X groups with each 1 filter agaist same db, user member of more than 1 group

Hi everybody !I have a problem :I have a set of groupsEach group is assigned 1 filter againstthe same databaseIt works fine, EXCEPT :When 1 user is member of more thanone group it fails with the##1054013 Syntax error loading filters - operation canceledall users have none-access to the dball filters are mutually exclusive,e.g. read a,read b etc.In businessterms : One employee can seeown data (read a)The manager can see own data (read b)BUT the manager can also see employeedata (read a)Group a filter read a against db xGroup b filter read b against db xEmployee is member of group a (No prob)Manager is member of group b (No prob)Manager is also member of group a (PROB!)Thanks in advance from DenmarkCarsten

Similar Messages

Script to find users that are a member of more than one of a list of specific groups

Hi,
I need to generate a list of users that are members in more than one group, out of a list of specific security groups. Here's the situation:
1) We have about 1100 users, all nested under a specific OU called CompanyUsers. There are sub-OUs under CompanyUsers that users may actually be in.
2) We have about 75 groups, all directly under a specific OU called AppGroups. These groups correspond to a user's role within an internal line of business application. All these groups start with a specific character prefix "xyz", so the group
name is actually "xyz-approle".
I want to write a script that tells me if a user from point 1) is a member in more than one group in point 2). So far, I've come up with a way to enumerate the users to an array:
$userlist = get-qaduser -searchroot 'dq.ad/dqusers/doral/remote' | select samaccountname |Format-Table -HideTableHeaders
I also have a way to enumerate all the groups that start with xyz that the user is a member of:
get-QADMemberOf -identity <username> -name xyz* -Indirect
I figure I can use the first code line to start a foreach loop that uses the 2nd code line, outputting to CSV format for easy to see manual verification. But I'm having two problems:
1) How to get the output to a CSV file in the format <username>,groupa,groupb,etc.
2) Is there any easier way to do this, say just outputting the users in more than one group?
Any help/ideas are welcome.
Thanks in advance!
John

Here is a PowerShell script solution. I can't think of way to make this more efficient. You could search for all groups in the specfied OU that start with "xyz", then filter on all users that are members of at least one of these groups. However, I suspect
that most (if not all) users in the OU are members of at least one such group, and there is no way to filter on users that are members of more than one. This solution returns all users and their direct group memberships, then checks each membership to
see if it meets the conditions. It outputs the DN of any user that is a member of more than one specfied group:
# Search CompanyUsers OU.
strUsersOU = "ou=CompanyUsers,ou=West,dc=MyDomain,dc=com"
$UsersOU = New-Object System.DirectoryServices.DirectoryEntry $strUsersOU
# Use the DirectorySearcher class.
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.SearchRoot = $UsersOU
$Searcher.PageSize = 200
$Searcher.SearchScope = "subtree"
$Searcher.PropertiesToLoad.Add("distinguishedName") > $Null
$Searcher.PropertiesToLoad.Add("memberOf") > $Null
# Filter on all users in the base.
$Searcher.Filter = "(&(objectCategory=person)(objectClass=user))"
$Results = $Searcher.FindAll()
# Enumerate users.
"Users that are members of more than one specified group:"
ForEach ($User In $Results)
    $UserDN = $User.properties.Item("distinguishedName")
    $Groups = $User.properties.Item("memberOf")
    # Consider users that are members of at least 2 groups.
    If ($Groups.Count -gt 1)
        # Count number of group memberships.
        $Count = 0
        ForEach ($Group In $Groups)
            # Check if group Common Name starts with the string "xyz".
            If ($Group.StartsWith("cn=xyz"))
                # Make sure group is in specified OU.
                If ($Group.Contains(",ou=AppsGroup,"))
                    $Count = $Count +1
                    If ($Count -gt 1)
                        # Output users that are members of more than one specified group.
                        $DN
                        # Break out of the ForEach loop.
                        Break
Richard Mueller - MVP Directory Services

How can i use the same front panel graph in more than one events in an event structure?

i want to display the signals from my sensorDAQ in a graph.but i have more than one event in the event structure to acquire the signal and display it in the graph.the first event is to acquire the threshold signals and its displayed in the graph as a feedback.after the first event is executed, i will call the second event,where the further signals are acuired and compared with the threshold signals from the event 1.my question is how can i use the same front panel control in more than two events in the event structure?please answer me i'm stuck.
Solved!
Go to Solution.

Hi,
I have attached here an example of doing the same using shift registers and local variables. Take a look. Shift register is always a better option than local variables.
Regards,
Nitzz
(Give kudos to good answers, Mark it as a solution if your problem is Solved)
Attachments:
Graph and shift registers.vi ‏12 KB
graph and local variables.vi ‏12 KB

With the new update of iphoto I can not upload more than 10 photos to Facebook

with the new update of iphoto I can not upload more than 10 photos to Facebook, I can do

I have the same problem. Why am I now only limited to 10 photos to share in Facebook thru my Iphoto in ipad? Also, i cannot create an album when sharing photos thru Iphoto in ipad. I used to be able to do this. I don't want to upload all my photos in IOS album. Was this feature removed from the Iphoto?

Stmfadm A host group member cannot be a member of more than one host group

Hello, i setup solaris & make it FC target for my test ESX cluster.
ESXi nodes has not local disk (to boot from), so on solaris side I setup 3 zvol and try to export them to my ESXi host. 1 & 2 zvol to setup ESXi it self & boot from it.
3-d zvol to datastore purposes, store & run virtual machine.
But I have problem with lun masking.
I need following config:
ESXi1 - Lun 1,3
ESXi2 - Lun 2,3
I plan create 3 host-groups:
1 - ESXi1
2 - ESXi2
3 - ESXi1,ESXi2
But it is imposible, it seems there is limit in stmfadm
In manual page I can see: "A host group member cannot be a member of more than one host group."
Can you advice me any solution?
Alex
Edited by: 1009729 on Jun 4, 2013 9:18 PM

Hello, i setup solaris & make it FC target for my test ESX cluster.
ESXi nodes has not local disk (to boot from), so on solaris side I setup 3 zvol and try to export them to my ESXi host. 1 & 2 zvol to setup ESXi it self & boot from it.
3-d zvol to datastore purposes, store & run virtual machine.
But I have problem with lun masking.
I need following config:
ESXi1 - Lun 1,3
ESXi2 - Lun 2,3
I plan create 3 host-groups:
1 - ESXi1
2 - ESXi2
3 - ESXi1,ESXi2
But it is imposible, it seems there is limit in stmfadm
In manual page I can see: "A host group member cannot be a member of more than one host group."
Can you advice me any solution?
Alex
Edited by: 1009729 on Jun 4, 2013 9:18 PM

Select the same attribute in a query more than once

Hi Experts,
My requirement is to select the same attribute in a query more than once.
How can I acheive this?
Expecting an early solution..
Pilliga

Hi,
Create a calculated attribute that just displays the "same attribute".
(Note: you will need to uniquely name this object).
For example, if you wish to display Emp Name twice in the same query, then create a calculated attribute called Emp Name2 and select it and Emp Name in your query and the same info will be displayed twice in your results set.
Cheers,
Tanish

I have problem with data transfer between Windows Server 2012RT and Windows7 (no more than 14kbps) while between Windows Sever 2012RT and Windows8.1 speed is ok.

I have problem with data transfer between Windows Server 2012RT and Windows7 (no more than 14kbps) while between Windows Sever 2012RT and Windows8.1 speed is ok.

Hi,
Regarding the issue here, please take a look at the below links to see if they could help:
Slow data transfer speed in Windows 7 or in Windows Server 2008 R2
And a blog here:
Windows Server 2012 slow network/SMB/CIFS problem
Hope this may help
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

When installing ICloud 3.1 always the Same Message appears: You have more than 1 Outlook, it doesnt work. but i have only Outlook 2013, any idea?

When installing ICloud 3.1 always the Same Message appears: You have more than 1 Outlook, it doesnt work. but i have only Outlook 2013, any idea?

Did you have previous versios of Outlook before you installed 2013?

Powershell and Client Object Model - no error thrown if user is added more than once to same site or group

Hello All -
I am trying to add a user to a SharePoint site using PowerShell like below:-
New-SPUser -UserAlias MyDomain\jan20a -Web http://SPServer/sites/MySite
If I execute the above more than once, SharePoint does not throw that user already exists or something. This is not the same behavior in AD/Exchange PowerShell cmdlets.
Also, even the client object model behaves the same way.
Another interesting thing I noticed, I tried to remove a user from group in which the user was not part of it at all and still no error..!!
Looks like SharePoint does not care of invalid input and just ignores it.
Can anyone please confirm this and also the reason behind it ?

It's not really invalid input, since the user exists and that is how SharePoint behaves (will behave same way in browser). Try to input a user that and misspell the name, e.g. say you didn't have a MyDomain\Jan21a, then try to use same script above,
only with invalid data. It will bark at you. Or try using a web that it cannot find, one that does not exist. You'll get what I like to call, the red badge of courage if you enter invalid data.
you can test that sharepoint will let you enter a user twice in the browser, and nothing bad comes from it. Powershell is just unable to tell that the user was not in the site, when you removed it the second time.
Hope that confirms it, if it does please mark this reply accordingly. thanks
Stacy Simpkins | MCSE SharePoint | www.sharepointpapa.com

Large pdf(40MB) with 600 pages color quality is poor if i print more than 1 or 2 pages at a time.

I have a 40MB PDF file with over 600 pages of color images. If i print each page one at a time, there is no issue whatsoever with the quality, but if i print say 5 pages, the 4th and 5th page and any subsequent page will look like rubbish. In general, just not the same color quality as before. The Konica Minolta printer doesn't seem to be at fault here because like i mentioned, this problem does not occur if i print individual sheets, just if i print more than 5 or so.
Printing individual sheets in this instance, however, is not a real solution because in all the job will have many thousand pages. What do i do? Any one here experience a similar problem?

You were able to catch me whilst my Konica Minolta tech was here.
This is my take on his diagnosis,
The c353 while capable of quality output is not exactly a robust production level machine.
Without the aid of a RIP, all the processing needs to happen either in memory or it may have a hdd. Does the machine have a hard drive?
In either case, you are running out of memory.
Changing the printers properties on spooling may aid in completing the job.
He mentioned sending the job as raster. Print as Image from Acrobat's Advanced tab would do that, but I think you would cripple your computer doing such. Try it; be prepared to go out to lunch or something while it churns away.
hth

Problems to restrict access to a page when the user belong to more than 1 group

I have realized that Dreamweaver on a coldfusion document only works fine when the user only belongs to a single group, this is because the code supplied by dreamweave when you use the option "Restrict access to a page" at "Server behaviors" it assumes that the user only have one group as you can see on this line created automaticly by dreamweaver:
<cfif MM_Username EQ "" OR MM_UserAuthorization EQ "" OR ListFind("admin",MM_UserAuthorization) EQ 0>
MM_UserAutorization has the value of the field assigned for the list of groups or levels, as you can see it could work if we reverse the parameters of the listfind function but the problem would be if we grant the access to more than one group because the sentence would be like this:
<cfif MM_Username EQ "" OR MM_UserAuthorization EQ "" OR ListFind("Admin,Manager",MM_UserAuthorization) EQ 0>
so both paramethers are lists therefore no user will get access to the page.
I am trying to make a work around to fix this problem but I don't know how to get the name of the page since the Application.cfc so I can validate the access to this page against tables on my database.
Does someone have a work around or a tip how to fix this problem?
Thanks in advance.
AG

Seems like you have a problem with your group names.ctxLdap.modifyAttributes(groupName,member);Ensure that the value of your variable groupName is a a valid distinguished name.
Note that an OU (organizationalUnit) is not a group. You do not add users to OU's, you create users in OU's.

Problem with closing other firefox windows when window in use has more than 1 tab open

If I have multiple firefox windows open, and the one that I am using has more than one tab open, when I try to close one of the windows that I am not using by hovering over the firefox icon on the taskbar, then clicking the cross on the other windows, a message appears asking me if I want to close a window with more than one tab open. This means that firefox is trying to close the window that I'm using, not the one I'm trying to close. Please note this only happens when I hover over the icon on the taskbar then click the cross for the window I want to close. If I open the window properly, then click the cross on the window itself, it works fine.
Just wanted to know if anyone else has this problem, and if they do, then mozilla should probably fix it in their next update, it's getting really annoying now

I can't find a bug on file for this on https://bugzilla.mozilla.org/ (although there are many taskbar-related issues under review).
(1) Just to confirm, do you both have "Show tab previews in the Windows taskbar" turned off here:
orange Firefox button (or Tools menu) > Options > Tabs
(2) Have you tried disabling Firefox use of hardware graphics acceleration?
You usually need to restart Firefox in order for this to take effect, so save all work first (e.g., mail you are composing, online documents you're editing, etc.).
orange Firefox button (or Tools menu) > Options > Advanced
On the "General" mini-tab, uncheck the box for "Use hardware acceleration when available"
If you restart Firefox, do you notice any changes?

Having same portlet on a page more than once

I am faced with the task of allowing a user to add the same portlet to a page multiple times. The concept is identical to this: we have five news feeds and one 'News' portlet. We want a user to be able to add the 'News' portlet to a custom page as many times as they want. Then, within the preferences, they choose which of the feeds to display in each portlet window.
Is this possible? It doesn't have to be a matter of choosing a preference-- the requirement is just that the user can choose wich feed to display and we do not have to create a whole new web scv and portlet for each feed that we add.
Any help is greatly appreciated. We are using Plumtree 5.0.2 and have the EDK/GDK available in case there is a solution by writing Java code.
Thanks,
Mike

Two options:
Change the portlet logic so it accepts multiple feeds and presents them all in one portletRegister multiple instances of the portlet against the single web service - they should all have separate prefsDepends on how you want to present the content. One gets you a single portlet with content in one place - the other gets you the ability to have multiple portlets distributed on the page. Personally, I find the latter maddening, but it depends on the audience and your threshhold for pain.
Thanks,
Eric

Payment Predictor applying multiple payments to the same Item when customer send more than 1 payment in 1 deposit.

We have an issue where customers are sending us multiple payments and they come in the same deposit. When payment predictor runs, it is applying both the payments to the same Item using different algorithms. I would think when an Item is selected by 1 payment it should be tagged like it is on a payment worksheet and another payment should not try to apply it to the same item. Ex: we have an Item with balance $1356. Two payments came in for the same customer for $992 and $1356 in the same deposit. Payment predictor applied both payments to the same Item using #BALANCE and #OLDESTC algorithm. The Item now has a balance of -$992. Did anyone else see this issue?
Thanks,

Are both the payments for the employee not transferred or only the unpaid one ?
How about paying both the amounts(status paid) and then do a transfer to SLA.
Cheers,
Vigneswar

SharePoint 2013 shows the same picture library after add more than two picture library slideshow web part in one page.

The environment is SP2013 with SP1, I had check the KB, but don't have any hotfix about this.
I had try it on the different fram, also the same result.
I try it on sharepoint online is work. So I think that must have hotfix about this.
I find there is someone have the sam problem.
http://sharepoint.stackexchange.com/questions/70944/picture-library-slideshow-issue-with-multiple-libraries
Some snapshot about this :
Vinci Wang

Hi Vinci,
Thanks for posting your issue, This is a known issue in 2013. You could have multiple slideshow
webparts on a page in 2010, but it won't work in 2013. As of now there is no hot fixes for this issue. you can try code mentioned in below URL
https://social.technet.microsoft.com/Forums/sharepoint/en-US/5ca65f7f-770b-4b0f-8e40-d08578a6442b/sharepoint-2013-picture-library-slideshow-web-part-image-not-displaying-correct-size
Also, check out below mentioned URLs to know more about this issue and fixes
http://sharepoint.software.tech.answers.ninja/post/70944
https://social.msdn.microsoft.com/Forums/office/en-US/63b2ce8c-5f31-4a39-934e-6d759e9afa0c/picture-library-slideshow-web-part?forum=sharepointgeneralprevious
http://blog.vgrem.com/2013/04/27/beyond-the-slideshow-web-part-capabilities-in-sharepoint-2010/
I hope this is helpful to you, mark it as Helpful.
If this works, Please mark it as Answered.
Regards,
Dharmendra Singh (MCPD-EA | MCTS)
Blog : http://sharepoint-community.net/profile/DharmendraSingh

X groups with each 1 filter agaist same db, user member of more than 1 group

Similar Messages

Maybe you are looking for