RAR offline analysis issue

In our GRC AC 5.3 SP10, we have RAR config tab -risk analysis -additional option - enable offline risk anlysis is set to YES.
But when I run a risk anlysis from informer tab - reports shows offline anlysis:NO.
My queries are:
1. what are difference between yes and no for affline analysis. How does they affect risk analysis report.
2. Is the above scenario a problem? does it provide incorrect result of risk analysis? If yes, how this can be rectified?

If you set offline risk analysis to yes in configuration then when the batch risk analysis background job runs it populates the RAR table virsa_cc_prmvl. So the advantage of offline analysis is you can do risk analysis based on the last batch risk analysis job making the response time better.
In case of online analysis from informer tab the backend system should be available. The advantage here is you are dealing with real time data whereas incase of offline analysis your data is as fresh as the last run batch risk analysis job.
Thank you,
Partha
Edited by: PARTHASARATHY NUNNA on Jun 25, 2010 2:36 PM
Edited by: PARTHASARATHY NUNNA on Jun 25, 2010 2:47 PM

Similar Messages

RAR Risk Analysis Issue in Background Mode - "Failed to Display Result"

Hi,
I have strange problem in RAR.
When I run risk analysis for 20 users in background mode, the job got successful but the spool file is empty. But at the bottom of page there is a message: "Failed to Display Result".
The Job log is showing the following message couple of times:
WARNING: ./virsa/bgJobSpool/19.i (No such file or directory)
java.io.FileNotFoundException: ./virsa/bgJobSpool/19.i (No such file or directory)
     at java.io.FileInputStream.open(Native Method)
     at java.io.FileInputStream.<init>(FileInputStream.java:129)
     at java.io.FileInputStream.<init>(FileInputStream.java:89)
     at java.io.FileReader.<init>(FileReader.java:62)
But When I try to run for few users (like 6 memebrs where selection criteria is AUDIT*) in same way, the spool details got displayed this time. But the log is showing strange error messages this time:
Nov 15, 2010 3:53:53 PM com.virsa.cc.common.util.ExceptionUtil logError
SEVERE: null
java.lang.NullPointerException
     at com.virsa.cc.comp.wdp.IPublicBackendAccessInterface$IAuthForUserInputElement.wdGetObject(IPublicBackendAccessInterface.java)
     at com.sap.tc.webdynpro.progmodel.context.NodeElement.getAttributeAsText(NodeElement.java:888)
Nov 15, 2010 3:53:55 PM com.virsa.cc.dataextractor.bo.DataExtractorSAP getObjPermissions
FINEST: getObjPermissions: elapsed time=1436ms
Nov 15, 2010 3:53:55 PM com.virsa.cc.common.message.util.MessagingHelper getMessage
INFO:
********msg: 'com.virsa.cc.common.message.dao.dto.MessageDTO@34d834d8'
Any ideas please?

Hi Alpesh,
You are correct. The issue is due to multi node environment.
But when I tried to define a custom spool folder path: usr/sap/<SID>/<Instance No>/log/virsa/bgJobSpool (in RAR - Miscellaneous - spool files location for background jobs) & run the risk analysis report in background mode, still RAR is saving the spool files in default location only.
Can you suggest me if I am wrongly defining the location of folder?
Should we define the complete location of the folder i.e starting with drive letter or path starting with user/* is sufficient?
Regards,
Dasarad

GRC Access Control 5.3 - RAR Risk Analysis in offline mode

Hi expert,
I'm trying to do RAR Risk Analysis in offline mode following this guide (https://www.sdn.sap.com//irj/sdn/go/portal/prtroot/docs/library/uuid/20a06e3f-24b6-2a10-dba0-e8174339c47c). But to generate User Action file the ABAP have a problem when try to get a COMPOSITE ROLE field for a Role that is asociate to many Composite role as the unique record consists of fields IDUSER, ROLE and ACTIONFROM . Someone know how we can solve this conflict?
Best Regards!

I'm sorry, I think I haven't made myself clear enough. The thing is that the User Action File has a "Composite Role" field and we don't know how fill it when the Single Role belongs to multiple Composite Roles. This is because of the primary key, we can't make multiple records for each userid/role combination, each one with one different Composite Role, such as the following example:
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLE1
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLE2
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLEN
Should we instead do only one record with all the composite roles? What character should we use to separate the composite role names? A ",", a ";"? For example:
USERIDX/ROLEX/ACTIONX/ACTIONX/PROFILEX/COMPOSITEROLE1_,_ COMPOSITEROLE2_,_ COMPOSITEROLE3
Hope I explained myself. Thanks for your help.

Can you download RAR Risk Analysis reports to something other than Excel?

When you run a RAR Risk Analysis and go to export the resulting reports, RAR automatically exports this into an Excel spreadsheet.
Is it possible to export the reports into some other kind of format/tool? (SQL would be ideal.)
We are on GRC 5.3 SP13.
Thanks.

Our CMG group runs a company-wide risk analysis 2-3 times a year to use in their SOD Review process. We are looking into loading this report into QuickView to give them more capabilities with using the report. QV will work with Excel, but you have to load every spreadsheet and every page separately.
We are looking to see if we could download it into some other format that would contain all of the report in just one file. Would make the QV load easier. Something like SQL would probably be ideal.
Thanks.

Which programs corresponds to an offline analysis?

Dear all,
I'm trying to extract data for an offline analysis. Which programs do I use for extracting the last two flat files?
File 1 : User File - /VIRSA/DLOAD_USRS
File 2 - User Action File - /VIRSA/DLOAD_AUTH_OBJS
File 3 - User Permission File - ?
File 4 - Role File - /VIRSA/DLOAD_ROLES
File 5 - Role Action File - ?
File 6 - Role Permission File - /VIRSA/DLOAD_ROLE_AUTH_OBJS
File 7 - Action/Permission Objects - /VIRSA/ZCC_DOWNLOAD_SAPOBJ
File 8 - Description File for Action, Permission Fields and Values - /VIRSA/ZCC_DOWNLOAD_DESC
Thanks,

Well, based on my knowledge (and the list of VIRSA* programs) there is no such program for these but you may want to use the associate tables:
File 3 - User Permission File
You can use table AGR_USERS to get the list of roles per users and then table AGR_1251 for the list of permission per role.
File 5 - Role Action File - ?
You can get this by using AGR_TCODE but it may not be accurate since this reflect menu transactions codes and changes can be performed directly at authorization level therefore I would recommend using table AGR_1251 for object S_TCODE.
Just a question: why do you need to perform such an analysis if you have CC ?

What is Road map Analysis, Issue tracking,, Monitoring, Reporting?

Hi
Friends
what is Road map Analysis, Issue tracking,, Monitoring, Reporting?
can any one clear my doubts in detail full points will be given

Dear Venkat,
Your questions are very high level questions.
Roadmap Analysis: This term is generally used in SAP Implementation where we compare the project status with the SAP roadmap. Generally in ASAP Roadmap, we have SAP specified standard deliverables, and there can be custom deliverables as per the client's requirements. If we need to do an analysis of custom deliverables viz standard deliverables or standard roadmap viz custom roadmap, we call it as roadmap analysis.
Issue Tracking: Very broad level term - can be in Implementation as well as support projects. Issues are either support problems or implementation problems which are documented and recorded for solutioning and approval. These are generally steering committee terms used in a project.
Monitoring: Again a broad level term. Any watch process can be termed as monitoring. Eg: Monitoring of Backup; Monitoring of System health check etc.
Reporting: Again a broad level term. It is the same as defined in the english dictionary. Nothing related to any process in SAP with technical solution in mind.
Regards,
Anirban

RAR - Risk Analysis - Permission Level - V_VBAK_AAT||AUART - Error

I have a trouble related with risk analysis at permission level, when the V_VBAK_AAT||AUART is activated in two functions of my customized GRC rule-set (VIRSA_CC_FUNCPRM) for controlling some "document types" for tcodes VA01 and VA02. When I execute this customization in RAR, the system says "No match / No conflicts" for the risks where these functions appear, however performing some queries in the back-end systems, I have realized there are more than 80 users in conflict for some of them, given the fact that they have value '*' in object/field V_VBAK_AAT||AUART.
At a first time I thought that most probably would be related with the fact that these functions are part of risks that combine 3 and 4 functions at the same time, with OR logical activated in document types, but when I searched for the rules generated for these risks I noticed that only 34.000 rules were generated and this no overpass the limit of 45566 rules defined at RAR. Anyway, I performed some tests reducing the number of possible combinations and, basically, whenever the following line is activated, the outcome is u201Cno conflictsu201D:
D VIRSA_CC_FUNCPRM FN15 VA01 GRC-C21 V_VBAK_AAT||AUART ZSO ZSO OR 0 null
If this line is disabled, then, several users with conflicts are reported. As mentioned above, these users have value '*' for object/field V_VBAK_AAT||AUART, so I do not understand why those users are not reported when the line above is activated.
I have done the following checks, all of them correct:
- The user/role/profile synchro has been done and all the users has been stored in table VIRSA_CC_
- All the lines in VIRSA_CC_FUNCPRM part of my customized rule-set have been correctly inserted in the same Oracle table
- All the combinations of rules has been created (including VA01 and VA02 with V_VBAK_AAT||AUART)
Any suggestions?
Thanks in advance

I've detected the same problem for the following authorization objects:
- F_BKPF_BLA||BRGRU
- V_VBRK_FKA||FKART
- M_MSEG_BWE||WERKS
RAR reports no conflicts (at authoriztion level) when these objects are activated (of course having users with these conflicts in back-end systems)
This problem has been proved in the installation of different customer with SAP GRC Access Control 5.3 SP12.
Anybody else has experienced this issue????

Mass role risk analysis issue

Hello GRC Community,
I have a following issue:
When I use mass risk analysis the deactivated authorization objects in the role are displayed as result. At the same time, when I use Role Level Risk Analysis the role with deactivated critical authorization objects doesnt appear.
Does anybody know how to solve this issue? Is there any configuration parameter to be adjusted?
thanks
best regards
Sabrina

Prasant,
here are the screenshots of the Job result:
1. Mass role Risk Analysis
2. Risk Analysis on the (Single) Role Level
Im Backend you can see that the role contains lots of deactivated autorization objects.
I have run all sync Jobs, but seemingly it doesnt help.
Thanks,
Sabrina

Adobe Offline Forms issue in GRC System

Experts:
I am working on creating a Offline Form for GRC Process Control in SAP GRC System. I have couple of doubts.
1. In the Form property, there is a new field call 'Inbound Handler'.    The document which I referred says that, this 'inbound handler' helps in processing the inbound pdf's which comes thro mail.       In this place we need to select the class developed with 2 methods, 1.Create Instance and 2. Handle PDF.    And the document also talks about creating a separate class and referring it in the exit rules (SO50).     I am not sure whether Inbound Handler is a replacement for Exit Rules (SO50) so something else. Please Clarify.
2. While generating the PDF file, as you know we call the series of function modules. I have problem with the FM ' CALL FUNCTION fm_name' . When this FM is executed, normally it should generate the PDF and XML which will be available in fp_formoutput-pdf and fp_formoutput-xml. But in this system even when there is no issues with the export parameters, the FM is not able to generate the PDF and XML. Both fp_formoutput-pdf and fp_formoutput-xml are coming as EMPTY. Result of which when the FM 'FP_JOB_OPEN' is called it displays the message 'No Job Started' and exits the program. This same program works find in ECC 6.0 system. Can anyone thro some light on this?
Line: -
TYPES: BEGIN OF st_test,
       one   TYPE string,
       two   TYPE string,
       three TYPE string,
       END OF st_test.
DATA: it_test TYPE st_test OCCURS 0.
DATA: wa_test TYPE st_test.
DATA: fp_outputparams type sfpoutputparams.
DATA: fm_name TYPE rs38l_fnam.
DATA: fp_docparams TYPE sfpdocparams.
DATA: result TYPE sfpjoboutput.
DATA: fp_formoutput type fpformoutput.
SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-b02.
PARAMETERS: p_taskid TYPE grfntaskplan-taskplan_id DEFAULT 'DF492600B7308BF19F5E00237D624FE0' OBLIGATORY,
            p_email TYPE ADR6-SMTP_ADDR DEFAULT 'a@b' OBLIGATORY,
            p_tmail TYPE ADR6-SMTP_ADDR DEFAULT 'a@b'' OBLIGATORY,
            p_form   TYPE fpwbformname   DEFAULT 'ZAOF_TEST',
            p_langu TYPE spras          NO-DISPLAY DEFAULT 'EN',
            p_countr TYPE land1          NO-DISPLAY DEFAULT 'US',
            p_pages TYPE fppagecount    NO-DISPLAY DEFAULT 2,
            p_loop   TYPE i              NO-DISPLAY DEFAULT 1.
SELECTION-SCREEN END OF BLOCK b1.
INITIALIZATION.
START-OF-SELECTION.
wa_test-one = 'One'.
wa_test-two = 'Two'.
wa_test-three = 'Three'.
append wa_test to it_test.
END-OF-SELECTION.
CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'
EXPORTING
    i_name     = p_form
IMPORTING
    e_funcname = fm_name.
fp_outputparams-getpdf = 'X'.
fp_outputparams-nodialog = 'X'.
CALL FUNCTION 'FP_JOB_OPEN'
CHANGING
    ie_outputparams = fp_outputparams
EXCEPTIONS
    cancel          = 1
    usage_error     = 2
    system_error    = 3
    internal_error = 4
    OTHERS          = 5.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
      WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
DO p_loop TIMES.
fp_docparams-langu   = 'E'. "p_langu.
fp_docparams-country = 'US'."p_countr.
fp_docparams-FILLABLE = 'F'.
fp_docparams-dynamic = 'X'.
fp_docparams-UPDATE_INTERACTION_CODE = 'X'.
CALL FUNCTION fm_name
    EXPORTING
      /1bcdwb/docparams = fp_docparams
      Ztest      = it_test
    IMPORTING
      /1bcdwb/FORMOUTPUT = fp_formoutput
    EXCEPTIONS
      cancel             = 1
      usage_error        = 2
      system_error       = 3
      internal_error     = 4.
ENDDO.
CALL FUNCTION 'FP_JOB_CLOSE'
IMPORTING
    e_result       = result
EXCEPTIONS
    usage_error    = 1
    system_error   = 2
    internal_error = 3
    OTHERS         = 4.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
      WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
Thanks in Advance
Vijai
Edited by: Thomson VijaiAnand on Apr 21, 2010 11:15 AM

Hi Thomson
I met a similar probleam.
Could you explain how you get it through?
Thanks

Offline Form Issue in SAP GRC System

Experts:
I am working on creating a Offline Form for GRC Process Control in SAP GRC System. I have couple of doubts.
1. In the Form property, there is a new field call 'Inbound Handler'.    The document which I referred says that, this 'inbound handler' helps in processing the inbound pdf's which comes thro mail.       In this place we need to select the class developed with 2 methods, 1.Create Instance and 2. Handle PDF.    And the document also talks about creating a separate class and referring it in the exit rules (SO50).     I am not sure whether Inbound Handler is a replacement for Exit Rules (SO50) so something else. Please Clarify.
2. While generating the PDF file, as you know we call the series of function modules. I have problem with the FM ' CALL FUNCTION fm_name' . When this FM is executed, normally it should generate the PDF and XML which will be available in fp_formoutput-pdf and fp_formoutput-xml. But in this system even when there is no issues with the export parameters, the FM is not able to generate the PDF and XML. Both fp_formoutput-pdf and fp_formoutput-xml are coming as EMPTY. Result of which when the FM 'FP_JOB_OPEN' is called it displays the message 'No Job Started' and exits the program. This same program works find in ECC 6.0 system. Can anyone thro some light on this?
TYPES: BEGIN OF st_test,
       one   TYPE string,
       two   TYPE string,
       three TYPE string,
       END OF st_test.
DATA: it_test TYPE st_test OCCURS 0.
DATA: wa_test TYPE st_test.
DATA: fp_outputparams type sfpoutputparams.
DATA: fm_name TYPE rs38l_fnam.
DATA: fp_docparams TYPE sfpdocparams.
DATA: result TYPE sfpjoboutput.
DATA: fp_formoutput type fpformoutput.
SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-b02.
PARAMETERS: p_taskid TYPE grfntaskplan-taskplan_id DEFAULT 'DF492600B7308BF19F5E00237D624FE0' OBLIGATORY,
            p_email TYPE ADR6-SMTP_ADDR DEFAULT 'a@b' OBLIGATORY,
            p_tmail TYPE ADR6-SMTP_ADDR DEFAULT 'a@b'' OBLIGATORY,
            p_form   TYPE fpwbformname   DEFAULT 'ZAOF_TEST',
            p_langu TYPE spras          NO-DISPLAY DEFAULT 'EN',
            p_countr TYPE land1          NO-DISPLAY DEFAULT 'US',
            p_pages TYPE fppagecount    NO-DISPLAY DEFAULT 2,
            p_loop   TYPE i              NO-DISPLAY DEFAULT 1.
SELECTION-SCREEN END OF BLOCK b1.
INITIALIZATION.
START-OF-SELECTION.
wa_test-one = 'One'.
wa_test-two = 'Two'.
wa_test-three = 'Three'.
append wa_test to it_test.
END-OF-SELECTION.
CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'
EXPORTING
    i_name     = p_form
IMPORTING
    e_funcname = fm_name.
fp_outputparams-getpdf = 'X'.
fp_outputparams-nodialog = 'X'.
CALL FUNCTION 'FP_JOB_OPEN'
CHANGING
    ie_outputparams = fp_outputparams
EXCEPTIONS
    cancel          = 1
    usage_error     = 2
    system_error    = 3
    internal_error = 4
    OTHERS          = 5.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
      WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
DO p_loop TIMES.
fp_docparams-langu   = 'E'. "p_langu.
fp_docparams-country = 'US'."p_countr.
fp_docparams-FILLABLE = 'F'.
fp_docparams-dynamic = 'X'.
fp_docparams-UPDATE_INTERACTION_CODE = 'X'.
CALL FUNCTION fm_name
    EXPORTING
      /1bcdwb/docparams = fp_docparams
      Ztest      = it_test
    IMPORTING
      /1bcdwb/FORMOUTPUT = fp_formoutput
    EXCEPTIONS
      cancel             = 1
      usage_error        = 2
      system_error       = 3
      internal_error     = 4.
ENDDO.
CALL FUNCTION 'FP_JOB_CLOSE'
IMPORTING
    e_result       = result
EXCEPTIONS
    usage_error    = 1
    system_error   = 2
    internal_error = 3
    OTHERS         = 4.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
      WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
Thanks in Advance
Vijai
Edited by: Thomson VijaiAnand on Apr 21, 2010 11:15 AM

Hi Thomson
I met a similar probleam.
Could you explain how you get it through?
Thanks

GRC 5.3: CUP risk analysis VS. RAR risk analysis

I've installed and configured RAR and CUP. When I do a risk analysis simulation in RAR on a user for adding a role, it comes back with no conflicts. When I go into CUP and make a new request for adding the same role to the same user, it comes back with risk violations, but it looks like they are critical actions that are being flagged. Why is there a discrepancy, and how do I go about getting the same risks in CUP as I do in RAR?

>
Frank Koehntopp wrote:
> I guess the behaviour is on purpose.
>
> In RAR, you can do a selective analysis on only one kind of risk. You usually only need to do that in the remediation process, where this kind of selection is helpful to track down the root cause (although I'd like to have an ALL option in RAR as well...)
>
> In CUP, you do want to see any kind of risk that might arise from a role assignement to a user.
>
> I have to say, I can not really understand why you'd want to switch off critical action or permission risks here. The user analysis in RAR and CUP serve two different purposes, hence I cannot see a bug here. If you have defined critical risks, why would you not want to see them???
Hi Frank,
I understand your point, but we are in the same situation as the others. We do not want to see Critical Action Risks in CUP because this is a separate process (for us) than Permission Level Risks Analysis piece. With our current structure, our Security Admins use RAR to run Permission Level Risk Analysis and mitigates appropriately. A separate compliance group uses the Critical Action reports to see who has what Critical tcodes, etc. We do not mitigate these "risks," we more or less use it as a report.
I do not understand what you mean when you say "The user analysis in RAR and CUP serve two different purposes" - I feel it should be the same purpose, to ultimatley simulate if adding security to a user will cause SOD violations. If I have CUP configured to do Permission Level Analysis, that's all I want to be seeing in CUP.
Let me know if I need to clarify further.

SAP GRC AC 5.3 CUP Risk Analysis issue

Hi all,
I have assigned a new SoD Role to a user, who has been given previously other SoD Roles that were authorized to assingn, then I launched the Risk Analysis and it shows the risk between the previously SoD Roles, but I want to see the new posible risks between the new SoD Role and the others.
Is there any parameter into CUP to set up that controls the issue ? How must I do?
Thanks in advance.
Regards.

Hi Chinmaya,
Firstly, thanks for your help and support.
According to the post, I mean when the user manager or approver, receives the request to assign one role to a user, the approver has to decide the needs of the user to use that role.
Then the approver can check (clicking on Risk Analysis button) the number of concflicts or criticals risk that the user could violate. The issue is when the approver launched the anaylisis and it shows same conflict risks that have been mitigated in the previously assignment. It may show the possible risks between the new role and the others, isn´t it?, or instead of the case ,that the oldest risks are showed. Must that risks showed as mitigated?
Thanks, regards.

AC10.0 RAR risk analysis

GRC Gurus,
I have configured GRC10.0 for AC and trying to run the risk analysis for role/user level but no data is showing up. I could select the connector and roles, but after running the risk analysis no results are coming up.
Any help is appreciated.
Thanks.

Hello Bhanu,
Will you please let me know the solution ??
Even we are facing the same problem.
We can see the system , also see the roles , the users and also ran the background job to execute the risk analysis to perform user, role ,profile analysis from SPRO.
Also note that we have already uploaded txt files for SOD rules.
When we run the report for any user or any role the result is nill .
Please suggest how did you resolve the issue ??
Can you also tell me how can you generate "rule Id" manually for uploaded risk id ?? from NWBC or SPRO
We tried via SPRO>GRC>AC-->Access Risk Analysis >Sod Rules>Generate SOD Rules
It ran successfully but the rpeort does not give any output !!
Thanks in advance.
Regards,
Victor

Windows 2008 R2 - Printer "Offline" SNMP issue.

The issue:
Not unique from what I have read in these forums and elsewhere around the globe. But essentially, I have printers that go "offline" and only come back into life if I disable SNMP per printer port and therefore lose any "real" status messages.
Some Environmental Information:
- The printers and the print server are on the same logical subnet
- There is no filtering/Firewall between the printers and the print server and not relevant given they are on the same logical subnet.
- The firewall is disabled on the Print Server
- The SNMP community string(s) configured on the printer matches that of the print server port
- The manufacturing model of the printer varies. Various print vendor makes and models, of the 5-6 affected devices, all of them are different.
The following information relates to the newest printer a Ricoh Aficio MP C4501, manufactured and released in 2011 which is one of the models that has the issue
- The Printer's NIC firmware is up to date (applied myself as I work for this particular print vendor) and is fully compliant with SNMP V1, V2 and V3 and supports all relevant MIBs
- When the issue occurs, I can access the printer's web configuration page
- When the issue occurs, I can ping the printer device showing "offline" on the print server
- When the issue occurs, I can interrogate the printer device using an SNMP browser (many different types) on SNMP V1, V2 and V3 without issue
- When the issue occurs, I can monitor the device and get detailed status updates using SNMP V1, V2 and V3 in the print vendors own device management application as well as Spiceworks without issue
Note:
I am quite confident that there is not a communication issue with SNMP to/from the device.
I am quite confident that there is not an issue with the printers NIC in terms of firmware
I can get around this by disabling SNMP per port, but this is _NOT_ a fix because "actual" status' other than "online" are never reported.
Summary:
I'm going out on a limb here and suspecting that the root cause is not the device, firmware or print driver, but in fact something within Windows Server Print Subsystem. To that end and given there has been a huge amount of discussion on this issue,
is there any progress or even acknowledgement that this _MIGHT_ be a problem that Microsoft need to address?
--------------------------- ASE, CNE, CCNP, CLP, MCSE --------------------------

Hi Alan,
Lately I experienced this "printer-offline-problem" on my
Windows Server 2008 R2 Standard, Service Pack 1 . I found this thread on the internet and probably tried out everthing mentioned here. But nothing helped in my case. When I deleted and recreated this printer, it was in status Ready and was working as
long there was no restart of the print spooler service. Then it switched to offline and stopped working.
So I did open a support case at Microsoft as recommended by you.
It didn't help to install the latest hot fixes or to delete third party language monitors from the registry. What did help, I found out two weeks ago and I want to share it here for other people having the same problem.
1. Delete the "Offline"-printer and its port.
2. Search the Registry for the printer name. You might find these keys:
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Hardware Profiles\0001\System\CurrentControlSet\Control\Print\Printers\***problemprinter***]
"PrinterOnLine"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Hardware Profiles\Current\System\CurrentControlSet\Control\Print\Printers\***problemprinter***]"PrinterOnLine"=dword:00000000
3. Recreate this printer - done!
4. Test it by restarting the print spooler service - if you like.
If you cannot delete the printer, because you don't want to lose the print jobs in the queue, try to find the above mentioned registry keys and delete them. Then restart the print spooler service. The printer will
switch to Ready and start printing.
Microsoft then confirmed they have comparable cases like this in their database, but no information why there are these registry keys and why they arouse this problem.

Web Premium CS4 and Offline Files Issue

My system: Multiple notebooks, laptops running Windows 7 Ultimate, all on a Microsoft Small Business Server 2008 network.
I have My Documents, My Pictures, and My videos folders rehomed to the server via group policy, and when I unplug from the network these folders are available to the disconnected laptop/pc via offline files (and the offline file cache).
My issue: When I install Web Premium CS4 on any machine, if my laptop/pc is disconnected from the network, the offline folders disappear, although the offline file management snap-in tab shows the cache is stored, and when I plug back in to the network, the folders will soon appear. When the folders are visible, the offline status shows "Always available offline".
When I uninstall CS4, the trouble does not get fixed, but a barebones install from a disk image prior to CS4 installation fixes the problem, making me think adobe somehow changes network/registry settings to accomodate their own cache, or maybe something to do with the Adobe Bridge (just guessing). This happens on both 64 bit and 32 bit versions of Win 7.
I have duplicated this issue on 3 different laptops, all with the same result. I opened a case with Adobe, but my case was immediately closed saying it was a Microsoft/network issue. In fact, I would guess the person who worked the case dismissed this out of hand, the case got closed so quickly.
Is there someone out there that has run into this issue?
Thank you,
Bob

Was this issue ever resolved? We are in the process of deploying design premium to around 1000 faculty members, and are experiencing the same issue. I wont know till the end of the day whether i can say 100% that its a CS 4 issue but im running a test on 3 laptops with slightly different configs.
All laptops are win7 enterprise, with folder redirection enabled, same symptoms are occuring.
As a test, i have been testing the offline files at different stages in the laptop bundle deployment to see where it starts to fail. I sync mydocs, undock laptop and then login to check offline files. I then wipe the CSC clean and move on to next step in deployment, and repeat check.
We are at the last step in deployment, adobe design premium CS4, and there have been no failures with offline files so far. After it finishes deploying ill report on my findings.
We have a ticket open with microsoft and our sysadmin has been working with them for a few days to resolve the issue, and so far they have been baffled, escalating the ticket to a debug team. We have not yet mentioned that we suspect CS4 to be the issue, as they would probabily pass the buck and blame adobe, (similar to the OP saying adobe is blaming microsoft); we want them to fully investigate first.
Sincerely,
A Frustrated Team

RAR offline analysis issue

Similar Messages

Maybe you are looking for