Write access blocked on additional drives
I recently had an issue with my Mac Pro with Leopard where it was stuck in boot loop. I followed the fix of using the disk utility off the Leopard disk to repair permissions and everything seemed to be fixed. Then, for no reason I can think of, after using Compressor to batch process some audio files and copying them to one of my extra internal drives, I lost my write access for all 3 of my extra internal drives. If I try and copy or delete a file on these drives I am prompted that I do not have sufficient access priviliges and I am ask to authenticate. If I choose to do so, and enter my admin password, I receive another error message stating it could not complete.
If I check my account for admin rights and read/write access for these drives, I don't see my Account under Get Info. If I try and add myself under the Get Info window nothing happens, the account isn't added.
I read this discussion but the person really didn't explain what they did to fix the issue:
http://discussions.apple.com/thread.jspa?threadID=1282290
I was curious if anyone had a quick to do list ofr getting this problem fixed?
Cheers,
-E
Other users on your iMac can easily right-click on the external hard drive icon, get info and check the "Ignore ownership on this volume". Then everyone can read and write on the backup drive which probably isn't what you want. Theoretically, only users with admin rights can check that box, but there's plenty of ways to circumvent this.
If you want to restrict access more, lauch Disk Utility and create a new Read/Write disk image with encryption on the external drive. This will take some time to create and ask you for a password. I'd recommend a strong password (use the password generator that pops up) and let it be stored in your keychain. This way, Time Machine won't ask you to enter the password to back up or enter time machine. You should write down that password though in case the internal hard drive fails or your home folder (including the keychain) gets corrupted. You will be required to enter the password to do a full restore from Time Machine.
The downside of this is that the other users of your iMac can't use Time Machine at all.
Per default, the Time Machine rights are so that you can only access your own home folder plus the shared and public folder (and other non-standard folders within anyone's home folder as it has no specific access rights). Try logging in from another account or the guest account and see if you can access your user account's backup files in, say /Documents. It should deny access and not even reveal the folder's contents.
Similar Messages
-
How can I regain Full Read Write access on my BU Drive?
Prior to Yosemite upgrade, I had Read Write access to my BU hard drive and now I don't !! I can't update files on my back up drive. Help! I tried looking through help files and I am listed as an administrator on my iMac.
When you get info on the external drive, at the very bottom is a box you can check
"Ignore ownership on this volume"...
If you check that, then see if you can delete and move things around.
If that doesn't work then try clicking on the + sign and adding you as an admin so you can Read & Write. -
Read/write access on external drive set to none; can't see drive to change
I was learning about profiles and permissions and set the Read/write access on my external drive to none. I wanted to protect my guests from accidentally viewing private files. I thought I was doing it for that profile only, but now I can't see the drive to change it back. I have already tried using the disk utitility and re mounting the drive, but still cannot see the drive icon on the desktop or anywhere. I know the drive is okay because I can see it in disk utility but disk utility says the read/write access is none.
thanks for anyone that can advise me. I'm more of a PC expert, than a Mac expert.
GaryFollow the instructions in this FAQ which are relevant to your situation; logging in as root is not needed.
(18945) -
Write access other file systems - NTFS, extX, reiser?
Hi,
I've purchaseda Media NMH410 to connect to my WRT160N router and am having difficulty gaining write access to my connected USB drives. I've tried NTFS, extX and reisfer file systems, and none of them will allow me write access when connected to the hub. I can't go with fat32 because of the 4GB file size limitation. The Mediahub really should also be able to write to NTFS considering most every other linux disitribution these days can.
I expected that since the box is a linux system it would be able to access read/write other linux file systems so thought I could move my data to a linux file system. I've learned to expect encountering access problems with NTFS but am very disappointed the MediaHub is presenting these access problems with other linux file systems.
Does anyone have any suggestions of how to gain write access to my other drives. Is there a setting somewhere, or do I need to format in a particular fashion w/switches or something to that affect. And why isn't the hub able to write access another drives formatted even in the same file system (reiser, right)?
Thanks so much for any help you can offer.
JacquiHi,
It might just be a system limitation on the device.
JacquelineGoguen wrote:
Thanks.
I had followed that thread. The problem is I can't go fat32 b/c of file size limitations and I have to be able to write to these drives across the network.
It appears the Mediahub can ONLY write to external USB devices if they are FAT32? That just seems so odd to me - it's a linux Oistro (albeit slimmed down), I would expect it to have the ability to write to other linux filesystems. or at a minimum, the same filesystem (reiser).
Jacqui -
Group policy preventing write access to hard drive for Windows Service
I recently stood up several SharePoint Servers which use various domain user accounts as service accounts. Everything was going fine until the servers were moved from the staging OU to the production OU which has a server hardening GPO applied to it. Once
this occurred, all of SharePoint's logging via the Tracing service broke--because this account doesn't run as Local Service, but rather one of the domain user accounts.
After examining the Application event log, I saw it filled with errors indicating the E:\Logs\ULS and E:\Logs\Usage were not accessible due to error 0x5 -- access denied.
I explicitly granted permissions to the service account to these folders, and gave Full Control perms. I then restarted the service, but the Access Denied errors persisted. I granted Full Control to the entire E: drive -- the root folder -- with inheritance,
and made sure the permissions were inherited. And yet the problem persisted.
I installed a different application which can log to different drives, and it writes to the E: drive just fine when run as Local System. If I change it to one of the domain service accounts, it too produces Access Denied errors trying to write to the E:
drive, regardless of the NTFS perms.
The E: drive is a hard drive, not a USB or removable drive.
I found several posts here that explain how to disable write access to USB and DVD media, but I cannot find anything how to block writing to a hard drive. The server hardening GPO contains thousands of different settings and it'll take days to comb through
them all. Does anyone know of a GPO setting that can block writing to a hard drive, regardless of NTFS perms?
The servers in question are running Windows Server 2012 standard (not R2).
UPDATE: If I grant the service account the ability to log on locally (i.e. add it to the local Users group), and open a command prompt with "Run as User," I can write to the E: drive just fine. But the access denied
persists when running as a service. This leads me to believe a GPO is blocking the write access to a
service user but allowing the same account when logging in as an interactive
user.I created a test Windows service that does nothing more than open two StreamWriter objects -- one to write into E:\Logs\ULS and the other into C:\ProgramData\Logs. The former writes dummy text once per second, while the latter writes errors. So error messages
will get written into C:\ProgramData\Logs.
I set up this test Windows Service and set it up to use my SharePoint app pool account, and this was written to the error log - the first line indicates the account being used.
[8/22/2014 12:01:25 PM] - Error writer is initialized and ready. Execution context svc_SPSvcApp_J
[8/22/2014 12:01:25 PM] - Directory E:\Logs\ULS does not exist.
[8/22/2014 12:01:25 PM] - Failed to set up the log writer. Access to the path 'E:\Logs\ULS' is denied.
System.UnauthorizedAccessException: Access to the path 'E:\Logs\ULS' is denied.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
at ServiceLogWriter.Service1.Compose()
I then tried this with my Farm account. For TEST purposes, I TEMPORARILY put this account in the local Administrators group (I removed it after the test). And
STILL does not see the E: drive or any folders it contains.
[8/22/2014 12:05:08 PM] - Error writer is initialized and ready. Execution context svc_SPFarm_J
[8/22/2014 12:05:08 PM] - Quick test to look for things we KNOW exist on the Server. We know there is an E: drive, and we know there's a folder named E:\Logs\ULS.
[8/22/2014 12:05:08 PM] - Windows reports E:\ does not exist. This is bad.
[8/22/2014 12:05:08 PM] - Windows reports E:\Logs does not exist. This is very bad.
[8/22/2014 12:05:08 PM] - Windows reports E:\Logs\ULS does not exist. In the words of the late Captain Phil Harris, "This is bad. This is bad bad."
[8/22/2014 12:05:08 PM] - Directory E:\Logs\ULS does not exist (we'll try to create it).
[8/22/2014 12:05:08 PM] - Failed to set up the log writer. Access to the path 'E:\Logs\ULS' is denied.
System.UnauthorizedAccessException: Access to the path 'E:\Logs\ULS' is denied.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
at ServiceLogWriter.Service1.Compose()
Next I tried my own ID to run the same service. I'm a Domain Admin so I should have ruler of the roost perms
[8/22/2014 12:12:35 PM] - Error writer is initialized and ready. Execution context sawyemat
[8/22/2014 12:12:35 PM] - Quick test to look for things we KNOW exist on the Server. We know there is an E: drive, and we know there's a folder named E:\Logs\ULS.
[8/22/2014 12:12:35 PM] - Windows reports E:\ does not exist. This is bad.
[8/22/2014 12:12:35 PM] - Windows reports E:\Logs does not exist. This is very bad.
[8/22/2014 12:12:35 PM] - Windows reports E:\Logs\ULS does not exist. In the words of the late Captain Phil Harris, "This is bad. This is bad bad."
[8/22/2014 12:12:35 PM] - Directory E:\Logs\ULS does not exist (we'll try to create it).
[8/22/2014 12:12:35 PM] - Failed to set up the log writer. Access to the path 'E:\Logs\ULS' is denied.
System.UnauthorizedAccessException: Access to the path 'E:\Logs\ULS' is denied.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
at ServiceLogWriter.Service1.Compose()
Mind you I'm starting and stopping the service while logged in interactively -- I can CLEARLY SEE there's an E: drive and E:\Logs\ULS folder!
It is quite evident to me that there is a policy blocking Windows services from seeing the E:
drive.
Run this under the LocalSystem (SYSTEM) account, and all is well.
[8/22/2014 12:15:18 PM] - Error writer is initialized and ready. Execution context SYSTEM
[8/22/2014 12:15:18 PM] - Quick test to look for things we KNOW exist on the Server. We know there is an E: drive, and we know there's a folder named E:\Logs\ULS.
[8/22/2014 12:15:18 PM] - So far so good - Windows reports E:\ exists.
[8/22/2014 12:15:18 PM] - Windows reports E:\Logs exists.
[8/22/2014 12:15:18 PM] - Awesome - Windows reports E:\Logs\ULS exists.
[8/22/2014 12:15:18 PM] - Log writer is set up successfully.
[8/22/2014 12:15:25 PM] - Shutdown in progress. -
How do I allow write access to my existing photo images on a WD external hard drive?
I recently switched from Windows Vista to and iMac and I'm trying to edit photos in Photoshop CS6 and it won't let me make changes or edits to the photos stating that it can't allow me "write access" to save the changes? Where is the lock up? Is it in the external hard drive settings? In the camera? In the files themselves? Where to I fix this so I may edit photos? I need help ASAP!! Thank you!
Hi there! Because the forum you originally posted in is for beginners trying to learn the basics of Photoshop, I moved your question to the Photoshop General Discussion forum, where you'll get more specialized help.
To help others help you, please read through this article and provide any additional relevant details. -
I just got a new mac and use my external hard drive to save all my images to but whenever I go to save my photo to my hard drive it says I do not have write access....Whats wrong how do i fix this or do i need a new hard drive??@
This is a Mac question not a Photoshop question, and I am a Windows users, but I can Google and this might be what you need to do:
http://www.makeuseof.com/answers/change-read-permision-external-hard-drive-mac/ -
This is a new problem. I transferred some images from my Nikon camera via image capture but converted my raw files to jpegs in the Nikon View nx 2 software and saved them in a new folder on my desktop. I use a 2010 MBP that has OS10.9.5 fully updated. When i tried copying and pasting the jpegs to an external pen drive I got an error message saying the jpg (the number) could not be saved as write access is not granted. I thought the pen drive may be full. So I attached an external hard drive. got the same message. I then opened the same jpeg in photoshop cc and tried saving it as png on the hard drive, got the same message. Was unable to handover the photographs to my client. Was hugely embarrassed. Pl let me know if there is a way out of this and if its a Mac OSX issue? Thanks.
right click on the jpeg (the other mouse button then you use to click with) or on trackpad, hold down control and click, in the menu that pops up, click on "get info" next, if the box labeled "locked" is checked, uncheck it. Down at the bottom, there should be a box with your user name, "staff" and "everyone". to the right of this are options to change these you may need to click the small padlock icon and enter in your password. then change all of the permissions to read and write.
-
Disable write access to external drives via USB & FW400/800
We have a Mac Pro on our AD network. We want to disable users from having write access to external HDD through USB or FireWire so that they cannot possibly copy data to a attached USB/firewire drives.
Is this possible?Smith Micro has a product called Internet CleanUp that has the feature your looking for.
http://my.smithmicro.com/mac/cleanup/index.html -
Got a new hard drive installed and since then, I cannot get purchased song into my itunes. It is telling me that my write access or permission are wrong. I have changed all and nothing works. HELP!!!!!!
Use the trackpad to scroll, thats what it was designed for. The scroll bars automatically disappear when not being used and will appear if you scroll up or down using the trackpad.
This is a user-to-user forum and most people will post on here if they have problems. You very rarely get people posting to say there update went smooth. The fact is the vast majority of Mountain Lion users will not be experiencing any major problems with the OS, or maybe with apps which are not compatible, but thats hardly Apple's fault if developers don't update their apps. -
I've got Multiple Users set up in my classroom of Intel MacMinis. I'm using Parental controls, but none of these options allow me to block the user's access to the CD drive.
I don't want to use Simple Finder, and I don't want my students putting anything in the CD drive.
Any suggestions?
ThanksActually, it isn't necessary to have OS X Server to get access to that particular function. "Workgroup Manager.app" (included with the "Server Admin Tools" which can be downloaded from Apple) allows managed accounts on OS X Client to be configured so that they can't use the CD drive - it won't prevent them from putting things into the drive, but it should block their ability to access disks from the GUI.
-
How do I block access to external hard drive
I have a child account on my computer, and have set up various parental controls but can't see a way to block the access to external hard drives which are connected to my Mac.
I have a couple of drives which contain my work related files so I don't want my child to view or edit them. Is there a way I can stop her seeing these drives when she searches for something in Finder?
ThanksYou can create encrypted sparse disk image.
Once you have done that you can move the data you wish to protect into it.
This way the only to access the data is by first providing the password to open the disk image. -
My Users have secure pen drives that launch a CDROM partition with a secure logon app that decrypts the main USB mass storage element of the pen drive on successful logon. The problem I have is that users who install the usb pen drive cannot then
initialize the CDROM launcher app to input their password to access the mass storage element of the pen drive making it useless.
However, any other user that has the same type of pen drive who then plugs it in to the endpoint that already has the drivers installed is able to access their own pen drive or the other users pen drive (providing the know the password).
So I've isolated the problem being down to the presence of the GPO setting stated above on the Removable Storage Access Policy, and by not having this policy in place when a user installs the pen drive they have no issues, but I can't find a way to clean
up a user who is already broken even if I remove the GPO from that user, delete their local profile so that they logon as a new user (no roaming or other data) and use a variety of utilities such as USBOblivion to clear out the registry and file system of
the USB device and installation. When the original user logs back on and then installs the usb pen drive again they have the same issue, but no other users do. I have the same issue if I try this with an alternative user or admin as the first user after the
'clean up'. Everyone else can use the pen drive except the user that originally installed it when the GPO was in place.
If I move the user to a new endpoint or rebuild their endpoint then they have no problem being the installer of the usb pen drive and then using it since the GPO was removed, so what I need to know is what is it about the USB install and the GPO that
is tattooing in Windows somewhere and how do I remove it?Hi,
In my opinion, this is probably not Windows GPO problem. To confirm the suppose, you can follow the path below to check GPO settings if there is any change after the software installed.
Computer Configuration\Administrative Templates\System\Removable Storage Access
User Configuration\Administrative Templates\System\Removable Storage Access
These two policy manage system and current user Removable Storage access.
If there is no change with these policy, it would be better to contact the manufacture of the driver for further assistance.
Roger Lu
TechNet Community Support -
I do not have permission to write in my external Hard Drive
Hello everybody.
I have recently bought a MacBook Pro (15, 2.16 Ghz with OS X 10.4.9) and I have a Beyond Micro 300Gb external Hard drive that I have been using with my PC. This drive has a Windows NT File System.
When I first plugged it to the Mac, I changed its name to recognize it better. Now, I am not able to transfer documents from my Mac to it, but I am able to do so through the PC.
Am I done something wrong?
Am I blocked this drive? (Once open, I see a pen crossed on the lower left corner)
And if so, Could I unblocked it to make it writable?
When I try to transfer any documents with the Mac I get a message saying that I can't do it and because I do not have permission. (I am the administrator).
I read a previous posting talking about a similar problem, but I really couldn't understand the solutions and/or differences beteween NTFS, FAT 32, MS-DOS and MacFuse (I am a complete novice).
I also tried (as suggested in the posting) to use the Disk Utility to set the permissions from there, but when I select the external Hard Drive all the options are dimmed. Also, the info panel says I only have permissions to write, having no other available alternatives to choose from.
The question is: How can I make this drive available to both Operating Systmes without erasing all the information inside (format)?
Thank You in advance.
Cordially,
Juan Carlos
MacBookPro Mac OS X (10.4.9)
MacBookPro Mac OS X (10.4.9)
MacBookPro Mac OS X (10.4.9)Thank You rvdparis
I have just intalled MacFuse (with Tools and Core) and it does allow me now to read and write in my external Hard Drive.
Once again, THANK YOU VERY MUCH.
And yes guys, this seems to work. Forget about formatting your external hard drive. MacFuse changes the permission instantly.
Cordially,
Juan Carlos
MacBookPro Mac OS X (10.4.9) -
Hello,
Issue:
On a Virtual Machine with a secondary VHDX attached, I cannot manage (bring online, initialize, partition, format, or write to) the VHDX hard drive once it has "Enable Virtual Hard Disk Sharing (VHD Sharing)" enabled.
Questions:
Should I be able to manage (bring online, initialize, partition, format, and write to) a VHDX hard drive once it has VHD Sharing enabled? If I should be able to manage it, what am I missing?
Topography:
One SuperMicro Cluster In a Box (CIB) with 2012 R2 Data Center on each node. Microsoft Failover Cluster installed and working on each node. The Failover Cluster Servers on each host passes all cluster validation tests. Two Hyper-V 2012 R2 Data Center Virtual
Machine (VM) servers, one on each node. 1 common Cluster Shared Volume (CSV) and 1 Generation 2 Scale-Out File Server (SOFS) shared volume both Resilient File System (REFS) formatted. One 5 Gigabit (Gb) Virtual Hard Drive Type X (VHDX) file on the CSV and/or
SOFS. Integrity bit and read only turned off on VHDX file.
Each of the two Hyper-V VMs have one 127Gb VHDX Generation 2 primary hard drive and 1 VHDX secondary hard drive attached, both on SCSI Controller #1.
Background:
If I start VM1 without the VHD Sharing enabled on the secondary hard drive, I can bring the drive online, initialize, partition, format, and write to the drive.
If I enable VHD Sharing, I can no longer modify the drive in Disk Management in any way. With or without VM2 running.
Both VMs and the CSV and SOFS are on the same host cluster server, or not, no difference…
The VHDX is referenced either by the CSV name C:\ClusterStorage\Volume1\TEST1.VHDX
or a Shared Folder name
\\sharedfolder\folder\Test1.VHDX .
If I start VM1 with VHD Sharing disabled and I format the drive, then shut down and enable VHD Sharing, the drive is offline and requests initialization which fails with an "I/O device error", every other attempt to manage the drive fails with
the same "I/O device error", error.
Events:
VDS fails to write boot code on a disk during clean operation. Error code: 8007045D@02070008
Log Name: System
Source: Virtual Disk Service
Date: 3/3/2015 11:39:18 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Server1.Domain.local
Description:
VDS fails to write boot code on a disk during clean operation. Error code: 8007045D@02070008
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Virtual Disk Service" />
<EventID Qualifiers="49664">10</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-03-03T19:39:18.000000000Z" />
<EventRecordID>27318</EventRecordID>
<Channel>System</Channel>
<Computer> Server1.Domain.local </Computer>
<Security />
</System>
<EventData>
<Data>8007045D@02070008</Data>
</EventData>
</Event>
AND
Log Name: System
Source: disk
Date: 3/3/2015 12:16:42 PM
Event ID: 153
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Server1.Domain.local
Description:
The IO operation at logical block address 0x0 for Disk 1 (PDO name: \Device\MPIODisk1) was retried.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="disk" />
<EventID Qualifiers="32772">153</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-03-03T20:16:42.017090000Z" />
<EventRecordID>27333</EventRecordID>
<Channel>System</Channel>
<Computer>Server1.Domain.local</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk1\DR1</Data>
<Data>0x0</Data>
<Data>1</Data>
<Data>\Device\MPIODisk1</Data>
<Binary>0F01040004002C00000000009900048000000000000000000000000000000000000000000000000000020488</Binary>
</EventData>
</Event>
Thanks again for any help,
RobertHi All,
I had to buy a Willy Wonka bar and spend a golden ticket to get an answer to this one.
We found that the default LogicalSectorSizeBytes of a VHDX is 512b. It needs to be 4kb.
The Host drive doesn't seem to matter CSV or SOFS. Below is a way to create a VHDX with the correct LogicalSectorSizeBytes.
In Power Shell, type --> New-VHD -Path C:\ClusterStorage\Volume4\Cluster2DataDisks\Cluster2Disk1.vhdx -SizeBytes 200Gb -PhysicalSectorSizeBytes 4kb -LogicalSectorSizeBytes 4kb
Attach the resulting file to your guest cluster servers and set the Enable Virtual Hard Disk Sharing option on both server. You should now be able to bring the drives on-line and initialize them. They will also add to the guest cluster pool.
Change the size, path and file name above to fit your Cluster Servers configuration.
Thank You
Sachin Kumar Support Engineer | Windows Server Setup Team | Microsoft Enterprise Platform for finding the answer to this one.
Hope this helps others.
Robert
Maybe you are looking for
-
I have a MACBOOK PRO running under 10.9 and 4 Gigs memory. I bought FCP to be able to burn blu-rays videos (I produced a 4h30 video on a trip to Turkey) My video is produced in full HD. I have an LG blu-ray burner. I bought training videos on FCP at
-
3rd display not working with Yosemite. Was fine with Mountain Lion. Any suggestions?
I use my Imac as a digital aidio workstation with 3 displays. Never updated to Yosemite due to issues with the DAW manufacturer software. Now that the issues were resolved, I said what the **** and I updated to Yosemite. Now my 3rd display does no
-
hi, i want to get an export file for a table from Oracle 8.1.6.0 (on sun server 5500) using 9.2.0.1 server ( on another server machine) exp command like that : exp username/pass@string file=myexp.dmp tables=tablename when i give this command it gives
-
how to fetch xml data in flex file at time of creating charts, my xml data are generate from mysql database? Is there possible to connect flex application to database?
-
when try to synch, i get a message that some songs are not authorized. yet when i authorize my computer it says it is alredy one of my authorized computers