi All - We have a UWL Subview. It is working fine except for one user. He cannot see the entire Subview drop down box at all. It is as if it does not exist. I've verified he has the tasks for the Subview to appear. Can anyone give some ideas as to what other possibilities this can happen? I've tried several things. Verified with security no roles exist for functionality within the UWL. The user have tried going to our QA system and logged in as a test user id - Subview visible. His ID is valid and active in ECC. If you don't have a direct answer, maybe you know of tools on how to debug or trace the UWL. I've seen two threads exactly like my situation and they receive no responses. Hopefully, there is something new to my request.
Thanks in advance.

The issue is resolved. In the Portal UWL Admin screen, the user showed personalization settings for the Subview. We decided to delete all entries. He can now see the Subview drop down. It is weird because on his own his access to his own personalization settings is empty.

Tacacs authentication fails for one user account for only one switch

Hi,
I am having an scenario, where as Tacacs authentication fails for one user account for only one switch.
The same user account works well for other devices.
The AAA configs are same on every devices in the network.
Heres the show tacacs output from the switch where only one user account fails;
              Socket opens:        157
             Socket closes:        156
             Socket aborts:        303
             Socket errors:          1
           Socket Timeouts:          2
   Failed Connect Attempts:          0
        Total Packets Sent:       1703
        Total Packets Recv:       1243
          Expected Replies:          0
What could be the reason ?
No errors on ACS server; same rights had been given to the user account.
Thanks to advise.
Prasey

Hi there,
Does the user get authenticated in the ACS logs?
reports and activity----> failed attempts
ro
reports and activity-----> passed authentications
That will help narrow it down.
Brad

"view content preview in thumbnails" option is not available in view settings for "finder" for one user

"view content preview in thumbnails" option is not available in view settings for "finder" for one user

I hope this discussion can be revived. I have the same problem. There seem to be quite a few Japanese sites that don't bother specifying their encoding. Perhaps they are older and from a time when it was not necessary to adhere to standards. Examples: http://www1.plala.or.jp/CUE/cave_yozawa.html, http://chigaku.web.fc2.com/saitama/sanchi/youzawa/youzawa.html. Happy to upload screenshots, but how?
Is there a way to tell Safari what encoding to use if the web page fails to do that?

Account search functinality is not working for one user in portal

Hi friends,
We have configured E.P 7.0 with CRM 5.0 and configured CRM PCUI business package.
We have a role called <b>accounts and products</b> in portal. So accounts can be searched in this role.
Now our severity issue is for one of the super user,for ex su1, accounts search is not working in portal but the same is working in CRM GUI.
for example if we search for an account 233445(or any other account) in portal its showing no data found but if we search with the same criteria data is displaying CRM GUI.
We have checked with other 2 super ids. Both ends portal and gui search is working fine.
Am unable to figure out whats the cause of the issue as search is not working only for one user su1 .
we have checked by restarting the server also to clear the memory cache.But still search is not working in portal.
Could anyone of u please advice ASAP as this is severity issue.
Thanks & Regards
Sireesha.

Hi srinivas,
I have checked both the users credentials,permissions,groups in the GUI and also in the portal.
Both of the users profiles are assigned as same.
Could you please advice is there any other way to check it out?
Regards
Sireesha.

Synaptics touchpad on HP Mini 110 Windows 7 32 Bit - not working for one user - working for another

Hi,
I recently have an issue with Synaptics touchpad on HP Mini 110 Windows 7 32 Bit - NOT working for one user - working for another.
Windows 7 updates recently installed ???
By checking the device properties on the user that works - "Synaptics PS/2 Port Touchpad 13/10/2011 Version 15.3.29.0"
When the other user logs on, the touchpad works for a few seconds, then a displays a black square with a red diagonal line through it, then the touchpad won't respond. Trying to use the keypad to navigate to system diagnosics or anything to find further info is useless....

Hey eagle_no11,
Thank you for joining the HP Support Community!
I will do my best in assisting to hopefully get the TouchPad to work on the second user profile.
What I would like to start off with, is to restore the original Synaptics drivers onto the profile that is not working correctly. I have included the document Using Recovery Manager to Restore Software and Drivers (Windows 7).
Once you have installed the original drivers, you will need to complete all updates from both HP, as well as Windows. For these updates, if you open the HP Support Assistant, and select Maintain, you should see an option for updating.
Please let me know how these steps do work out for you.
Have a great day!
I worked on behalf of HP

After installing Mountain Lion, why is there Yahoo access for one user but not another?--both are administrators.

After installing Mountain Lion, why is there Yahoo access for one user but not another?--both are administrators.

We've had several instances where we have had to run chkdsk on arrays with over 1m files. Average completion time is approximately 72 hours. The maximum downtime window they have available is the 64 hour weekend window. File sizes and number of files were
much smaller then than they are now.
The idea, in theory, was to use VHDs to compartmentalize the data into smaller volumes which could be more easily managed. It would also improve performance when transferring these compartments of data as they would use sequential read/write rather than
fragmented/random. This idea was never fleshed out in entirety, they don't split data up into little containers, but simply into big ones per project. Hence the 11m files in one container that I am currently trying to diagnose.
Some other important facts: The VHD in question is mounted in B:/project/ as this server also allows remote workers to log in, but they are restricted to see only data in E:. Disks A-D are hidden via group policy.
Update: icacls is failing on a large number of files within this dataset. I counted the path characters to ensure it wasn't the 255 character limit I was encountering and verified that the paths being blocked are only about 150 characters long. Once it finishes,
I'll have to try taking ownership and then re-running it. At this point I still have no idea how long to expect. I'm running out of time as the environment will be in use again at 9AM tomorrow morning.

ODBC--connection to 'SQL Serverservername' failed for one user but not another

In Win7, we're linking tables in an MS Access 2010 db to tables in a SQL Server 2008 R2 db. The driver user by the File dsn is SQL Server version 6.01.7601.17514 & we're using SQL Server Authentication.
For some reason, one user gets the msg "ODBC--connection to 'SQL Serverservername' failed" before they're even asked for a password, but for other users, the prompt comes up and when they uncheck the Windows Auth box, they enter their password
and connect successfully to the SQL Server db. Both users have db_datareader access to the SQL Server db.
I had the user that gets the error msg log onto my PC and they get the same error (yet it works for me.)
This user was, however, able to successfully relink the tables, but then when we closed the access db and opened it again, the user got the "ODBC--connection..." error agin.
I'm stumped as to why this is happening for one user.

Hello Knellen,
Please help to collect more log information regarding this issue, such as windows event log, SQL Sever log information. They are helpful for us to troubleshoot it.
Regards,
Elvis Long
TechNet Community Support

IE 11 Enhanced Security improperly enabled for one user in domain

Similar Messages

Maybe you are looking for