LCK files being created with PAK files when processed through ODDC

I'm encountering a problem where after commit of a batch in ODDC the files are transferred to the server, but the PAK files are accompanied by a LCK file that is preventing the Distributed Document Capture service from picking them up and processing them. This started occurring after ODDC Patch 4 (14538424) was applied. I'd blame the patch, but not all users encounter the problem. Users encountering the problem are using Win7 and IE9. That said, users that don't encounter the problem are using the same OS and browser. Has anyone encountered this before? What was the resolution? I suspect it's a browser setting, but haven't identified it yet.
Thanks

I stumbled on a link in the oracle forum which says that the "create or replace package XXX" at the start of the PL/SQL procedure when run seems to intermittently cause the ORA-04068: existing state of packages has been discarded problem.
As per the solution suggested an “alter package XXX compile" can be executed after the changes are made and then we would no longer get the error in BPEL/ESB and dont have to bounce the server too.
__http://forums.oracle.com/forums/thread.jspa?threadID=185762_
However the above solution does not seem to resolve the issue.
Any help in this regard would be highly appreciated.
Thanks,
Deepthi

Similar Messages

Accounts being created with administrative group rights

Hello,
The server is a Windows 2003 R2 Enterprise fully patched used for Shared Hosting purposes. It runs Hsphere control panel. I am trying to identify how the following hack is happening.
1) There are users being created with Administrative group rights.   Below is the EventViewer log for the user creation:
User Account Created:
    New Account Name:    username
    New Domain:    PCNAME
    New Account ID:    PCNAME\username
    Caller User Name:    PCNAME$
    Caller Domain:    DOMAINNAME
    Caller Logon ID:   (0x0,0x3E7)
    Privileges       -
Attributes:
    Sam Account Name:    username
    Display Name:   <value not set>
    User Principal Name:   -
    Home Directory:   <value not set>
    Home Drive:   <value not set>
    Script Path:   <value not set>
    Profile Path:   <value not set>
    User Workstations:   <value not set>
    Password Last Set:   <never>
    Account Expires:   <never>
    Primary Group ID:   513
    AllowedToDelegateTo:   -
    Old UAC Value:   0x2DAB2B0
    New UAC Value:   0x2DAB2B0
    User Account Control:   -
    User Parameters:   <value not set>
    Sid History:   -
    Logon Hours:   <value changed, but not displayed>
There exists entries as well where the primary group ID is changed to the Administrative group, but I am omitting such.
2) I tried to identify what Caller Logon ID:   (0x0,0x3E7) means. I found out from here:
http://blog.joeware.net/2013/01/14/2667/ that I can use LogonSessions.exe to identify it.
Output from LogonSessions.exe is pasted below (snippet):
[0] Logon session 00000000:000003e7:
    User name:    DOMAINNAME\PCNAME$
    Auth package: NTLM
    Logon type:   (none)
    Session:      0
    Sid:          S-1-5-18
    Logon time:   9/11/2014 12:41:53 PM
    Logon server:
    DNS Domain:
    UPN:
        4: System
      316: smss.exe
      364: csrss.exe
      392: winlogon.exe
      440: services.exe
      452: lsass.exe
      628: svchost.exe
      756: LMAgent.exe
      840: svchost.exe
     1000: spoolsv.exe
     1252: avagent.exe
     1268: camWMIAgent.exe
     1324: cissesrv.exe
     1380: cpqrcmc.exe
     1404: vcagent.exe
     1440: svchost.exe
     1480: HsQuotas.exe
     1740: inetinfo.exe
     1780: EmailAgent.exe
     1856: snmp.exe
     1884: sysdown.exe
     1920: smhstart.exe
     2192: svchost.exe
     2388: cmd.exe
     2396: hpsmhd.exe
     2444: cqmgserv.exe
     2464: cqmgstor.exe
     2484: HSphere.exe
     2596: wmiprvse.exe
     2676: cmd.exe
     2684: rotatelogs.exe
     2692: cmd.exe
     2700: rotatelogs.exe
     2732: searchindexer.exe
     2812: hpsmhd.exe
     2824: cqmghost.exe
     2852: svchost.exe
     3044: cmd.exe
     3052: rotatelogs.exe
     3080: cmd.exe
     3088: rotatelogs.exe
     5452: svchost.exe
     5596: GravitixService.exe
     7392: csrss.exe
     7232: winlogon.exe
     6888: csrss.exe
     9832: winlogon.exe
    10388: wawrapper.exe
    10352: cpqnimgt.exe
     9496: msiexec.exe
     6068: w3wp.exe
     4748: webalizer.exe
3) I also learned from http://support.microsoft.com/kb/243330/en-us that Sid:          S-1-5-18 means:
SID: S-1-5-18
Name: Local System
Description: A service account that is used by the operating system
That is all great info, but I am not sure I can put together what I have learned to attempt and get closer towards identifying how in the world users are being created and then being assigned administrative group rights.
I am a Linux person mostly, but I am comfortable following a properly explained thread regarding windows 2003 R2 Enterprise issues.
The server is fully patched and it is running Lumension security product. What's more, Norman Malware tracker, tdskiller.exe (Kaspersky) and McAfee rootkitremover.exe have been run without any apparent Malware/Virus infection
Hope someone with advanced admin skills can advise.
Thank you

Hi,
You mentioned that, “I am trying to identify how the following hack is happening”, would you please tell us that why did you think the event represent a hacking behavior?
In a Shared Server Hosting environment, the underlying hosting control panel tool (Hsphere in this case) should be creating only virtual FTP users with a specific group. So no users with Administrative group should be ever created. If this happens,
it constitutes a breach of server security=positive hacking attempt.
>how in the world users are being created and then being assigned administrative group rights.
In addition, would you please be more specific about this question? Did you find the event message on a domain joined machine?
I want to be able to understand in full how/what process is allowing users to be created with Admin rights. In other words, I want to know what IP was used to issue the command, if ASP.net was used (abused in this case), or anything else related to
it so that we can patch this particular hole.
Best Regards,
Amy

XMP files not being created with DNGs...

I'm used to using Bridge with ACR to process Nikon NEFs. But a recent camera update has me experimenting with converting the D3's NEFs to DNG files and editing them with CS2 and Bridge 1.04 which works better on my system. I've also experimented with CS3 and Bridge 2.1.1.9 with the same DNG files.
In both cases XMP files are not being created when working with DNG files. I have enabled "Save image settings in : Sidecar ".xmp" files" turned ON. But they do not seem to be generated and I assume the ACR adjustments are being embedded in the DNG file. Meanwhile doing edits on NEF files continues to create .xmp files as expected.
I find .xmp files to be very useful and I'm wondering why they're missing with DNG files? Are they hiding somewhere other than in the same folder that the images reside in?
Thanks.
Russell

> The information contained in the XMP file is stored in the DNG file so there is no need for a separate file.
Aww, yuck!! That's a real drag...
When editing lots of files (yesterday's shoot produced 8GB) I back everything up to off-line storage and then, after doing all my edits and crops in ACR, I only have to copy over the small XMP files which takes no time at all.
So if I re-edit the DNG with ACR I have to re-copy ALL the files again to the off-line storage.
I used to sometimes even save 2 versions of the xmp files when I needed 2 different crops of the same images, such as doing a wide screen 'cinema' crop for a corporate client's Intranet presentation of their event, as well as more standard crops to be used for their newsletters.
Guess I won't be using DNG any more..
Thanks for the help Kees :-)
Russell

Duplicate text files being created with ~ appended

Whenever I edit a text file with TextEditor and save it, a duplicate file is created with a ~ appended to the end of the name.
Example:
After editing and saving my_file.txt my_file~.txt is also created.
The result is I get two files with exactly the same contents.
my_file.txt
my_file~.txt
I would really like to stop it from doing this. It clutters up everything. It has done this since I first installed the OS. My file system format is Mac OS Extended (Journaled). Any suggestions?

I looked through the preferences for TextEditor. I had "Delete the automatic backup file unchecked". I think checking this option will fix the problem.

Auto Save folder not being created with new project

Just recently I've noticed that when I start a new project there is no auto save folder being created. I have all preferences the same (auto save every 10 min with a max of 50 and save next to project files). I have no idea why this started or what I can do to fix it.

So it seems to be working now. I went back through other projects that have been open for some time and the most recent auto save file I could find for any of them was from Oct. 8th. So auto save hasn't been working at all. What I did was go into preferences and change the interval a little and the frequency from where I had had it since intial set up. That seemed to have told it to turn it back on for some reason. It's really weird. I guess I'll just keep an eye on it, but people may want to check there folders just in case the same issue is happening. I didn't realize it until today and it's been happening for a couple of weeks apparently.

What happens to the form I created with free trial when I upgrade?

I signed up for a free AdobeForms account 6 months ago. In that time I created a really detailed form. I am still able to access the account and the form to this day without any problems. However I now want to upgrade my account so I can do more with the form I created with the free account.
What will happen to my existing form when I upgrade my AdobeForms account to paid subscription? I am assuming it would just remain in my account. However when my secretary called to order the full subscription, the sales rep suggested that the existing form created via the trial would be wiped-out upon upgrading the account.
Is this true/accurate? I do not want to lose the form I have already perfected when upgrading.
Thank you for any info!!

Thanks! Ok... well we're going to order the full subscription now, I made a PDF backup of the web form in case, but really looking forward to not losing the designed form.

File Adapter not writing file when processed from one node in a clustered environment

In our environment, we have 4 server nodes running. We are using a file adapter to write file to a location in the server. the adapter is writing files when its processing data in all nodes except one.
Below is the JCA File
<connection-factory location="eis/FileAdapter" adapterRef=""/>
<endpoint-interaction portType="Write_ptt" operation="Write">
<interaction-spec className="oracle.tip.adapter.file.outbound.FileInteractionSpec">
<property name="PhysicalDirectory" value="/data/prd"/>
<property name="FileNamingConvention" value="Sample.dat"/>
<property name="Append" value="true"/>
</interaction-spec>
</endpoint-interaction>
the File Adapter health is running OK. What would be the potential cause

In our environment, we have 4 server nodes running. We are using a file adapter to write file to a location in the server. the adapter is writing files when its processing data in all nodes except one.
Below is the JCA File
<connection-factory location="eis/FileAdapter" adapterRef=""/>
<endpoint-interaction portType="Write_ptt" operation="Write">
<interaction-spec className="oracle.tip.adapter.file.outbound.FileInteractionSpec">
<property name="PhysicalDirectory" value="/data/prd"/>
<property name="FileNamingConvention" value="Sample.dat"/>
<property name="Append" value="true"/>
</interaction-spec>
</endpoint-interaction>
the File Adapter health is running OK. What would be the potential cause

TLB STO's created in ECC via cif are being created with Intercompany Markup

STO's created using TLB in APO when cif'd over to ECC6 get created with an Intercompany Markup. When created manually in ECC6 using ME21N the markup is not part of the pricing and is correct. Has anyone had this same situation?

Abhishek,
ECC Route is is part of ECC Transportation and Delivery scheduling,
( http://help.sap.com/erp2005_ehp_02/helpdata/EN/dd/5607e7545a11d1a7020000e829fd11/frameset.htm )
and is not directly linked to SCM means of transport in standard SCM. The analogue to Route in SCM is found in shipment scheduling in SCM. If you wish to link route to alternative Means of Transport, you will need to use an enhancement.
If you elect to use the more standard 'shipment scheduling' functionality to schedule your STOs instead of an enhancement, you do not need to implement the entire TLB or TPVS, you can pretty much implement just the shipment scheduling functionality.
http://help.sap.com/saphelp_scm700_ehp02/helpdata/EN/05/f8923945b12c4de10000000a114084/frameset.htm
Best Regards,
DB49

Sales Order Outbound IDOC - Restricting Items being created with a Segment

Hi,
I have a requirement to restrict segments being created for Items (Child) in Sales Order Outbound IDOC based on conditions in the Items (Parent & Child). Can you please suggest me a suitable solution?
Basic Type: ORDERS05, Message Type: ORDRSP. What is the IDOC Function Module to be used to create Outbound IDOC for Sales Order?
Appreciate Your Help.
Thanks,
Kannan
Edited by: Kannan SA on Jan 3, 2008 3:03 PM

Hi,
if the segments are mandatory then you can't trigger the idoc without those segments.
Otherwise, you can read the segment and clear all the data in it, the segment will not be attached to the outbound idoc.
Where to do it? Search the CALL CUSTOMER-FUNCTION '002' for the outbound idoc for example IDOC_OUTPUT_INVOICE for Invocing.
Regards,
Baburaj

A problem with initiating a BPEL process through its web service interface

hi,
i am trying to initiate the helloWorld BPEL process through its web service interface. i use a proxy class that i wrote and i use it from J#.net.
this is the relevant code part:
hello.HelloWorldBinding wsProxy = new hello.HelloWorldBinding();
wsProxy.initiate("Hello");
and the server shows the following message:
ORABPEL-05002
Message handle error.
An exception occurred while attempting to process the message "com.collaxa.cube.
engine.dispatch.message.invoke.InvokeInstanceMessage"; the exception is: Cannot
decode properties.
The process domain was unable to decode the properties for message guid 10, whic
h are stored in column String index out of range: 3094; the exception reported i
s: {2}.
sql statement: SELECT conv_id, message_guid, domain_ref, process_id, revision_ta
g, operation_name, receive_date, state, priority, properties FROM invoke_message
WHERE message_guid = ?
at com.collaxa.cube.engine.dispatch.DispatchHelper.handleMessage(Dispatc
hHelper.java:152)
at com.collaxa.cube.engine.dispatch.BaseScheduledWorker.process(BaseSche
duledWorker.java:70)
at com.collaxa.cube.engine.ejb.impl.WorkerBean.onMessage(WorkerBean.java
:86)
at com.evermind.server.ejb.MessageDrivenBeanInvocation.run(MessageDriven
BeanInvocation.java:123)
at com.evermind.server.ejb.MessageDrivenHome.onMessage(MessageDrivenHome
.java:755)
at com.evermind.server.ejb.MessageDrivenHome.run(MessageDrivenHome.java:
928)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(Relea
sableResourcePooledExecutor.java:186)
at java.lang.Thread.run(Thread.java:534)
<2006-05-10 21:21:15,171> <ERROR> <default.collaxa.cube.engine.data> <BaseDeliveryPersistenceAdaptor::loadInvokeMetaDa
java.lang.StringIndexOutOfBoundsException: String index out of range: 3094
at java.lang.String.substring(String.java:1441)
at com.collaxa.common.util.LVDecoder.decodeElement(LVDecoder.java:152)
at com.collaxa.common.util.LVDecoder.decodeToMap(LVDecoder.java:45)
at com.collaxa.cube.engine.adaptors.common.BaseDeliveryPersistenceAdaptor.loadInvokeMetaData(BaseDeliveryPersi
r.java:2186)
at com.collaxa.cube.engine.adaptors.common.BaseDeliveryPersistenceAdaptor.__loadInvoke(BaseDeliveryPersistence
:2112)
at com.collaxa.cube.engine.adaptors.common.BaseDeliveryPersistenceAdaptor.loadInvoke(BaseDeliveryPersistenceAd
079)
at com.collaxa.cube.engine.data.DeliveryPersistenceMgr.loadInvoke(DeliveryPersistenceMgr.java:357)
at com.collaxa.cube.engine.delivery.DeliveryService.handleInvoke(DeliveryService.java:465)
at com.collaxa.cube.engine.ejb.impl.CubeDeliveryBean.handleInvoke(CubeDeliveryBean.java:335)
at ICubeDeliveryLocalBean_StatelessSessionBeanWrapper16.handleInvoke(ICubeDeliveryLocalBean_StatelessSessionBe
java:1796)
at com.collaxa.cube.engine.dispatch.message.invoke.InvokeInstanceMessageHandler.handle(InvokeInstanceMessageHa
7)
at com.collaxa.cube.engine.dispatch.DispatchHelper.handleMessage(DispatchHelper.java:125)
at com.collaxa.cube.engine.dispatch.BaseScheduledWorker.process(BaseScheduledWorker.java:70)
at com.collaxa.cube.engine.ejb.impl.WorkerBean.onMessage(WorkerBean.java:86)
at com.evermind.server.ejb.MessageDrivenBeanInvocation.run(MessageDrivenBeanInvocation.java:123)
at com.evermind.server.ejb.MessageDrivenHome.onMessage(MessageDrivenHome.java:755)
at com.evermind.server.ejb.MessageDrivenHome.run(MessageDrivenHome.java:928)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:186)
at java.lang.Thread.run(Thread.java:534)
what is the problem? how come i can't initiate the process?
i will be happy if i could get help..
thanks in advance

can you initate the process from the bpel console successfully?
if so can you use obtunnel from the installation to trace the soap message (that goes over the wire), my best guess in this case is a problem with a header (holding the wsa information) ..
after starting obtunnel it will liesten to a custom port, and will forward the request to the engine, so you need to point your client to this new port..
hth clemens

Why is my Zip file being created with size of O KB?

I have the following code
public static int createZip (String directory)
                   throws IOException {
     File path = new File( directory );
     File outZip = new File("c:\\wip\\sams9dbExport.zip");
     boolean boo = outZip.createNewFile();
     FilenameFilter filter = new FilenameFilter() {
        public boolean accept(File dir, String name) {
            return name.endsWith(".xml");
    if ( outZip.exists() ) System.out.println("File exists");
     System.out.println(" Files and filters made");
     // These are the files to include in the ZIP file
     String[] fileList = path.list(filter);
    // Create a buffer for reading the files
    byte[] buf = new byte[1024];
    try {
        // Create the ZIP file
        String outFilename = "sams9dbExport.zip";
        ZipOutputStream out = new ZipOutputStream( new FileOutputStream( outFilename ) );
        // Compress the files
        for ( int i=0; i < fileList.length; i++ ) {
            FileInputStream in = new FileInputStream( "c:\\wip\\"+fileList[i] );
             System.out.println( fileList[i] );
            // Add ZIP entry to output stream.
            out.putNextEntry( new ZipEntry( "c:\\wip\\"+fileList[i] ) );
            System.out.println("Added an entry");
            // Transfer bytes from the file to the ZIP file
            int len;
            while ( ( len = in.read( buf ) ) > 0 ) {
                out.write( buf, 0, len );
            // Complete the entry
            out.closeEntry();
            in.close();
        // Complete the ZIP file
         out.close();
    } catch (IOException e) {
         System.out.println( e.toString() );
         return 0;
    return 1;
}And I get the following output
SQL> @ziptest
File exists
Files and filters made
AH_QUERY.xml
Added an entry
myclob.xml
Added an entry
myclob1.xml
Added an entry
myclob2.xml
Added an entry
PERSONNEL.xml
Added an entry
PERS_ALG.xml
Added an entry
sampledoc.xml
Added an entry
ut_ah_query1.xml
Added an entry
ut_provider.xml
Added an entry
PL/SQL procedure successfully completed.
SQL>
But my file is created empty. I previously added a println statement in the while loop to see if it was reading and writing bytes and it was.
Any ideas?

I have the following code
public static int createZip (String directory)
throws IOException {
File path = new File( directory );
File outZip = new
= new File("c:\\wip\\sams9dbExport.zip");
boolean boo = outZip.createNewFile();So these two lines will create sams9dbExport.zip with size 0 bytes, if file didn't exist.
No need to do that....
try {
// Create the ZIP file
String outFilename = "sams9dbExport.zip";
ZipOutputStream out = new ZipOutputStream(
tStream( new FileOutputStream( outFilename ) );Probably you are looking a wrong "sams9dbExport.zip" -file. Your application will create two "sams9dbExport.zip"-files, one into wip-folder with 0 bytes, and other into default directory.
>
But my file is created empty. I previously added a
println statement in the while loop to see if it was
reading and writing bytes and it was.
Any ideas?

Problem with mapping parameter when specified through an XML config file

I have decided to attept to stipulate UDT mapping parameters from C# to Oracle in the AppConfig File.
The original code (which worked) was as follows:
namespace RoyalLondon.Processes.Oracle.Dto
[OracleCustomTypeMappingAttribute("TEST_SCHEMA.T_PROJECT_CODE_CHANGES")]
class ProjectCodeChangeTableFactory : TableFactoryTemplate<ProjectCodeChangeTableDTO>
So, I've commented out the [OracleCustomTypeMappingAttribute line and added the following into the config file:
<oracle.dataaccess.client>
    <settings>
      <add name="ProjectCodeChangeTableDTO"
       value="udtMapping factoryName='RoyalLondon.Processes.Oracle.Dto.ProjectCodeChangeTableFactory, RoyalLondon.Processes, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'
                         typeName='T_PROJECT_CODE_CHANGES'
                         schemaName='TEST_CON_DEV'"/>
    </settings>
</oracle.dataaccess.client>
This yields the following error message:
Unhandled Exception: System.InvalidOperationException: Custom type mapping for ' RoyalLondon.Processes.Oracle.Dto.ProjectCodeChangeTableDTO' is not specified or is invalid.
All the documentation I have read suggest that this ought to be ok. Is there anything obvious I am missing?

ummm, nevermind.
Turns out I hadn't updated the list of files that went in my servlet's jar file. I was recompiling the jar file successfully each time, but the list of files being included needed to contain a new class. This was a really stupid mistake on my part.
Just one of those things that I was bound to solve as soon as I broke down and posted something on the web. Sort of like taking your umbrella with you to ensure that it won't rain.
If anyone is reading this I am sorry I wasted your time.
Jon

Why are .jpg files with text pixelated when projecting through Keynote?

I have a police report that I'm trying to project through Keynote as part of a larger presentation. It projects beautifully if I just mirror the screen, but for purposes of the presentation I have to use Keynote and can't switch back and forth. The text is so pixelated it's unusable and I've tried scanning at high resolution, but no luck. I'm confused about it projecting fine when not going through Keynote, so I feel like there's maybe a setting in the software I'm missing.
Any ideas?

The text is so pixelated it's unusable
The resolution of the projector will be much lower than the display connected to the Mac.
Therefore, with the projector connected and powered on, open System Preferences > Displays, in the settings window for the projector, select scaled option and set to the highest pixel size listed.
I've tried scanning at high resolution, but no luck.
You have scanned a paper document?
Then scan to at least 1200 x 800 pixels, do not use a dpi or ppi setting in the scan software, use pixels, then save as a TIFF file.
I'm confused about it projecting fine when not going through Keynote, so I feel like there's maybe a setting in the software I'm missing.
Set the slide size in: Inspector > Document > Document > Slide Size; use custom from the drop down menu and enter 1280 x 800
The inspector is the side panel on the right hand side

Locally cached copy of roaming profiles are being created with username.domainname.00x suffix

First off let me give some background as to where we've come from and how we got to where we are today. In my organazation we initially setup a Win 2k3 domain with roaming profiles. The roaming profiles worked without a problem for about 6 years. We migrated to a Windows 2k8 domain (non-2008 native mode) about two years ago. Profiles have been working fine. We recently did a rollout of 80% of our client machines with newly leased machines. Once we did this, the profile issues have been...interesting to say the least. I've been seeing a couple machines having issues loading their profiles correctly. The users will complain of not being able to use MS Outlook, or they don't have their proper desktop icons on their desktop. These erros can present themselves when the user changes their domain acct. password (per our security policey) or it may happen just out of the blue. The user may be working perfectly fine on Monday, and then log off and on Tuesday when they login to their computer, the user will have these problems. When this is reported to me, I login the computer that is having the issue and I look at the C:\Documents and Settings folder and I'll see sometimes multiple bogus profiles. The profiles have a naming convention of %username%.%domainname%.00X . The .00X will increment up 1 with each bogus profile. Each of these bogus profiles will have only the local settings folder in them. In order to fix this problem, we typically delete all the local profiles and let the computer pull the server copy back down. Can someone please shed some light on this for me. Thanks.

I have the exact same issue. All my machines are SP3 as well. I have tried UPHClean and it makes no difference. It's completely random when the username.domain.000 accounts start appearing and accounts become corrupt causing the same issue with outlook or a different set of desktop icons. After almost 3 months of having to reset user profiles (we have 1700 AD accounts and 3 IT guys), here's what I've found to this point.
WINLOGON.EXE is the culprit. UPHClean doesn't appear to work well with SP3 or this particular version of WINLOGON. WINLOGON.EXE is locking (handle) the profile directory itself.
7F8: File (RW-) C:\Documents and Settings\(User Directory)
You cannot even run a batch script or something to "restart" winlogon to unlock the folder because it's a system process. When the user logs back in, the pc sees there is already a user profile folder there so it creates a new one with the domain name, rinse and repeat and you get:
Username
Username.Domain
Username.Domain.000
Username.Domain.001
These will go on forever unless you use DELPROF in your GPO as a Computer/Windows/Startup script to remove all "USER ONLY" profiles from the docs and settings folder. This works great other than now, users seem to randomly loose their favorites. This is about the most discussed roaming profile issue on the internet but not a single person nor group of persons has created a 100% working fix for it. It's been a massive headache for me and my guys and I know thousands of other IT guys have or are still struggling with it.
PLEASE Microsoft, fix this winlogon issue so it will release the user profile directory when the user logs out. PLEASE.

CcmEval Scheduled task not being created with "Access Denied" error 0x80070005 only on XP machines

Before coming on here I checked out http://social.technet.microsoft.com/Forums/en-US/ddbfe6c3-ee54-4b2a-a3a7-a6515d974f76/client-check-failed-on-xpserver-2003-systems-onlyccmeval-is-not-being-scheduled?forum=configmanagerdeployment (GPO
to allow scheduled tasks by users) and another thread about a hotfix that seems to be pre-XP SP3 and pre-CM 2012 R2.
That said, I'm having an issue many seem to have, but I can't find the answer. From what I understand SCCM uses the user context to create the CcmEval task, but in XP users cannot set a task to run as any other user (ie SYSTEM in this instance) so what is
the workaround? I can't just give users Administrator permissions to install the client.
The exact log entries are:
<![LOG[Client evaluation task doesn't exist.]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="2" thread="4356" file="ccmevalcheck.cpp:705">
<![LOG[Client evaluation task is not found or is disabled or is not compliant, perform remediation]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="2"
thread="4356" file="ccmevalcheck.cpp:341">
<![LOG[Attempting to recreate client evaluation task.]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="1" thread="4356" file="ccmevalcheck.cpp:833">
<![LOG[Task scheduler 2.0 is not supported, peform task registration with 1.0 API.]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="1" thread="4356"
file="ccmevaltask.cpp:345">
<![LOG[Failed to delete task Configuration Manager Health Evaluation (0x80070002).]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="2" thread="4356"
file="ccmevaltask.cpp:379">
<![LOG[Failed to create task item (0x80070005).]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="3" thread="4356" file="ccmevaltask.cpp:387">
<![LOG[Failed to create client evaluation task.]LOG]!><time="19:05:43.548+360" date="12-14-2013" component="CcmEvalTask" context="" type="2" thread="4356" file="ccmevalcheck.cpp:850">
The bolded section is what's telling me it's Access Denied, and manual creation of any program task set to run as SYSTEM tells me the same- users cannot do this; only admins can.
What can I do?

So after sifting through some RSOP results and GPO objects I found a policy that wasn't necessarily prohibiting creation of them. (Not where you think it would be - under
Administrative Templates > Windows Components > Task Scheduler > "Prohibit New Task Creation" -
this was set to allow them) but this one I found was a File Permissions policy that set SYSTEM permissions to READ and EXECUTE.
I've changed this to FULL CONTROL for SYSTEM. I'm unable to get on the machines to examine everything closely, but from what I can see at least one of them has remediated themselves and now has a successful client check in the console. Hopefully the rest
of them will come around as GP updates itself and the client does an evaluation to remediate the Scheduled Task.
Hopefully this helps someone in the future as well.

LCK files being created with PAK files when processed through ODDC

Similar Messages

Maybe you are looking for