WPD Devices: Deny read access user policy

Hi All,
I have configured the following settings on my main group policy (user policy) and it has linked to my domain.
All Removable Storage classes: Deny all access Enabled
WPD Devices: Deny read access Enabled
WPD Devices: Deny write access Enabled
and in one of my sub ou GPO I have configured as "WPD Devices: Deny read access Enabled" (computer policy). when I checked with one user I found found that this user can access USB. there is no other configuration I made on this OU. as per above
domain policy I have disabled All Removable Storage classes (mentioned above). then how it comes open ?. I just tried one more thing that is when I change WPD Devices: Deny read access in sub OU as Not-configured then USB will be denied.
I coudnt find any referrals in online regarding this.. can anyone suggest why it is happening ??

Hi,
>>as per above domain policy I have disabled All Removable Storage classes (mentioned above). then how it comes open ?.
Before going further, what's the operating system we are using? Based on the description, this seems a litter bit odd. Here, had we run
gpupdate/force to immediately update the policy setting? Besides, we can follow the procedure below to further collect group policy result to check how policy settings were applied.
1. On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console.
2. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select
the proper user in the wizard)
3. Right click the resulting group policy result and click the "Save Report…" => save report to save the report to a HTML file.
>>in one of my sub ou GPO I have configured as "WPD Devices: Deny read access Enabled" (computer policy).
If we try to enable the setting back, will the user still be able to access USB?
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

Social comment control in custom page layout stucks at "Working" for read access users

Hi,
I created a custom page layout which is attched to my custom content type.
i have a custom field control which is derived from RichImageField.
i have also added a social comment control to the page layout using
<SharePointPortalControls:SocialCommentControl ID="SocialCommentControl1" runat="server" />.
Now the problem is, an user who have read access for a pages library should post comments. but its not working and when the user clicks post button it stucks at working. but when the user is given contribute access then it works and the comments are posted.
And one more thing is if i remove my custom field control from the page layout, then user with read access can post the comment without any issues.
i am sure the issue is caused by my custom field control but dont know how to solve it. i dont want to give contribute access to the users as they can edit the content of the page also. Any help would be appreciated.
This is the custom field control code.
public class mycompanyRichImageField : RichImageField
public static string webimage = null;
#region Private variables
/// <summary>
/// File upload control used to upload image.
/// </summary>
private FileUpload fileUpload;
/// <summary>
/// Upload button.
/// </summary>
private Button btnSave;
/// <summary>
/// Delete button.
/// </summary>
private Button btnClear;
/// <summary>
/// Article image.
/// </summary>
private Image imgPicture;
/// <summary>
/// Image width.
/// </summary>
private DropDownList ddlWidth;
/// <summary>
/// Temporary store image url.
/// </summary>
private Label lblFileName;
/// <summary>
/// Image text.
/// </summary>
private TextBox txtImage;
/// <summary>
/// Value of image field.
/// </summary>
private ImageFieldValue pageImage;
/// <summary>
/// List item - current article.
/// </summary>
private SPListItem ArticlePage = SPContext.Current.ListItem;
/// <summary>
/// The first image width dropdown list options, default value 240 px.
/// </summary>
// private int imageWidthWide = 400;
//private int height = 225;
/// <summary>
/// The second image width dropdown list options, default value 120 px.
/// </summary>
private int imageWidthNarrow = 126;
/// <summary>
/// Picture library to store the image files.
/// </summary>
private string imageLibrary = "Images";
/// <summary>
/// List field to store Article image.
/// </summary>
private string imageField = "Page Image";
/// <summary>
/// List field to store image text.
/// </summary>
private string imageTextField = "Image Text";
private string preview = "Preview";
/// <summary>
/// List field to store rollup image.
/// </summary>
private string rollupImageField = "Rollup Image";
/// <summary>
/// Whether to update the rollup image using the current image.
/// </summary>
private bool updateRollupImage = false;
/// <summary>
/// Whether to display image text.
/// </summary>
private bool enableImageText = true;
#endregion
#region Properties
/// <summary>
/// Gets or sets the first choice of image width.
/// </summary>
//public int ImageWidthWide
// get
// return this.imageWidthWide;
// set
// this.imageWidthWide = value;
//public int ImageHeight
// get
// return this.height;
// set
// this.height = value;
/// <summary>
/// Gets or sets the second choice of image width.
/// </summary>
public int ImageWidthNarrow
get
return this.imageWidthNarrow;
set
this.imageWidthNarrow = value;
/// <summary>
/// Gets or sets the name of the picture library that is used to store image files.
/// </summary>
public string ImageLibrary
get
return this.imageLibrary;
set
this.imageLibrary = value;
/// <summary>
/// Gets or sets the field name of image.
/// </summary>
public string ImageField
get
return this.imageField;
set
this.imageField = value;
/// <summary>
/// Gets or sets the field name of image text.
/// </summary>
public string ImageTextField
get
return this.imageTextField;
set
this.imageTextField = value;
/// <summary>
/// Gets or sets the field name of rollup image.
/// </summary>
public string RollupImageField
get
return this.rollupImageField;
set
this.rollupImageField = value;
public string Preview
get
return this.preview;
set
this.preview = value;
/// <summary>
/// Gets or sets a value indicating whether to update rollup image using current image.
/// </summary>
public bool UpdateRollupImage
get
return this.updateRollupImage;
set
this.updateRollupImage = value;
/// <summary>
/// Gets or sets a value indicating whether the image text should be displayed.
/// </summary>
public bool EnableImageText
get
return this.enableImageText;
set
this.enableImageText = value;
#endregion
#region Override methods
/// <summary>
/// Using get method instead of set method to set the value.
/// set method cannot be used here.
/// </summary>
public override object Value
get
ImageFieldValue value = new ImageFieldValue();
value.ImageUrl = string.IsNullOrEmpty(this.lblFileName.Text) ? this.imgPicture.ImageUrl : this.lblFileName.Text;
// value.Width = string.IsNullOrEmpty(this.ddlWidth.Text) ? this.ImageWidthWide : Convert.ToInt32(this.ddlWidth.Text);
// value.Height = this.ImageHeight;
////update the page rollup image.
if (this.UpdateRollupImage)
this.ArticlePage[this.RollupImageField] = value;
if (this.EnableImageText)
this.ArticlePage[this.ImageTextField] = this.txtImage.Text;
this.ArticlePage.SystemUpdate(false);
return value;
set
base.Value = value;
/// <summary>
/// Intialize all controls.
/// </summary>
protected override void CreateChildControls()
this.pageImage = (ImageFieldValue)this.ArticlePage[this.imageField];
this.ddlWidth = new DropDownList();
this.ddlWidth.Width = 99;
// this.ddlWidth.Items.Add(this.ImageWidthWide.ToString());
this.ddlWidth.Items.Add(this.ImageWidthNarrow.ToString());
if (this.pageImage != null && !string.IsNullOrEmpty(this.pageImage.ImageUrl))
// if (this.pageImage.Width >= this.ImageWidthWide)
// // this.ddlWidth.SelectedIndex = 0;
//else
// // this.ddlWidth.SelectedIndex = 1;
// this.Controls.Add(this.ddlWidth);
this.imgPicture = new Image();
if (this.pageImage != null && !string.IsNullOrEmpty(this.pageImage.ImageUrl))
this.imgPicture.ImageUrl = SPContext.Current.Site.Url + this.pageImage.ImageUrl;
this.Controls.Add(this.imgPicture);
this.fileUpload = new FileUpload();
this.fileUpload.Width = 180;
this.Controls.Add(this.fileUpload);
this.btnSave = new Button();
this.btnSave.Text = "Upload";
this.btnSave.CausesValidation = false;
this.btnSave.Visible = string.IsNullOrEmpty(this.imgPicture.ImageUrl) ? true : false;
this.Controls.Add(this.btnSave);
this.btnSave.Click += new EventHandler(this.BtnSave_Click);
this.btnClear = new Button();
this.btnClear.Text = "Delete";
this.btnClear.CausesValidation = false;
this.btnClear.Visible = !this.btnSave.Visible;
this.Controls.Add(this.btnClear);
this.btnClear.Click += new EventHandler(this.BtnClear_Click);
this.lblFileName = new Label();
this.Controls.Add(this.lblFileName);
if (this.EnableImageText)
this.txtImage = new TextBox();
this.txtImage.TextMode = TextBoxMode.MultiLine;
this.txtImage.Rows = 4;
this.txtImage.Text = this.ArticlePage[this.ImageTextField] == null ? string.Empty : this.ArticlePage[this.ImageTextField].ToString();
this.Controls.Add(this.txtImage);
/// <summary>
/// Render the field in page edit mode.
/// </summary>
/// <param name="output">Output stream.</param>
protected override void RenderFieldForInput(System.Web.UI.HtmlTextWriter output)
output.Write("<div style='padding-bottom:12px'>");
if (!string.IsNullOrEmpty(this.imgPicture.ImageUrl))
output.Write("<br />");
// this.imgPicture.Width = ((ImageFieldValue)this.Value).Width;
// this.imgPicture.Height = ((ImageFieldValue)this.Value).Height;
this.imgPicture.RenderControl(output);
if (this.EnableImageText)
this.txtImage.Width = this.imgPicture.Width;
if (this.EnableImageText)
output.Write("<br />");
this.txtImage.RenderControl(output);
output.Write("<br /><br />");
this.fileUpload.RenderControl(output);
this.btnSave.RenderControl(output);
this.btnClear.RenderControl(output);
output.Write("<br /><br />");
//output.Write("Width:");
//this.ddlWidth.RenderControl(output);
output.Write("</div>");
/// <summary>
/// Render the field in page display mode.
/// </summary>
/// <param name="output">Output stream.</param>
protected override void RenderFieldForDisplay(System.Web.UI.HtmlTextWriter output)
if (this.ListItemFieldValue != null)
output.Write("<div style='padding-bottom:12px'>");
base.RenderFieldForDisplay(output);
if (this.EnableImageText && this.ArticlePage[this.ImageField] != null
&& this.ArticlePage[this.ImageTextField] != null)
//string strImgWidth = string.IsNullOrEmpty(this.ddlWidth.Text) ? this.ImageWidthWide.ToString() : this.ddlWidth.Text;
//string strImgHgt = this.ImageHeight.ToString();
output.Write("<div style='width:");
// output.Write(strImgWidth);
// output.Write(this.imgPicture.ImageUrl);
// output.Write("<div style='height:");
// output.Write(strImgHgt);
output.Write(";margin-right:4px;' align='left'>");
output.Write(this.ArticlePage[this.ImageTextField].ToString());
output.Write("</div>");
output.Write("</div>");
#endregion
#region Button events
/// <summary>
/// Delete image file from the library and empty the image field.
/// </summary>
/// <param name="sender">Delete button.</param>
/// <param name="e">No arguments.</param>
protected void BtnClear_Click(object sender, EventArgs e)
////remove the image file from the Images library
using (SPSite site = new SPSite(
SPContext.Current.Web.Url,
SpSecurityHelper.GetSystemToken(SPContext.Current.Site)))
using (SPWeb currentWeb = site.OpenWeb())
SPDocumentLibrary imageList = (SPDocumentLibrary)currentWeb.Lists[this.ImageLibrary];
SPFolder rootFolder = imageList.RootFolder;
try
currentWeb.AllowUnsafeUpdates = true;
rootFolder.Files.Delete(this.imgPicture.ImageUrl);
rootFolder.Update();
catch
////cannot delete specified file, this means file doesn't exist, the file must be deleted
////directly in the Images library by someone
////don't do anything here
finally
currentWeb.AllowUnsafeUpdates = false;
if (this.pageImage != null)
this.pageImage.ImageUrl = string.Empty;
this.imgPicture.ImageUrl = string.Empty;
this.lblFileName.Text = string.Empty;
this.btnClear.Visible = false;
this.btnSave.Visible = true;
/// <summary>
/// Upload image file to library and fullfilled the image field.
/// </summary>
/// <param name="sender">Upload button.</param>
/// <param name="e">No argument.</param>
protected void BtnSave_Click(object sender, EventArgs e)
this.ArticlePage[this.ImageTextField] = this.txtImage.Text;
this.ArticlePage.SystemUpdate(false);
string fileName = this.fileUpload.FileName;
////validate file name
if (fileName == string.Empty || !this.fileUpload.HasFile)
this.lblFileName.Text = string.Empty;
if (this.pageImage == null)
this.Page.ClientScript.RegisterStartupScript(typeof(string), "NoImage", "<script>alert('No image found, please select an image.')</script>", false);
else
using (SPSite site = new SPSite(
SPContext.Current.Web.Url,
SpSecurityHelper.GetSystemToken(SPContext.Current.Site)))
using (SPWeb currentWeb = site.OpenWeb())
SPDocumentLibrary imageList = (SPDocumentLibrary)currentWeb.Lists[this.ImageLibrary]; ////Images
SPFolder rootFolder = imageList.RootFolder;
////the image file name must be unique except for the file name extension
string imageName = this.ArticlePage.UniqueId.ToString("N") + this.FieldName + Path.GetExtension(fileName);
////first delete the image file from the Images library.
////if a file with different file name extension is uploaded, the old file won't be overwritten,
////and will never be deleted from this page, so it must be deleted before adding a new one.
if (this.pageImage != null && !string.IsNullOrEmpty(this.pageImage.ImageUrl))
try
currentWeb.AllowUnsafeUpdates = true;
rootFolder.Files.Delete(this.pageImage.ImageUrl);
rootFolder.Update();
catch
////cannot delete specified file, this means file doesn't exist, the file must be deleted
////directly in the Images library by someone
finally
currentWeb.AllowUnsafeUpdates = false;
try
currentWeb.AllowUnsafeUpdates = true;
SPFile imageFile = rootFolder.Files.Add(imageName, this.fileUpload.FileBytes, true);
finally
currentWeb.AllowUnsafeUpdates = false;
// this.lblFileName.Text = currentWeb.Site.Url + imageList.RootFolder.ServerRelativeUrl + "/" + imageName;
this.lblFileName.Text = currentWeb.Site.Url + imageList.RootFolder.ServerRelativeUrl + "/_w/" + imageName.Substring(0, imageName.LastIndexOf(".")) + "_" + imageName.Substring(imageName.IndexOf(".") + 1) + "." + imageName.Substring(imageName.IndexOf(".") + 1);
// webimage = currentWeb.Site.Url + imageList.RootFolder.ServerRelativeUrl + "/_w/" + imageName.Substring(0,imageName.LastIndexOf("."))+"_"+imageName.Substring(imageName.IndexOf(".")+1) +"." + imageName.Substring(imageName.IndexOf(".")+1);
this.imgPicture.ImageUrl = this.lblFileName.Text;
this.btnClear.Visible = true;
this.btnSave.Visible = false;
#endregion
This is how i used it in my page layout
<Article:mycompnayRichImageField runat="server" ID="RichImageField1" InputFieldLabel="Keep image text short and precise" FieldName="PublishingPageImage" UpdateRollupImage="true"/>
Aruna

Hi,
For this issue, I'm trying to involve someone familiar with this topic to further look at it.
Thanks,
Jason Guo
TechNet Community Support

How can i get on my iMAC read access to BPF devices in /dev/bpf*

Ls.
How can i get/change on my iMAC read access to BPF devices in /dev/bpf*
I want to use Wireshark.
Thanks in advance.
Loekie.

...any app launched from /Applications holds only the permissions of the user launching the app, regardless of the owner (presumably because anyone, including "root" can install applications into /Applications).
It has nothing to do with where the application is installed. Any executable runs with the permissions of the user who runs it. The only exception is a binary executable with the SUID or SGID bit set, and then only if it's on the root device, and only if it's not an Aqua application. The SG/UID bits are ignored otherwise.
So, anyone who has installed Wireshark from the "native .dmg" by drag-and-dropping won't be able to use the suid trick because the OS will ignore the suid permissions.
Sorry, I don't understand this at all. Wireshark invokes dumpcap as a child process to capture packets. If dumpcap is installed anywhere on the root device as SUID root, then it will run as root regardless of who invokes it.
The suid method will only work for Macports and Fink installations...
That's not correct. There are many SUID or SGID executables in a default installation of the Mac OS, and none of them comes from MacPorts or Fink.

Remote user received a "deny log on locally" policy - and is now locked out

Hello,
A traveling user who received a "deny log on locally" policy remotely.
He was accidentally added to a wrong group and is now locked out.
What are the steps to clear this policy? We have a backup local admin account I can remote into.
I appreciate any suggestions or comments.

> What are the steps to clear this policy? We have a backup local admin
> account I can remote into.
Resolve the wrong setting, remote into the machine and issue "gpupdate
/target:computer". Reboot and go ahead :)
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

HR User, REST example - network access denied by access control list (ACL)

Hi,
I am new to APEX and am running the 'Oracle Developer Days' vm. I'm logged into APEX as the default HR/oracle account and I've been following the 'Creating and Using a RESTful Web Service in Application Express 4.2' training video, however when I try to retrieve information by entering a dept no. and clicking submit I get:
ORA-29273: HTTP request failed ORA-06512: at "SYS.UTL_HTTP", line 1130 ORA-24247: network access denied by access control list (ACL)
I've seen the following thread:
ORA-24247: network access denied by access control list (ACL)error-UTL_HTTP
and I've tried running the command:
GRANT EXECUTE ON SYS.UTL_HTTP TO HR;
but I'm not getting anywhere, presumably the HR user does not have permissions to access 'http://localhost:8888/apex/hr/employee_test'
Any help much appreciated, also if this is the wrong forum for this question please let me know.
Many Thanks

Hi,
Thank you for the link; I executed the first block of code to 'grant connect privileges to any host for the APEX_040200 database user' that did not work so I changed the user to HR within the code and re-executed and that seems to have done the trick. I guess the HR user is now in the power_users list/group?
Thanks again!

What is([103]) xcscredd(103) deny file-read-metadata /Users

Hi all, Recently I found that after installed Mac OSX Server and some VPN server , on system monitor recorded many messages about :
([103]) xcscredd(103) deny file-read-metadata /Users , and gen many report on
file:///var/log/asl/AUX.2014.02.20/383655
do any member know what is these happened ? and how to stop it.
I set OSX server on private network , success connect iPhone to OSX VPN server but cannot access internet from it. Oh....
not user frirendly to operate OSX Server...
any helps to slove these 2 problem ?

1. Open the terminal
2. type
sudo vim /Applications/Server.app/Contents/ServerRoot/System/Library/Sandbox/Profiles/xcscredd.sb
3. enter
(deny file-read* (subpath "/Users") (with no-log) )
into the file
To edit the file you have to press i.
4. The press ESC and then :wq (Enter)
But you shouldn't do things like this, if even don't know how to change a text file.
It's on your own risk.

GPO: CD and DVD: Deny write access prevents user from using their USB Pen drive, but other users or ok

My Users have secure pen drives that launch a CDROM partition with a secure logon app that decrypts the main USB mass storage element of the pen drive on successful logon. The problem I have is that users who install the usb pen drive cannot then
initialize the CDROM launcher app to input their password to access the mass storage element of the pen drive making it useless.
However, any other user that has the same type of pen drive who then plugs it in to the endpoint that already has the drivers installed is able to access their own pen drive or the other users pen drive (providing the know the password).
So I've isolated the problem being down to the presence of the GPO setting stated above on the Removable Storage Access Policy, and by not having this policy in place when a user installs the pen drive they have no issues, but I can't find a way to clean
up a user who is already broken even if I remove the GPO from that user, delete their local profile so that they logon as a new user (no roaming or other data) and use a variety of utilities such as USBOblivion to clear out the registry and file system of
the USB device and installation. When the original user logs back on and then installs the usb pen drive again they have the same issue, but no other users do. I have the same issue if I try this with an alternative user or admin as the first user after the
'clean up'. Everyone else can use the pen drive except the user that originally installed it when the GPO was in place.
If I move the user to a new endpoint or rebuild their endpoint then they have no problem being the installer of the usb pen drive and then using it since the GPO was removed, so what I need to know is what is it about the USB install and the GPO that
is tattooing in Windows somewhere and how do I remove it?

Hi,
In my opinion, this is probably not Windows GPO problem. To confirm the suppose, you can follow the path below to check GPO settings if there is any change after the software installed.
Computer Configuration\Administrative Templates\System\Removable Storage Access
User Configuration\Administrative Templates\System\Removable Storage Access
These two policy manage system and current user Removable Storage access.
If there is no change with these policy, it would be better to contact the manufacture of the driver for further assistance.
Roger Lu
TechNet Community Support

How to show a database to a user for which only he has the read access?

Hi All,
We have a SQL Server and it has say 10 datatabases, we have created a login and also a user which has read access to just one of the 10 databases.
I used
use [master]
DENY VIEW ANY DATABASE to msam_test
To hide all the databases from explorer for that user if he logsin with msam_test.Now, i want this user to see a database named suresh3_test for which he has a read access.
Can someone please help me if this is achievable?
Thanks

hi,
It is not possible to look at one database if the user only have read access in your scenario.
either you revoke the DENY VIEW ANY DATABASE permission, which will list all the databases for the user
or You need to make the user database owner by doing so:
First delete the user from the database
Right click on the database and select properties and change the owner to msam_test as shown in the pic below
But the user will have owner rights on the database.
Hope this clarifies your doubt. The same was explained in your earlier post as well
Thanks
Bhanu

How to find from the data dict if a user has read access on a directory

How to find "dynamically" if a user has READ access to a directory object.
I want to know if there is a data dictionary table that holds if a user/schema has read access to a directory object.
I know there is an dba_directories table and an all_directories table but they dont give information as to which user has read access granted to the directory.

Not so difficult.
select 'YES'
   from all_tab_privs A, all_directories B
   where a.grantee = 'USERNAME'
       and a.table_name = b.directory_name
       and b.directory_path = 'PATH YOU ARE LOOKING FOR'
How to find "dynamically" if a user has READ access to a directory object.
I want to know if there is a data dictionary table that holds if a user/schema has read access to a directory object.
I know there is an dba_directories table and an all_directories table but they dont give information as to which user has read access granted to the directory.

Error message on reading device saying error dialog user not activated

error message on reading device saying error dialog user not activated. unable to open book to read

I had Adobe upgraded to from 1.2. to 4.1 on my Glow Light Nock at Barnes and Noble yesterday. I use a MacBook Pro 2011 upgraded to 10.10.1. I have never had a problem download a book from the library to my nook in the past. By the time I get this issue resolved, my 2 week book will be overdue and my book club discussion 1/21. I have been to the genius bar at Apple store--not their problem. Two trips to B&N and
the tech guy said he could fix the problem on a PC but not a Mac. It is not a Mac or Nook world.

Users with read access to the site unable to view Managed Metadata Navigation

Hi everyone,
I created a Managed Metadata service and created group, term-set and terms
I gave read access to users
I set up navigation to use Managed Navigation
I am logged in as farm admin and able to view the navigation when i browse site. But user are not seeing navigation.
One thing i noticed is when i give users full access or designer access to site they will be able to see the navigation. but i don't want to give users full access or designer access to the site.
How can users with read only access to site can view Managed Metadata Navigation...Please help?

Hi Sunil,
Have you given your users permissions to actually read the MMS data from the service application?
http://technet.microsoft.com/en-us/library/ff625176.aspx covers permissions on the MMS.
Regards
Paul.
<<edit>> On reflection you might be hitting the issue in this Stackexchange post..
http://sharepoint.stackexchange.com/questions/75636/permissions-and-managed-metadata-in-navigation Is yours behaving the same way?
Please ensure that you mark a question as Answered once you receive a satisfactory response. This helps people in future when searching and helps prevent the same questions being asked multiple times.

After reinstalling MAC OS 10.6.8, config the permissions to read/write/no access, my MacMini [mid 2010] refuses to reboot. I tried to reboot in safe mode with fsck, but after the steps to be taken, it says fscs not done, root device is read only

After reinstalling MAC OS 10.6.8, I config the permissions to read/write/no access, my MacMini [mid 2010] refuses to reboot. I tried to reboot in safe mode with Command+S and fsck, but after the steps to be taken, it says fscs not done, root device is read only. I also tried to bypass the Mac firmware password by taking one Ram card out and reboot the macmini while holding COMMAND+OPTION+P+R. But no luck. The macmini is not able to see the mac OSX installation CD.
Please help ??

f.fromleiden wrote:
After reinstalling MAC OS 10.6.8, I config the permissions to read/write/no access, my MacMini [mid 2010] refuses to reboot.
How and where did you change which permissions? And what was the goal?
Do you have a complete backup of your system? and more importantly data files?
What happened that prompted the need to reinstall the 10.6.8 update?
The immediate road forward would be to boot from the optical drive and revert the changes you made.
What happens when you boot with the install cd and hold down C or hold down the option key?
[Off topic: I've been to Leiden a few times ]

Error while reading access data (URL, user,password) for the Adapter Engine

Hi,
Any idea on below message? I am doing file to file scenario and got the below tarce from sxmb_moni.
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="">
<SAP:Category>XIServer</SAP:Category>
<SAP:Code area="INTERNAL">AE_DETAILS_GET_ERROR</SAP:Code>
<SAP:P1>af.pi1.piserver1</SAP:P1>
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText>no_messaging_url_found: Unable to find URL for Adapter Engine af.pi1.piserver1</SAP:AdditionalText>
<SAP:ApplicationFaultMessage namespace="" />
<SAP:Stack>Error while reading access data (URL, user, password) for the Adapter Engine af.pi1.piserver1</SAP:Stack>
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
Thanks
Balaji

It looks like the adapter engine is not able to register him self on SLD, you have to check in the SLD the "Exchange Infrastructure" domain, you have to verify restarting the J2EE the adapter engine update the entries in the SLD related to the specific XI Domain.
Launch Visual Administrator >> Server >> Services >> SAP AF CPA Cache
Enter the appropriate values for:
SLD.selfregistration.hostname (Use fully qualified hostname)
SLD.selfregistration.httpPort
SLD.selfregistration.httpsPort
Sandro

Giving a user read access to an account for all entities

Dear All,
We have a series of R&D accounts that a user with limited entity security needs to review for all entities.
We have security switched on for Accounts and Entities only.
All entites have security classes defined, only the R&D accounts have a security cless defined (all other accounts ahve a balnk security class).
The user is not allowed to see any other accounts for the entities which they have no access to.
is it possible in HSS to create an access path which allows a single user to view/read an account for entities which they have no other access rights to?
Thanks.

Hi and thanks for the response.
The user has 2 security groups.
The first allows them "All" access to their entity, default and the RD security class for R&D accounts.
This group means they have read/write access to all accounts, which for their own entity is acceptable.
If in the second group I give them read access to all entities then they can read all accounts for all entities.
I need to stop them from seeing all accounts except the RD accounts for the other entities.
Is this possible?

Is it possible to give a user read access to an SAP table but to restrict it to a subset of columns?

Hi,
is it possible to give a user read access to an SAP table but to restrict it to a subset of columns?
Thanks,
Digesh

Hi Digesh,
If your requirement is to restrict the excess to specific rows it is possible to use S_TABU_LIN, but it works only for table which contains org units, like plant, company code, etc.
Please search for S_TABU_LIN if this is your requirement.
Otherwise please follow Alex's suggestion.
BR,
Mangesh

WPD Devices: Deny read access user policy

Similar Messages

Maybe you are looking for