SharePoint group containing AD security group - Check Permissions does not show correct information
I'm seeing a problem with SharePoint 2013 groups that contain Active Directory security groups. When using the Check Permissions feature to see what permissions a specific user has, it does not reflect the correct permissions for a user inside of the AD
security group. This occurs when checking permissions on a site, library, list or folder. When a user is added as a direct member of the SharePoint group it lists their proper permissions. I should note that the users ability to access the site or list works
properly and coincides with the SP/AD group the user belongs to. It's only the Check Permissions that doesn't work. This does not happen with SharePoint 2010 and the Check Permissions tool is very useful. Any ideas?
It's not wrong, it is expected behavior and working as designed. Until a user logs into the SharePoint site that is granted access via AD group, the user is not going to show under 'check permissions' as having access. SharePoint must have a record of the
user in the UIL in order to validate their access.
You're free to file an RFC with Microsoft, but the monetary impact to you must be extremely high in order for this behavior to be changed.
Trevor Seward
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.
Similar Messages
-
Security filter with variable does not work correctly
Helo,
I have one table with this columns (called BI_USERS):
USERBI | REGIONS
XXXX 10,5 -> In this case the user XXX can access the region 10 and 5
AAA 9,7
I use this table to apply the security filters. Fisrt I did a initialization block with the select: SELECT USERBI, REGIONS FROM BI_USERS WHERE USER = :USER
This select populate two variables: variable USER (system variable) and UserRegion (Non-system variable)
After I use the UserRegion variable in the securty filter of the one group of users. For exemple:
Name | Status | Business Model Filter
"Claro"."Historico Saldo Pre-Pago" Enabled "Claro"."Historico Saldo Pre-Pago"."DW_UN_NEG" In(VALUEOF(NQ_SESSION.*UserRegional)* )
But the issue is that the query is not working, because the query created for BIServer no use the IN operator. Seems the IN operator is changed for equal (=).
And the query returs error because the value 10,5 (for example) is not a numeric value.
Anybody could help me, please? I am using the version 10.1.3
Mauricio|||\/||| wrote:
Helo,
I have one table with this columns (called BI_USERS):
USERBI | REGIONS
XXXX 10,5 -> In this case the user XXX can access the region 10 and 5
AAA 9,7
I use this table to apply the security filters. Fisrt I did a initialization block with the select: SELECT USERBI, REGIONS FROM BI_USERS WHERE USER = :USER
This select populate two variables: variable USER (system variable) and UserRegion (Non-system variable)
After I use the UserRegion variable in the securty filter of the one group of users. For exemple:
Name | Status | Business Model Filter
"Claro"."Historico Saldo Pre-Pago" Enabled "Claro"."Historico Saldo Pre-Pago"."DW_UN_NEG" In(VALUEOF(NQ_SESSION.*UserRegional)* )
But the issue is that the query is not working, because the query created for BIServer no use the IN operator. Seems the IN operator is changed for equal (=).
And the query returs error because the value 10,5 (for example) is not a numeric value.
Anybody could help me, please? I am using the version 10.1.3
MauricioHi Mauricio,
First of all you have some syntax errors with your init block:
select USERBI, REGIONS from BI_USERS WHERE upper(USER)=upper(':USER');
Couple things to consider here:
1) Why are you selecting Userbi column from the table? Is USER system session variable not getting populated through other souces like LDAP or default security?
Ans: If your user session variable is getting populated from a different init block, then you dont need to select that column. Then your init block would look something like this:
select 'USERREGIONAL', REGIONS from BI_USERS WHERE upper(USER)=upper(':USER'); - Data Source
Row Wise Initialization - Data Target
Initblock that is populating the user session variable as the order of precedence.
2) If you dont have USER session variable populating from any other source, then your init block would look something like below:
select 'USER', USERBI, "USERREGIONAL', REGIONS from BI_USERS; - Data source
Row Wise Initialization - Data target
After following one of the above two steps, you need to apply the filters on the table.
"Claro"."Historico Saldo Pre-Pago"."DW_UN_NEG" IN(VALUEOF(NQ_SESSION.USERREGIONAL))
Note: Make sure you understand that variables are case sensitive.
Please award points as this is correct answer.
Thanks,
-Amith.
Edited by: Amith on May 10, 2011 3:18 PM -
When I was running Firefox 3.6 my Norton security Suite marked each site with a green circle to indicate to me that they felt that the site was safe to go to. They also indicated the sites that they protected with a yellow rectangle.
When I switched to Firefox 4.0 those markers no longer appear.
Really would like to have that sense of security back.
What do I need to do to get Norton back on the job with FirefoxSymantec have released updates for Norton 360 and Norton Internet Security to make them compatible with Firefox 4, for details see http://community.norton.com/t5/Norton-Internet-Security-Norton/Firefox-4-compatibility-hotfix-is-now-available/td-p/428894
-
Filter base on Person or Group column does not work correctly in sharepoint 2013
I have a list that contain "Person or Group"column that set "Allow Multiple Selections" to yes.
In sharepoint 2010 I create view and filter it base on this person or group column equal to [Me]. And it's work correctly.
Now in sharepoint 2013 when I filter view, base on this person or group column equal to [Me], it does not show me any items, although list has data that person or group column set to me.
What's wrong?
Thanks.If you want to filter the list view when current user is in the group, then I recommend to use theMembership comparator in the
query and add it to the view page in SharePoint Designer:
<Where><Or><Membership Type="CurrentUserGroups"><FieldRef Name="AssignedTo"/></Membership><Eq><FieldRef Name="AssignedTo"/><Value Type="Integer"><UserID Type="Integer"/></Value></Eq></Or></Where>
More reference:
http://decodesharepoint.blogspot.com/2010/01/filter-list-views-by-user-groups.html -
Server 2008 R2 does not show Internet Explorer 10/11 Group Policy options
Hello,
I have a Windows Server 2008 R2 server that has IE11 installed. I am attempting to create a GPO to control Proxy settings for IE10/11 clients, however, when I go to User Config>Preferences> Control Panel Settings> Internet Settings and Right click,
I do not see an option for IE10, only IE5 and 6, IE7, and IE8.
I have downloaded and installed the Administrative Templates for Internet Explorer from
here, and followed the installation instructions, but still, the option does not show up. I have ensured that all the latest Windows Updates are installed on the server, and rebooted
the server a couple times.
What am I missing here?
Thanks in advance.<meta content="text/html; charset=UTF-16" http-equiv="Content-Type" /><title>SFDN\testuser</title> <style type="text/css">body { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%;
font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; } table { font-size:100%; table-layout:fixed; width:100%; } td,th { overflow:visible; text-align:left; vertical-align:top; white-space:normal; } .title { background:#FFFFFF;
border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; ; table-layout:fixed; width:100%; z-index:5; } .he0_expanded { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block;
font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he1_expanded { background-color:#A0BACB; border:1px solid
#BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he1h_expanded
{ background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px;
padding-right: 5em; padding-top: 4px; ; width: 100%; } .he1 { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px;
margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he2 { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em;
margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he3 { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%;
font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ; width:100%; } .he4 { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block;
font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ; width:100%; } .he4h { background-color:#E8E8E8; border:1px solid #BBBBBB;
color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ; width:100%; } .he4i { background-color:#F9F9F9;
border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; ; width:100%; } .he5 { background-color:#E8E8E8;
border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ;
width:100%; } .he5h { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px;
; width:100%; } .he5i { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top:
4px; ; width:100%; } DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; ; right:10px; text-decoration:underline; z-index: 0; } .he0 .expando { font-size:100%; } .info, .info3, .info4,
.disalign { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; } .disalign TD { padding-bottom:5px; padding-right:10px; } .info TD { padding-right:10px; width:50%; } .info3 TD { padding-right:10px; width:33%; } .info4 TD, .info4 TH { padding-right:10px;
width:25%; } .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; } .subtable, .subtable3 { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; } .subtable TD, .subtable3 TD { padding-left:10px;
padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; } .subtable TH, .subtable3 TH { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; } .subtable .footnote { border-top:1px solid #CCCCCC;
} .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; } .subtable_frame { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; } .subtable_frame TD { line-height:1.1em; padding-bottom:3px; padding-left:10px;
padding-right:15px; padding-top:3px; } .subtable_frame TH { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; } .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; } .explainlink { color:#000000;
text-decoration:none; cursor:hand; } .explainlink:hover { color:#0000FF; text-decoration:underline; } .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px;
margin-left:43px; margin-right:0px; padding-top: 4px; ; } .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; ; } .container
{ display:block; ; } .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; } .rsopname { color:#333333; font-family:MS Shell
Dlg; font-size:130%; font-weight:bold; padding-left:11px; } .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; } .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px;
} #uri { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; } #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; } #objshowhide { color:#000000; cursor:hand; font-family:MS
Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; } #gposummary { display:block; } #gpoinformation { display:block; } @media print { #objshowhide{ display:none;
} body { color:#000000; border:1px solid #000000; } .title { color:#000000; border:1px solid #000000; } .he0_expanded { color:#000000; border:1px solid #000000; } .he1h_expanded { color:#000000; border:1px solid #000000; } .he1_expanded { color:#000000; border:1px
solid #000000; } .he1 { color:#000000; border:1px solid #000000; } .he2 { color:#000000; background:#EEEEEE; border:1px solid #000000; } .he3 { color:#000000; border:1px solid #000000; } .he4 { color:#000000; border:1px solid #000000; } .he4h { color:#000000;
border:1px solid #000000; } .he4i { color:#000000; border:1px solid #000000; } .he5 { color:#000000; border:1px solid #000000; } .he5h { color:#000000; border:1px solid #000000; } .he5i { color:#000000; border:1px solid #000000; } } v\:* {behavior:url(#default#VML);}
</style> <script language="vbscript"> <!-- '================================================================================ ' String "strShowHide(0/1)" ' 0 = Hide all mode. ' 1 = Show all mode. strShowHide = 1 'Localized
strings strShow = "show" strHide = "hide" strShowAll = "show all" strHideAll = "hide all" strShown = "shown" strHidden = "hidden" strExpandoNumPixelsFromEdge = "10px" Function IsSectionHeader(obj)
IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1h_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3")
Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h") End Function Function IsSectionExpandedByDefault(objHeader) IsSectionExpandedByDefault = (Right(objHeader.className,
Len("_expanded")) = "_expanded") End Function ' strState must be show | hide | toggle Sub SetSectionState(objHeader, strState) ' Get the container object for the section. It's the first one after the header obj. i = objHeader.sourceIndex
Set all = objHeader.parentElement.document.all While (all(i).className <> "container") i = i + 1 Wend Set objContainer = all(i) If strState = "toggle" Then If objContainer.style.display = "none" Then SetSectionState
objHeader, "show" Else SetSectionState objHeader, "hide" End If Else Set objExpando = objHeader.children.item(1) If strState = "show" Then objContainer.style.display = "block" objExpando.innerText = strHide ElseIf strState
= "hide" Then objContainer.style.display = "none" objExpando.innerText = strShow End If End If End Sub Sub ShowSection(objHeader) SetSectionState objHeader, "show" End Sub Sub HideSection(objHeader) SetSectionState objHeader,
"hide" End Sub Sub ToggleSection(objHeader) SetSectionState objHeader, "toggle" End Sub '================================================================================ ' When user clicks anywhere in the document body, determine if user
is clicking ' on a header element. '================================================================================ Function document_onclick() Set strsrc = window.event.srcElement While (strsrc.className = "sectionTitle" Or strsrc.className = "expando"
Or strsrc.className = "vmlimage") Set strsrc = strsrc.parentElement Wend ' Only handle clicks on headers. If Not IsSectionHeader(strsrc) Then Exit Function ToggleSection strsrc window.event.returnValue = False End Function '================================================================================
' link at the top of the page to collapse/expand all collapsable elements '================================================================================ Function objshowhide_onClick() Set objBody = document.body.all Select Case strShowHide Case 0 strShowHide
= 1 objshowhide.innerText = strShowAll For Each obji In objBody If IsSectionHeader(obji) Then HideSection obji End If Next Case 1 strShowHide = 0 objshowhide.innerText = strHideAll For Each obji In objBody If IsSectionHeader(obji) Then ShowSection obji End
If Next End Select End Function '================================================================================ ' onload collapse all except the first two levels of headers (he0, he1) '================================================================================
Function window_onload() ' Only initialize once. The UI may reinsert a report into the webbrowser control, ' firing onLoad multiple times. If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then '
Set text direction Call fDetDir(UCase(document.dir)) ' Initialize sections to default expanded/collapsed state. Set objBody = document.body.all For Each obji in objBody If IsSectionHeader(obji) Then If IsSectionExpandedByDefault(obji) Then ShowSection obji
Else HideSection obji End If End If Next objshowhide.innerText = strShowAll document.documentElement.setAttribute "gpmc_reportInitialized", "true" End If End Function '================================================================================
' When direction (LTR/RTL) changes, change adjust for readability '================================================================================ Function document_onPropertyChange() If window.event.propertyName = "dir" Then Call fDetDir(UCase(document.dir))
End If End Function Function fDetDir(strDir) strDir = UCase(strDir) Select Case strDir Case "LTR" Set colRules = document.styleSheets(0).rules For i = 0 To colRules.length -1 Set nug = colRules.item(i) strClass = nug.selectorText If nug.style.textAlign
= "right" Then nug.style.textAlign = "left" End If Select Case strClass Case "DIV .expando" nug.style.Left = "" nug.style.right = strExpandoNumPixelsFromEdge Case "#objshowhide" nug.style.textAlign = "right"
End Select Next Case "RTL" Set colRules = document.styleSheets(0).rules For i = 0 To colRules.length -1 Set nug = colRules.item(i) strClass = nug.selectorText If nug.style.textAlign = "left" Then nug.style.textAlign = "right"
End If Select Case strClass Case "DIV .expando" nug.style.Left = strExpandoNumPixelsFromEdge nug.style.right = "" Case "#objshowhide" nug.style.textAlign = "left" End Select Next End Select End Function '================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI). '================================================================================ Function window_onbeforeprint() For Each obji In
document.all If obji.className = "expando" Then If obji.innerText = strHide Then obji.innerText = strShown If obji.innerText = strShow Then obji.innerText = strHidden End If Next End Function '================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show"). '================================================================================ Function window_onafterprint() For Each obji In document.all If obji.className
= "expando" Then If obji.innerText = strShown Then obji.innerText = strHide If obji.innerText = strHidden Then obji.innerText = strShow End If Next End Function '================================================================================ ' Adding
keypress support for accessibility '================================================================================ Function document_onKeyPress() If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode =
"10" Then 'space bar (32) or carriage return (13) or line feed (10) If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false If window.event.srcElement.className = "sectionTitle"
Then Call document_onclick() : window.event.returnValue = false If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false End If End Function --> </script> <script language="javascript">
<!-- function getExplainWindowTitle() { return document.getElementById("explainText_windowTitle").innerHTML; } function getExplainWindowStyles() { return document.getElementById("explainText_windowStyles").innerHTML; } function getExplainWindowSettingPathLabel()
{ return document.getElementById("explainText_settingPathLabel").innerHTML; } function getExplainWindowExplainTextLabel() { return document.getElementById("explainText_explainTextLabel").innerHTML; } function getExplainWindowPrintButton()
{ return document.getElementById("explainText_printButton").innerHTML; } function getExplainWindowCloseButton() { return document.getElementById("explainText_closeButton").innerHTML; } function getNoExplainTextAvailable() { return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
} function getExplainWindowSupportedLabel() { return document.getElementById("explainText_supportedLabel").innerHTML; } function getNoSupportedTextAvailable() { return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
} function showExplainText(srcElement) { var strSettingName = srcElement.getAttribute("gpmc_settingName"); var strSettingPath = srcElement.getAttribute("gpmc_settingPath"); var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");
if (strSettingDescription == "") { strSettingDescription = getNoExplainTextAvailable(); } var strSupported = srcElement.getAttribute("gpmc_supported"); if (strSupported == "") { strSupported = getNoSupportedTextAvailable(); }
var strHtml = "<html>\n"; strHtml += "<head>\n"; strHtml += "<title>" + getExplainWindowTitle() + "</title>\n"; strHtml += "<style type='text/css'>\n" +
getExplainWindowStyles() + "</style>\n"; strHtml += "</head>\n"; strHtml += "<body>\n"; strHtml += "<div class='head'>" + strSettingName +"</div>\n"; strHtml
+= "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n"; strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel()
+ "</b><br/>" + strSupported +"</div>\n"; strHtml += "<div class='info'>\n"; strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n"; strHtml += "<div class='btn'>"; strHtml += getExplainWindowPrintButton(); strHtml += getExplainWindowCloseButton();
strHtml += "</div></body></html>"; var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes "; var expWin = window.open("", "expWin", strDiagArgs); expWin.document.write("");
expWin.document.close(); expWin.document.write(strHtml); expWin.document.close(); expWin.focus(); //cancels navigation for IE. if(navigator.userAgent.indexOf("MSIE") > 0) { window.event.returnValue = false; } return false; } --> </script>
Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS
Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding- height:24px; } .path { margin- margin- margin-bottom:5px;width:100%; } .info { padding-width:100%; } table { font-size:100%; width:100%; border:1px solid #999999;
} th { border-bottom:1px solid #999999; text-align:left; padding- height:24px; } td { background:#FFFFFF; padding- padding-bottom:10px; padding- } .btn { width:100%; text-align:right; margin- } .hdr { font-weight:bold; border:1px solid #999999; text-align:left;
padding- padding- height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; background:#FFFFFF; padding- padding-bottom:10px; padding- border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS
Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
<button accesskey="P" name="Print" onclick="window.print()">Print</button>
<button accesskey="C" name="Close" onclick="window.close()">Close</button>
No explanation is available for this setting.
Supported On:
Not available
Group Policy Results
SFDN\testuser
Data collected on: 12/14/2014 1:00:12 PM
Summary
Computer Configuration Summary
No data available.
User Configuration Summary
General
User name
SFDN\testuser
Domain
SFD.local
Last time Group Policy was processed
12/14/2014 12:59:22 PM
Group Policy Objects
Applied GPOs
Name
Link Location
Revision
Local Group Policy
Local
AD (1), Sysvol (1)
Default Domain Policy
SFD.local
AD (6), Sysvol (6)
Test
SFD.local/SFD-Restricted-Users
AD (10), Sysvol (10)
Limit Downloads
SFD.local/SFD-Restricted-Users
AD (2), Sysvol (2)
SFD Restricted Users
SFD.local/SFD-Restricted-Users
AD (59), Sysvol (59)
Denied GPOs
Name
Link Location
Reason Denied
None
Security Group Membership when Group Policy was applied
SFDN\Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
NT AUTHORITY\This Organization
LOCAL
Mandatory Label\Medium Mandatory Level
WMI Filters
Name
Value
Reference GPO(s)
None
Component Status <v:group alt="Warning" class="vmlimage" coordsize="100,100" style="width:15px;height:15px;vertical-align:middle;"><v:shape class="vmlimage" fillcolor="yellow"
strokecolor="yellow" style="width:100;height:100;"><v:path v="m 50,0 l 0,99 99,99 x e"></v:path></v:shape> <v:rect class="vmlimage" fillcolor="black" strokecolor="black" style="width:10;height:35;"></v:rect>
<v:rect class="vmlimage" fillcolor="black" strokecolor="black" style="width:10;height:5;"></v:rect> </v:group>
Component Name
Status
Last Process Time
Group Policy Infrastructure
Success
12/14/2014 12:59:46 PM
Folder Redirection
Failed
12/14/2014 12:59:46 PM
Folder Redirection failed due to the error listed below.
Cannot complete this function.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 12/14/2014 12:59:23 PM and 12/14/2014 12:59:46 PM.
Group Policy Internet Settings
Success
12/14/2014 12:59:46 PM
Registry
Success
12/12/2014 10:28:23 AM
Computer Configuration
No data available.
User Configuration
Policies
Windows Settings
Security Settings
Software Restriction Policies
Winning GPO
SFD Restricted Users
Enforcement
Policy
Setting
Apply software restriction policies to the following
All software files except libraries (such as DLLs)
Apply software restriction policies to the following users
All users
When applying software restriction policies
Ignore certificate rules
Designated File Types
File Extension
File Type
ADE
Microsoft Access Project Extension
ADP
Microsoft Access Project
BAS
BAS File
BAT
Windows Batch File
CHM
Compiled HTML Help file
CMD
Windows Command Script
COM
MS-DOS Application
CPL
Control panel item
CRT
Security Certificate
EXE
Application
HLP
Help file
HTA
HTML Application
INF
Setup Information
INS
INS File
ISP
ISP File
LNK
Shortcut
MDB
Microsoft Access Database
MDE
Microsoft Access MDE Database
MSC
Microsoft Common Console Document
MSI
Windows Installer Package
MSP
Windows Installer Patch
MST
MST File
OCX
ActiveX control
PCD
PCD File
PIF
Shortcut to MS-DOS Program
REG
Registration Entries
SCR
Screen saver
SHS
SHS File
URL
Internet Shortcut
VB
VB File
WSC
Windows Script Component
Trusted Publishers
Trusted publisher management
Allow all administrators and users to manage user's own Trusted Publishers
Certificate verification
None
Software Restriction Policies/Security Levels
Policy
Setting
Winning GPO
Default Security Level
Unrestricted
SFD Restricted Users
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security Level
Unrestricted
Description
Date last modified
9/30/2011 12:34:27 PM
Winning GPO
SFD Restricted Users
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security Level
Unrestricted
Description
Date last modified
9/30/2011 12:34:27 PM
Winning GPO
SFD Restricted Users
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel
Policy
Setting
Winning GPO
Network/Network Connections
Policy
Setting
Winning GPO
This setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.
If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.
Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.
If you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.
Note: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to
users.
Note: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting." gpmc_settingname="Prohibit access to properties of a LAN connection" gpmc_settingpath="User Configuration/Administrative
Templates/Network/Network Connections" gpmc_supported="At least Windows 2000 Service Pack 1" href="javascript:void();" onclick="javascript:showExplainText(this); return false;">Prohibit access to properties of a LAN connection
Enabled
SFD Restricted Users
If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that
a connection uses.
Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.
If you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables
the component.
Note: When the "Prohibit access to properties of a LAN connection" setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.
Note: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting." gpmc_settingname="Prohibit Enabling/Disabling components of a LAN connection" gpmc_settingpath="User
Configuration/Administrative Templates/Network/Network Connections" gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only" href="javascript:void();" onclick="javascript:showExplainText(this);
return false;">Prohibit Enabling/Disabling components of a LAN connection
Enabled
SFD Restricted Users
Windows Components/Internet Explorer
Policy
Setting
Winning GPO
If you enable this policy setting, the user will not be able to configure proxy settings.
If you disable or do not configure this policy setting, the user can configure proxy settings." gpmc_settingname="Prevent changing proxy settings" gpmc_settingpath="User Configuration/Administrative Templates/Windows Components/Internet
Explorer" gpmc_supported="At least Internet Explorer 5.0" href="javascript:void();" onclick="javascript:showExplainText(this); return false;">Prevent changing proxy settings
Enabled
SFD Restricted Users
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone
Policy
Setting
Winning GPO
Allow file downloads
Disable
Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.
Setting
State
Winning GPO
Software\Policies\Microsoft\office\14.0\outlook\ForceOSTPath
P:\My Documents\Outlook Files
SFD Restricted Users
Software\Policies\Microsoft\office\14.0\outlook\ForcePSTPath
P:\My Documents\Outlook Files
SFD Restricted Users -
Sync group does not show local instance
I cannot find my local sql server listed when I add a new sync group. The hub dialog is ok, but the reference database does not show databases registered using the Data Sync Agent. Those local databases are SQL 2008 SQLExpress, 2012 SQLExpress and 2014
SQL Server. None show up. I have successfully done this earlier in the year. Prerequisites are installed. What might be wrong?Hi,
Please have a check on the below link and check if it helps.
http://msdn.microsoft.com/en-us/library/azure/hh667321.aspx#bkmk_cantfinddb
Regards,
Mekh. -
Why does Group created on Master console does not show any device count mapped on the managed Amp?
Q: Why does Group created on Master console does not show any device count mapped on the managed Amp?
A: When a group is created on master console it will be pushed to all the managed amp which is added with Manage group configuration enabled. The Group pushed to the managed amp will be created as Global group and you can create subscriber groups for the global group to which you will add the device into since we cannot add any devices into global group directly.
Hence there is no device added to the global group, on the master console it does not show any device count for the groups that are created on master console.Laura Quitugua wrote:
Hi,
I have syced my outlook email with my iphone 4s and ipad.
Note that only the email account info (username, login, server) is sync'd.
The actual emails are not sync'd.
Opening an email on one device does nothing on teh other devices. -
Permissions are not displaying correctly on Yosemite server
My file and folder permissions are not displaying correctly on my Yosemite server when viewed from a Yosemite client.
I have set these permissions from the server app on the server and have added local network groups for the appropriate folders on the share. When checked from the server's finder, everything looks correct. The server is setup for both AFP and SMB on file sharing. I have also tried setting permissions from the server's finder and seemed to make no difference.
When logged into from local or VPN Yosemite clients using AFP, the permissions do not show anything but postgres user and everyone group. Even though they should have network groups such as skoogfinancial, skoogmarketing, etc.
The server does seem to enforce the permissions correctly though a user cannot get into folders he does not have permissions for.
Therefore, it seems the server is enforcing correctly, but a user may not understand what is going on as the permissions list doesn't list anything meaningful.Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of this exercise is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login. Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode* and log in to the account with the problem. The instructions provided by Apple are as follows:
Be sure your Mac is shut down.
Press the power button.
Immediately after you hear the startup tone, hold the Shift key. The Shift key should be held as soon as possible after the startup tone, but not before the tone.
Release the Shift key when you see the gray Apple icon and the progress indicator (looks like a spinning gear).
*Note: If FileVault is enabled under OS X 10.7 or later, or if a firmware password is set, you can’t boot in safe mode.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on certain Macs.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem(s)?
After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test. -
Check Availability does not display free busy information
I have setup Calendar Server and Communications Express (w/ Directory Server, Access Manager, Delegated Administrator, Web Server) to do an evalutation of the Sun Calendar. I started with the 2005Q4 version as it came with our Solaris 10 installation.
Then, when I was unable to view free/busy information via the Check Availability view, I thought that maybe trying out the upgraded version 6.3 would help. I have the exact same problem with 6.3 as I did with 2005Q4. All the other basic capabilities seem to be working fine.
I should note that when I setup 2005Q4, the free/busy information showed up in Calendar Express, but not Communications Express.
With 6.3, the logs indicate that Calendar Server is sending the free/busy information, and that Communications Express is receiving the free/busy information from Calendar Server, yet all the time slots were showing that the resources I was checking were available, when I know full well that they have busy time slots (which show up on their respective calendars), and the Communications Express logs received those free/busy times from calendar server. I set the time range of the check availability request wide enough to ensure that I should see the busy time slots.
I am completely baffled by this as this is such a major feature (at least for us)--I wouldn't think that this would be a problem across two major releases without anyone else noticing. What could I be doing wrong?
I am using the calmaster account to do this, and I added a couple of resources using delegated administrator. Events show up on the resource calendars as expected. Communications Express receives the correct free/busy information from Calendar Server, but does not display it.Everything is in one domain right now (I am just trying to get a simple case working).
When I look at the resource calendar itself (logged is as the owner, which is calmaster), I can see everything about all events on the reosurce calendar.
The default acl for resource calendars is the same one that comes by default with Calendar Server (which grants all users permissions to see free/busy info).
When I edit the resource calendar in Communications Express, "Anyone can view my availability", "Anyone can read my calendar", and "Anyone can invite me to an event" are all enabled, yet the availability does not show busy in the time slots where the resource has scheduled events on its calendar--everything remains as available (white).
The events for which the resource is scheduled are public events.
Any other ideas?
Thank you for replying--any other suggestions or ideas that you or anyone else can think of are more than welcome. I really need to get this working!
Colette -
Secure store lib dir does not exist - unable to open config tool
Hi we are using NW 7.0 with windows 2005 (AS java).
when i click on configtool in central instance it says
Error occured while working with configuration( scanning)
Msg: Error occured : secure store lib Dir does not exist :
server\sapmnt\SID\SYS\global\security\lib\tools
please suggest
Thanks
KKHI ,
Was config tool working earlier?
Please check if direcories sapmnt & saploc exist are you are able to access them.Check permission on it.
May be your windows server got patched and some security policy got changed.Worth a revisiting and checking.
Other thing you can try is take a backup of bootstrap.properties file and modify the location of library from
server\sapmnt\J2EE\sys\global\security\lib\tools to \usr\sap\J2EE\sys\global\security\lib in the bootstrap file.
Regards,
Ashutosh -
Repair disk permissions does not work
Repair disk permissions does not work. Disk Uitliy fines many incorrect permissions (ACL found, but not expected) and says that it would repair it. However, when checked again, it finds the same permission errors.
I have tried Disk Utility as well as the command line "sudo diskutil repairPermissions /" (which probably does exactly the same as Disk Utility).
Any hints?
C.Are you trying to Repair Permissions because you have file access problems in the System files, or just because you think you need to do it?
If the former, please explain what you are seeing. If the latter, stop wasting your time.
The things it doesn't repair are not repaired because there is nothing broken. The orginal Receipts files have the old settings, and subsequent updates have changed the permissions on those things to what they should be, now. It will report the differences it finds every time you run Repair Permissions because they will always be different and they should be the way they are. -
my itunes in pc fails to secure link with itunes store it shows the process bar it automatically quits the process it also does not shows any on the screen. i am using windows xp service pack 3. what shoul i do?
Diagnostics test
Microsoft Windows XP Professional Service Pack 3 (Build 2600)
ECS G31T-M7
iTunes 10.5.2.11
QuickTime 7.6.9
FairPlay 1.13.37
Apple Application Support 2.1.6
iPod Updater Library 10.0d2
CD Driver 2.2.0.1
CD Driver DLL 2.1.1.1
Apple Mobile Device 4.0.0.97
Apple Mobile Device Driver 1.57.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.5.502
Gracenote MusicID 1.9.5.115
Gracenote Submit 1.9.5.143
Gracenote DSP 1.9.5.45
iTunes Serial Number 0012ABAC07F3CCB0
Current user is an administrator.
The current local date and time is 2011-12-31 14:06:21.
iTunes is not running in safe mode.
WebKit accelerated compositing is enabled.
HDCP is not supported.
Core Media is not supported. (16005)
Video Display Information
Intel(R) G33/G31 Express Chipset Family
**** External Plug-ins Information ****
No external plug-ins installed.
**** Network Connectivity Tests ****
Network Adapter Information
Adapter Name: {7599FAD1-1BB9-4AC6-80AF-404253DC519E}
Description: Atheros L2 Fast Ethernet 10/100 Base-T Controller - Packet Scheduler Miniport
IP Address: 192.168.1.5
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.1.1
DHCP Enabled: Yes
DHCP Server: 192.168.1.1
Lease Obtained: Sat Dec 31 13:46:09 2011
Lease Expires: Tue Jan 03 13:46:09 2012
DNS Servers: 192.168.1.1
Active Connection: LAN Connection
Connected: Yes
Online: Yes
Using Modem: No
Using LAN: Yes
Using Proxy: No
SSL 3.0 Support: Enabled
TLS 1.0 Support: Enabled
Firewall Information
Windows Firewall is on.
iTunes is enabled in Windows Firewall.
Connection attempt to Apple web site was successful.
Connection attempt to browsing iTunes Store was successful.
Connection attempt to purchasing from iTunes Store was successful.
Connection attempt to iPhone activation server was unsuccessful.
The network connection timed out.
Connection attempt to firmware update server was unsuccessful.
The network connection timed out.
Connection attempt to Gracenote server was successful.
Last successful iTunes Store access was 2011-12-31 14:00:02.
**** Device Connectivity Tests ****
iPodService 10.5.2.11 is currently running.
iTunesHelper 10.5.2.11 is currently running.
Apple Mobile Device service 3.3.0.0 is currently running.
Universal Serial Bus Controllers:
Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8. Device is working properly.
Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9. Device is working properly.
Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA. Device is working properly.
Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB. Device is working properly.
Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC. Device is working properly.
No FireWire (IEEE 1394) Host Controller found.
Connected Device Information:
rawkiss’s iPhone, iPhone 3G running firmware version 4.0
Serial Number: 86931UEAY7H
**** Device Sync Tests ****
Sync tests completed successfully.I have found a fix after doing additional research through this forum. Tech Note #328730 addresses this problem and it works for Photoshop Album 3.2 even though it was written for release 1.0.
Here is a link that will take you directly to the Tech Note:
http://kb.adobe.com/selfservice/viewContent.do?externalId=328730
When using this fix the Tech Note indicates:
"Imported image data and tags are lost when you re-create the My Catalog.psa file, so you need to reimport images and reapply any tags"
however it did retain the captions (at least it did for me). -
I have my iphone4 activated and working since 3days, i purchased it from ebay with 1year warranty, when i check the serial number from Apple store at Bangalore Forum mall, they say that it does not show anything and 'OUT OF WARRANTY'.
Now i have a problem in it, all icons just shake and system hangs, needs restarting.You need to go back to the person you bought it from. Sounds like they may have sold you phone that is not as described.
Did you check the warranty status before purchasing it? -
Inherit Permissions option not showing up for AFP shares
Hello,
I am running OS X Server 10.5.8, and I recently noticed that the option to inherit permissions from parent is not showing up under protocol options. I used to see Default permissions for new files and folders, and now that section does not show up.
I have searched around and seen one other post where someone had a similar issue, but the post was not answered.
Thanks,
ScottThanks for the response. I tried the terminal command, and it went through without an error, but inherit permissions are still not working. I tested saving file to this volume and it did not inherit the permissions set through Server Admin.
When I launch server admin, I don't even see the option to configure Inherit Permissions. Is there a global setting somewhere? -
The plugin check page does list something called 'Shockwave Flash." I went to the Adobe site and downloaded and installed the latest version of Adobe Flash but it still does not show up on the plugin check page. I don't see how Adobe Flash can be crashing in Firefox when Firefox doesn't even know that it's installed.
Your System Details List shows the Shockwave Flash 12.0 r0 plugin as installed, so you appear to have the Flash plugin installed.
You can check the version of the current Flash player here:
*http://www.adobe.com/software/flash/about/
*http://helpx.adobe.com/flash-player.html
What is the current setting for the Flash plugin on Firefox/Tools > Add-ons > Plugins?
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
*Do NOT click the Reset button on the Safe Mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
Maybe you are looking for
-
Galleries - default to first item in list
I am working on a trade show app using Siena. I have a number of product galleries that load from excel, but I am having trouble getting the galleries to default to the first item in a selected list. Instead, if I select a new gallery, it starts on t
-
Hello, I tried deleting its cache but it kept crashing and also I tested a separate account in the mac and it does the same. I am running mountain lion 10.8.5 on a Mac book pro late 2012 13inches. any help will be appreciated! Process: Safari
-
Hi SDN Firends, Is it possible to use two iterator in the same class?If so how? Using MVC ,I'm having a requirement of displaying two tables in the same page. I dont want to display it by calling from others pages. With Regards, SHARMILA BRINDHA.M
-
SELECT COUNT(DISTINCT(a.create_member_id)) AS requestor_count FROM conv_conference a LEFT OUTER JOIN conv_conference_sessions b ON b.session_id = a.session_id session_id is INT column, create_member_id is VARCHAR column. conv_confrence, conv_conferen
-
Please help me it so argent. My problem is when I am try ing to take export in oracle 9.2.0.6 the export become hang. (win2003) exp supuser_dba/password file=d:\oracle_full_backup full=y Connected to: Oracle9i Enterprise Edition Release 9.2.0.6.0 - P