Windows users lose permission/access

Installed OS X Server about a month ago - we're an all-Mac company except for 2 Windows PC users in accounting/finance. I set up network/file sharing access on the server side and then went to the PCs and set up a new "Network Place" as directed.
Everything worked OK for a couple of days, but then the users lost access. The mount/share points all still show up in their "network places" windows, but access is denied. I think it has something to do with the fact that on a PC, network places are kind of tied to the account (users are not prompted to authenticate each time they access?)...whereas on a Mac, you must authenticate everytime you "connect to server"...
Any ideas? I'm obviously a beginner with this stuff!

The Windows equivalent of Go > Connect to Server is Start > Run. There you can type the address to your server using the following URL syntax:
\\server
Replace "server" with the IP address of your server, its DNS name, or its Windows NetBios/IP name, as defined in Server Admin/Windows. Note the backslashes - not forward slashes (/)!
A window appears showing share points that are available. Right-click the desired share point and choose Map Network Drive. In the Map wizard, assign the share point a drive letter and click the "Connect using a different name..." link, where you'll supply the name and password. Check the box to remember the password, if it's available. Complete the wizard. From now on, the share point will be available at the chosen drive letter in My Computer.
You can also use \\server\share, replacing "share" with the share point name.
Windows XP Home and Pro can prompt you for a password to connect to the server, but only Pro can remember that password for future use. XP Home cannot be bound to the server's directory domain, either, for user authentication. You'll need XP Pro for that.
--Gerrit

Similar Messages

Saving so that windows user can have access?

I have my project all ready and those with quick time...loads up perfectly. However those who have windows have a long wait or pile will not come up. Do you know how i can save my final cut express project so that window users can have access to it?

thank you. one last question....the quick time movie file can not be seen when opening on a windows. do you know if i need a quick time pro so that i can convert it? or is there a way that i don't know about?

Windows File Sharing Permission/Access Issues

I am attempting to apply permissions on a Windows share that is on a server different than the portal.
The system is mounted and the repository is working. But just for myself, the administrator. I only have rights as a base user, that's it. All other users are getting an access denied error. On the log defaulttrace.trc the error is that the portal can't get the system share from the system factory. The error following that is that the portal failed to get the mapping data for the user. That is what I would expect if the user could not "see" the share system.
My question is why? The user has read access to that system. Even at owner, the user still can not use it. I have the Iview set up as a KM navigational iview. The only way I have been able to get users to see information on the share is via system pricipals but, that overides Windows security and they see EVERYTHING.
Has anyone else ran into my situation? I want to a repository based on a Windows share that gives the users rights based on their Windows ID.

I think I have figured it out. As usual first by chance, and then by some clever thinking....
I remebered that I had an access problem some months ago, and that the solution was to grant access to some parts of the repositories to the users in question.
So I gave the everyone group read permission on the whole KM repository ! Quite gutsy, but we are talking development environment here.
And hey presto, the problem is solved !
Then I remebered reading something about this.
Inside my notes from some months back I found a reference to SAP Note 599425 - "Permission for knowledge management repositories".
Why I forgot this I do not know, but this is crucial for correct operations.
In addition it is necessary to add read rights to everyone to other part of the repositories if you create system content in your own structures.
I had a system definition in my own structure without correct rights, and this definition were off limits for the users, resulting in a inaccessible file system repository.
hope this helps,
...if you haven't solved it allready.
regards
Alexander

Windows users can't access shared folder - only see Library folder.

I created users folders with the same name as the user's login name. (Note: this is NOT a home folder. I have Home Folders shut off). When the Windows user logs in to access their folder, they don't see their files but instead a folder that says "Library".
When I log in with that user's account on my Mac, I can see the correct contents of their folder, but there is also a folder named "99". I found this "99" folder at the root of the server hard drive but every time I delete it, OS X recreates it again.
I don't understand what's going on.

Hi,
Whether you can able to ping the server when the server share is unresponsive?
Check for the events on the server for a clue. Try disabling the AV program for some time and check whether the problem is repeating.
Regards,
Rafic
If you found this post helpful, please give it a "Helpful" vote.
If it answered your question, remember to mark it as an "Answer".
This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

Prevent user without permission access WCP Adminstration Console

Hi all,
I created a normal user A but not grand any permission for this user. I login WCP Adminstration Console with user A and the result I still access in to WCP Adminstration Console. And I can see the Resource page and Services page.
And I found out big problem in here that with user A I can change the position of all page in the "Pages management" page. This action can take effect immediate and show it on Portal. In detail the position of link to the pages on the main menu of portal will be changed.
Do you known how to prevent a authenticate user, without administration permission access WCP Adminstration Console?
Would you have any Idea about it?
Thanks a lot!

Hi.
The first point that you have to do is prevent showing Administrator Console link to non administrator users:
rendered="#{WCSecurityContext.userInAppRole['Administrator']}"The second way to secure administrator page is editing jazn-data.xml
You will find in authenticated role next row:
<permission>
<class>oracle.adf.share.security.authorization.RegionPermission</class>
<name>oracle.webcenter.portalwebapp.pages.adminPageDef</name>
<actions>view</actions>
</permission>Be sure that you add the view permission to Administrator role if you remove this line.
Remove or modify the access to admin page for athenticated role.
Or you can edit the permissions of the users/roles in Design/Runtime disabling the page management for them.
Another Update:
Hierarchical Permission in jazn-data is setted to authenticated-role as can personalize.
Investigate a little with jazn-data default permissions :).
I hope this help you.
Regards.
Edited by: Daniel Merchán on 25-feb-2013 8:36
Edited by: Daniel Merchán on 25-feb-2013 9:47

My windows user can not access the lion server.

All Mac user is ok.but all of windows user link fail.

I have been on the phone with Apple, done all of the trouble shooting they have recomended. When I attempt to connect it to the internet I get a message reading "your apple tv is connected to your wi-fi but cannot connect to the internet. I have plugged the modem right into the apple tv and it still won't work. This is the second device I've used. (apple gave me a new one after the first didn't work). I just thought there might be someone out there who had the same issue and knows how to resolve it.

Windows Users Unable to Access SL Server

I am attempting to have Windows clients access the SL server as AD users. I have AD/OD configured in a Magic Triangle with 10.5 and 10.6 clients being managed properly and accessing everything normally. smb services are enabled, all users and groups appear to have access according to Server Admin but I cannot login to the SL server as an AD user from a W2K machine. I'm probably missing something obvious, so I apologize for any ignorance on my part. Any ideas on how to gain access under Windows are welcome.

Hi
As per the information and details provided by you, to access OWA in Exchange 2007, please follow these steps: -
Open
Active Directory users and computers.
Click on the
View, and then click Advanced Features.
Note:
To make the
Security tab available at both the user level and the organizational unit level, You must enable the Advanced features option in Active directory Users & Computers.
This option will be available in the
View tab.
Open the properties for both the user level and the organizational unit level that the users are located in, and then locate the
Security tab.
Click on the
Advanced.
Make sure that the following check box is selected:
Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these
with entries explicitly defined here.
Force Active Directory replication.
I hope this information will be helpful for you.
Thanks and regards
Shweta@G

Time Capsule: Windows user could access all folders in TC

I have a new TimeCapsule (TC) 1 TB, 2 MBPs (latest Mac OS X) and 2 PCs - 1 runs XP and other runs Vista.
I had setup TC as NAS, allow users to access TC using account.
Each user in MBPs can access their folder and shared folder only, so it is fine.
Same for windows users, they can access their folders and shared folder only.
However I found that, if the windows user has the windows administrator privilege and has windows account password as same as TC disk password, then after logged-in windows machine, this user can access TC using Run:\\TCname then he/she can see all folders in TC and has read/write privilege on these folders. TC does not ask for any password (as long as the user has logged-in their windows machine) nor stop the user to access any folder in TC.
Is anybody has the same problem ? Or you can try yourself and see if it happens on your system ?
Apple: can you fix this, this is unwanted "feature" ?

SMB is blocked by every responsible ISP. As indeed it has to be due to the level of unprotected shares on computers on the internet.
If the TC is the main router.. and you have port forwarded SMB ports wan to lan.. be thankful your ISP has blocked it so your files and network are not hacked.
The right way to do this is a vpn router.. with the TC working as bridged device on the network.
Windows does not offer AFP which is the only other protocol Apple offer in the TC and is the only one exposed to internet.

Authenticate windows users accessing os x client using open directory?

I need to setup an OS X client machine (10.4.6) so that windows users (XP) can access folders based on their open directory credentials. (Using OS X server, open directory, windows PDC). If I turn on windows sharing in system preferences on the mac, it will only share local home folders to users with local accounts - not what I need. Any ideas? thanks.

Thanks! So now I see Open Directory, but it seems like it should be listed under the Server app with all the other services...
Anyhow, I seem to remember a way to administer the users and groups. This app shows me the status of the services, logs, settings. The Server app, if I click on Add Users button, then click "connect to it" to supposedly connect to the directory server, it won't take my credentials. I always get "Cannot authenticate to server. Please authenticate by entering the name and password of a user account in this server's directory."
Connect anonymously doesn't seem to do anything, it doesn't even dismiss the dialog.
So what am I missing?

Execute Teststand as windows-user: which files needed for write-access

Hello,
which files/directories do i have to set for write access?
Normally windows-administrator can access everything.
But a windows-user has for example no write-acces to teststand\Cfg.
So sometimes i get the error-message that a file is write protected.
Is this somewhere explained in the TS-documentation that also a windows-user need write-access? I have this question from a client and i am not sure how exactly it is.
Thx for info
Message Edited by OnlyOne on 07-10-2009 05:36 AM

Hi OnlyOne,
With TestStand 4.1 and later, we changed the directories for the TestStand Cfg folder and the TestStand Public folder (formerly called the TestStand Users Directory). These changes allow a normal Windows-User to write to the TestStand Cfg and Public folders without having to specifically grant write permissions.
Manooch H.
National Instruments

Windows Logins x Windows Groups - identify idinvidual Windows Users?

SQL Server 2008 R2 Security Whitepaper
"Logins can be based on Windows Groups in
addition to being based on Windows Users. Using Windows Logins instead of
Windows Group provides the ability to identify individual Windows Users for
tracking purposes. "
SO... I am part of an AD Domain Group and my login is granted access to SQL via AD Domain Group. I created and dropped a testdb and I see my actions linked to my domain account in the Audit.
So what is not identifiable if logins are added via Groups?!
Thanks

Hello,
Windows Users that have access to a SQL Server instance via a Windows group have their identity lost behind the group anonymity.
The following article may allow you to understand the security issues Windows Groups introduce on SQL Server security model.
http://blogs.msdn.com/b/lcris/archive/2008/08/22/sql-server-windows-groups-default-schemas-and-other-properties.aspx
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Windows XP users can't access SMB/CIFS shares on MAC OSX10.4.4 Xserve bug?

The Xserves are new for us. This problem involves two of the 10.4 xerserves.
1 serves as an Open Directory System Master(10.4.3). 2 Serves as a file share & backup (10.4.4).
Both are production machines and cannot easily be restarted.
There is no Windows network, Active Directory or Windows domain in our network.
We created a SMB and AFP share on the file server which is a member of the Open Directory. (It is bound and kerberized to server 1).
The users all have accounts in the OD system and all passwords are Open Directory. Our users can ssh into the various xserves (including the file share server 2) and authenticate against OD.
We made the shares available via smb under Protocols --> Windows File Settings. We turned the Windows Service on in Server Admin. I'ts a standalone server and all the authentication types are checked under access.
The MAC (powerbook) users can access the share fine. The Windows users can't. The Windows laptops can see the file share server (through search - not visable is Network Neighborhood) but when they try and connect they are presented by an authentication box that just keeps cycling over and over regardless of what the user types as user name & passwd.
I tried to access the smb share with my powerbook(10.4.4) and have the same issue. I'm presented with an authentication box but authentication fails.
The Windows File Service Log shows:
auth.c:checkntlmpassword(312)
checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
[2006/02/24 21:52:03, 1] authods.c:opendirectory_authuser(212)
User "csmith" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090)
[2006/02/24 21:52:03, 1] authods.c:opendirectory_smb_pwd_checkntlmv1(427)
opendirectorysmb_pwd_checkntlmv1: [-14090]opendirectoryauthuser
[2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/auth/auth.c:checkntlmpassword(312)
checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
[2006/02/24 21:52:03, 1] authods.c:opendirectory_authuser(212)
User "csmith" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090)
[2006/02/24 21:52:03, 1] authods.c:opendirectory_smb_pwd_checkntlmv1(427)
opendirectorysmb_pwd_checkntlmv1: [-14090]opendirectoryauthuser
[2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/auth/auth.c:checkntlmpassword(312)
checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
[2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/smbd/server.c:exit_server(595)
Closing connections
I've googled this error and it seems that there a lot of engineers out there with the same problem but no answers. Could this be a bug with Apple's SMB process? Is there something I've missed? (I've looked at the smb.conf and have even turned off deny clear text passwords - I've even tried granting guest access) Anyone have any ideas?

On the server itself, run the following in the Terminal:
(from a few different sources):
run ps -auxw | grep Password
to see if Password service is running
Also check the logs in /Library/Logs/PasswordService
Try: id username
and see if you get some info returned.
Ex: id jimguy
You should get some info about uid, gid, groups.
sudo killall -USR1 DirectoryService
Then try to login from a client machine.
Be sure to re-issue
sudo killall -USR1 DirectoryService
in order to stop the (far more) verbose logging.
Then check the logs in /Library/Logs/DirectoryService
In Open Directory, you might want to revert to standalone (this will destory the existing OD setup) and then re-promote to OD Master. You'll lose all OD users however when doing so. If you don't have many, this may be best.
You'll want to verify the hostname, and forward & reverse DNS lookups before re-promoting, and watch for any errors when promoting to OD master
See, when you say "The real clue is that I'm unable to access the shares from my Powerbook G4 with my Open Directory account. I can log in to the file share as the local admin though and that's why I'm thinking there is a bug in the samba/OD relationship. " - that's the real clue indeed.
The local admin account, the first admin account you setup on the server, is indeed local, and resides in NetInfo, not Open Directory.
So something is afoul in your OD.

How do I set all users to have complete permission access to all other users on a single Macbook?

How do I set all users to have complete permission access to all other users on a single Macbook? When one user uploads a picture from camera, the other user is told they don't have permission to view. Same with music.

Go to System preference> accouts>unlock>click+and add name of new user, Adrop dowm window will appear, new Account and set for Admi, fill in their name, to make things even more simple, use the same password for all,if it will allow it. Click ceate account. Click allow user to admin this computer.Then go to sys prefs, sharing and click all the things you want to let everyone use, If you use separeate paswords then each user can set their own preferences. All users can be set as as administrator, click allow access for all users. This will allow every one pretty much the same access.
OH yeah reart the computer sfter added a new user, and test the new login, if it's good coninue.

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Share Specific Volumes for Windows Users to Access!

Dear Mac Gurus:
What is the easiest way to use command/GUI to share specific volumes on OSX v.10.4 client machine, so as to let Windows Client to access?
Windows user account has been create on OSX.
Help, Please! Thanks!
Max NYC
G4, G5 Mac OS X (10.4.9)

With Sharepoints...
http://www.hornware.com/sharepoints/
GUI to give you precise control over NetInfo Shares, Permissions, Users, Groups, etc..

Windows users lose permission/access

Similar Messages

Maybe you are looking for