Inconsistent "access denied" on publish

I am at wits end. Am working on a project that involves some editing of one area on client's internal website. Used Contribute just fine for this last year. Now...
When I try to Publish certain pages, I get the "Access denied. Page may not exist or there may be a permission problem." That is, this problem had existed on only SOME pages. Now, I can't publish on any of them.
The permissions are set correctly for me to publish.
No-one else has pages open. (Nobody in the organization knows how to use C anyway.)
I would gladly pay someone to help with this. Hope someone can help.

Was El Sobrante... Had to create a new user ID, etc. because could not log into account. Many cuss-words leap to mind at this point.
No, the thread did not help. I had inconsistent "access denied" on publish for version 3 before I downloaded the trial new version. Same problem on version 5. Now I can't publish at all on any pages AND when I open version 3 it says the version is too old. Thought I'd uninstall 5 but it's the only version showing up. Can't imagine what's going to happen when the trial runs out.
Anyway. Still need to fix the original problem.

Similar Messages

Access Denied - while published

Hello,
Iam trying to publish the changes made on my machine to a
server through the network.
I have all permission (write/modify/delete) on that server,
but when I use Robohelp, getting "Access Denied" error & unable
to publish.
Looks like this happens only to the Flash & XML files.
Any ideas & Suggestions to fix this problem.
Thank you in advance.
Saangy

Welcome, Saangy.
You didn't mention what version of RoboHelp you are using or
what kind of web server you are publishing to. A Windows web server
(IIS)? A UNIX web server? RoboHelp Engine 4? RoboHelp Server 6?
That said, (and not being an IT person) it sounds like a
permissions problem involving your network and not RoboHelp itself.
Just having write/modify/delete permissions is not the only
thing that might cause problems. My guess is that you'll need the
help of your network administrator.
If you'd like to elaborate a bit more, we'll try to help.
john

Access denied when publishing?

Hi folks,
I've been publishing RH8 content to a folder on our network for a while and now it's telling me that Access is denied. Before I go and hassle the admin is there anything in RH that would cause this?
The funny thing is that I can manually copy the generated files into the folder so it just seems as though something is wrong with the publishing process in RH.
Anyway your help appreciated as always.
Nick.

Hi there
In addition to what my esteemed colleague Peter has advised, you might also check the source and destination for a file called thumbs.db. If you find it in either location, delete it. It's a Windows file that gets added to a folder when you view the folder using thumbnails view. And it can cause issues with publishing as Windows sees it as a system type file. So that sometimes throws the publishing process into a dither.
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML 7 or 8 within the day - $24.95!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

Access Denied Error Message in KM for the report published from BI

Hi,
Whenever we publish a Report from Bex Report Designer using Bex Broadcaster the report is getting published in the right KM Folder we choose, but when we click that link with in KM and choose Details we get a message saying "Access Denied". Due to this error that link is invisible in the actual iview where my KM folder is displayed.
This Problem occurs only with Reports from Report Designer and not with Query from Query Designer and Web Templates from Web Application Designer.
The user I use in BI and EP is the same. I am the owner of the KM folder and so I have full access to the folder.
Is there any particular authorization required from BI side?
Thanks
Sathish

This forum supports setup of the .NET Framework itself.
For best suggestions on your web project configuration issue, I suggest you ask in a topical ASP.NET forum, here:
http://forums.asp.net/
This forum may be best:
http://forums.asp.net/26.aspx/1?Configuration+and+Deployment
Thank you for your understanding.

Publishing cancels with "access denied" error when publishing updates to desktop layout

Hello, all,
Wondering if anyone else has run into this issue: we update and republish our help projects frequently. We're currently using a layout based on the desktop layout (colors, fonts, and some other screen elements have changed). The project generates successfully. We publish via file transfer and have the "republish all" setting selected. Sometimes when we publish our multiscreen HTML5 layout, it cancels about halfway through the estimated time with a "publishing cancelled - access denied" error. If we delete the layout folder ("desktop" in this case) from the publishing location and retry publishing, it succeeds.
Has anyone else encountered this issue? If so, what fixes (other than deleting content and republishing) have you found?
FYI, we also publish the same projects to the WebHelp Pro layout without any issues.
Thanks in advance for your help.

This problem used to occur with Publishing from Rh but I have not seen it for a long time, either myself or in posts.
Maybe Item 5 at http://www.grainge.org/pages/snippets/snippets.htm#webhelp will help.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

Is there a way to deny access to BI Publisher in OBIEE 11g?

In 11g, the New button in Answers ists all of the types of objects that a user can create. I've figured out which of the privileges controls the display of each of those options, EXCEPT for all of the options under the Published Reporting category. How can we turn on/off access to those 5 objects (essentially, grant or deny access to the BI Publisher options)?

I figured out the answer about 3 minutes after posting the question.
All of the existing Application Roles are associated with Application Policies that allow access to BI Publisher. By creating a new Application Policy and an associated Role, I can accomplish my goal.

Access denied in my code - Error code:-2147467259

Hi there,
I'm a newbie with CR server technology. I installed yesterday a CR XI trial on my system to do a PoC for a customer who already uses CR. He gave me a rpt file to use in my program.
I'm developing a program where the report is prepared as PDF and then sent by email and fax to certain receivers. I'm in the middle of the work now. Here a first look at my code:
URL url = Thread.currentThread().getContextClassLoader().getResource(
"rpt/1442_11791_OrdersbyVault_OrderA4.crystal9_v4_alg.rpt");
ReportClientDocument clientDoc = new ReportClientDocument();
clientDoc.setReportAppServer("localhost");
String file = new File(url.getFile()).toString();
// Open report
clientDoc.open(file, 0);
This code is inside a EJB session bean which should provide the report later as byte[] to another bean which will send it.
When I execute the bean it usually fails with this exception:
SRVE0014E: Nicht erfasste Ausnahme für service() durch Root ausgeöst /test.jsp: com.crystaldecisions.sdk.occa.report.lib.ReportSDKServerException: Zugriff verweigert. Überprüfen Sie die Verzeichniseinstellungen für Dateien, auf die Sie zugreifen können.---- Error code:-2147467259 Error code name:failed
at com.crystaldecisions.sdk.occa.report.lib.ReportSDKServerException.throwReportSDKServerException(Unknown Source)
at com.crystaldecisions.proxy.remoteagent.r.a(Unknown Source)
at com.crystaldecisions.sdk.occa.report.application.ReportClientDocument.do(Unknown Source)
at com.crystaldecisions.sdk.occa.report.application.ReportClientDocument.if(Unknown Source)
at com.crystaldecisions.sdk.occa.report.application.ReportClientDocument.a(Unknown Source)
at com.crystaldecisions.sdk.occa.report.application.ClientDocument.open(Unknown Source)
at de.szb.bt.service.reporting.reporting.ReportingServiceBean.execute(ReportingServiceBean.java)
at de.szb.bt.service.reporting.reporting.EJSLocalStatelessReportingService_a07b2911.execute(EJSLocalStatelessReportingS
ervice_a07b2911.java:29)
at com.ibm._jsp._test._jspService(_test.java:138)
at com.ibm.ws.jsp.runtime.HttpJspBase.service(HttpJspBase.java:91)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1572)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:762)
at com.ibm.wsspi.webcontainer.servlet.GenericServletWrapper.handleRequest(GenericServletWrapper.java:121)
at com.ibm.ws.jsp.webcontainerext.JSPExtensionServletWrapper.handleRequest(JSPExtensionServletWrapper.java:204)
at com.ibm.ws.jsp.webcontainerext.JSPExtensionProcessor.handleRequest(JSPExtensionProcessor.java:254)
at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3071)
at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:236)
at com.ibm.ws.webcontainer.VirtualHost.handleRequest(VirtualHost.java:210)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1958)
at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:89)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:472)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(HttpInboundLink.java:411)
at com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complete(HttpICLReadCallback.java:101)
at com.ibm.ws.tcp.channel.impl.WorkQueueManager.requestComplete(WorkQueueManager.java:566)
at com.ibm.ws.tcp.channel.impl.WorkQueueManager.attemptIO(WorkQueueManager.java:619)
at com.ibm.ws.tcp.channel.impl.WorkQueueManager.workerRun(WorkQueueManager.java:952)
at com.ibm.ws.tcp.channel.impl.WorkQueueManager$Worker.run(WorkQueueManager.java:1039)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1471)
It fails with an access denied. I know the file is there, I debugged the path and it looks good for me:
"C:workspacesgfi_it-mediaCashmanagementEJBejbModule pt1442_11791_OrdersbyVault_OrderA4.crystal9_v4_alg.rpt"
I'm running the RAS as LocalSystem user so it should have the needed rights to access the file. I haven't found a fitting solution to this yet. I tried to use the publishing assistant tool to add it to a repository but ths didn't help. Any suggestion?
Thanks in advance!
Kai

Hello Kai,You appear to be trying to use the RAS server, which is one of the servers included with Crystal Reports Server, to do "unmanaged" reporting - i.e., run a Crystal Report report that has not been "published" and is managed by the Crystal Report Server.Note that RAS is configured to restrict access to umanaged rpt file to a folder and its subfolder on the system. This folder is specified in the Central Configuration Manager (CCM). Is the location of the rpt file within this folder or subfolder? I'd check that first.Sincerely,TU

EFS Encrypted Files over home workgroup network via WebDAV avoiding Active Directory fixing Access Denied errors

This is for information to help others
KEYWORDS:
- Sharing EFS encrypted files over a personal lan wlan wifi ap network
- Access denied on create new file / new fold on encrypted EFS network file share remote mapped folder
- transfer encryption keys / certificates
- set trusted delegation for user + computer for EFS encrypted files via
Kerberos
- Windows Active Directory vs network file share
- Setting up WinDAV server on Windows 7 Pro / Ultimate
It has been a long painful road to discover this information.
I hope sharing it helps you.
Using EFS on Windows 7 pro / ultimate is easy and works great. See
here and
here
So too is opening + editing encrypted files over a peer-to-peer Windows 7 network.
HOWEVER, creating a new file / new folder over a peer-to-peer Windows 7 network
won't work (unless you follow below steps).
Typically, it is only discovered as an issue when a home user wants to use synchronisation software between their home computers which happens to have a few folders encrypted using windows EFS. I had this issue trying to use GoodSync.
Typically an "Access Denied" error messages is thrown when a \\clientpc tries to create new folder / new file in an encrypted folder on a remote file share \\fileserver.
Why such a EFS drama when a network is involved?
Assume a home peer-to-peer network with 2pc: \\fileserver and \\clientpc
When a \\clientpc tries to create a new file or new folder on a \\fileserver (remote computer) it fails. In a terribly simplified explanation it is because the process on \\fileserver that is answering the network requests is a process working for a user on
another machine (\\clientpc) and that \\fileserver process doesn't have access to an encryption certificate (as it isn't a user). Active Directory gets around this by using kerberos so the process can impersonate a \\fileserver user and then use their certificate
(on behalf of the clienpc's data request).
This behaviour is confusing, as a \\clientpc can open or edit an existing efs encrypted file or folder, just can't create a new file or folder. The reason editing + opening an encrypted file over a network file share is possible is because the encrypted
file / folder already has an encryption certificate, so it is clear which certificate is required to open/edit the file. Creating a new file/folder requires a certificate to be assigned and a process doesn't have a profile or certificates assigned.
Solutions
There are two main approaches to solve this:
 1) SOLVE by setting up an Active Directory (efs files accessed through file shares)
 EFS operations occur on the computer storing the files.
 EFS files are decrypted then transmitted in plaintext to the client's computer
 This makes use of kerberos to impersonate a local user (and use their certificate for encrypt + decrypt)
 2) SOLVE by setting up WebDAV (efs files accessed through web folders)
 EFS operations occur on the client's local computer
 EFS files remain encrypted during transmission to the client's local computer where it is decrypted
 This avoids active directory domains, roaming or remote user profiles and having to be trusted for delegation.
 BUT it is a pain to set up, and most online WebDAV server setup sources are not for home peer-to-peer networks or contain details on how to setup WebDAV for EFS file provision
 READ BELOW as this does
Create new encrypted file / folder on a network file share - via Active Directory
It is easily possible to sort this out on a domain based (corporate) active directory network. It is well documented. See
here. However, the problem is on a normal Windows 7 install (ie home peer-to-peer) to set up the server as part of an active directory domain is complicated, it is time consuming it is bulky, adds burden to operation of \\fileserver computer
and adds network complexity, and is generally a pain for a home user. Don't. Use a WebDAV.
Although this info is NOT for setting up EFS on an active directory domain [server],
for those interested here is the gist:
Use the Active Directory Users and Computers snap-in to configure delegation options for both users and computers. To trust a computer for delegation, open the computer’s Properties sheet and select Trusted for delegation. To allow a user
account to be delegated, open the user’s Properties sheet. On the Account tab, under Account Options, clear the The account is sensitive and cannot be delegated check box. Do not select The account is trusted for delegation. This property is not used with
EFS.
NB: decrypted data is transmitted over the network in plaintext so reduce risk by enabling IP Security to use Encapsulating Security Payload (ESP)—which will encrypt transmitted data,
Create new encrypted file / folder on a network file share - via WebDAV
For home users it is possible to make it all work.
Even better, the functionality is built into windows (pro + ultimate) so you don't need any external software and it doesn't cost anything. However, there are a few hotfixes you have to apply to make it work (see below).
Setting up a wifi AP (for those less technical):
 a) START ... CMD
 b) type (no quotes): "netsh wlan set hostednetwork mode=allow ssid=MyPersonalWifi key=12345 keyUsage=persistent"
 c) type (no quotes): "netsh wlan start hostednetwork"
Set up a WebDAV server on Windows 7 Pro / Ultimate
-----ON THE FILESERVER------
 1 click START and type "Turn Windows Features On or Off" and open the link
 a) scroll down to "Internet Information Services" and expand it.
 b) put a tick in: "Web Management Tools" \ "IIS Management Console"
 c) put a tick in: "World Wide Web Services" \ "Common HTTP Features" \ "WebDAV Publishing"
 d) put a tick in: "World Wide Web Services" \ "Security" \ "Basic Authentication"
 e) put a tick in: "World Wide Web Services" \ "Security" \ "Windows Authentication"
 f) click ok
 g) run HOTFIX - ONLY if NOT running Windows 7 / windows 8
KB892211 here ONLY for XP + Server 2003 (made in 2005)
KB907306 here ONLY for Vista, XP, Server 2008, Server 2003 (made in 2007)
2 Click START and type "Internet Information Services (IIS) Manager"
3 in IIS, on the left under "connections" click your computer, then click "WebDAV Authoring Rules", then click "Open Feature"
 a) on the right side, under Actions, click "Enable WebDAV"
4 in IIS, on the left under "connections" click your computer, then click "Authentication", then click "Open Feature"
 a) on the "Anonymous Authentication" and click "Disable"
 b) on the "Windows Authentication" and click "Enable"
 NB: Some Win 7 will not connect to a webDAV user using Basic Authentication.
 It can be by changing registry key:
 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient\Parameters]
 BasicAuthLevel=2
 c) on the "Windows Authentication" click "Advanced Settings"
 set Extended Protection to "Required"
 NB: Extended protection enhances the windows authentication with 2 security mechanisms to reduce "man in the middle" attacks
5 in IIS, on the left under "connections" click your computer, then click "Authorization Rules", then click "Open Feature"
 a) on the right side, under Actions, click "Add Allow Rule"
 b) set this to "all users". This will control who can view the "Default Site" through a web browser
 NB: It is possible to specify a group (eg Administrators is popular) or a user account. However, if not set to "all users" this will require the specified group/user account to be used for logged in with on the
clientpc.
 NB: Any user account specified here has to exist on the server. It has a bug in that it usernames specified here are not validated on input.
6 in IIS, on the left under "connections" click your computer, then click "Directory Browsing", then click "Open Feature"
 a) on the right side, under Actions, click "Enable"
HOTFIX - double escaping
7 in IIS, on the left under "connections" click your computer, then click "Request Filtering", then click "Open Feature"
 a) on the right side, under Actions, click "Edit Feature Settings"
 b) tick the box "Allow double escaping"
 *THIS IS VERY IMPORTANT* if your filenames or foldernames contain characters like "+" or "&"
 These folders will appears blank with no subdirectories, or these files will not be readable unless this is ticked
 This is safe btw. Unchecked (default) it filters out requests that might possibly be misinterpreted by buggy code (eg double decode or build url's via string-concat without proper encoding). But any bug would need to be in IIS basic
file serving and this has been rigorously tested by microsoft, so very unlikely. Its safe to "Allow double escaping".
8 in IIS, on the left under "connections" right click "Default Web Site", then click "Add Virtual Directory"
 a) set the Alias to something sensible eg "D_Drive", set the physical path
 b) it is essential you click "connect as" and set
this to a local user (on fileserver),
 if left as "pass through authentication" a client won't be able to create a new file or folder in an encrypted efs folder (on fileserver)
 NB: the user account selected here must have the required EFS certificates installed.
 See
here and
here
 NB: Sharing the root of a drive as an active directory (eg D:\ as "D_Drive") often can't be opened on clientpcs.
 This is due to windows setting all drive roots as hidden "administrative shares". Grrr.
 The work around is on the \\fileserver create an NTFS symbollic link
 e.g. to share the entire contents of "D:\",
 on fileserver browse to site path (iis default this to c:\inetpub\wwwroot)
 in cmd in this folder create an NTFS symbolic link to "D:\"
 so in cmd type "cd c:\inetpub\wwwroot"
 then in cmd type "mklink /D D_Drive D:\"
 NB: WebDAV will open this using a \\fileserver local user account, so double check local NTFS permissions for the local account (clients will login using)
 NB: If clientpc can see files but gets error on opening them, on clientpc click START, type "Manage Network Passwords", delete any "windows credentials" for the fileserver being used, restart
clientpc
9 in IIS, on the left under "connections" click on "WebDAV Authoring Rules", then click "Open Feature"
 a) click "Add authoring rules". Control access to this folder by selecting "all users" or "specified groups" or "specified users", then control whether they can read/write/source
 b) if some exist review existing allow or deny.
 Take care to not only review the "allow access to" settings
 but also review "permissions" (read/write/source)
 NB: this can be set here for all added virtual directories, or can be set under each virtual directory
10 Open your firewall software and/or your router. Make an exception for port 80 and 443
 a) In Windows Firewall with Advanced Security click Inbound Rules, click New Rule
 choose Port, enter "80, 443" (no speech marks), follow through to completion. Repeat for outbound.
 NB: take care over your choice to untick "Public", this can cause issues if no gateway is specified on the network (ie computer-to-computer with no router). See "Other problems+fixes"
below, specifically "Cant find server due to network location"
 b) Repeat firewall exceptions on each client computer you expect to access the webDAV web folders on
HOTFIX - MAJOR ISSUE - fix KB959439
11 To fully understand this read "WebDAV HOTFIX: RAW DATA TRANSFERS" below
 a) On Windows 7 you need only change one tiny registry value:
 - click START, type "regedit", open link
 -browse to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MRxDAV\Parameters]
 -on the EDIT menu click NEW, then click DWORD Value
 -Type "DisableEFSOnWebDav" to name it (no speech marks)
 -on the EDIT menu, click MODIFY, type 1, then click OK
 -You MUST now restart this computer for the registry change to take effect.
 b) On Windows Server 2008 / Vista / XP you'll FIRST need to
download Windows6.0-KB959439 here. Then do the above step.
 NB microsoft will ask for your email. They don't care about licence key legality, it is more to keep you updated if they modify that hotfix
12 To test on local machine (eg \\fileserver) and deliberately bypass the firewall.
 a) make sure WebClient Service is running
 (click START, type "services" and open, scroll down to WebClient and check its status)
 b) Open your internet software. Go to address "http://localhost:80" or "http://localhost:80"
 It should show the default "IIS7" image.
 If not, as firewall and port blocking are bypassed (using localhost) it must be a webDAV server setting. Check "Authorization Rules" are set to "Allow All Users"
 c) for one of the "virtual directories" you added (8), add its "alias" onto "http://localhost/"
 e.g. http://localhost/D_drive
 If nothing is listed, check "Directory Browsing" is enabled
13 To test on local machine or a networked client and deliberately try and access through the firewall or port opening of your router.
 a) make sure WebClient Service is running
 (click START, type "services" and open, scroll down to WebClient and check its status)
 b) open your internet software. Go to address "http://<computer>:80" or "http://<computer>:80".
 eg if your server's computer name is "fileserver" go to "http://fileserver:80"
 It should show the default "IIS7" image. If not, check firewall and port blocking.
 Any issue ie if (12) works but (13) doesn't, will indicate a possible firewall issue or router port blocking issue.
 c) for one of the "virtual directories" you added (8), add its "alias" onto "http://<computername>:80/"
 eg if alias is "C_driver" and your server's computer name is "fileserver" go to "http://fileserver:80/C_drive"
 A directory listing of files should appear.
--- ON EACH CLIENT ----
HOTFIX - improve upload + download speeds
14 Click START and type "Internet Options" and open the link
 a) click the "Connections" tab at the top
 b) click the "LAN Settings" button at the bottom right
 c) untick "Automatically detect settings"
HOTFIX - remove 50mb file limit
15 On Windows 7 you need only change one tiny registry value:
 a) click START, type "regedit", open link
 b) browse to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient\Parameters]
 c) click on "FileSizeLimitInBytes"
 d) on the EDIT menu, click MODIFY, type "ffffffff", then click OK (no quotes)
HOTFIX - remove prompt for user+pass on opening an office or pdf document via WebDAV
16 On each clientpc click START, type "Internet Options" and open it
 a) click on "Security" (top) and then "Custom level" (bottom)
 b) scroll right to the bottom and under "User Authentication" select "Automatic logon with current username and password"
 SUCH an easy fix. SUCH an annoying problem on a clientpc
 NB: this is only an issue if the file is opened through windows explorer. If opened through the "open" dialogue of the software itself, it doesn't happen. This is as a WebDAV mapped drive is consdered a "web folder" by windows
explorer.
TEST SETUP
17 On the client use the normal "map network drive"
 e.g. server= "http://fileserver:80/C_drive", tick reconnect at logon
 e.g. CMD: net use * "http://fileserver:80/C_drive"
 If it doens't work check "WebDAV Authoring Rules" and check NTFS permissions for these folders. Check that on the filserver the elected impersonation user that the client is logging in with (clientpc
"manage network passwords") has NTFS permissions.
18 Test that EFS is now working over the network
 a) On a clientpc, map network drive to http://fileserver/
 b) navigate to a folder you know on the \\flieserver is encrypted with EFS
 c) create a new folder, create a new file.
 IF it throws an error, check carefully you mapped to the WebDAV and not file share
 i.e. mapped to "http://fileserver" not "\\fileserver"
 Check that on clientpc the required efs certificate is installed. Then check carefully on clientpc what user account you specified during the map drive process. Then check on the \\fileserver this
account exists and has the required EFS certificate installed for use. If necessary, on clientpc click START, type "Manage Network Passwords" and delete the windows credentials currently in the vault.
 d) on clientpc (through a webDAV mapped folder) open an encrypted file, edit it, save it, close it. On the \\fileserver now check that file is readable and not gobble-de-goup
 e) on clientpc copy an encrypted efs file into a folder (a webDAV mapped folder) you know is not encrypted on \\fileserver. Now check on the \\fileserver computer that the file is readable and not gobble-de-goup (ie the
clientpc decrypted it then copied it).
 If this fails, it is likely one in IIS setting on fileserver one of the shared virtual directories is set to: "pass through authentication" when it should be set to "connect as"
 If this is not readable check step (11) and that you restarted the \\fileserver computer.
19 Test that clients don't get the VERY annoying prompt when opening an Office or PDF doc
 a) on clientpc in windows explorer browse to a mapped folder you know is encrypted and open an office file and then PDF.
 If a prompt for user+pass then check hotfix (16)
20 Consider setting up a recycling bin for this mapped drive, so files are sent to recycling bin not permanently deleted
 a) see the last comment at the very bottom of
this page:
Points to consider:
 - NB: WebDAV runs on \\fileserver under a local user account, so double check local NTFS permissions for that local account and adjust file permissions accordingly. If the local account doesn't have permission, the webDAV / web folder share won't
either.
- CONSIDER: IP Security (IPSec) or Secure Sockets Layer (SSL) to protect files during transport.
MORE INFO: HOTFIX: RAW DATA TRANSFERS
More info on step (11) above.
Because files remain encrypted during the file transfer and are decrypted by EFS locally, both uploads to and downloads from Web folders are raw data transfers. This is an advantage as if data is intercepted it is useless. This is a massive disadvantage as
it can cause unexpected results. IT MUST BE FIXED or you could be in deep deep water!
Consider using \\clientpc to access a webfolder on \\fileserver and copying an encrypted EFS file (over the network) to a web folder on \\fileserver that is not encrypted.
Doing this locally would automatically decrypt the file first then copy the decrypted file to the non-encrypted folder.
Doing this over the network to a web folder will copy the raw data, ie skip the decryption stage and result in the encrypted EFS file being raw copied to the non-encrypted folder. When viewed locally this file will not be recognised as encrypted (no encryption
file flag, not green in windows explorer) but it will be un-readable as its contents are still encrypted. It is now not possible to locally read this file. It can only be viewed on the \\clientpc
There is a fix:
 It is implimented above, see (11) above
 Microsoft's support page on this is excellent and short. Read "problem description" of "this microsoft webpage"
Other problems + fixes
PROBLEM: Can't find server due to network location.
 This one took me a long time to track down to "network location".
 Win 7 uses network locations "Home" / "Work" / "Public".
 If no gateway is specified in the IP address, the network is set to '"unidentified" and so receives "Public" settings.
 This is a disaster for remote file share access as typically "network discovery" and "file sharing" are disabled under "Public"
 FIX = either set IP address manually and specify a gateway
 FIX = or force "unidentified" network locations to assume "home" or "work" settings -
read here or
here
 FIX = or change the "Public" "advanced network settings" to turn on "network discovery" and "file sharing" and "Password Protected Sharing". This is safe as it will require a windows
login to gain file access.
PROBLEM: Deleting files on network drive permanently deletes them, there is no recycling bin
 By changing the location of "My Contacts" or similar to the root directory of your mapped drive, it will be added to recycling bin locations
 Read
here (i've posted a batch script to automatically make the required reg files)
I really hope this helps people. I hope the keywords + long title give it the best chance of being picked up in web searches.

What probably happens is that processes are using those mounts. And that those processes are not killed before the mounts are unmounted. Is there anything that uses those mounts?

Access denied Error while calling Web Service form Infopath Form 2010.

Hi Dear All,
I have been facing an error while calling an GetUserProfileByName() web service method from InfoPath 2010 from.
i have FBA(Forms Base Authentication )configured . After Infopath form published to site collection when i select an user from people picker control i want to get Email Id of Selected user for that i am calling getUserProfileByName() Web Method, but
i am getting Access denied error code 500.
Any Help would be more than welcome.
Thanks.

Hi,
Greetings. Please check
Check the IE settings. Click Internet Options> Security>Custom level. Make sure that the ‘Access data source across domains’ is enabled. Make sure that you have permission to the web service and to the content which the web service tries to modify.
For more information, please refer to this site:
"Access is denied." error in Infopath 2007 form + ASMX: http://us.generation-nt.com/answer/access-denied-error-infopath-2007-form-plus-asmx-help-65808252.html
Please remember to click 'Mark as Answer' on the answer if it helps you

Getting error-"Process Access denied" while invoking Process as web service

Hi,
I have a very simple Business Process, just to take some input & give some String as output. I published this BP as web service on Oracle BPM - Process Administrator. I got its WSDL also. I can invoke startSession operation. But when I invoke the operation that is exposed by BP as web service, I am getting an error - "Process Access denied".
Please help to solve the issue, as I need it urgently.
Thanks,
Sujata

Hi Ariel,
Thanks for reply and sorry for delay on updating status. Actually our process server was having a problem, so I could not check the same in last 4 days. Now coming to the point....
I changed Process web service by changing authentication type as "Usernname token profile". I have not checked "Required HTTP Basic Authentication". As you said, WSDL got changed, it has removed startSession(). But when I invoke my actual operation, I am supposed to send authentication data (user name & password) in header.
I tried to send correct authentication info in header. But still I am getting an exception.
soapenv:Server.generalException - WSDoAllReceiver: Request does not contain required Security header
I feel header might be going wrong. I have taken header format from web service guide. I am attaching the entire request message taht I am sending, please tell me where I am going wrong...
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:sim="http://bea.com/albpm/Sample/SimpProc">
<soapenv:Header>
<wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wsswssecurity-secext-1.0.xsd">
<wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsu:Created> 2010-06-01T19:23:29.774Z </wsu:Created>
<wsu:Expires> 2010-07-02T15:02:29.774Z </wsu:Expires>
</wsu:Timestamp>
<wsse:UsernameToken>
<wsse:Username>bpr_user</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wssusername-token-profile-1.0#PasswordText">bpruser12</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soapenv:Header>
<soapenv:Body>
<sim:sayHello>
<argInput>ss</argInput>
</sim:sayHello>
</soapenv:Body>
</soapenv:Envelope>
I cehcked with & without wsu:Timestamp. But same.....
Please give your suggestion.
Thanks
Sujata

Subsites Access denied error

Hi
I am trying to access subsites in a sitecolllection.
Although I am able to access the maintenance page with ?contents=1
I am not able to access other existing pages nor when I create new page from pages library and click on save I get access denied error.
Here is the error I see in Logs
The SPPersistedObject, FarmSettingStore Name=_pnpFarmConfig_, could not be updated because the current user is not a Farm Administrator.
And error on the page
Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust
level in the configuration file.
Exception Details: System.Security.SecurityException: Access denied.
Source Error:
[No relevant source lines]
Source File: c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\root\5abc8088\6a71a990\App_Web_homepage.aspx_-1099170352.ltihcxjv.0.cs    Line:
0
Stack Trace:
[SecurityException: Access denied.]
Microsoft.SharePoint.Administration.SPPersistedObject.BaseUpdate() +27672523
Microsoft.Practices.SharePoint.Common.Configuration.FarmSettingStore.Load(SPFarm farm) +341
Microsoft.Practices.SharePoint.Common.Configuration.SPFarmPropertyBag.get_SettingStore() +258
Microsoft.Practices.SharePoint.Common.Configuration.SPFarmPropertyBag.Contains(String key) +51
Microsoft.Practices.SharePoint.Common.Configuration.SPFarmPropertyBag.get_Item(String key) +65
Microsoft.Practices.SharePoint.Common.Configuration.ConfigManager.GetProperty(Type settingType, String key, IPropertyBag propertyBag) +148
Microsoft.Practices.SharePoint.Common.Configuration.ConfigManager.GetFromPropertyBag(String key, IPropertyBag propertyBag) +220
Microsoft.Practices.SharePoint.Common.ServiceLocation.ServiceLocatorConfig.GetConfigData() +311
Microsoft.Practices.SharePoint.Common.ServiceLocation.ServiceLocatorConfig.GetTypeMappings() +50
Microsoft.Practices.SharePoint.Common.ServiceLocation.SharePointServiceLocator.CreateServiceLocatorInstance(SPSite site) +160
Microsoft.Practices.SharePoint.Common.ServiceLocation.SharePointServiceLocator.DoGetCurrent(SPSite site) +957
Microsoft.Practices.SharePoint.Common.ServiceLocation.SharePointServiceLocator.DoGetCurrent() +150
Microsoft.Practices.SharePoint.Common.ServiceLocation.SharePointServiceLocator.GetCurrent() +63
ABC..PropertyBag.Config.ConfigManager.ReadProperty(String propertyName, SPWeb web) +49
ABC.Common.ControlTemplates.ABC.Framework.Common.GlobalSearchBox.SetSearchResultPageUrl() +228
ABC.Common.ControlTemplates.ABC.Framework.Common.GlobalSearchBox.Page_Load(Object sender, EventArgs e) +644
System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) +25
System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) +42
System.Web.UI.Control.OnLoad(EventArgs e) +132
System.Web.UI.Control.LoadRecursive() +66
System.Web.UI.Control.LoadRecursive() +191
System.Web.UI.Control.LoadRecursive() +191
System.Web.UI.Control.LoadRecursive() +191
System.Web.UI.Control.LoadRecursive() +191
System.Web.UI.Control.LoadRecursive() +191
System.Web.UI.Control.LoadRecursive() +191
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +11154599
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +11154138
System.Web.UI.Page.ProcessRequest() +91
System.Web.UI.Page.ProcessRequest(HttpContext context) +240
ASP.HOMEPAGE_ASPX__1099170352.ProcessRequest(HttpContext context) in c:\Windows\Microsoft.NET\Framework64\v2.0.50727\Temporary ASP.NET Files\root\5abc8088\6a71a990\App_Web_homepage.aspx_-1099170352.ltihcxjv.0.cs:0
Microsoft.SharePoint.Publishing.TemplateRedirectionPage.ProcessRequest(HttpContext context) +175
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +599
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +171
This error is in staging environment.
Please help.
Thank you,
Vinay

Hmm. This is not the normal access denied message that you would receive when you don't have permission to a site. Have you customized the page layouts to include something in it?
Andy Wessendorf SharePoint Developer II | Rackspace [email protected]

Access denied error when Loading document library for "contribute" users : Unknown SPRequest error occurred. More information: 0x80070005

Hi,
We are facing a very strange issue on a SharePoint Publishing portal. Domain users (contribute level access) have access to document libraries under specific sub sites. Every morning if they try to access the document library pages, users complain about "Access Denied" issue on document library page. But if a SP Farm admin account login on site, and browse to document library page, access denied issue seems to disappear for end users also. For whole day it works fine. But next day access denied error occurs again. I am not sure why this is happening. I have looked into Event Log and SharePoint Logs, found following information useful, but not sure what to do next.
Please help.
Event log Details:
Server: WFE01
Event Type: Error
Event Source: Office SharePoint Server
Event Category: Publishing
Event ID: 5169
Date:  17/11/2009
Time:  07:47:31
User:  N/A
Computer: SPWFE01
Description:
Console Configuration File Error: XML Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
SP Log files:
All logs are for process: w3wp.exe (0x031C)                       0x17F4 Windows SharePoint Services
·     Begin OnLoad of XmlConsoleDataSource from file "EditingMenu".
·     Attempting to load XML from config file "EditingMenu".
·     PermissionMask check failed. asking for 0x00010000, have 0x00000000
·     Unknown SPRequest error occurred. More information: 0x80070005
·     Access Denied for /Projects/LFB/03 Bid Stage 1/Forms/AllItems.aspx.
·     StackTrace: Microsoft.SharePoint.Utilities.SPUtility:Void HandleAccessDenied(System.Exception), Microsoft.SharePoint.SPGlobal:Void HandleUnauthorizedAccessException(System.UnauthorizedAccessException), Microsoft.SharePoint.Library.SPRequest:Void OpenWeb(System.String, System.String ByRef, System.String ByRef, System.String ByRef, System.Guid ByRef, System.String ByRef, UInt32 ByRef, System.Guid ByRef, UInt32 ByRef, UInt32 ByRef, UInt32 ByRef, UInt16 ByRef, Boolean ByRef, Int16 ByRef, UInt32 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Boolean ByRef, Int16 ByRef, UInt32 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Int16 ByRef, Int32 ByRef, Boolean ByRef, System.String ByRef, System.String ByRef, Int32 ByRef, Int16 ByRef, ...
...System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.String ByRef, System.Object ByRef, Boolean ByRef, UInt64 ByRef, Boolean ByRef, Boolean ByRef, System.Guid ByRef, System.Guid ByRef, Int32 ByRef, System.DateTime ByRef, System.DateTime ByRef, System.String ByRef), Microsoft.SharePoint.SPWeb:Void InitWeb(), Microsoft.SharePoint.SPWeb:Microsoft.SharePoint.SPSecurableObjectImpl get_SecurableObjectImpl(), Microsoft.SharePoint.SPWeb:Microsoft.SharePoint.SPRoleAssignmentCollection get_RoleAssignments(), Microsoft.SharePoint.Publishing.WebControls.ConsoleXmlUtilities:System.String ConfigurationXml(System.String, Boolean), Microsoft.SharePoint.Publishing.W...
...ebControls.ConsoleXmlUtilities:Microsoft.SharePoint.Publishing.WebControls.ConsoleNode GetConsoleNodeCollectionFromXmlFile(System.String, Boolean), Microsoft.SharePoint.Publishing.WebControls.XmlConsoleDataSource:Void LoadTreeFromConfigXml(), Microsoft.SharePoint.Publishing.WebControls.XmlConsoleDataSource:Void OnLoad(System.EventArgs), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Control:Void LoadRecursive(), System.Web.UI.Page:Vo...
...id ProcessRequestMain(Boolean, Boolean), System.Web.UI.Page:Void ProcessRequest(Boolean, Boolean), System.Web.UI.Page:Void ProcessRequest(), System.Web.UI.Page:Void ProcessRequestWithNoAssert(System.Web.HttpContext), System.Web.UI.Page:Void ProcessRequest(System.Web.HttpContext), System.Web.HttpApplication+CallHandlerExecutionStep:Void System.Web.HttpApplication.IExecutionStep.Execute(), System.Web.HttpApplication:System.Exception ExecuteStep(IExecutionStep, Boolean ByRef), System.Web.HttpApplication+ApplicationStepManager:Void ResumeSteps(System.Exception), System.Web.HttpApplication:System.IAsyncResult System.Web.IHttpAsyncHandler.BeginProcessRequest(System.Web.HttpContext, System.AsyncCallback, System.Object), System.Web.HttpRuntime:Void ProcessRequestInternal(System.Web.HttpWorkerReque...
...st), System.Web.HttpRuntime:Void ProcessRequestNoDemand(System.Web.HttpWorkerRequest), System.Web.Hosting.ISAPIRuntime:Int32 ProcessRequest(IntPtr, Int32),
·     Releasing SPRequest with allocation Id {E3BC24ED-F243-4DBD-8625-EE7CF9FDA039}
·     Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
·     Console Configuration File Error: XML Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
·     Releasing SPRequest with allocation Id {D1A87724-6FB6-4009-B6D1-D7E15918E213}
Pryank Rohilla
MCTS, MCAD

Hi pryank,
From the log, it seems that the users don’t have permission on this page:
/Projects/LFB/03 Bid Stage 1/Forms/AllItems.aspx
Does the sub site have unique permission instead of inheriting permission from the parent site? If no, you need to make the sub site to inherit permission from the site collection so that master page also inherits the right. If this is not allowed in your organization, please go to “Site Actions”à “Site Settings” à “Master Pages and Page Layouts” to give users permissions on this document library.
Hope this helps.
Lu Zou

Access Denied Error Message in KM

Hi,
Whenever we publish a Report from Bex Report Designer using Bex Broadcaster the report is getting published in the right KM Folder we choose, but when we click that link with in KM and choose Details we get a message saying "Access Denied". Due to this error that link is invisible in the actual iview where my KM folder is displayed.
This Problem occurs only with Reports from Report Designer and not with Query from Query Designer and Web Templates from Web Application Designer.
The user I use in BI and EP is the same. I am the owner of the KM folder and so I have full access to the folder.
Any solution for this problem.
Thanks
Sathish

This forum supports setup of the .NET Framework itself.
For best suggestions on your web project configuration issue, I suggest you ask in a topical ASP.NET forum, here:
http://forums.asp.net/
This forum may be best:
http://forums.asp.net/26.aspx/1?Configuration+and+Deployment
Thank you for your understanding.

Access Denied error in IE 6 when opening popup calendar

We are in the process of migrating from external ITS to internal ITS. We use a javascript popup calendar which is working fine in the old external ITS, but in the internal ITS we are getting an error 'Access Denied'. This error is only occuring in IE. In Firefox the calendar is working fine.
I have read some information about this problem and it appears that IE has made it more secure for popup windows called from a differernt domain. Why is this message appearing with the Internal ITS. The javascript for the calendar is held within the service files and published to Internal with the other pages. The javascript is being found ok, it is just when the window.open is called that there is a problem.
I have read some posts about this, but none that solve the problem. It talks about SAP using domain relaxing. How do I do this?
I have tried running SAPWF_bindPageToOrigin() from SAPWEBFRAMEWORK.JS in the head of my web page, but this doesn't seem to have any affect. Could it be that I'm using it wrong?
Can anyone help?
Thank you
Karen

Hi Karen,
if you remember, Can you please guide me on how did you modify the JS file SAPWEBFRAMEWORK.JS in ECC.
Thanks .

Portlet editor's rich text editor gives javascript error 'access denied'

I created a header portlet using the Publisher's published content portlet template. When I try to edit the portlet content using the rich text editor in the portlet editor window, I get a javascript error in the status bar stating 'access denied'. I can't even type into the rich text editor window, it's totally disabled. Not that I see anything in there anyway. I'm logged in as admin. I've gone into the publisher explorer admin portlet and even 'published' the portlet's content, but to no avail. When I try to 'add header portlet' in my experience definition and try to use this portlet, nothing shows up, where the header portlet should be is just collapsed so my banner is just the top bar view bumped right on top of the nav view. (p.s. does anyone know how to take the alui doc's suggestion of 'disabling the topbar view and nav view' so that I can construct what I want entirely in a header portlet? Anyway, first things first, how do I get that access denied message to disappear in my header portlet's rich text editor and how the heck do I get it show up? Help.

There's probably not a developer in the forum that doesn't uncheck that box the moment they rebuild their machine/ennvironment. Changing the format of error messaging is hardly a fix for the error itself. Personally, I'm uploading 'file content items' now. I create the content in notepad and then upload > file content item. Then create a portlet that uses the pre-existing (was installed w/ publisher using their pte) 'published content item' web service. Go into the portlet's settings and associate the portlet w/ the content item you uploaded. Voila.
As far as using their rich text editor to create new content, I personally have no need anymore. However I'm sure our content managers will probably have to soon so I hope our latest installation will accommodate them w/o error, because I've never been aware of an actual fix to this problem.

Inconsistent "access denied" on publish

Similar Messages

Maybe you are looking for