P6 Claim Digger Issue - access is denied

I couldn't use P6 claim digger since access is denied. I'm using P6.7 standalone version.
The following is error message.
an application event has been intercepted. ID 914162.1
event code: AID-3473-B
Type: EOleException
Description: Access is denied
Please let me know how to solve this. Thanks in advance.
Eddy

We are having the same issue. Here is the report it generates
I have found this that seems to point to the same issue, however not very helpful in resolving it.
http://www.linkedin.com/groups/Update-Baseline-additional-scope-without-906467.S.45554941
Any help at all would be awesome.
* EXCEPTION REPORT *
Date: 28-Dec-11
Executable: PM.exe
Application: Primavera P6 Project Management
Event Code: AID-3473-B
Message:
Access is denied
Context:
1: TfrmUsers.vqsUsersRowChange
2: TfrmUsers.DoPopupUsers
3: TfrmMain.actAdminUsersExecute
4: TfrmMain.actProjectsExecute
5: TCFormManager.SetToolbar
6: TfrmLogin.FormCreate
7:
8:
9:
10:
Detail:
Type: EOleException
Object Type: TfrmMain
System Info
===========
Username:*edited out* Hostname: edited out
OS Version: Windows NT ver 5.2, build 3790, Service Pack 2 (Intel Pentium)

Similar Messages

Unable to access claim digger in P6 Professional R8.3.2

Hi
I cannot access claim digger in P6 Professional R8.3.2. The programme shows the following message:
The selected application: c:\progra~1\java\jre1.7.0_15\bin\javaw.exe cannot be found.
How could this problem be solved?
Thanks

Hi,
P6 will use JAVA application to run Claim Digger. Based on the error, P6 cannot find the JAVA set in the JAVA_HOME to run javaw.exe. Please set the right JAVA_HOME variable in the environment variable so P6 can find Java and then run claim digger,
Regards,
Pablo
========
Was our answer helpful?
If so, highlight the information for other Community members by rating it or marking the answer as correct.
Just hit the “Correct Answer” link on the answer, or rate it by clicking "Helpful Answer" or "Like".

Error encountered while signing: The Windows Cryptographic Service Provider reported an error: Access was denied because of a security violation. Error Code: 2148532330

Last night when i tried to sign a document i received the mesage below and after that it says this document can't be signed what can i do to fix this problem.
Error encountered while signing:
The Windows Cryptographic Service Provider reported an error:
Access was denied because of a security violation.
Error Code: 2148532330

I assume you are implying "biztax" application here, right?
I have contacted their program lead, with no result at all.
Past days I have been searching for a solution - reinstalls / new systems - no solution.
This issue appeared a week or two ago only.
I found http://forums.adobe.com/message/5338853 useful - but no positive results either.
http://test.eid.belgium.be/faq/faq_nl.htm obviously didnt help either.
If anyone finds a solution to this issue, please do let me know - any help is appreciated.
Biztax tells to use the "signature", not the "authentication" - but it is only Auth. that is showing up as option to sign (that works)
ps, did you fiddle with the Adobe Reader XI security settings and import that PKI etc as well? I hoped that would be the breaktrough. Sadly i'm still crying in my chair.
Oh, and dont forget: they claim nobody else got this issue. Maybe one or two people. (We got about 8 customers experiencing exactly the same symptoms at the same time )
> I noticed that when I try to open the pdf document that is 'signed' by the government it is not showing the filename in the title bar, but only " - Adobe Reader". every piece of info helps I guess.
Obviously last version of Reader 11.0.03

Could not retrieve a valid windows identity - access is denied

Background:
We have a reporting solution based on SQL Server 2012 SP1 running on Server 2008 R2. Users access the solution through SharePoint 2013. We have several hundred users and all is well with the exception of 2 users.
Problem:
When these 2 users try and open a SSRS report they receive an error. The entry is the SharePoint log reads:
SPSecurityContext.WindowsIdentity: Could not retrieve a valid
windows identity for NTName='domain\username', UPN='[email protected]'.
UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.Security.SecurityAccessDeniedException: Access is denied.
Other details (thoughts):
We are confident that Kerberos and C2WTS are set up and working correctly (we have a couple of hundred users working).
We suspect it may be Active Directory related but can find nothing that sets the users apart from everyone else.
Has anyone any suggestions to resolve this?

Hi Robin,
If you have a One Way Transitive Trust setup between the domain, where the Windows Services reside, and the other domain where the users reside. Then please refer to the link below and set two-way trusts:
http://blogs.msdn.com/b/psssql/archive/2012/08/20/sharepoint-adventures-reporting-services-claims-and-one-way-trusts.aspx
If not, then some users could access Excel Services while others could not, the issue might be caused by credentials. Please refer to the link below:
http://blogs.msdn.com/b/rodneyviana/archive/2011/07/19/troubleshooting-claims-to-windows-nt-token-service-c2wts-in-sharepoint-2010-may-be-difficult-if-you-don-t-know-where-to-start.aspx
Please try narrowing down the issue and test if only internal machine works. More information about the error message:
http://blogs.msdn.com/b/andrasg/archive/2010/05/04/setting-up-sharepoint-2010-excel-services-to-get-external-data.aspx
Regards,
Rebecca Tu
TechNet Community Support

Getting Access is Denied when Running Script in OSD Task Sequence

I am attempting put in a script that will move the computer account to the proper OU in AD. I have the script but when it launches inside of the TS I get "CScript Error: Loading script "C:\_SMSTaskSequence\WDPackage\Scripts\MoveOU.vbs" failed
(Access is denied. )."
I am using the Run Command Line, and using the "Run this step as the following account" I have verified that the account has access to do what I need it to do in AD. I have attached the logs as well.
PackageID = 'WI10015A' InstallSoftware
3/21/2012 8:46:53 AM 3316 (0x0CF4)
BaseVar = '', ContinueOnError='' InstallSoftware
3/21/2012 8:46:53 AM 3316 (0x0CF4)
SwdAction = '0001' InstallSoftware
3/21/2012 8:46:53 AM 3316 (0x0CF4)
Getting linked token InstallSoftware
3/21/2012 8:46:53 AM 3316 (0x0CF4)
failed to get the token information InstallSoftware
3/21/2012 8:46:53 AM 3316 (0x0CF4)
Get RunAs private desktop SMSTS-169042\SMSTSDesktop
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Run command line under a user account InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Found the location for the package _SMSTSWI10015A. The location is on \\<SCCMSERVERNAME>\SMSPKGF$\WI10015A\
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
nPos != CCM::Utility::String::npos, HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,253)
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Creating a connection to \\<SCCMSERVERNAME>\SMSPKGF$\WI10015A\ with default account
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Connection request for "\\<SCCMSERVERNAME>\SMSPKGF$\WI10015A"
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
No credentials available for connecting to "\\<SCCMSERVERNAME>\SMSPKGF$\WI10015A". See whether the share has already been connected.
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Connecting to "\\<SCCMSERVERNAME>\SMSPKGF$\WI10015A"
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Successfully connected to "\\<SCCMSERVERNAME>\SMSPKGF$\WI10015A"
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Resolved source to '\\<SCCMSERVERNAME>\SMSPKGF$\WI10015A'
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Command line for extension .exe is "%1" %* InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Set command line: Run command line InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Working dir '\\<SCCMSERVERNAME>\SMSPKGF$\WI10015A'
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Executing command line: Run command line InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Create a process under given user token InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Process completed with exit code 1 InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Microsoft (R) Windows Script Host Version 5.8
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Copyright (C) Microsoft Corporation. All rights reserved.
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
CScript Error: Loading script "C:\_SMSTaskSequence\WDPackage\Scripts\MoveOU.vbs" failed (Access is denied. ).
InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Command line returned 1 InstallSoftware
3/21/2012 8:46:54 AM 3316 (0x0CF4)
Entering ReleaseSource() for \\<SCCMSERVERNAME>\SMSPKGF$\WI10015A\
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
reference count 1 for the source \\<SCCMSERVERNAME>\SMSPKGF$\WI10015A\ before releasing
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Released the resolved source \\<SCCMSERVERNAME>\SMSPKGF$\WI10015A\
InstallSoftware 3/21/2012 8:46:54 AM
3316 (0x0CF4)
Process completed with exit code 1 TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
TSManager 3/21/2012 8:46:54 AM
2520 (0x09D8)
Failed to run the action: Move Computer to Correct OU.
Incorrect function. (Error: 00000001; Source: Windows)
TSManager 3/21/2012 8:46:54 AM
2520 (0x09D8)
Sending status message . . . TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
Send a task execution status message SMS_TSExecution_ActionFailError
TSManager 3/21/2012 8:46:54 AM
2520 (0x09D8)
MP server <SCCMSERVERNAME> and port 80. SSL=false. CRL=false.
TSManager 3/21/2012 8:46:54 AM
2520 (0x09D8)
Site code: WI1 TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
Client machine name: 1J44KQ1 TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
Client Identity: GUID:6ffb32d4-1184-4e40-a1c8-26272a707a72
TSManager 3/21/2012 8:46:54 AM
2520 (0x09D8)
Advertisement ID: WI12029D TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
Package ID: WI1001E7 TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
Sending StatusMessage TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
Formatted header: TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
<Msg SchemaVersion="1.1" ReplyCompression="zlib"><ID/><SourceID>ABB94CBE-33F4-4EB9-A151-34EE3474A0F9</SourceID><SourceHost/><TargetAddress>mp:[http]MP_StatusManager</TargetAddress><ReplyTo>direct:OSD</ReplyTo><Priority>3</Priority><Timeout>3600</Timeout><SentTime>2012-03-21T12:46:54Z</SentTime><Protocol>http</Protocol><Body
Type="ByteRange" Offset="0" Length="4174"/><Hooks/><Payload Type="inline"/><TargetHost/><TargetEndpoint>StatusReceiver</TargetEndpoint><ReplyMode>Sync</ReplyMode><CorrelationID/></Msg>
TSManager
3/21/2012 8:46:54 AM 2520 (0x09D8)
CLibSMSMessageWinHttpTransport::Send: URL: <SCCMSERVERNAME>:80 CCM_POST /ccm_system/request
TSManager 3/21/2012 8:46:54 AM
2520 (0x09D8)
The request has succeeded. 200 OK TSManager
3/21/2012 8:46:55 AM 2520 (0x09D8)
Set a global environment variable _SMSTSLastActionRetCode=1
TSManager 3/21/2012 8:46:55 AM
2520 (0x09D8)
Set a global environment variable _SMSTSLastActionSucceeded=false
TSManager 3/21/2012 8:46:55 AM
2520 (0x09D8)
Clear local default environment TSManager
3/21/2012 8:46:55 AM 2520 (0x09D8)
Let the parent group (Testing) decides whether to continue execution
TSManager 3/21/2012 8:46:55 AM
2520 (0x09D8)
The execution of the group (Testing) has failed and the execution has been aborted. An action failed.
Operation aborted (Error: 80004004; Source: Windows)
TSManager 3/21/2012 8:46:55 AM
2520 (0x09D8)
Failed to run the last action: Move Computer to Correct OU. Execution of task sequence failed.
Incorrect function. (Error: 00000001; Source: Windows)
TSManager 3/21/2012 8:46:55 AM
2520 (0x09D8)
Any suggestions would be greatly appreciated!
"You can't fix stupid!"

I'm having the exact same issue. I'm using AutoIT for my script to move the computer account. I've tried using ADO, LDAP, and LDAP/ADSystemInfo object. They all fail with access denied. In fact the ADO version of my script fails just
trying to create the "ADODB.Connection" object which I know for a fact doesn't require elevation or administrator access. However, all three versions of the script work correctly when run manually outside the TS. They also work correctly on XP
machines during OSD. Only when deploying a Win7 machine do they fail during the TS. I've tried adding the runas user to the local administrators group beforehand but no dice. Did you have to restart the computer after doing the net localgroup
change? There has to be some other security config in Win7 that is set somewhere doing this. I just can't figure out what. I've even started looking at DCOM/COM permissions to see if something isn't right there.
I don't see why but maybe the script needs to be run locally? Any other ideas?

Office Web Apps Server - Access is denied

Hello,
I was able to create an Office Web Apps server and was able to create a new farm for that server all without any issues, everything works great.
Unfortunately right after creating the farm, when attempting to run any other related powershell commands such as:
Get-OfficeWebAppsFarm
Remove-OfficeWebAppsFarm
I get this error in powershell:
Get-OfficeWebAppsFarm : Access is denied.
At line:1 char:1
+ Get-OfficeWebAppsFarm
+ ~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-OfficeWebAppsFarm], SecurityAccessDeniedException
    + FullyQualifiedErrorId : System.ServiceModel.Security.SecurityAccessDeniedException,Microsoft.Office.Web.Apps.Adm
   inistration.GetFarmCommand
Although everything is actually working on the server, I'd like to be able to use those other commands in the future so I can check configurations, use "Remove" for running updates, etc... Unfortunately it appears as though this Access is
denied error may interfere with those activities.
Has anyone seen this before?
Thank you

Hi,
According to your post, my understanding is that you failed to run any other related powershell commands after creating the farm for Office Web Apps server.
If the account trying to get OfficeWebAppsFarm does not have local admin access on the machine you will simply get an “Access is denied”.
Please make sure you have the permission to run the commands.
More information:
http://www.wictorwilen.se/office-web-apps-2013-securing-your-wac-farm
Thanks,
Linda Li
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Linda Li
TechNet Community Support

Select certificate - 403 Forbidden: Access is denied in Safari

Safari is asking to 'Select Certificate' for a website.
It shows two certificates the old one which expired in Feb last year and the current one which is set to expire in 3011!
Regardless which one you choose it comes back with....
Server Error
403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.
p.s. This is the current version on Windows Vista and have replicated it on another computer. Have tried uninstalling (and deleteing all Apple's hidden updaters/helpers and all folders in the setting/program files areas). Then re-installed and exactly the same problem comes back.
Tried it on a Mac too with the same problem.
The website is www.amplicon.com and the certificate is issued by 'COMODO CA Limited'

Your right, it works fine from my home. Just tried it on the Mac here. But it was a client that first informed us of the problem and trying it from the office on both Mac and PC Safari fialed but all other browsers were fine.
At the office everything is synced to the network time clock, and I can tell you we would know if the time was wrong...
But as it was fialing on both the Mac and PC versions in the same building it seems like it's not a OS issue, maybe it's our DNS server or something on the windows network that Safari is not dealing with that well, but other browsers seem to have no problems with.
We did change SSL supplier recently, maybe it's only a problem with browsers that have had the old and new certificate running in the browser.
I would just think it was an internal issue, but as it was reported by a regular client it is obviously replicable in more than one location.
Is there any hidden places Safari hides the certificate info that would not get removed when you uninstall Safari? Like in the registry or in windows somewhere, if so is there a way to clear it. Or could it be getting it from a cache somewhere on the network?
It's not really a big issue as we don't have many Safari users, but we do like to make sure Safari is supported and works on the site.

Server Error 403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.

Hi,
I`d like to get your advice on Server Error 403 - Forbidden: Access is denied. I use to visit a webpage with no issues so far but now i getting this error each time i`m trying to get into. Any ideas in how to solve it? A step to step process will be highly appreciated.
Thanks.
PS, I`m using the latest safari 8.0.3 and OS X 10.10.2.

It's an error message from the web server, not from Safari. There's a slight chance that you might be able to clear it as follows.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data...
and confirm. Test.

Project Server 2010 PWA Provisioning Error - System.UnauthorizedAccessException: Access is denied.

Hi,
When migrating from a Prod Environment to a Test Environment using the Project Server 2010 5 Database backup and restore process (actually 6 DB's with the Project Sites DB), upon encountering a failure during provisioning the PWA Instance, we get the errors listed
at the base of this posting in our Event Logs.
To clarify what we have done already, we have:
1. Backed up the 6 databases from the Source Environment.
2. Removed the existing PWA_Content and PWS_Content (Project Sites) databases from the Target Environment Farm.
3. Restored the 6 databases in the Target Environment.
4. Given the SP Farm Service Account 'db_owner' rights to each of the 6 restored databases.
5. Added the PWA_Content and PWS_Content databases (exact same names) to the Target Environment.
6. Locked down (offline/stopped), all of the SharePoint Content databases in the Farm except for the PWA_Content database.
7. Run the PWA Provisioning process from the 'Project Server' SharePoint Service in Central Admin.
It is during the PWA provisioning that we encounter these errors.
As the Target Environment is for Test/Dev purposes, the SP Farm Service Account is setup to support all of the SharePoint Farm Services, is in the Local Admin Group of each of the Servers (App, WFE and DB), and is actually in the sysadmin
role on the DB Server.
Any suggestions on what is causing this denied access situation would be most appreciated.
Cheers,
Wayne
Event Log Entries:
============================================
Log Name:      Application
Source:        Microsoft-SharePoint Products-Project Server
Date:          1/22/2014 2:47:34 PM
Event ID:      6971
Task Category: Provisioning
Level:         Error
Keywords:
User:          ACCOUNTS\svc_psfarm
Computer:      SERVER.accounts.domain.com
Description:
Failed to provision site PWA with error: Microsoft.Office.Project.Server.Administration.ProvisionException: Membership synchronization failed. ---> System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
   at Microsoft.SharePoint.Library.SPRequest.AddRoleDef(String bstrUrl, String bstrName, String bstrDescription, Boolean bHidden, Int32 lRoleOrder, UInt64 iPermMask, Byte iType, Int32 lRoleDefID)
   at Microsoft.SharePoint.SPRoleDefinitionCollection.AddCore(SPRoleDefinition role)
etc....
Failed to create the Report Center web (Exception: PSI Entry Point:
Project User: DOMAIN\svc_psfarm Correlation Id: c0a30b18-46e4-4447-b469-f8fd3bb1490a
PWA Site URL: http://pstest2010/PWA
SSP Name: Project Server
PSError: NoError (0))
Failed to grant 'DOMAIN\svc_psfarm' access to web application 'SPWebApplication Name=Portal'.
Error: System.Security.SecurityException: Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPUpdateWorkerProcessGroup, Microsoft.SharePoint, Version=14.0.0.0,
Culture=neutral, PublicKeyToken=71e9bce111e9429c.
   at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType)
   at Microsoft.SharePoint.Administration.SPUpdateWorkerProcessGroup..ctor(SPTimerService timerService, String[] loginsToAdd, String[] loginsToRemove)
   at Microsoft.SharePoint.Administration.SPWebApplication.GrantAccessToProcessIdentity(String username, SPPolicyRoleType policyRole)
   at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.GrantAccessToWebApp(List`1 webApps, String userName) The Zone of the assembly that failed was: MyComputer

Is the Test and Production in the same domain. If they are not, then the SIDs associated with the SQL accounts may look the same but they are not. At times, I have had to recreated accounts when in different domains.
I would also use PowerShell cmdlets and see if it finds any issues, such as Test-SPContentDatase.. Validate the SharePoint content databases, because if not setup properly the Provisioning will fail.
Also check these properties.
$web=get-spweb http://prodproj01/pwa
$Web.AllProperties[“PWAURL”] ### see what the value is.. you may have to blank it out, specially if it is pointing to a different URL
Here is how to fix.
$Web.AllProperties[“PWAURL”]=””
$web.Update()
Michael Wharton, MVP, MBA, PMP, MCT, MCTS, MCSD, MCSE+I, MCDBA
Website http://www.WhartonComputer.com
Blog http://MyProjectExpert.com contains my field notes and SQL queries

SSIS BULK INSERT unsing UNC inside of ForEach Loop Container Failed could not be opened. Operating system error code 5(Access is denied.)

Hi,
I am trying to figure out how to fix my problem
Error: Could not be opened. Operating system error code 5(Access is denied.)
Process Description:
Target Database Server Reside on different Server in the Network
SSIS Package runs from a Remote Server
SSIS Package use a ForEachLoop Container to loop into a directory to do Bulk Insert
SSIS Package use variables to specified the share location of the files using UNC like this
\\server\files
Database Service accounts under the Database is runing it has full permission on the share drive were the files reside.
In the Execution Results tab shows the prepare SQL statement for the BULK insert and I can run the same exact the bulk insert in SSMS without errors, from the Database Server and from the server were SSIS package is executed.
I am on a dead end and I don’t want to re-write SSIS to use Data Flow Task because is not flexible to update when metadata of the table changed.
Below post it has almost the same situation:
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/8de13e74-709a-43a5-8be2-034b764ca44f/problem-with-bulk-insert-task-in-foreach-loop?forum=sqlintegrationservices

Insteresting how I fixed the issue, Adding the Application Name into the SQL OLAP Connection String Fixed the issue. I am not sure why SQL Server wasn't able to open the file remotely without this.

SSRS 2005 report: Cannot bulk load Operating system error code 5(Access is denied.)

I built a SSRS 2005 report, which calls a stored proc on SQL Server 2005. The proc contains following code:
CREATE TABLE #promo (promo VARCHAR(1000))
BULK
INSERT #promo
FROM '\\aseposretail\c$\nz\promo_names.txt'
WITH
--FIELDTERMINATOR = '',
ROWTERMINATOR = '\n'
SELECT * from #promo
It's ok when I manually execute the proc in SSMS.
When I try to run the report from BIDS I got following error:
*Cannot bulk load because the file "\aseposretail\c$\nz\promo_names.txt" could not be opened. Operating system error code 5(Access is denied.).*
Note: I have gooled a bit and see many questions on this but they are not relevant because I CAN run the code no problem in SSMS. It's the SSRS having the issue. I know little about the security of SSRS.

I'm having the same type of issue. I can bulk load the same file into the same table on the same server using the same login on one workstation, but not on another. I get this error:
Msg 4861, Level 16, State 1, Line 1
Cannot bulk load because the file "\\xxx\abc.txt" could not be opened. Operating system error code 5(Access is denied.).
I've checked SQL client versions and they are the same, I've also set the client connection to TCP/IP only in the SQL Server Configuration Manager. Still this one workstation is getting the error. Since the same login is being used on both workstations and it works on one but not the other, the issue is not a permissions issue. I can also have another user login into the bad workstation and have the bulk load fail, but when they log into their regular workstation it works fine. Any ideas on what the client configuration issue is? These are the version numbers for Management Studio:
Microsoft SQL Server Management Studio 9.00.3042.00
Microsoft Analysis Services Client Tools 2005.090.3042.00
Microsoft Data Access Components (MDAC) 2000.085.1132.00 (xpsp.080413-0852)
Microsoft MSXML 2.6 3.0 5.0 6.0
Microsoft Internet Explorer 6.0.2900.5512
Microsoft .NET Framework 2.0.50727.1433
Operating System 5.1.2600
Thanks,
MWise

Server 2012 R2 - "Access is denied." error

so this has been happening ever since i've installed Windows updates on our accounting server(windows server 2012 r2), and upgraded the RAM on the VM server(all these Server 2012 R2's are hosted on a VMware 5.5, client & server) . Sometimes, when trying
to log in as an Active Directory user via RDP, i'll get an "Access is denied" error. This occurs for 3 different users, all of whom are domain admins. When this done happen, I'm only able to log in as the local machine administrator. Our AD server
is also a 2012 R2.
Some things to note:
1) I can ping to the AD server, and ping from AD to the accounting server in question- all traffic is allowed over a VPN connection, and no traffic is being blocked by the firewall. Windows Firewall is turned off completely for both servers. Tracert finds
both servers in 3 hops, but times out on the 2nd hop. also, the preferred DNS server for the accounting is the IP address for the primary domain controller.
2) The time is the same on both the AD and accounting servers(at least when logged in as a local admin on the accounting server). Most of the most recent Windows updates are installed on both.
3) I've tried removing the accounting server from the domain, and adding it back to the domain, and removing the accounting computer object in AD- the computer object was never added back after rejoining the domain, automatically or manually.
3) I can't run a gpupdate on this accounting server. It returns this error:
Computer policy could not be updated successfully. The following errors were encountered:
Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user or computer because this computer's clock is not synchronized with the clock of one of the domain controllers for the domain. Because of this issue, this computer system may not be in compliance with the network administrator's requirements, and users of this system may not be able to use some functionality on the network. Windows will periodically attempt to retry this operation, and it is possible that either this system or the domain controller will correct the time settings without intervention by an administrator, so the problem will be corrected.
If this issue persists for more than an hour, checking the local system's clock settings to ensure they are accurate and are synchronized with the clocks on the network's domain controllers is one way to resolve this problem. A network administrator may be required to resolve the issue if correcting the local time settings does not address the problem. User Policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windowswill automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. To diagnose thefailure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.so this has been happening ever since i've installed Windows
updates on our accounting server(windows server 2012 r2), and upgraded
the RAM on the VM server(all these Server 2012 R2's are hosted on a
VMware 5.5, client & server) . Sometimes, when trying to log in as
an Active Directory user via RDP, i'll get an "Access is denied" error.
This occurs for 3 different users, all of whom are domain admins. When
this done happen, I'm only able to log in as the local machine
administrator. Our AD server is also a 2012 R2.
Some things to note:
1) I can ping to the AD server, and ping from AD to the accounting
server in question- all traffic is allowed over a VPN connection, and no
traffic is being blocked by the firewall. Windows Firewall is turned
off completely for both servers. Tracert finds both servers in 3 hops,
but times out on the 2nd hop. also, the preferred DNS server for the
accounting is the IP address for the primary domain controller.
2) The time is the same on both the AD and accounting servers(at
least when logged in as a local admin on the accounting server). Most of
the most recent Windows updates are installed on both.
3) I've tried removing the accounting server from the domain, and
adding it back to the domain, and removing the accounting computer
object in AD- the computer object was never added back after rejoining
the domain, automatically or manually.
3) I can't run a gpupdate on this accounting server. It returns this error:
Computer policy could not be updated successfully. The following errors were encountered:
Windows was unable to determine whether new Group Policy settings defined by a network administrator should be enforced for this user or computer because this computer's clock is not synchronized with the clock of one of the domain controllers for the domain. Because of this issue, this computer system may not be in compliance with the network administrator's requirements, and users of this system may not be able to use some functionality on the network. Windows will periodically attempt to retry this operation, and it is possible that either this system or the domain controller will correct the time settings without intervention by an administrator, so the problem will be corrected.
If this issue persists for more than an hour, checking the local system's clock settings to ensure they are accurate and are synchronized with the clocks on the network's domain controllers is one way to resolve this problem. A network administrator may be required to resolve the issue if correcting the local time settings does not address the problem. User Policy could not be updated successfully. The following errors were encountered:
The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windowswill automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. To diagnose thefailure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
so GPResults.html shows this(domain and AD user hidden just in case):
DOMAIN\ADuser on ACCOUNTING2
Data collected on: 12/16/2014 1:02:44 PM show all
Summaryhide
During last computer policy refresh on 12/16/2014 12:56:05 PM
   A fast link was detected More information...
During last user policy refresh on 12/16/2014 12:56:05 PM
   A fast link was detected More information...
Computer Detailshide
Generalhide
Computer name ACCOUNTING2
Domain Local
Site (None)
Security Group Membership hide
Mandatory Label\System Mandatory Level
Everyone
BUILTIN\Users
NT AUTHORITY\SERVICE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
NT AUTHORITY\This Organization
NT SERVICE\BITS
NT SERVICE\CertPropSvc
NT SERVICE\DsmSvc
NT SERVICE\Eaphost
NT SERVICE\hkmsvc
NT SERVICE\IKEEXT
NT SERVICE\iphlpsvc
NT SERVICE\LanmanServer
NT SERVICE\MMCSS
NT SERVICE\MSiSCSI
NT SERVICE\NcaSvc
NT SERVICE\RasAuto
NT SERVICE\RasMan
NT SERVICE\RemoteAccess
NT SERVICE\Schedule
NT SERVICE\SCPolicySvc
NT SERVICE\SENS
NT SERVICE\SessionEnv
NT SERVICE\SharedAccess
NT SERVICE\ShellHWDetection
NT SERVICE\wercplsupport
NT SERVICE\Winmgmt
NT SERVICE\wuauserv
LOCAL
BUILTIN\Administrators
Component Statushide
Component Name Status Time Taken Last Process Time Event Log
Group Policy Infrastructure Success   12/16/2014 12:56:05 PM
Registry Success   12/12/2014 8:05:55 AM
Security Success   12/12/2014 8:06:01 AM
Settingshide
No settings defined.
Group Policy Objectshide
Applied GPOshide
Denied GPOshide
Local Group Policy [LocalGPO]show
Link Location Local
Extensions Configured
Enforced No
Disabled None
Security Filters
Revision AD (0), SYSVOL (0)
WMI Filter
Reason Denied Empty
WMI Filtershide
Name Value Reference GPO(s)
None
User Detailshide
Generalhide
User name DOMAIN\ADuser
Domain domainname.local
Security Group Membership show
DOMAINNAME\Domain Users
Everyone
BUILTIN\Users
BUILTIN\Administrators
NT AUTHORITY\REMOTE INTERACTIVE LOGON
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
NT AUTHORITY\This Organization
LOCAL
DOMAINNAME\Backup Admins
DOMAINNAME\Scans FTP Users
DOMAINNAME\Scans FTP Admin
DOMAINNAME\Domain Admins
Authentication authority asserted identity
DOMAINNAME\Denied RODC Password Replication Group
Mandatory Label\High Mandatory Level
Component Statushide
Component Name Status Time Taken Last Process Time Event Log
Group Policy Infrastructure Success   12/16/2014 12:56:05 PM
Settingshide
No settings defined.
Group Policy Objectshide
Applied GPOshide
Denied GPOshide
Local Group Policy [LocalGPO]hide
Link Location Local
Extensions Configured
Enforced No
Disabled None
Security Filters
Revision AD (0), SYSVOL (0)
WMI Filter
Reason Denied Empty
WMI Filtershide
Name Value Reference GPO(s)
None
Also, in the accounting server, i get multiple Microsoft-Windows-Security-Kerberos (codes 4 & 5)
and
Microsoft-Windows-GroupPolicy (codes 1030 & 1126) in the All
Servers > Events page. Where can i find the "Details" tab for the
error code and description?
any help would be greatly appreciated. thanks!

So I believe that I've fixed the time issue, but it still sometimes kicks off users on this accounting server, and gpupdate doesn't work. I have 2 domain controllers, and it seems that when this server queries the secondary domain controller(which was "screwed
up", i was told by the previous IT guy who set this environment up), i get the Event ID 1030[GroupPolicy (Microsoft-Windows-GroupPolicy)] error and error # 4(Security-Kerberos) after the gpupdate fails.
and Vivian, i do have a problem with AD replication. i cannot replicate the secondary DC with the primary DC. i get several event id 4 codes on the secondary DC.
when i try to force a replication via AD Sites & Services > Sites... Servers > NTDS Settings of primary DC > Right-click > Replicate Now, i get the error:
"The follow error occured during the attempt to contact the Domain Controller DCPRIMARYNAME(actual domain name hidden for privacy): The target principal name is incorrect."
which is interesting, because i've seen this "target principal name is incorrect" error in several event viewer error codes in different Servers(all 2012 R2).

EWS API - Impersonating to update a calendar item created by any other user than a service account, raise an error "Access is denied. Check credentials and try again."

Hi,
I am new to using EWS managed APIs.
Following is the issue:
1. I am using a service account e.g. [email protected]. This user is a global administrator and also has ApplicationImpersonation role assigned. (Sign into Online Office 365 account -> Admin -> select "Exchange" tab- > select Permissions
on the left panel -> create an impersonation role -> assign ApplicationImpersonation in Roles: and [email protected] in Members: -> Click on save)
2. Create a calendar item by other user for e.g. [email protected], and invite an attendee - [email protected].
3. In a c# program, I connect to EWS service using a service account - [email protected], fetch its calendar events. If organizer of an event is some other user - [email protected] then
I use impersonation in the following way to update the calendar event/item properties- subject, body text etc.
        private static void Impersonate(string organizer)
            string impersonatedUserSMTPAddress = organizer;
            ImpersonatedUserId impersonatedUserId =
                new ImpersonatedUserId(ConnectingIdType.SmtpAddress, impersonatedUserSMTPAddress);
            service.ImpersonatedUserId = impersonatedUserId;
4. It was working fine till yesterday afternoon. Suddenly, it started throwing an exception "Access is denied. Check credentials and try again." Whenever I try to
update that event.
       private static void FindAndUpdate(ExchangeService service)
            CalendarView cv = new CalendarView(DateTime.Now, DateTime.Now.AddDays(30));
            cv.MaxItemsReturned = 25;
            try
                FindItemsResults<Item> masterResults = service.FindItems(WellKnownFolderName.Calendar, cv);
                foreach (Appointment item in masterResults.Items)
                    if (item is Appointment)
                        Appointment masterItem = item as Appointment;
                        if (!masterRecurEventIDs.Contains(masterItem.ICalUid.ToString()))
                            masterItem.Load();
                            if (!masterItem.Subject.Contains(" (Updated content)"))
                                //impersonate organizer to update and save for further use
                                Impersonate(masterItem.Organizer.Address.ToString());
                                // Update the subject and body
                                masterItem.Subject = masterItem.Subject + " (Updated content)";
                                string currentBodyType = masterItem.Body.BodyType.ToString();
                                masterItem.Body = masterItem.Body.Text + "\nUpdated Body Info:
xxxxxxxxxxxx";
                                // This results in an UpdateItem operation call to EWS.
                                masterItem.Update(ConflictResolutionMode.AutoResolve);
                                // Send updated notification to organizer of an appointment
                                CreateAndSendEmail(masterItem.Organizer.Address.ToString(), masterItem.Subject);
                                masterRecurEventIDs.Add(masterItem.ICalUid.ToString());
                            else
                                Console.WriteLine("Event is already updated. No need to update again.:\r\n");
                                Console.WriteLine("Subject: " + masterItem.Subject);
                                Console.WriteLine("Description: " + masterItem.Body.Text);
            catch (Exception ex)
                Console.WriteLine("Error: " + ex.Message);
5. What could be an issue here? Initially I thought may be its a throttling policy which is stopping same user after making certain API call limits for the day, but I am still seeing this issue today.
Any help is appreciated.
Thanks

Your logic doesn't sound correct here eg
2. Create a calendar item by other user for e.g. [email protected], and invite an attendee - [email protected]
3. In a c# program, I connect to EWS service using a service account - [email protected], fetch its calendar events. If organizer of an event is some other user - [email protected] then
I use impersonation in the following way to update the calendar event/item properties- subject, body text etc.
When your connecting to [email protected] mailbox the only user that can make changes to items within
abccalendar is abc (or ABC's delegates). If your impersonating the Organizer of the appointment pqr that wouldn't work unless the organizer had rights to abc's calendar. If you want to make updates to a calendar
appointment like that you should connect to the Organizers mailbox first update the original, send updates and then accept the updates.
When you impersonate your impersonating the security context of the Mailbox your impersonating so its the same a logging on as that user in OWA or Outlook.
Cheers
Glen

Access is denied while accessing .js file through OHS URL

I have a strange issue, can somone share your thoughts Please,
We have deployed deployed the WebCenterPortal application into the server, and it is working fine if we access it through the deployed server url, but,
we have a http server(Oracle HTTP Server)to protect the deployed applications url, here when iam trying to access the same deployed url using http server url, it is working fine for all the pages but not for some pages , it showing the below error,
Message: Access is denied.
Line: 89
Char: 282
Code: 0
URI: http://xxxxx/portl/afr/partition/ie/n/default/opt/core-11.1.1.6.0-1318.js

Sure Yannick,
we have Webcenter Portal servers on Linux box, and OHS is on Windows box,
We are able to access all the pages but some pages its throwing the java script error mentioned above, we have not included any javascript code inside the pages, that core-11.1.1.6.0-1318.js could be a framework javascript file,
Here is the ohs entry,
</Location>
<Location /PortalOne>
SetHandler weblogic-handler
WeblogicHost exalogichostname
WeblogicPort xxxxx
</Location>
Please let me if i can give more information about the issue

Access is denied while creation hfm classic application in workspace

access is denied while creation hfm classic application in workspace. i have given full roles and access to my admin user. still i am facing same issue.
i am trying to create classic application workspace under
Access is denied.
Access is denied.
Show Details:
Error Reference Number: {401A779B-3846-4645-852B-D036AF74C7DA}
Num: 0x80070005;Type: 1;DTime: 9/26/2008 7:10:10 PM;Svr: KOTHRUD;File: CHsxClient.cpp;Line: 1087;Ver: 9.3.1.0.1502;
Num: 0x80070005;Type: 1;DTime: 9/26/2008 7:10:10 PM;Svr: KOTHRUD;File: CHsxClient.cpp;Line: 768;Ver: 9.3.1.0.1502;
Num: 0x80070005;Type: 0;DTime: 9/26/2008 7:10:10 PM;Svr: KOTHRUD;File: CHsxClient.cpp;Line: 3430;Ver: 9.3.1.0.1502;
Num: 0x80070005;Type: 0;DTime: 9/26/2008 7:10:10 PM;Svr: KOTHRUD;File: CHFMwManageApplications.cpp;Line: 2152;Ver: 9.3.1.0.1502;

Hello,
Do you have the HFM ADM drivers installed on the workspace server -- I believe if you do not have those installed then you are going to have some issues.
Regards,
-John

P6 Claim Digger Issue - access is denied

Similar Messages

Maybe you are looking for