Users are being prompted for Admin credentials when they attempt to print.

Hello!  I am a Tech assistant at a public school and we have run into an issue with our students and their MacBooks & MacBook Pros.
Whenever our students attempt to print to any printer in their school building they are prompted for administrator credentials.  I have attached examples of the message they are getting:
We are not sure how to go about tackling this issue.  We are getting this message on both MacBooks and MacBook Pros.  They are all running Mountain Lion.  Last year they were all on Lion and we never had this issue.  Could this possibly be a known issue with Mountain Lion???  Once we type in the administrator credentials for the students they are able to print from then on.  Many of the students are also seeing this message when they try to print at their homes.  It seems to have something to do with printing permissions but we're just not sure.  Any help would be very much appreciated!
Thanks!

You used Workgroup Manager, Profile Manager, or Parental Controls to restrict users from printing or adding a print queue. Remove or modify those restrictions the same way.

Similar Messages

  • Why being prompted for login/password when using OVDC, smart card,token/vdi

    Hello,
    I'm using VDI 3.2.1, OVDC, smart card and i assigned a smart card token to a desktop pool.
    Inserting the smart card triggers a new VDI desktop selector which prompts for the login and password.
    Is there any reason why VDI is prompting for the login/password in the VDI selector when using a smart card especially that the smart card token has been assigned to a desktop pool ?
    Thanks
    Thierry.

    You still have to authenticate to get a desktop. If you assigned a token to a pool, the ability to be assigned a desktop is based on the token not the user ID. That means that any user will be assigned a desktop if they use that card.

  • Some users are having access to all mailboxes when they configure thier outlook

    for 7 users the get access to all mailboxes so when they configure their outlook profile they get about 700 mailbox so outlook hangs this happens with new created users the same 7 users will get access to them as will 
    i tired this
    Get-Mailbox | Remove-MailboxPermission -User Administrator -AccessRights Fullaccess -InheritanceType all
    nut then i got this
    An inherited access control entry has been specified CreateChild ControlType Allow
    then o tried removing from the DB level
    Remove-Adpermission "DB" -user "jobs" -extendedrights Receive-As
    Remove-Adpermission "DB" -user "jobs" -extendedrights send-as
    Remove-Adpermission "DB" -user "jobs" -extendedright ms-Exch-Store-Admin
    but stilll the same

    hi thank you, looks i need some more detail on how to do this
    i saved the lines on a .ps1 file tried to run it on exchange and i got the below , can you illustrate more how to do this
    The operation couldn't be performed because object 'sharedmailbox' couldn't be found on 'DC.mydomain.com'.
        + CategoryInfo          : InvalidData: (:) [Get-MailboxPermission], ManagementObjectNotFoundException
        + FullyQualifiedErrorId : E61E2EBE,Microsoft.Exchange.Management.RecipientTasks.GetMailboxPermission
    Cannot bind argument to parameter 'Instance' because it is null.
        + CategoryInfo          : InvalidData: (:) [Remove-MailboxPermission], ParameterBindingValidationException
        + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Remove-MailboxPermission
    Cannot bind argument to parameter 'Identity' because it is null.
        + CategoryInfo          : InvalidData: (:) [Add-MailboxPermission], ParameterBindingValidationException
        + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Add-MailboxPermission

  • How can I remove the admin credentials when starting an application?

    Hello everyone!
    We have changed all the City use of computers. Before, everybody was local admin and today they are standard user. The process is not finished but well advanced. I had a few problems but all went quite well. One of the remaining bugs that I had is two applications
    that always ask for admin credentials when I start them.
    - I have given permissions for the apps to start as admin (properties of exe--> Compatibility-->run this program as an administrator) but it is not working.
    - Have given all permission in the folder where the application is installed but to no avail to.
    Do you know how can I correct that?
    That would be quite a setback if I would have to give back admin right to users.
    Thank you very much!

    Hi ArunKumarJ,
    Some programs have .exe files that have to be run as or invoked as an administrator on a client computer within a domain.
    The regular way to do that is to grant all necessary permission of resources for that user. Since as you mentioned that your application need to access lots of resources in system. So I am the afraid that the simplest way to do that is to keep UAC (user
    account control) open，create a administrator entry and let the standard user run this application as administrator.
    If it is not possible to provide. Try ACT (Application Compatibility Toolkit) and other methods as mentioned in following link and check if it works for
    your application.
    https://social.technet.microsoft.com/Forums/windows/en-US/55a4bd0a-e868-4329-ac04-0e5237f5fcb4/how-can-i-allow-a-standard-user-to-run-a-program-with-admin-rights-without-prompting-for-a-password?forum=w7itproappcompat
    https://social.technet.microsoft.com/Forums/windows/en-US/03de6f80-d994-4e5c-8ffd-f13778c32e5c/how-to-run-business-card-scanner-program-with-out-prompting-the-administrator-password-on-a-domain?forum=w7itproinstall#8f0f6b9a-4e52-473f-aa61-2e45061ce7a0
    Regards,
    D. Wu
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Exhcnage 2013 Migration - User keep keeping prompted for credentials

    Hello,
    I am migrating all on-premise exchange 2010 SP3 to Exchange 2013 SP1. I am testing mailbox migrations, each mailbox that gets moved to 2013 the user keeps getting prompted for credentials. I have read several posts in the forums yet none which solve my problem.
    Can someone point me in the right direction. All 2013 setting are currently at default.

    Thank you for your help and your quick response.
    Here is the autodiscover test. When I move the mailbox to 2013 its picks up the 2013 URL. In this output mail.myserver.com is the hostname of my 2013 cas.
    Also noticed the following in the server field under account settings.
    <?xml version="1.0" encoding="utf-8"?>
    <Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
      <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
        <User>
          <DisplayName>2013test</DisplayName>
          <LegacyDN>/o=mycompany/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=2013test436</LegacyDN>
          <AutoDiscoverSMTPAddress>[email protected]</AutoDiscoverSMTPAddress>
          <DeploymentId>91ce898c-65a0-402e-be70-622d0a31f7c3</DeploymentId>
        </User>
        <Account>
          <AccountType>email</AccountType>
          <Action>settings</Action>
          <MicrosoftOnline>False</MicrosoftOnline>
          <Protocol>
            <Type>EXCH</Type>
            <Server>[email protected]</Server>
            <ServerDN>/o=mycompany/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/[email protected]</ServerDN>
            <ServerVersion>73C08391</ServerVersion>
            <MdbDN>/o=mycompany/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/[email protected]/cn=Microsoft Private MDB</MdbDN>
            <PublicFolderServer>mail.myserver.com</PublicFolderServer>
            <AD>nohdomp1.domain.LOCAL</AD>
            <AuthPackage>Anonymous</AuthPackage>
            <ASUrl>https://mail.myserver.com/ews/exchange.asmx</ASUrl>
            <EwsUrl>https://mail.myserver.com/ews/exchange.asmx</EwsUrl>
            <EmwsUrl>https://mail.myserver.com/ews/exchange.asmx</EmwsUrl>
            <EcpUrl>https://mail.myserver.com/ecp/</EcpUrl>
            <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-um>
            <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-aggr>
            <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.LOCAL</EcpUrl-mt>
            <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-ret>
            <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-sms>
            <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-photo>
            <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tm>
            <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmCreating>
            <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmEditing>
            <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-extinstall>
            <OOFUrl>https://mail.myserver.com/ews/exchange.asmx</OOFUrl>
            <UMUrl>https://mail.myserver.com/ews/UM2007Legacy.asmx</UMUrl>
            <OABUrl>https://mail.myserver.com/OAB/4b0a14e4-d177-415f-9acf-b51b966b6dd8/</OABUrl>
            <ServerExclusiveConnect>off</ServerExclusiveConnect>
          </Protocol>
          <Protocol>
            <Type>EXPR</Type>
            <Server>mail.myserver.com</Server>
            <SSL>On</SSL>
            <AuthPackage>Negotiate</AuthPackage>
            <ASUrl>https://mail.myserver.com/ews/exchange.asmx</ASUrl>
            <EwsUrl>https://mail.myserver.com/ews/exchange.asmx</EwsUrl>
            <EmwsUrl>https://mail.myserver.com/ews/exchange.asmx</EmwsUrl>
            <EcpUrl>https://mail.myserver.com/ecp/</EcpUrl>
            <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-um>
            <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-aggr>
            <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.LOCAL</EcpUrl-mt>
            <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-ret>
            <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-sms>
            <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-photo>
            <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tm>
            <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmCreating>
            <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmEditing>
            <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-extinstall>
            <OOFUrl>https://mail.myserver.com/ews/exchange.asmx</OOFUrl>
            <UMUrl>https://mail.myserver.com/ews/UM2007Legacy.asmx</UMUrl>
            <OABUrl>https://mail.myserver.com/OAB/4b0a14e4-d177-415f-9acf-b51b966b6dd8/</OABUrl>
            <ServerExclusiveConnect>on</ServerExclusiveConnect>
            <EwsPartnerUrl>https://mail.myserver.com/ews/exchange.asmx</EwsPartnerUrl>
            <GroupingInformation>NebraskaOrthopaedicHospital</GroupingInformation>
          </Protocol>
          <Protocol>
            <Type>WEB</Type>
            <Internal>
              <OWAUrl AuthenticationMethod="Basic, Fba">https://mail.myserver.com/owa/</OWAUrl>
              <Protocol>
                <Type>EXCH</Type>
                <ASUrl>https://mail.myserver.com/ews/exchange.asmx</ASUrl>
              </Protocol>
            </Internal>
            <External>
              <OWAUrl AuthenticationMethod="Fba">https://mail.myserver.com/owa/</OWAUrl>
              <Protocol>
                <Type>EXPR</Type>
                <ASUrl>https://mail.myserver.com/ews/exchange.asmx</ASUrl>
              </Protocol>
            </External>
          </Protocol>
          <Protocol>
            <Type>EXHTTP</Type>
            <Server>mail.myserver.com</Server>
            <SSL>On</SSL>
            <AuthPackage>Ntlm</AuthPackage>
            <ASUrl>https://mail.myserver.com/ews/exchange.asmx</ASUrl>
            <EwsUrl>https://mail.myserver.com/ews/exchange.asmx</EwsUrl>
            <EmwsUrl>https://mail.myserver.com/ews/exchange.asmx</EmwsUrl>
            <EcpUrl>https://mail.myserver.com/ecp/</EcpUrl>
            <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-um>
            <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-aggr>
            <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.LOCAL</EcpUrl-mt>
            <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-ret>
            <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-sms>
            <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-photo>
            <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tm>
            <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmCreating>
            <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmEditing>
            <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-extinstall>
            <OOFUrl>https://mail.myserver.com/ews/exchange.asmx</OOFUrl>
            <UMUrl>https://mail.myserver.com/ews/UM2007Legacy.asmx</UMUrl>
            <OABUrl>https://mail.myserver.com/OAB/4b0a14e4-d177-415f-9acf-b51b966b6dd8/</OABUrl>
            <ServerExclusiveConnect>On</ServerExclusiveConnect>
          </Protocol>
          <Protocol>
            <Type>EXHTTP</Type>
            <Server>mail.myserver.com</Server>
            <SSL>On</SSL>
            <AuthPackage>Negotiate</AuthPackage>
            <ASUrl>https://mail.myserver.com/ews/exchange.asmx</ASUrl>
            <EwsUrl>https://mail.myserver.com/ews/exchange.asmx</EwsUrl>
            <EmwsUrl>https://mail.myserver.com/ews/exchange.asmx</EmwsUrl>
            <EcpUrl>https://mail.myserver.com/ecp/</EcpUrl>
            <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-um>
            <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-aggr>
            <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.LOCAL</EcpUrl-mt>
            <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-ret>
            <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-sms>
            <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-photo>
            <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tm>
            <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmCreating>
            <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-tmEditing>
            <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.LOCAL</EcpUrl-extinstall>
            <OOFUrl>https://mail.myserver.com/ews/exchange.asmx</OOFUrl>
            <UMUrl>https://mail.myserver.com/ews/UM2007Legacy.asmx</UMUrl>
            <OABUrl>https://mail.myserver.com/OAB/4b0a14e4-d177-415f-9acf-b51b966b6dd8/</OABUrl>
            <ServerExclusiveConnect>On</ServerExclusiveConnect>
          </Protocol>
        </Account>
      </Response>
    </Autodiscover>

  • Hi I have adobe CC for teams, a team member is having problems opening indesign we are being asked for a serial number, ive checked on our admin account and he is one our our registered 'members'. I wasnt the person who set this up originally so I'm a bit

    Hi I have adobe CC for teams, a team member is having problems opening indesign we are being asked for a serial number, ive checked on our admin account and he is one our our registered 'members'. I wasn't the person who set this up originally so I'm a bit lost, i cant seem to find any serial numbers on the my account section and it seems we have no registered products? can you help?

    Hi There,
    We have checked the details of your team, all seat are assigned properly.
    Now there are few details that we would need in a Private Message so that I can assist you appropriately.
    Name of the user:
    Email of the user:
    Meanwhile, try the below mentioned links.
    Creative Cloud applications ask for serial number
    Sign in, activation, or connection errors | CS5.5 and later, Acrobat DC
    [Note: Details that we need is critical, make sure you send them in via Private Message only.]
    Thanks,
    Atul Saini

  • KB2986204 - After installing users being prompted for a username and password

    After client machine have installed this update they are now being prompted for a Username and password when launching outlook. Setting up a fresh copy of outlook also prompts.
    Is anyone else having this same issue?

    For anyone still watching this issue, we're now up to 5 updates that cause this behaviour, we're having to block these on WSUS to prevent our customers being prompted for passwords on domain joined machines using NTLM.
    KB2986204
    KB2899504
    KB2956087
    KB2956170
    KB2965270
    Further progress since my last post in February. We upgraded to CU7 and now CU8 and the problem remains, but we think we have tracked the issue and have a case open with MS. If anyone else is able to test and confirm our findings it would be helpful to know,
    below are the key aspects to look for:
    - Outlook 2013 has one of the above updates installed.
    - The UserPrincipalName ([email protected]) is different to the PrimarySMTPAddress ([email protected]) of the mailbox.
    - The computer is domain joined.
    - Mapi/HTTP is configured in the Exchange 2013 organisation.
    - NTLM/Negotiate is used as the authentication mechanism.
    If all of the above aspects are true for your configuration and you are able to re-produce the password prompting try altering the Mailbox PrimarySMTPAddress so that it's the same as the UserPrincipalName.
    In our testing the issue went away when the UserPrincipalName and PrimarySMTPAddress matched, not that it gives us a solution as our customers are quite attached to their vanity email addresses, but it does highlight a specific type of behaviour under specific
    circumstances.

  • HT5621 I am being prompted for the questions for my apple ID. I have put what I think are the answers and it is still not letting me purchase games from my account. I try to send the answers to my e-mail and I am not getting them.

    I am being prompted for the questions for my apple ID. I have put what I think are the answers and it is still not letting me purchase games from my account. I try to send the answers to my e-mail and I am not getting them.  I had account issues about a year ago where my id was spelled wrong. Could this be associated with that?
    <Email Edited by Host>

    Hi gymdad1959,
    This article has instructions for resetting security questions:
    Rescue email address and how to reset Apple ID security questions
    http://support.apple.com/kb/HT5312
    Cheers!
    - Ari

  • So let me get this straight. I own 5. And I own 6. But when I try to open 6 am being prompted for my subscription info. When I ask for support I get referred to a forum. Remember, two licenses. Oh and since I started the project in 5, It's repeatedly fail

    I own 5. And I own 6. But when I try to open 6 am being prompted for my subscription info.Otherwise am locked out. When I ask for support I get referred to a forum. Remember, two licenses. Oh and since I started the project in 5, It's repeatedly failed to manually save, the audio just disappears, it loses the program monitor, fails to save renders, timecode window burn doesn't work, and that's just for starters.
    Thanks Adobe.
    What makes you people think this is acceptable?

    If you have the serial number version of CS6, and you have ever had even a Cloud trial installed... read Cloud takes over https://forums.adobe.com/thread/1584746

  • Work Folders client setup errors: No prompt for AD credentials & Lockscreen policies not applied.

    Hi everyone.
    I've recently set up a test environment for Work Folders (Server 2012 R2). I'm only testing inside my network so no internet access is required. I have encountered two issues:
    When setting up a domain-joined client using a GPO everything works fine, except for the lockscreen/password policy settings. If I enable this on the fileserver the sync fails claiming that the PC
    doesn't comply with my organization's security policies. This is very weird since Work Folders is responsible for configuring these policies.
    There's no Apply GPO option available in the Control Panel item.
    When setting up a non-domain-joined client for Work Folders I'm not prompted for AD credentials. The setup fails with the error:
    You 're not set up on the server. However, if I open the workfolders URL in Internet Explorer I do
    get prompted for my AD credentials.
    Here's some details about the environment:
    Server 2012 R2 DC. No other GPO's than the work folder GPO.
    DNS alias called workfolders.<domain>.local configured.
    Fileserver set up with self-signed certificate (SSC) bound to default website. The certificate is either manually installed on the clients or distributed via the GPO. The certificate is made with server name workfolders.<domain>.local.
    Work Folder GPO on client OU:
    - Certificate distribution of SSC
    - Loopback Policy enabled
    - Work Folders enabled with Force automatic setup
    Both servers and clients are VMs. Non-domain-joined client logged in as local administrator.
    Has anyone else encountered these issues? Can anyone shed some light on how to resolve this?
    Thanks in advance!
    MicaH

    Roberto, I don't have a W3SVC1 folder containing log files, so no dice. I did find out through event logs that the account that's used to authenticate is the fileservers' local administrator account! Then I remembered that my local Administrator
    accounts' password on my client is the same as on the fileserver (it's a test environment). So I changed the clients local admin password and it finally worked!
    I still have issues with the Device Policies, though. Any thought on that subject?
    Edit: The issue with the device policies is caused by my testuser not being a local admin on the client. I had adjusted my powerplan settings so I could keep my RDP session to the client open and without admin rights the work folders policies cannot be applied.
    Does anyone know how to set these policies using GPO?

  • Crystal Report doesn't prompt for SAP credentials / errors out on refresh

    2 Environments tested with same results:
    <p>
    BOE XI 3.1 SP2 & BOE XI 3.1 SP2 FP2.5<br>
    SAP Intg Kit on mirrored SP/FP levels in each environment.
    <p>
    We've been successfully creating Crystal Reports against BEx queries in BW for months now as well as ECC master data.  We've also built universes and have WebI reports actively working against similar BEx queries in the same.  However, we're getting some curious behavior when we refresh the Crystal Reports against BEx queries in BW.  Verified all necessary transports and authorizations have been provided for both authoring, as well as refreshing/viewing on demand, etc.
    <p>
    We've setup all the Crystal Reports we're testing to:
    <p>
    a) Use custom database logon information specified here.<br>
    b) Specify a custom driver, leveraging the crdb_bwmdx driver<br>
    c) Prompt the user for database login
    <p>
    We have not enabled SNC as of yet.
    <p>
    1) When we refresh a WebI report hitting a BEx query with security applied, it doesn't prompt for the credentials, but we confirmed through tracing on the SAP side that if the user hits a paramater it has access to, the data comes through and when we hit a paramater they do not have access to, we can clearly see SAP reject it and it spits out a logical error on the BO side in InfoView and in the WebI logs on the BO server. 
    <p>
    2) When we refresh a Crystal Report hitting ECC data, we are prompted for the SAP credentials and everything works as expected
    <p>
    However:
    <p>
    3) When we refresh a Crystal Report hitting a BEx query in BW, we are not promtped for SAP credentials.  We immediately get the "LOV" prompts.  Now, if we use a test user in SAP that has NO SECURITY restrictions at all and open access to the query, the data comes through.  However, as soon as any security is applied to the query level, even if it is SAP ALL, we cannot retrieve the data.  Tracing is also strange, as we can see on the SAP side it buffer the selected paramaters, but unlike with the WebI reports, it never shows it reaching the point where it checks each paramater against what the role has access to.  An error is then spit back.  We run the same queries with the same users within SAP and get normal behavior.  It's as though as soon as we apply security to the query the mdx driver doesn't like it.  Dependant on the type of InfoView viewer we use, the errors we consistently get on the BO side are:
    <p>
    Interactive Viewer: "Error in File %reportname%: Encapsulating Page Failed"<br>
    Java Viewer:  "Error in File %reportname%: Database Connection Error"
    <p>
    Nothing glaring in the event logs on the BO servers or in the Crystal logs that I can see, however just because it isn't spitting a specific error in the crystal logs doesn't mean I'm not missing something because I don't know what to look for behavior wise. To reduce the liklihood that it has to do with the way the report was built, we've tried against the same query by building a report using standard methods, as well as the SAP Toolbar using a very plain jane report.  Same behavior.
    <p>
    Thoughts?
    Edited by: Jay Riddle on Mar 1, 2010 8:55 PM

    Hi,
    1) When we refresh a WebI report hitting a BEx query with security applied, it doesn't prompt for the credentials, but we confirmed through tracing on the SAP side that if the user hits a paramater it has access to, the data comes through and when we hit a paramater they do not have access to, we can clearly see SAP reject it and it spits out a logical error on the BO side in InfoView and in the WebI logs on the BO server.
    >> Which authentication are you using to logon to InfoView ? Whats the configuration in the Universe Connection for Authentication ?
    2) When we refresh a Crystal Report hitting ECC data, we are prompted for the SAP credentials and everything works as expected
    >> The user is using which authentication ? and against which system does he log on ?
    However:
    3) When we refresh a Crystal Report hitting a BEx query in BW, we are not promtped for SAP credentials. We immediately get the "LOV" prompts. Now, if we use a test user in SAP that has NO SECURITY restrictions at all and open access to the query, the data comes through. However, as soon as any security is applied to the query level, even if it is SAP ALL, we cannot retrieve the data. Tracing is also strange, as we can see on the SAP side it buffer the selected paramaters, but unlike with the WebI reports, it never shows it reaching the point where it checks each paramater against what the role has access to. An error is then spit back. We run the same queries with the same users within SAP and get normal behavior. It's as though as soon as we apply security to the query the mdx driver doesn't like it. Dependant on the type of InfoView viewer we use, the errors we consistently get on the BO side are:
    >> The user is using which authentication ? and against which system does he log on ?
    >> You mentioned security restrictions and I assume we talk about BI authorizations in form of data level security. If so - does the BW query include the authorization variables ?
    Ingo

  • Users are being logged into the desktop before the mapped drives GPO takes effect

    We are using a Group Policy object to map network drives to our users.  We are getting reports that the user are being logged into their desktop before the drives are mapped, causing a program that points to the mapped drive to not be able to access
    files on that drive.  Once the user goes into Computer and double clicks on the drive, they are then able to see the files on the drive and the program is able to access them as well.
    We have added another GPO to institute the "Always wait for the network at computer startup and logon" policy to try to fix the issue, but it has not solved our problem.
    Thanks in advance for any assistance.

    >   Once the user goes into Computer and double clicks on the drive, they
    > are then able to see the files on the drive
    Did you check the "reconnect" option?
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Actions are now prompting for "OK" at every step

    My Actions are now prompting for "OK" at every step along the way. Which means I have to press OK 4-5 times for each action. Whereas before it was just a one click process. I have reinstalled Photoshop and it is still happening. I am on PS 7 and on Windows 7.

    Most likely nothing is wrong with your photoshop 7 install, but you might have inadvertently turned on the Toggle Dialog in your action or set of actions.
    It's a red or black square with three dots inside just to the left of the action set and/or action step names.
    If the actions are ones you have already saved you could reload the actions into the actions panel.
    Also if the link below doesn't help you could post a screenshot of the action.
    Look under the section
    Showing And Hiding Dialog Boxes When Playing An Action
    http://www.photoshopessentials.com/basics/photoshop-actions/default-actions/

  • Office prompts for windows login, when i'm trying to save edited document

    Hello, i'm trying to disable webdav in office 2010.
    My setup is: Apache 2.2.4 with Kerberos "mod_auth_kerb" enabled, works fine.
    So fare i have this config:
    .htaccess:
    RewriteCond %{REQUEST_METHOD} ^(OPTIONS|PROPFIND|HEAD)$ [NC]
    RewriteCond %{HTTP_USER_AGENT} ^Microsoft\ Office\ Core\ Storage\ Infrastructure.*$ [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Microsoft\ Office\ Protocol\ Discovery [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Microsoft\ Office\ Existence\ Discovery [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Microsoft\-WebDAV\-MiniRedir.*$
    RewriteRule .* - [R=501,L]
    This config, disables the login, which came everytime i opened the document in Internet Explorer.
    But when document is opened and i want to save the document, i get a windows login prompt.
    This is my access log, which shows office tries to access the webserver, but anonymously.
    10.0.0.123 - - [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 401 762 "-" "Microsoft Office Protocol Discovery"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 501 776 "-" "Microsoft Office Protocol Discovery"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 501 776 "-" "Microsoft Office Protocol Discovery"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 501 776 "-" "Microsoft Office Protocol Discovery"
    10.0.0.123 - - [22/Jan/2014:15:21:18 +0100] "HEAD /files/file.doc HTTP/1.1" 401 272 "-" "Microsoft Office Existence Discovery"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "HEAD /files/file.doc HTTP/1.1" 501 447 "-" "Microsoft Office Existence Discovery"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "GET /files/file.doc HTTP/1.1" 304 456 "-" "Microsoft Office Core Storage Infrastructure/1.0"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "PROPFIND /files/file.doc HTTP/1.1" 501 807 "-" "Microsoft Office Core Storage Infrastructure/1.0"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS /files/ HTTP/1.1" 401 762 "-" "Microsoft Office Protocol Discovery"
    10.0.0.123 - [email protected] [22/Jan/2014:15:21:24 +0100] "OPTIONS /files/ HTTP/1.1" 501 771 "-" "Microsoft Office Protocol Discovery"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 762 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
    I have tried this "fix it tool": http://support.microsoft.com/kb/2123563
    What am i missing?
    And why is office talking to the server anonymously ?
    Jakob Olsen

    Hello,
    in addition to my question here: http://social.technet.microsoft.com/Forums/office/en-US/eb068660-5ded-411e-bfc1-6f18ba7bc585/office-prompts-for-windows-login-when-im-trying-to-save-edited-document?forum=officeitproprevious
    Can someone tell my, how does the Microsoft Office Single Sign on work ?
    From what i understand, ms office opens the document (when through IE) and tries to create a webdav connection.
    I have tried to disable the webdav on apache.
    But the entire webserver is mod_auth_kerb "protected".
    And in the access-log, i can see this:
    IP, DATETIME, [email protected] document....
    But also: IP, DATETIME - document <--- None authenticated user... Why does microsoft not use the current user?
    I have tried to ssl enable the website, which i read in this thread: http://support.microsoft.com/kb/2123563
    But Microsoft Office stills act as anonymous user.
    Jakob Olsen

  • Sales doc items with the status CLSD ARE being selected for month-end

    We are working to improve month-end processing time for Sales Orders  We use SAPKKA12 to set CLSD status on line items
    SAP Help states: be sure that the status CLSD (closed) is set for all sales document items that you do not want to include in the period-end closing process. The sales document items with the status CLSD are then not selected for processing in the period-end closing process. Use report program SAPKKA12 to set the status.
    This use to work (in 4.0). I have been on other projects and just brought back to this after several years (now in 5.0).  Testing today shows that orders with CLSD status are being selected for month-end process.
    Any ideas why this is so?  System is selceting over 300,000 orders when well over half of them are set to CLSD.  I do get a message that the order is not relevant to processing, but selecting the order and logging the message take time. and the logs are VERY long.
    thanks

    Does any one else have this issue  that Sales documents with status CLSD are selected by RA (KKAK)?
    In just one of our jobs, i get this Basic List
    Perform actual results analysis      31273      
    Not relevant                                                 103894
    Error                                                        2306      
    Objects Selected                                    137,473
    75% of the orders are CLSD.  and the system is still counting them. (we do not out put information messages)
    I do understand that the orders are not analyzed,  but all documentaion states that CLSD status is not selected, and in our 5.0 system, they are selected.  In our 4.0 system, they were not selected.
    Does this truely work for anyone in a 5.0 system?
    Thanks
    Althea

Maybe you are looking for

  • IMac 21,5 2010 3,06GHz Second screen no max resolution

    Hi there, I have an iMac 21,5 3,06Ghz 2010-model. And an LG Flatron w2261VP. I want to connect this LG to my iMac, but when i do it gives a max res. of 1600x1200. This is not the native res. for this screen, the native one is 1920x1080. But when i se

  • Xbox live connection to G5 ethernet 2

    I recently hooked up my xbox360 to my G5 via etherent and I am unable to access xbox live. Xbox360 says that it cannon find an IP address. I have read all kinds of forums about how to connect a mac with a wireless adapter, but nothing about hooking t

  • Backup causing problems with IFS files being locked

    We are having occasional but significant problems with our regular IFS backups. The symptom is that random SAP batch jobs, or tp processes will fail overnight. These seem to be related to the IFS backup running at the time, and appear to be that batc

  • Role creation for CATS

    Hi all, How can i create roles and authorisations fo CATS.I need to know how can i find out what are all roles required to manage CATS? Give me inputs of source where i can find out some roles? Regards, Hema

  • What is Time evaluation functions.(HR Time management)

    Hi Experts What is Time evaluation functions.and what purpose can v use the functions. Thanks, HCM