Pemission on Files/Folders

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - Access Denied to COM Security using Admin Account Hello, I was hardening the security of my windows server and i read the document about MSDTC that if you don't need it then disable. And this is exactly what I did. I stopped and disabled MSDTC service. And then i removed Anonymous Logon & Everyone permisson (Local Access & Remote Access) under component service for COM security. I restarted the server, logged in as Administrator and got access denied to most of the tasks such as creating users or adding users to group. The worst thing is that i can't even Right-Click on any object to check the properties. I tried to bring back the permission on the COM security but failed as Iâ??m getting access denied though Iâ??m logged in as administrator. Tried to restart MSDTC service but unsuccessful because i can't even right-Click on it. The event log is showing the following error. I can't read the detail message since right-click is not working. so Iâ??m posting the basic errors. System Logs: LsaSrv --> Event ID 40960 Datascrn--> Event ID 3 Application Logs: SRMSVC--> Event ID 8203 USERENV--> Event ID 1110 USERENV--> Event ID1090 ccsetmgr--> Event ID 48 Event System--> Event ID 4609 COM+ --> Event ID 4691 Does any one know how can i reset the COM Security permission and restart the MSDTC service? Any suggestions will be appreciated. Thanks Tag: Pemission on Files/Folders Tag: 112246
  - 2
    - Possible for Windows 2003 Server Std to automatically send an email every 5 minutes? I'm looking for a way to have my server generate and send an email every five minutes. Is this possible in Windows 2003 Server Std? -- Fight Usenet Spam!!! - http://improve-usenet.org:80/ Want a good newsgroup reader that will filter out GoogleGroups spam? Try MesNews - http://www.mesnews.net/gb/ If you want your posts to be seen, DON'T USE GOOGLE GROUPS! Tag: Pemission on Files/Folders Tag: 112245
  - 3
    - How does Licensing Work I am curious about how the licensing works. I have a server that is running Windows Server 2003 and MSSql Server 2000. We have five user machines running XP. If I understand correctly, Win2003 and MSSql come with 5 Client licenses. What if I need to add another user? We don't use Active Directory are anything like that. We are only using the server to host the database that our application connects to. So, if I need to add a sixth user, do I need more licenses for Win 2003 AND MSSql? And what about Terminal Services? I am thinking maybe of moving our users over to Linux/Mac computers and having them access that one application via TS. How does that work in regards to licenses? And do I really need to setup another Windows 2003 machine to host the TS License Server????? Thanks. Griff Tag: Pemission on Files/Folders Tag: 112237
  - 4
    - Login Scripts - Win2k DC Hi I am running a Windows 2000 Domain Controller and have my users organised into Organisational Units in Active Directory. Could someone assist me with creating a login script that maps network drives to the differing OUs. Thanks Tag: Pemission on Files/Folders Tag: 112224
  - 5
    - Do I need a WINS server in a XP, W2K3 DC network? Hi all, We have migrated our network from NT4 to W2K and recently to W2K3 Servers Active Directory and at each step I ask myself: Do we really need a WINS server at all? It is supposed the DNS server does the work. Nowadays our network is comprised of XPs, a few W98 PCs which will be replaced in the next weeks, a few W2K servers (non DC) and W2K3 DC servers. The AD was raised to W2K3 level. Do I really need a WINS server? Thanks in advance Sammy Tag: Pemission on Files/Folders Tag: 112223
  - 6
    - System Restore Hello, I'm trying to figure out what I have to back up on a routine basis so that I would be able to restore a server from the ground up if that server crashed. I assume that system state is one of the many things. However what does system state include? Any help in this area would be greatly appreciated! Tag: Pemission on Files/Folders Tag: 112218
  - 7
    - VSS Catastrophic Failures Hi, Server 2003 R2 x64 SP2, Exchange Server 2007 SP1. KB940349 has been applied and resolved issues with our JetDB writers. We're having problems getting VSS to take snapshots for Shadow Copies and backups. It is now specific to the Exchange VSS Writer. We had BackupExec 12 installed and couldn't do an Exchange backup without having catasrophic errors. I have since switched to ArcServe 11.5 SP3 and the last Exchange backup went successfully. ShadowCopy snapshots however are still failing. After a clean reboot of the server, I can manually take a shadow copy snapshot and it completes successfully. I took one last night before the backup without issue. This morning I checked and the 7am scheduled snapshot didn't show up in the list. I checked the status of the VSS writers, and they're all Online with a normal status. The following errors were logged in the App log. -------------------------------------------- Event Type: Error Event Source: VSS Event Category: None Event ID: 12289 Date: 4/30/2008 Time: 7:02:32 AM User: N/A Computer: SERVER Description: Volume Shadow Copy Service error: Unexpected error WaitForMultipleObjects(1,000000000032A2B0,1,120000) == 0x00000102. hr = 0x8000ffff. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 2d 20 43 6f 64 65 3a 20 - Code: 0008: 43 4f 52 4c 4f 56 4c 43 CORLOVLC 0010: 30 30 30 30 30 36 39 34 00000694 0018: 2d 20 43 61 6c 6c 3a 20 - Call: 0020: 43 4f 52 4c 4f 56 4c 43 CORLOVLC 0028: 30 30 30 30 30 35 39 39 00000599 0030: 2d 20 50 49 44 3a 20 20 - PID: 0038: 30 30 30 30 37 39 36 30 00007960 0040: 2d 20 54 49 44 3a 20 20 - TID: 0048: 30 30 30 30 36 35 33 36 00006536 0050: 2d 20 43 4d 44 3a 20 20 - CMD: 0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO 0060: 57 53 5c 53 79 73 74 65 WS\Syste 0068: 6d 33 32 5c 76 73 73 76 m32\vssv 0070: 63 2e 65 78 65 20 20 20 c.exe 0078: 2d 20 55 73 65 72 3a 20 - User: 0080: 4e 54 20 41 55 54 48 4f NT AUTHO 0088: 52 49 54 59 5c 53 59 53 RITY\SYS 0090: 54 45 4d 20 20 20 20 20 TEM 0098: 2d 20 53 69 64 3a 20 20 - Sid: 00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18 00a8: 2d 20 45 72 72 6f 72 3a - Error: 00b0: 57 61 69 74 46 6f 72 4d WaitForM 00b8: 75 6c 74 69 70 6c 65 4f ultipleO 00c0: 62 6a 65 63 74 73 28 31 bjects(1 00c8: 2c 30 30 30 30 30 30 30 ,0000000 00d0: 30 30 30 33 32 41 32 42 00032A2B 00d8: 30 2c 31 2c 31 32 30 30 0,1,1200 00e0: 30 30 29 20 3d 3d 20 30 00) == 0 00e8: 78 30 30 30 30 30 31 30 x0000010 00f0: 32 20 20 20 20 20 20 20 2 ------------------------------------------------------ Event Type: Warning Event Source: MSExchange EdgeSync Event Category: Topology Event ID: 1026 Date: 4/30/2008 Time: 7:10:06 AM User: N/A Computer: SERVER Description: Topology load generated transient exception Active Directory operation failed on server.hagelaw.local. This error could have been caused by user input or by the Active Directory server being unavailable. Please retry at a later time. Additional information: Active directory response: The operation was aborted because the client side timeout limit was exceeded. .. EdgeSync must be able to acquire current Exchange topology data from the Active Directory directory service to properly operate. The Edge Transport server will attempt to load the topology again. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ----------------------------------------------------------------- Event Type: Error Event Source: MSExchange ADAccess Event Category: General Event ID: 2604 Date: 4/30/2008 Time: 7:12:07 AM User: N/A Computer: SERVER Description: Process MSEXCHANGEADTOPOLOGY (PID=2500). When updating security for a remote procedure call (RPC) access for the Exchange Active Directory Topology service, Exchange could not retrieve the security descriptor for Exchange server object SERVER - Error code=80040955. The Exchange Active Directory Topology service will continue with limited permissions. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ------------------------------------------------------------------------- Event Type: Error Event Source: MSExchange System Attendant Mailbox Event Category: General Event ID: 4001 Date: 4/30/2008 Time: 7:15:35 AM User: N/A Computer: SERVER Description: A transient failure has occurred. The problem may resolve itself in awhile. The service will retry in 56 seconds. Diagnostic information: Active Directory operation failed on server.hagelaw.local. This error could have been caused by user input or by the Active Directory server being unavailable. Please retry at a later time. Additional information: Active directory response: The operation was aborted because the client side timeout limit was exceeded. . Microsoft.Exchange.Data.Directory.ADPossibleOperationException: Active Directory operation failed on server.hagelaw.local. This error could have been caused by user input or by the Active Directory server being unavailable. Please retry at a later time. Additional information: Active directory response: The operation was aborted because the client side timeout limit was exceeded. . ---> System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded. at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation) at Microsoft.Exchange.Data.Directory.ADSession.Find(ADObjectId rootId, String optionalBaseDN, ADObjectId readId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties, CreateObjectDelegate objectCreator, CreateObjectsDelegate arrayCreator) --- End of inner exception stack trace --- at Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer) at Microsoft.Exchange.Data.Directory.ADSession.Find(ADObjectId rootId, String optionalBaseDN, ADObjectId readId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties, CreateObjectDelegate objectCreator, CreateObjectsDelegate arrayCreator) at Microsoft.Exchange.Data.Directory.ADSession.Find(ADObjectId rootId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties, CreateObjectDelegate objectCtor, CreateObjectsDelegate arrayCtor) at Microsoft.Exchange.Data.Directory.ADSession.Find[TResult](ADObjectId rootId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties) at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.Find[TResult](ADObjectId rootId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults) at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.FindServerByFqdn(String serverFqdn) at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.FindLocalServer() at Microsoft.Exchange.Servicelets.SystemAttendantMailbox.Servicelet.Work() For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. --------------------------------------------------------------------------- Event Type: Error Event Source: VSS Event Category: None Event ID: 7001 Date: 4/30/2008 Time: 7:15:35 AM User: N/A Computer: SERVER Description: VssAdmin: Unable to create a shadow copy: Catastrophic failure Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow /AutoRetry=5 /For=\\?\Volume{f2440b14-f04b-11dc-8efa-806e6f6e6963}\'. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 2d 20 43 6f 64 65 3a 20 - Code: 0008: 41 44 4d 56 41 44 4d 43 ADMVADMC 0010: 30 30 30 30 30 38 33 37 00000837 0018: 2d 20 43 61 6c 6c 3a 20 - Call: 0020: 41 44 4d 56 41 44 4d 43 ADMVADMC 0028: 30 30 30 30 30 37 36 38 00000768 0030: 2d 20 50 49 44 3a 20 20 - PID: 0038: 30 30 30 30 36 37 31 36 00006716 0040: 2d 20 54 49 44 3a 20 20 - TID: 0048: 30 30 30 30 36 39 38 30 00006980 0050: 2d 20 43 4d 44 3a 20 20 - CMD: 0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO 0060: 57 53 5c 73 79 73 74 65 WS\syste 0068: 6d 33 32 5c 76 73 73 61 m32\vssa 0070: 64 6d 69 6e 2e 65 78 65 dmin.exe 0078: 20 43 72 65 61 74 65 20 Create 0080: 53 68 61 64 6f 77 20 2f Shadow / 0088: 41 75 74 6f 52 65 74 72 AutoRetr 0090: 79 3d 35 20 2f 46 6f 72 y=5 /For 0098: 3d 5c 5c 3f 5c 56 6f 6c =\\?\Vol 00a0: 75 6d 65 7b 66 32 34 34 ume{f244 00a8: 30 62 31 34 2d 66 30 34 0b14-f04 00b0: 62 2d 31 31 64 63 2d 38 b-11dc-8 00b8: 65 66 61 2d 38 30 36 65 efa-806e 00c0: 36 66 36 65 36 39 36 33 6f6e6963 00c8: 7d 5c 20 20 20 20 20 20 }\ 00d0: 2d 20 55 73 65 72 3a 20 - User: 00d8: 4e 54 20 41 55 54 48 4f NT AUTHO 00e0: 52 49 54 59 5c 53 59 53 RITY\SYS 00e8: 54 45 4d 20 20 20 20 20 TEM 00f0: 2d 20 53 69 64 3a 20 20 - Sid: 00f8: 53 2d 31 2d 35 2d 31 38 S-1-5-18 ---------------------------------------------------------------- After this string of events, event logs return to normal. This is the same string of events that are logged after every failed snapshot. After a failed snapshot, I checked the writer status and they're all normal. None say failed. Any ideas on what to do? Thanks. Tag: Pemission on Files/Folders Tag: 112216
  - 8
    - 3TB Raid, one 2048GB partition, will not let me create a 900GB one? Hi there. A year ago or so we built this monster server for files with a RAID-5 array it has just about 3TB of disk in it total. I just noticed today in Disk Management that we actually only partitioned 2048GB of it (I guess the limit for a single filesystem?) and that there is almost a 900GB 'unallocated space' block sitting there unused. Windows will not allow me to create an additional partition in that 900GB space. Any advice? -Drew Tag: Pemission on Files/Folders Tag: 112213
  - 9
    - important case study for a client i have a client with 1 main branch and 6 other branches. on the main branch he has: windows server, AD, exchange, ISA, SQL on the branches he has: windows server, AD, ISA just lately he has installed a WAN connection between all branches, what he wants now is: 1- let all branches receive internet through main branch only. 2- make all branches connected to the exchange in the main branch. 3- create isa array between sites. 4- all branches should be controlled, managed and monitored from the main server. what do you recommand to solve this problem? what do i need to do ? some branches has more than 76 computers, so i can't start everything from zero. thanks in advance Sensay Tag: Pemission on Files/Folders Tag: 112209
  - 10
    - Upgrade server 2003 hardware I need to upgrade the lone server, running AD, DNS and DHCP, in the domain to a completely new box. I would like to do it a seemlesly as possible and wanted input regarding suggested steps for doing the migration and any pitfalls I should avoid. Is it as simple as installing Server 2003, making the device a member server, synchronizing the AD and DHCP, demoting the old server, promoting the new server and then copying the file structure? Any help will be greatly appreciated. Dave Tag: Pemission on Files/Folders Tag: 112201
  - 11
    - Modify registry via Group Policy I want to modify the registry (HK_Current_User) on my WinXP clients to use a specific font in Outlook. I think the best way to do the modifcation is in GP. Where in GP do I configure to deliver the registry modification? I have found several places that seem like it could be done. Of the ones I have tested so far, none of them work. I have windows 2003 servers. Tag: Pemission on Files/Folders Tag: 112200
  - 12
    - AD Site Links - What Ports? Hi, Soon we are setting up a remote office. I have played around with Site Links on the internal network, and also currently use it live for DFS File Servers, and setting their priority (Primary and Redundant etc.) via Site costing. But I have never used this for external site linking. What ports are required on the ADSL modems to allow connectivity with each server? We are not creating any new domains, just adding a additional domain controller in the new office then linking it. Thanks in advance. -- Chris White United Kingdom Tag: Pemission on Files/Folders Tag: 112193
  - 13
    - Shared Fax Cover Sheet We have updated our shared fax coversheet, and searched for all .cov files located on our Windows 2003 server, however when ever a user goes to send a fax it is still pulling up the old fax cover sheet. How can we get the coversheet updated for all users? Thanks, William --------------= Posted using GrabIt =---------------- ------= Binary Usenet downloading made easy =--------- -= Get GrabIt for free from http://www.shemes.com/ =- Tag: Pemission on Files/Folders Tag: 112185
  - 14
    - Language pack for Windows 2003 Server's Hi, I am curious to know whether the language packs comes by default in Windows or is there any additional package or license to be purchased. I am rounding up the search engines and not able to get clear information over this. Thanks in Advance Tag: Pemission on Files/Folders Tag: 112183
  - 15
    - set up used 2003 server on new network? I'm installing a used 2003 server for a totally new domain, and I'd prefer not to have to do a full reinstall of 2003. Obviously I don't care about losing any AD or Exchange settings, so is there a simple way I can do this? Do I just uninstall & reinstall AD? Tag: Pemission on Files/Folders Tag: 112181
  - 16
    - Print Server Issue I have an odd issue. I have a Windows 2003 server I am using as a small print server. When I connect to it using \\server and then choose Printers and Faxes the window hangs for several minutes then finally populates. I do not have any issues printing from it just connecting to it remotely. Any idea what could be causing this? Thanks for any help. -- kman ------------------------------------------------------------------------ kman's Profile: http://forums.techarena.in/member.php?userid=47723 View this thread: http://forums.techarena.in/showthread.php?t=959184 http://forums.techarena.in Tag: Pemission on Files/Folders Tag: 112174
  - 17
    - KMS - Does it require Non-virtual 08 Servers to count towards the Does the KMS service only count non-virtual machines running Server 2008 towards the initial 5? I am trying to roll out 08 Std and am running into problems with getting my count # to go up. I think I have narrowed it down to actual servers vs virtual machines. I have done 7 upgrades with 3 being actual and that is the number the KMS Server is showing as its current count: 3. I figured that it would be 7 by now, but its not. I didn't see it anywhere that says specifically that the count is only on real servers... Tag: Pemission on Files/Folders Tag: 112169
  - 18
    - Windows 2008 FTPS Virtual Directory Good Day, I am trying to setup a ssl ftp site for secure communication to our bank. My initial setup was to a local directory and that worked fine, However, for the production environment I need to utilize a virtual directory on another server. I setup a file share on the destination server to recieve the files and gave permissions to the folder to my ftp client. I set the authentication to the directory to the specified users (from pass though auth) When I test the mapping and permissions everything appears to be fine. When I try to connect however, I get "530 User cannot log in, home directory inaccessible" I could really use some assistance in troubleshooting this issue. Thanks -- Steve Tag: Pemission on Files/Folders Tag: 112167
  - 19
    - XP sp3 msi through GP is there a way to push XP sp3 from a 2003 server? Tag: Pemission on Files/Folders Tag: 112162
  - 20
    - Domain server in a unique server Why is it recommend to separate the domain server from the other applications?? Performance??? Tag: Pemission on Files/Folders Tag: 112160
  - 21
    - Operating System Chip I think it is a good idea to develop operating system on the electronic chip this idea will - solve historical error in building the PC computer and it will Limit the illegal copying of the operating system . - reduce the danger of viruses that strike operating systems and reduce the time needed to load the operating system . To clarify my idea in detail We should take these things in mind - operating system is part from computer - We can divide the operating system (the basics of data, identification data and update information) - There is no important reason to booting computer from Hard Disk. Now what are the new idea ? - Idea is to develop a system operating on the electronic segment, such as USB Flash or PCI segment or any other electronic slide - And this Chip is divided into two parts or more exists in the first section main programmes and basic data in the operating system in Section II identification data and any updating in the operating system - The computer will be boot from this Chip (first part is for readers only) - The operating system will use existing data in the second part could also use part from hard disk - In the end there will be no way to use illegal copies of the operating system only produces segments of the operating system and this will not only available For large companies. And when it can pursue this companies - It will also reduce the risk of viruses ----- I hope that the my suggestion is good also i hope that Microsoft examine carefully the my suggestion ... In the end I hope vote for this proposal I hope to benefit from . Thanks for all......... Signature .. Ahmed Fathy Alsharawy ( Egypt ) ---------------- This post is a suggestion for Microsoft, and Microsoft responds to the suggestions with the most votes. To vote for this suggestion, click the "I Agree" button in the message pane. If you do not see the button, follow this link to open the suggestion in the Microsoft Web-based Newsreader and then click "I Agree" in the message pane. http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?mid=7521be35-4b86-4076-be01-b5f7da4a9a5a&dg=microsoft.public.windows.server.general Tag: Pemission on Files/Folders Tag: 112159
  - 22
    - NTPClient on DC fails to contact time source (W2K3 R2 64-bit) Our W2K3 R2 64-bit DC has been up and running for some time, and getting time updates regularly. Last week, it started a spate of failed attempts which have become rather chronic. First, I followed advice to set the time source: w32tm /config /manualpeerlist:time.nist.gov,0x8 /syncfromflags:MANUAL net stop w32time net start w32time w32tm /resync Had no luck. I verified that TCP & UDP ports 123 were available to the server and tested successfully with: w32tm /monitor /computers:time.nist.gov I also re-registered the service with: net stop w32time w32tm /unregister w32tm /register net start w32time Also to no avail. I did find a hotfix related (830092), but it appears it is only for the 32-bit version. Anything else I can try? Tag: Pemission on Files/Folders Tag: 112156
  - 23
    - SBS Server 2003 Random Freezes We have a Dell Poweredge 2900 server running SBS Server 2003. Randomly client computers will freeze for a few seconds (3-10) when doing anything from opening a program, to trying to open a file in Excel. Anything that requires the network. Dell has replaced the motherboard twice and all the ram with no solution. What would you suggest to look at next? There are no errors in the event log. Tag: Pemission on Files/Folders Tag: 112148
  - 24
    - how to generate a daily report for logon/logoff time? I need a report to show users' logon/logoff time each day. I need this for one office now. The users are under a few different OUs, due to GPO. How can I do that? GUI or script? Thanks. Tag: Pemission on Files/Folders Tag: 112146
  - 25
    - View all folders unchecked for "allow inheritable permissions" I need to pull a listing of all folders on a file server that has the "Allow inheritable permissions from parent to propagate to this object" check box cleared. Does anyone have any suggestions? Thanks! Tag: Pemission on Files/Folders Tag: 112143
- Next
  - 1
    - is there a newer version of srvinstw.exe for Win2k3? The Srvinstw.exe tool is the graphical user interface (GUI) version used to create remote services. I got it from Windows 2000 resource kit. Just wondering if there is a newer version or replacement for win2k3? Thanks. Tag: Pemission on Files/Folders Tag: 112141
  - 2
    - Is it wrong to create security groups on mydomain/Computers container? Hi all, I'm creating security groups of computers to assign different domain level GPOs to each of them. In the past I created such groups in Active Directory Users and Computers in mydomain/Computers instead of mydomain/Users. In the past it looked to me more natural. But I always wondered why Microsoft creates groups of computers in mydomain/Users? For example in my W2K3 domain controller "RAS and IAS Servers" , "Domain Computers", "Domain Controllers" groups are created in mydomain/Users. Is it any problems with creating security groups in mydomain/Computers? Does not it works the same if they were created in mydomain/Users? Thanks in advance Sammy Tag: Pemission on Files/Folders Tag: 112140
  - 3
    - Monitor if a port is being used Hi, is there a tool which allows be to monitor and log whether a port has been used on a Windows 2003 server? We have opened up a port on our remote firewall to a server and just want to log the access on this port. Our firewall can't do this :( Tag: Pemission on Files/Folders Tag: 112139
  - 4
    - WSUS client stops talking to server On a 100 device NT4 domain - with a 2003 based WSUS 2 server talking to W2K clients. A few workstations just decided not to talk to the server any more. Their WSUS log has an entry saying 2008-04-29 14:13:34:226 1200 6e4 Misc WARNING: Error: 0x80092026 when verifying trust for C:\WINNT\SoftwareDistribution\SelfUpdate\Default\wuident.cab From that point on, even if I re-install the WSUS client it registeres with the server but then will not talk to it to find out what updates it needs. This affects approx 10% of my workstations, each at slightly different update stages, and I am at a loss on how to get these talking again. 50% plus of my devices have ALL updates downloaded the remaining 40% are nearly there and this 10% are miles away and doing nothing. The WSUS client diag program gives pass on all but three entries which are NONE (for winhttp local machine proxy and bypass proxy and autoconfig URL proxy) Anyone else seen this? I have done the usual, detcect now etc etc and deleted registry entries but nothing -- Dave B Tag: Pemission on Files/Folders Tag: 112137
  - 5
    - CMOS (non-volatile harware) clock sycronisation I have a number of Windows member servers in an AD forrest and in steady state w32time keeps there clocks approximately right (+-200ms). However when they are rebooted their clocks are (for a short time) all over the place (for 10-30 minutes) because, it would appear, that nothng is keeping the CMOS (non-volatile harware) clock in sycronisation with the Windows clock. On Linux I'd just create a cron job to do "clock -uw" periodically but I can't find any equivalent on Windows. Please note: I'm asking how to get Windows to keep the *CMOS* clock synced so that when servers are rebooted their clocks start out *approximately* right *before* w32time manages to syncronise to a time server. Tag: Pemission on Files/Folders Tag: 112136
  - 6
    - Adding Server 2008 DC to 2003 Domain New to server 2008. I have an existing 2003 domain with 2 DCs. Can I simply go thorough the 2008 setup with a new machine and make it a 3rd DC? Any special pre-installation steps? Also, what about adding it to a 2000 domain (with two DCs)? I know about "adprep" being required when upgrading from 2000 to 2003. But what about simply adding a 2008 DC to an existing 2000 domain? Advice, links appreciated. Thanks, Frank Tag: Pemission on Files/Folders Tag: 112133
  - 7
    - Server 2008 x64 Fax Server with x32 XP Clients I have a 64 bit Windows Server 2008 Standard server configured with the fax server role. I can't seem to figure out how to add x32 drivers so I can "print" to the shared fax device on the server from my 32 bit XP clients. I can send a fax from the server without a problem. When I try to add the x32 drivers to the shared fax printer on the server, I'm prompted to "please provide a printer driver". I've tried pointing to 32 bit XP media, 64 bit Server 2008 media, tried loading the driver from an XP and Vista PC via the server share, but it doesn't accept any of these paths. From my XP PC, I can browse to the share on the server & connect the fax print device. It appears on my XP PC as "Fax on %servername%". I can open the fax console on my XP PC & see jobs that are in the outbox (submitted from the server). When I attempt to create a new fax from the XP fax console, I get an hourglass for a brief moment, and then nothing. If I try & print to the fax "print" driver from the XP PC, I get nothing. I believe with the x32 W2K3 fax server I worked with a wizard came up asking for the fax number, select a cover page, etc. I'm assuming this is because I don't have the x32 fax driver loaded on the server. Any ideas on how I can add this? Thanks in advance for your assistance. Tag: Pemission on Files/Folders Tag: 112129
  - 8
    - USB2 issues with Win 2000 Hi, I've got a Windows 2000 server that does not play well with USB2 devices. It will go as far as mounting a USB2 drive, but if you try to read or write to it more than just a little bit, it has issues. If you do a quick format on it, it wil fail. Any ideas what is causing this? How can I reload the USB2 drivers somehow? I have another Win2k SP4 that works great with USB2 drives... Thanks, Alan Tag: Pemission on Files/Folders Tag: 112126
  - 9
    - Internal network remote desktop control Dear all, I have a Windows 2003 server network with over 100 pc's on and wish to use remote desktop to support them but not by logging the user off. Suggestions please. Cheers Adam Tag: Pemission on Files/Folders Tag: 112124
  - 10
    - VPN server one nic Hi, We have all our servers behind the firewall, all clients are on the other side of the firewall and are secured from the internet by additional firewall which blocks Windows file sharing etc. We want make posible for our coworkers to access our fileservers and other services from home. Can we configure server to be vpn server with one nic card? We will open than ports in the firewall only to this server. What port should we open than? MarcusB Tag: Pemission on Files/Folders Tag: 112120
  - 11
    - Migrating local user accounts between two Windows Server 2003 mach Hi - I hope this is the right place to ask this. I need to migrate applications between two web servers. Currently there are a large number of local computer accounts on the old machine. I want to transfer all or most of those (with passwords and groups) to the new machine. I've struggled to find out how to do it. There are lots of tools and advice for AD migration, but I've not found anything for Windows 2003 single machines Can anyone give me some pointers? Cheers Iain Tag: Pemission on Files/Folders Tag: 112113
  - 12
    - Performance counters Does anyone know what are the recommended values for performance counters in Windows system. I'm not talking about the most obvious ones like Disk Time, Processor Time or AverageDiskQL. I tried googling for it but couldn't find any source that would give me a list with recommended values Thanks yaro Tag: Pemission on Files/Folders Tag: 112112
  - 13
    - Dualbooting Vista Windows 2008 Hi Currently I have Vista installed on my main computer, but I'm about to do a dualboot installation with Windows 2008 Server on a dedicated drive. Are there any issues I need to be aware of going into this or is this a straight forward process? Currently using Vista Ulitmate 32bit, and installing Windows 2008 server 64bit on dedicated drive. /A. Tag: Pemission on Files/Folders Tag: 112109
  - 14
    - Making a user Local Admin on domain computers Hi Is there a way to make a domain user local admin on the domain computers. I have a trainee at work and I would only like to give his account local admin right on the domain computers. It would be a bit tedious to give him local admin rights manually on 170 workstations. Thanks in advance /Nick PS. This is a Server 2003 domain Tag: Pemission on Files/Folders Tag: 112107
  - 15
    - REAL: Windows Vista/7 Free DVD (Limited Time) w/ free Alienware www.ubersite.com - Future of media What do you think of the site. Will you join? What do you want to see in the future? You can get windows free at www.linux.com -- Users of Ubersite Tag: Pemission on Files/Folders Tag: 112098
  - 16
    - domain logon issue Hello. I am having problem on a member server running Windows Server 2003 SP1. It took 30 minutes to log on to the domain after a reboot. The server seemed to be forever hanging at "applying settings..." before it finally connected to the domain. I found a lot of errors with event ID 1053, source: userenv. "Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted.) Group Policy processing aborted." ____________________ Running netdiag.ext shows some errors: Testing trust relationships... Failed Testing Kerberos authentication... Failed DC discovery test. . . . . . . . . : Failed Find DC in domain 'MyDomainName': [FATAL] Cannot find DC in domain 'MyDomainName'. [ERROR_NO_SUCH_DOMAIN] DC list test . . . . . . . . . . . : Failed 'MyDomainName': Cannot find DC to get DC list from [test skipped]. List of DCs in Domain 'MyDomainName': Trust relationship test. . . . . . : Failed Test to ensure DomainSid of domain 'MyDomainName' is correct. 'MyDomainName': Cannot find DC to get DC list from [test skipped]. [FATAL] Secure channel to domain 'MyDomainName' is broken. [ERROR_NO_LOGON_SERVERS] Kerberos test. . . . . . . . . . . : Skipped 'MyDomainName': Cannot find DC to get DC list from [test skipped]. LDAP test. . . . . . . . . . . . . : Failed Cannot find DC to run LDAP tests on. The error occurred was: The specified domain either does not exist or could not be contacted. Find DC in domain 'MyDomainName': [WARNING] Cannot find DC in domain 'MyDomainName'. [ERROR_NO_SUCH_DOMAIN] ________________ MS Help says: To verify that the domain controller can be contacted through Domain Name System (DNS), try to access \\mydomain.com\sysvol\mydomain.com, where mydomain.com is the fully qualified DNS name of your domain. This test also failed. ________________ I tried to connect to this server from a couple of client computers. One client is ok. The other client got the following: The Mapped network drive could not be created because the following error has occurred: The specified network name is no longer available. When I tried to connect to it via UNC, it also errored out: There are currently no logon servers available to service the logon request. Sorry for the long post. Thanks for your help. TL Tag: Pemission on Files/Folders Tag: 112094
  - 17
    - Server 2008 thin client requirement - Advice Hi, Colleague of mine wants to remove laptops from his organisation and go with thin clients. No probs there. He has only 1 physical server, and would like to upgrade to windows 2008 at the same time. Is 2008 running DC, and terminal services a supported configuration ? Would need to be app mode as there will be 5 clients.... I could stick a VM in Hyper-V I guess for the TS reqwuirement, just want to get people's view on the best solution. Thanks in advance. Tag: Pemission on Files/Folders Tag: 112093
  - 18
    - Forcing "List in the directory" for a printer? At my office, we are currently doing some spring cleaning on our printers, rearranging some units, tweaking installations, etc. We have a label printer on the network and it's currently being shared by one of the workstations. All this is fine, and others can use the "Browse" feature to find it and access it through that machine. What bothers me is there is no "List in the directory" check box alongside the "Sharing" settings. It's simply not there. It would be useful if uses could go one place (Active Directory on our SBS 2003 server) to add printers instead of digging through two different interfaces. If I add the printer through the original workstation, however, I *do* get a "List in the directory". box. Can somebody tell me what controls "List in the directory"? Windows has so many hidden options in the Registry, I was thinking it could be as simple as adding a new value or flipping something from 0 to 1. I did find where the check box setting would be stored, at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers\ in the Attributes value for the specific printer, but setting bit 14 on and restarting the computer didn't force an entry in Active Directory. I realize I can also manually add a printer in Active Directory Users & Computers, but am not sure I can direct it to that particular workstation for the drivers. I've also browsed AD manually and have an idea which settings are needed and where, and might even try doing this manually. But what is the easiest way to accomplish this? Is the missing check box caused by an actual .dll or .exe ? Could the printer just be installed wrong? Thanks for any suggestions. Todd Tag: Pemission on Files/Folders Tag: 112092
  - 19
    - Cheapest price on Windows Server 2008? What is the cheapest price anybody has found for Windows Server 2008 Standard? US or UK. Thanks ss. Tag: Pemission on Files/Folders Tag: 112088
  - 20
    - No login window appears after server running for some time New IBM xSeries 3400 server running Windows 2003 R2 with all of the latest patches. Member server in an SBS2003 domain. Since going in the server has worked fine except after some period of time, we go to the console and the screen is totally dark grey. Pressing Ctl+Alt+Del does nothing -- no login prompt appears. Similarly, any attempt to connect via RDP doesn't give the login...just the grey background. This only happens after the server has been running for some time. We'll force a restart of the server and all will be fine for a day or longer (the login appears at the console and is available through RDP). Then, for no discernible reason, the problem recurs. Nothing strange appears in the event log. The only thing different between this server and other similar boxes that we've installed is the version of Pervasive SQL. This box is running version 10, whereas prior installations were version 9 or older. Pervasive professes no knowledge of the problem. I'm lost as to how to troubleshoot. -- Doug Tag: Pemission on Files/Folders Tag: 112087
  - 21
    - Remote event viewer access without being a server admin? Hi, I want to give a set of developers access to view a Window 2003's event viewer logs remotely using an MMC snap-in without granting them administrator access to the server? Does anyone know how/where I grant those specific rights? Thanks, Paul Tag: Pemission on Files/Folders Tag: 112081
  - 22
    - Group Policy and the Legal Message For whatever reason, when I apply the message in GPMC the computers I applied it to don't ever display the legal message before login, or at all. I have the option enabled in my GPO, and the computer is also in the OU, and I also added the computer to the list of stuff it affects in the GPMC console, but still no results even after a restart. What am I doing wrong? Tag: Pemission on Files/Folders Tag: 112073
  - 23
    - SCSI Enclosure Device in Windows 2008 Hi I have a storage array that supports SCSI Enclosure Services on LUN ID 254. In Windows 2008 this appears as Generic SCSI Enclodure Device under System Devices in Device Manager. I need to send SCSI inquiry on this device but I am not able to figure out which device name I should be using. I initially thought this will appear as another \\.\PHYSICALDRIVEn but it did not. How do I find out the device name for this device? Thanks jas123 Tag: Pemission on Files/Folders Tag: 112071
  - 24
    - Netmeeting Transition We want to transition our netmeeting.companyX.com server from Windows 2000 to 2003. What is the best way to do this? There are ILS locator settings, but I think if we change the IP in DNS to the new server..we may be fine (as long as it is installed and working on Win2003). Any help is appreciated! Steve Tag: Pemission on Files/Folders Tag: 112067
  - 25
    - Q While discussing the development of a new backup strategy for your company, a colleague uses the term TARGET.What is she referring to? The system hosting the tape drive? The backup deivce? The data object to be backed up? The media in the backup device? Tag: Pemission on Files/Folders Tag: 112058

Using a command line tool such as XCACLS.exe, XCACLS.vbs, SetACL or a similar
tool, can we change the permissions so one user/group can only list files but
not read them (to see how big the files are)...Effectively, list on all
folders and contents but no read access...Is that possible perhaps with a
combination of allow/revoke?

Top

Re: Pemission on Files/Folders by Meinolf

Meinolf
Fri May 02 16:00:19 PDT 2008

Hello GovAdminGuy,

Here you have an overview how to use xcacls:
http://support.microsoft.com/kb/825751

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Using a command line tool such as XCACLS.exe, XCACLS.vbs, SetACL or a
> similar tool, can we change the permissions so one user/group can only
> list files but not read them (to see how big the files
> are)...Effectively, list on all folders and contents but no read
> access...Is that possible perhaps with a combination of allow/revoke?
>

Top