Restricting State Migration Point to allow 10 GB of data as User State backup

Hi ,
I am using State migration point to backup user data settings through USMT. I am looking for some option either on SMP side or USMT side to restrict data maximum of 10 GB from the system. SMT\USMT should not allow data backup more than 10GB from any system.
Any pointers will be appreciated. Thanks.
Regards,

The best you can do is to run scanstate with the estimate parameter to estimate how data it will collect and then branch or abort based on the results.
I outlined how to collect this information beforehand at
http://blog.configmgrftw.com/collecting-usmt-estimates-using-configmgr/
Jason | http://blog.configmgrftw.com | @jasonsandys

Similar Messages

How to manually recover user state data saved to a State Migration Point

Hi,
In SCCM 2012, how would you recover the User State saved to the State Migration Point manually?
In SCCM 2007 you could do what was outlined here:
http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/159affd3-1726-4829-a0f4-0c875481fc11
However this does not work for SCCM 2012 because the User State Recovery key so long that it cannot be used with a loadstate command (Loadstate commands cannot be longer than 256 characters)
Previously you could also have just opened the User.mig file using Windows Easy Transfer and entered the User State Recovery key stored in SCCM - however in SCCM 2012 this does not work either!
I really need to recover the contents for a user who got a new computer (old one stolen) and requires data from a previous user state capture on the State Migration Point.

Hi,
It seems something changed in SCCM 2012.
I've got the same problem and after couple hours of research I found MS article that only helped me -
http://technet.microsoft.com/en-us/library/hh824962.aspx
In SCCM server I run this command:
C:\Program Files (x86)\Windows Kits\8.0\Assessment and Deployment Kit\User State Migration Tool\amd64>usmtutils.exe /extract C:\tmp\_MIG\USMT.MIG C:\tmp\_MIG\Extract /decrypt /keyfile:C:\tmp\_MIG\Key.txt
and received necessary data.

State Migration Point Data not Deleting

Hi
I've seen this issue mentioned numerous times on these forums but it looks like a tricky one to get a solution for - would appreciate if somebody could assist
I have SCCM 2012 Deployed with a State Migration Point on another Site Server - I migrate to Windows 7 and the Task Sequnce used include a Capture User State Section and a restore User State Section - The Migration/Task Sequence completes
successfully - have checked reports ....
The Proble is I have set the Stae Migration Point to delete the User State Data to Delete after 3 days ...
it never does this - the Entries remain in the USMT section of SCCM - and if I log onto the Server with the State Migration Role all the data is still there after 3 days.
This is a major problem - is there anyway to force the State Migration Point to delete after 3 days regardless. I know from reading that the issues look to be around the fact that their may be an issue with the "Release Store" Section - however my task sequence
continues -and is marked as successful
SO Basically is there a way to force the Delation of Data automatically through the State Migration Point and if not .... will a manual delation work and if so what folders should I delete (had a nasty issue the other day where I deleted one of these
User State Folders and the State Migration Point went offline, only came back online when I created a blank folder to replace the folder I deleted)
Would really appreciate assistance here as I have come accross this problem on a number of Sites and its not practical to go through log files for each migration to verify that the stores were released correctly

here is the issue... Thank you Steve Rachui... http://blogs.msdn.com/b/steverac/
I was lucky enough to have him onsite today... for some reason the loadstate is not releasing the client store. if you check the migrationstatus.xml you will see false under restore status. not sure why the store doesn't release yet but it could be timing
between the release and reboot command im not sure.
FYI: - the next morning..
I removed the reboot cycle on my task and when I came in this morning, the xml file showed the datastore was released. (restore status = true) With that said, you will probably need to extend the delay between the release state and the reboot, or remove
the reboot entirely, (which I probably would't personally do.)
good luck guys
So how did you delete the existing folders for the tasks that had already run? Did you manually change the restore status to TRUE? Or is there no way to delete the old data except removing the SMP role, deleting the folders and then re-enabling the SMP role?
Thanks,
SinghP80

State Migration Point Minimum Free Space

I am in the process of doing OS deployment with Windows 7. I have a State Migration Point in place with minimum free space threshold of 100mb. My question is, will my task sequence error out and fail prior to formatting the drive and installing Windows 7
if the minimum free space is met and all the data cannot be captured? I am nervous that if this threshold is met all user data on a system is not able to be captured and the task sequence continues on to format the drive and install the OS.
Thanks,
Mike
Solutions Architect

Yes, the prepare state capture task will fail if it can't find an SMP with free space on it thus causing the TS as a whole to fail assuming you haven't selected the ignore failure option on the task or any of its parent groups. That's doesn't necessarily
guarantee that there is enough free space or that multiple simultaneous task sequences couldn't cause issues though thus you should plan accordingly, monitor the free space instead of leaving it to chance, and enable the auto cleanup feature with a rational
period of time.
Jason | http://blog.configmgrftw.com

State Migration Point issues - Error 12030

Hello there,
I wanted to add a state migration point to a host that already operates as a distribution point for several months. The state migration installs successfully when looking at the msi-log, but is not operational afterwards. The log file states that the health
check fails with error 12030. Did I forget something?
This is the content of the smpmgr.log
SMS_EXECUTIVE started SMS_STATE_MIGRATION_POINT as thread ID 3376 (0xD30). $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3636 (0xE34)>
******************************************************************************** $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
SMS_STATE_MIGRATION_POINT received START notification. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
SMPPeriodicActivityInterval = 1440 minutes. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
SMPEncryptionCert Length 3008. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
RegOpenKeyEx succeeded for regkeypath SOFTWARE\MICROSOFT\SMS\SMP\STATESTORE $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
StateMsgDir = C:\SMS\MP\outboxes\statemsg.box, StatusmsgDir = C:\SMS\MP\outboxes\stat.box, sitecode = PH2 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.256-60><thread=3376 (0xD30)>
Securing SMP msg dirs successful $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
HandleSMPRegistryChanges: RegQueryInfoKey succeeded. Number of SMP stores=1 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
RegOpenKeyEx succeeded for regkeypath SOFTWARE\MICROSOFT\SMS\SMP\STATESTORE\SMPSTOREE_EAFE6917 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
Directory E:\StateMigration\SMPSTOREE_EAFE6917$ exists. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
Creating share SMPSTOREE_EAFE6917$ succeeded $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
AllowSMPIsapiAccess succeeded for share E:\StateMigration\SMPSTOREE_EAFE6917$. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
SMPPeriodicActivityInterval = 1440 minutes $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
Handling SMP registry Changes succeeded. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.287-60><thread=3376 (0xD30)>
Successfully created factory CSMPMgrFactory $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=3376 (0xD30)>
Successfully registered class CSMPMgr. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=3376 (0xD30)>
SMS_STATE_MIGRATION_POINT successfully started $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=3376 (0xD30)>
Configuration and Availability Monitor thread started. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=1196 (0x4AC)>
Initialized 'SMS Server Availability' performance instance => SMS State Migration Point.~ $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:28:50.303-60><thread=1196 (0x4AC)>
HandleSMPRegistryChanges: RegQueryInfoKey succeeded. Number of SMP stores=1 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.190-60><thread=1196 (0x4AC)>
RegOpenKeyEx succeeded for regkeypath SOFTWARE\MICROSOFT\SMS\SMP\STATESTORE\SMPSTOREE_EAFE6917 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.190-60><thread=1196 (0x4AC)>
Directory E:\StateMigration\SMPSTOREE_EAFE6917$ exists. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.190-60><thread=1196 (0x4AC)>
Creating share SMPSTOREE_EAFE6917$ succeeded $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
AllowSMPIsapiAccess succeeded for share E:\StateMigration\SMPSTOREE_EAFE6917$. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
SMPPeriodicActivityInterval = 1440 minutes $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
Handling SMP registry Changes succeeded. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:14.206-60><thread=1196 (0x4AC)>
SSL is enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Client authentication is also enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
CRL Checking is also enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Machine name is 'statemigr.something.com'. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Begin validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Certificate has "SSL Client Authentication" capability. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Completed validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Begin validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Certificate doesn't have "SSL Client Authentication" capabilities. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Completed validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Skipping this certificate which is not valid for ConfigMgr usage. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
>>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.298-60><thread=1196 (0x4AC)>
Failed to send http request /SMSSMP/.sms_smp?op=healthcheck. Error 12030 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
Call to HttpSendRequestSync failed for port 443 with 12030 error code. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
Health check operation failed, error code is 12030 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
STATMSG: ID=6208 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_STATE_MIGRATION_POINT" SYS=statemigr.something.com SITE=PH2 PID=2904 TID=1196 GMTDATE=Di Mrz 24 19:29:20.314 2015 ISTR0="12030" ISTR1="" ISTR2="" ISTR3=""
ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
Completed availability check on local machine $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
Initialization still in progress. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:20.314-60><thread=1196 (0x4AC)>
SSL is enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Client authentication is also enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
CRL Checking is also enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Machine name is 'statemigr.something.com'. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Begin validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Certificate has "SSL Client Authentication" capability. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Completed validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Begin validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Certificate doesn't have "SSL Client Authentication" capabilities. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Completed validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Skipping this certificate which is not valid for ConfigMgr usage. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
>>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Failed to send http request /SMSSMP/.sms_smp?op=healthcheck. Error 12030 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Call to HttpSendRequestSync failed for port 443 with 12030 error code. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Health check operation failed, error code is 12030 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Completed availability check on local machine $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
Initialization still in progress. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:29:50.294-60><thread=1196 (0x4AC)>
SSL is enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Client authentication is also enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
CRL Checking is also enabled. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Machine name is 'statemigr.something.com'. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Begin validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Certificate has "SSL Client Authentication" capability. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Completed validation of Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Begin validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Certificate doesn't have "SSL Client Authentication" capabilities. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Completed validation of Certificate [Thumbprint 35633602ebcd8512702330af54bf349adb3b9b0a] issued to 'statemigr.something.com' $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Skipping this certificate which is not valid for ConfigMgr usage. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
>>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Failed to send http request /SMSSMP/.sms_smp?op=healthcheck. Error 12030 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Call to HttpSendRequestSync failed for port 443 with 12030 error code. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Health check operation failed, error code is 12030 $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.289-60><thread=1196 (0x4AC)>
Completed availability check on local machine $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.305-60><thread=1196 (0x4AC)>
Initialization still in progress. $$<SMS_STATE_MIGRATION_POINT><03-24-2015 20:30:20.305-60><thread=1196 (0x4AC)>

The server has two certificates, one with client auth and one with server auth capabilities. As you can see in the log, the certificate with the server auth capability is ignored and the client auth is succesfully selected:
>>> Selected Certificate [Thumbprint b1b24deaaa109fa76f892a1ded986dca246d4f60] issued to 'statemigr.something.com' for HTTPS Client Authentication $$<SMS_STATE_MIGRATION_POINT>
This client certificate has been (and still is) working for client authentication of the distribution point on the same server for months.

Restrict HTTP access or only allow HTTPS access

Hi experts,
We have an EP6 cluster implementation in our landscape with a web dispatcher acting as a balancer on top. We achieved to implement HTTPS (end-to-end SSL) and now need to restrict any http access to our SAP Portal (that means internet users should always use https when accesing our portal).
Which is, in your opinion, the easiest way to do it? Web Dispatcher configuration, Central Instance (Java Dispatcher), other? The result should be an error message (no matter whether it's the error HTTP 501).
Thanks.

Hi,
The best way would be to restrict at web dispatcher as this is the entry point for requests.
Check this:
http://help.sap.com/saphelp_nw70/helpdata/EN/d8/a922d7f45f11d5996e00508b5d5211/frameset.htm
In the ICM configuration you should remove all parameters that allow http access to Web Dispatcher.
http://help.sap.com/saphelp_nw70/helpdata/EN/25/7e153a1a5b4c2de10000000a114084/frameset.htm
Regards,
Praveen Gudapati

Solution for Bug 13412084: RESTRICT PAYMENT: IT SHOULD NOT ALLOW PAYMENT BE

http://attiqahmed.wordpress.com/2012/03/20/solution-for-bug-13412084-restrict-payment-it-should-not-allow-payment-before-invoice-accrual/

hello sir Octavio
Im sorry.. I failed to tell you that our encoder of invoices is separate from the one who entry for payments.
Therefore, the encoder uses the invoices batches[(N) Invoices>Entry>Invoice Batches] whereas the Paymaster(the one who entered payments?) uses the Payments [Payments>Entry>Payments]
By the way your suggestion did work to disable the Pay in Full checkbox.. but i decided to get rid of the actions button for the encoder.. and another person will be handling the validation and create accounting having such access.
So what i wanted is that the paymaster wouldn't be able see among the LOV of invoices at the Payments Form if its not created accounting.
I wanna make sure that all invoices are created accounting.
thank you so much for the understanding..:-)
Emgee

Migration point base to Oracle

can any one suggest steps to migrate point base to oracle database.

This is a DB forum question.
Neverthless, a intelligent Gentleman has written a utility for this.
http://linux-bsd-central.com/index.php/content/view/243/
Thanks
Vishnu

Firefox 5 updated - now it does not function - just a blank window. Pull down menus appear but do not function. Am I missing an obvious point to allow this browser to function?

I do not understand how to correct this malfunction.
Operating on MacBook Pro using Mac OSX 10.6.8. Firefox 5 updated - now it does not function - just a blank window. Pull down menus appear but do not function. Am I missing an obvious point to allow this browser to function?

I suspect it has something to do with the java but not sure
Just so you'll know, there is no Java on that page. There is, however JavaScript. You should know that those two things are different as night and day.
To fix your problem, change this -
function MM_swapImgRestore() { //v3.0
var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
</script>
</head>
to this -
function MM_swapImgRestore() { //v3.0
var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
-->
</script>
</head>

How do I allow access to non admin network users to disk volume?

I would like to allow access to a specific volume (disk) on one of our networked macs (Mac1) to all users. I've set user accounts on Mac 1 for all network users. These users are "regular" users, not admin. They can access this disk (and all others on Mac1) if I log in as Admin set Users to Admin. If I do this, then users have access to ALL data on all disks. If I do not, leaving them as "regular" users, when they log in they only see public folders. How can I allow access to the one disk volume without making network users admin? I tried changing various settings for the volume in Finder Info (everone else=read/write; ignore permissions) with no luck.
Thanks
iMac, ibooks, G5, Tibook Mac OS X (10.4.4)

Your observations are correct - by default, an "admin" user connecting over AFP can choose from available "volumes" (default) or "shares", whereas a non-admin user can only mount "shares".
By default, the only "shares" on an OS X client machine are the users' "Public" folders, and unlike pre-OS X Macs, it isn't easy to configure your own share points. Apple's official statement is that users wanting this functionality should buy OS X Server.
However, it is possible to create an arbitrary share point using 3rd party software called "SharePoints" (donationware). I have never used it, but it seems to be well regarded. Alternatively, you can do it manually following the instructions in this hint & comments (especially apw8's):
http://www.macosxhints.com/article.php?story=20011108161839416
Once the external drive (or folder on the external drive) is configured as a share point, it should be possible for non-admin users to select and mount it once they connect over AFP.

How to Delete Non-System State Backups in Windows 2008R2

Hello,
I am running a Windows 2008R2 server which uses Windows Server Backup to do the backups. We are using the backup-tool to create non-system state backups of the data-directories on this machine. The backup is done on a dedicated disk connected through iscsi
(to a Synology box). This backup disk has become too small and we have now replaced the Synology box with a bigger one. Here i created a new LUN again for the backup purposes.
Now for my question; The wbadmin.exe tool supplied with W2008R2 does not offer a way to delete the old backups. I know that in Win2012 (which we we also have running) I could add the new iscsi location and then (when enough backups are available on the new
target) use wbadmin.exe delete backup to delete the old non-system state backups; e.g.
wbadmin delete backup -version:08/07/2013-21:00
This (very undocumented) feature of Windows 2012 and higher works quite nice and is exactly what i am searching for on the W2008R2 machine; a way to delete the old backups (and under the hood delete the corresponding snapshots)
I've done quite a bit of research and it should be possible to do something similar in 2008 but then manually, The howto is described in the following link: http://blogs.technet.com/b/filecab/archive/2009/06/22/backup-version-and-space-management-in-windows-server-backup.aspx .
Basically it describes that you should use DiskShadow.exe to remove e.g. the oldest snapshot with a command like :
Delete shadows OLDEST \\?\Volume{7fc1871b-2e1f-11dd-a339-001e4fb7af35}
Windows Server backup (wbadmin) should then on the next run 'see' this deletion and update its list of available backups:
"You can perform the same steps manually to delete backups on demand. However, the backup catalog update cannot be done manually and it will happen instead during
the next backup."
I've done this on our box and it indeed removes the shadows from the list. However, in the Windows Backup 'dashboard' it still lists the backups as available. Also after a new backup has finished (according the the article this is when it should 'update'
its backup catalog). When I try to restore a backup from a date that i just removed it gives a nice message that this is impossible because the snapshot is not available (duh :)) ;
Unable to browse Local disk. The shadow copy of the backup stored on the backup destination cannot be found.
So it seems that the aforementioned method works; it removes the snapshot and frees diskspace, but it doesn't update the Windows Backup catalog. As a result the management tool (GUI) still lists the backups which are no longer available! How can i change
this? Is there any way to do this? I found one article which mentions that the Dashboard bases its screen on the Windows Logs and not on the actual VSS snapshots available:
http://forum.wegotserved.com/index.php/topic/23757-start-afresh-with-server-backup/ (WHS) In my situation however this seems unlikely because i don't have any logs that date back as far as my backups go.
In my opinion this is a real bug and it leaves us with a in-consequent backup schema. Does anyone have similar situations or even a solution to my problem?
Kind Regard, Martin

Hi Mandy,
Yes! I think i got my answer and I now get how windows backup works in Windows 2008 :-) It turns out that I dismissed some suggestions a bit too soon. The answer lies in the command mentioned earlier :
Wbadmin delete catalog
This command does delete all the backups from a perspective of the Windows Backup UI, but leaves the VSS snapshots intact. This means that the backups are still available, but you just can't restore them with the User Interface. In order to 'update' the
UI with the current available snapshots (which you can list with diskshadows list shadows all), you have to re-add the existing media on which the backups took place using the Wizard of the UI. It will then inform you that existing backups are available and
if you want to keep these for restore purposes. If you click 'yes', and THEN perform a backup ... All the current available backups will be shown in the User Interface :-)
So for my steps taken to change from one iscsi (iscsi1) to another (iscsi2):
- Add the 2nd iscsi target with the Windows Backup UI
using Backup schedule , Modify backup -> [desired options] => Add more backup destinations -> iscsi2
- Remove the 1st iscsi target with the Windows Backup UI
using Backup schedule , Modify backup -> [desired options] => Remove current backup destinations -> iscsi1
- Run some backups on the new destination. Old restore points are now still available. When enough restore points are available on the new volume iscsi2 start deleting old data from iscsi1 as follows:
- Run diskshadow
diskshadow
- list all the current snapshots
list shadows all
- remove all the snapshots of iscsi1 (repeat until all shadows are gone of iscsi1)
delete shadows oldest \\?\volume{yourvolumeid}\
- delete the windows backup catalog
wbadmin delete catalog
- Restart the windows backup UI and re-add your schedule on the new volume iscsi2. It will now ask if you want the keep the existing data for restore purposes; click yes.
- After the next backup only the backups of volume iscsi2 will be listed and everything is fine !
I Hope my post will help others with similar questions. It was quite a search before I understood the way it works. Basically as long as your VSS snapshots are still available and listed by diskshadow you still have the backups and you will be able to get
this in sync with the steps above (delete schedule and re-add originating targets containing the snapshots). After the next backup the UI will update itself.
(In my case someway along the way I lost my originating snapshots, but because I already had my new backup set it didn't bother me; It kept me from having to delete all 510 old backups :) with diskshadow)
Regard, Martin

Wbadmin System State Backup "Parameter is incorrect"

Hello,
We have two physical Windows Server 2008 R2 x64 Standard Domain Controllers and the system state backup on both fails with the same error.
We issue the command:
wbadmin start systemstatebackup -backuptarget:c:
(NOTE: We did the REG fix to allow backups to the system volume)
and we get this as the output:
C:\Windows\system32>wbadmin start systemstatebackup -backuptarget:c:
wbadmin 1.0 - Backup command-line tool
(C) Copyright 2004 Microsoft Corp.
Starting to back up the system state [28/02/2010 21:26]...
Retrieving volume information...
This will back up the system state from volume(s) System(C:) to c:.
Do you want to start the backup operation?
[Y] Yes [N] No y
Creating a shadow copy of the volumes specified for backup...
Creating a shadow copy of the volumes specified for backup...
Please wait while system state files to back up are identified.
This might take several minutes...
Summary of the backup operation:
The backup of the system state failed [28/02/2010 21:27].
Log of files successfully backed up:
C:\Windows\Logs\WindowsServerBackup\Backup-28-02-2010_21-26-31.log
Log of files for which backup failed:
C:\Windows\Logs\WindowsServerBackup\Backup_Error-28-02-2010_21-26-31.log
The operation ended before completion.
The parameter is incorrect.
C:\Windows\system32>
This happens on both servers and the two backup log files mentioned in the output are both empty.
There's no other information that I can find so I don't know what the "parameter" is or why it is incorrect.
Has anyne come across this problem and know what the error is referring to?
Thanks
Sunil

I received a PowerShell script from Suhas and ran it on the affected server, the script output gave:
1.
     Service Name    : RMAGENT
     Service Caption : RMAGENT
     Registry key    : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RMAGENT\ImagePath
     Value           : \\PRIMARY\admin$\Microsoft DPM SRT\RFCAgent.exe
     Reason          : The service path contains a double slash. Network paths or paths containing a double slash are not supported.
2.
     Service Name    : RMAGENT
     Service Caption : RMAGENT
     Registry key    : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RMAGENT\ImagePath
     Value           : \\PRIMARY\admin$\Microsoft DPM SRT\RFCAgent.exe
     Reason          : The service path does not have a proper path format. Only paths beginning with [<Drive>]:\ format are supported.
The "RMAgent" is from Microsoft Data Protection Manager 2007 System Recovery Tool (DPM-SRT) and I think is the remote agent that DPM-SRT uses to backup the remote system.
The DPM-SRT RMAgent isn't supported and doesn't work on Windows Server 2008 R2 systems and I am not sure how it ended up installed on the server. Removing this service should solve the problem and allow the System State Backups to work. The DPM-SRT agent wasn't listed in the "Programs and Features" and so couldn't be installed from there (if it was I would have spotted this a long time ago and probably solved the problem). Instead, I used the information at:
http://www.howtogeek.com/howto/windows-vista/how-to-delete-a-windows-service-in-vista-or-xp/
To delete the RMAgent service: sc delete "RMAgent" in an Administrator CMD prompt. This removed the registry entries shown in the script output above. When this was done, I ran the script again just to be sure there was nothing else and indeed the RMAgent entries had gone and there were no other items that needed attention.
Finally, I tried "webadmin start systemstatebackup -backuptarget:C:" again in an administrator CMD prompt and it completed successfully.
I would like to thank Abhinav Mathur and Suhas Rao in particular for their very helpful script.
Sunil

Failed system state backup on Passive Node

I have a Windows Server 2012 R2 cluster that has a service that is installed on shared storage. On the passive node, the system state backups are failing because the path to the service executable does not exist. KB980794 existed
for Server 2008, which contained a hotfix and a registry key that could be added to exclude the paths to binaries that should not be included in the system state backup.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemWriter\ExcludedBinaryPaths
Is there a similar method of excluding these paths in Windows Server 2012 that will allow the VSS snapshot to execute successfully?

Hi,
Thanks for your posting.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Saved State Backup on Server 2012 R2 and DPM 2012

Hello, Our environment in currently in transition with planned migration to 2012 R2. In the mean time, we have a 5 node 2008 R2 hyper-v cluster with CSV. We are currently using DPM 2012 for our backup. I have read multiple postings about child
partition backup and saved state and all that seems to make relative sense.
What I have noticed is that in our existing environment (2008 R2 Hyper-v, DPM 2012) that all 2012 R2 Virtual servers setup in our hyper-v cluster show 'Backup Using Saved State'. All virtual 2003 - 2008 R2 servers on the same cluster show as 'Backup
using Child Partition Snapshot'.
So, the question: is this normal and the only way virtual 2012 R2 servers can be backed up in our environment? Or, is there some configuration on the virtual 2012 R2 servers that needs to be done so that the Hyper-v VSS writers show that it can be backed
up using Child Partition Snapshot. (Yes, I viewed the Hyper-V VSS Writer Caption: for each system on all the nodes and no, I am not talking about what is displayed in DPM 2012 since I understand it may not truly reflect the current backup method)

Have you already checked typical reason for DPM doing saved state backup? If not, find them below.
Also, do your VM have
SCSI controller added? Prior to using Veeam as our primary backup solution, we leveraged DPM and confronted the very same issue. Fortunately, by adding ISCSI controllers to VMs in question we were able to solve the problem.
Conditions when DPM fails to back up Hyper-V virtual machines in an online state
By default, System Center 2012 – Data Protection Manager (DPM) performs a backup of a Hyper-V Virtual Machine (VM) in an online state. However, DPM cannot back up a Hyper-V VM in an online state, if one or more of the following
conditions are true:
Backup (Volume Snapshot) Integration Service is disabled or not installed.
The virtual machine has one or more dynamic disks.
The virtual machine has one or more non-NTFS based volumes.
The virtual machine Cluster Resource Group in a cluster setup is offline.
The virtual machine is not in a running state.
A ShadowStorage assignment of a volume inside the virtual machine is explicitly set to a different volume other than itself.
An App-V drive is installed on the virtual machine that creates a non-NTFS volume.
These conditions are set by the Hyper-V writer. In such a case, the VM is put in a saved state before a snapshot of host volumes are taken (except when the VM is turned off) for a backup. The Hyper-V writer adds the VM in the following format:
For offline backups: Backup Using Saved State\<VMName>
For online backups: Backup Using Child Partition Snapshot\<VMName>
Additional reason if we have less than 300MB free space on a volume in the guest.
Kind regards, Leonardo.

Active directory system state backup

We are running active directory ,Windows 2008 R2 with DPM 2012.
I would like change the default location from C:\ to a remote network location. Such as, \\machine123\WindowsImageBackup
I modified PSDataSourceConfig.XML to point to a network location but that did not work. it keep dumping the backup on C: drive.
I found many article but all of them were locally on the same server.
how to do it on a remote network location?
Hussain
hussain

Hi,
There is no provision in DPM to move the system state backup to a remote location. You can schedule windows server backup to perform the systemstate backup and use remote share, then configure DPM to protect that share.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Restricting State Migration Point to allow 10 GB of data as User State backup

Similar Messages

Maybe you are looking for