I am having an issue taking ownership of several folders on a Server 2012 R2 box. I have used Domain Admin account, local Administrator account, icacls, takeown, UAC is turned off and am still getting access denied errors.
Any help would be appreciated.
Appears that the SMTP settings are not being set correctly via FSRM. Using 2012 R2
I get the below error in the event log when I try to configure them (via options/email notifications tab). If I click the 'send test email' button I get the test email which tells me my SMTP server is fine. Seems like I'm getting an access denied message whenever I try to save the SMTP settings. I already tried restarting the server as well as running the FSRM console using the 'run as admin' command.
Source: SRMSVC
EventID: 16401
The following access-denied assistance error configuration was modified:
Error: 5
Enabled: FALSE
Client Display Flags:
Error Message: This can occur if you don't have permission to access the file or folder, or if your computer doesn't meet security policy requirements.
Message from the administrator of the file server:
- Ask your manager if you're in the right security groups
- For troubleshooting information, go to <a href="http://support.microsoft.com">Microsoft Support</a>
If you need more help, click Request assistance.
Email Flags: Put data owner on TO line, Put administrator on TO line, Include device claims, Include user information, Generate an event log when sending mail
Additional To Emails:
Email Message: For general support, contact: [Provide email address]
For share permissions support, contact: [Provide email address]
Say I have the domain 'contoso.com', which is resolved by a domain controller (Controller). I have a share (Share) on Controller with everyone permissions (full control, just to test).
Now I can access Share via '\\Controller\Share' or '\\Controller.contoso.com\Share'. This is fine.
I can also access Share via '\\contoso.com\Share'. This is not fine, as follows.
If I try to e.g. create a new folder, I get 'Could not find this item. This is no longer located in contoso.com.'
Why is Share listed in the shares of contoso.com if it isn't located there?
Hello All,
I need to migrate files from a Windows 2008 Server to a Windows 2012 R2 Server. In the past I was using File Server Migration Toolkit 1.2 with great success. So I was thinking to use this tool again.
Unfortunately in the log of FISMT I see a lot "Error 5 Access denied" errors. I have installed the FISMT on the target server (Win2012 R2) and I'm logged in with a domain Account which has also administrator right on the source server. A simple file copying using Windows Explorer works without a problem.
Any idea what the issue is?
Thanks,
Edy
Edy from Switzerland
We're having an odd problem with DFS.
I've got 4 domain controllers running (3 server 2008, 1 server 2003). The DFS root has existed for a long time and the 2008 servers "grew into" the DFS structure when they were promoted as domain controllers and the older server 2003 DC's were demoted. We now have times when clients that map the DFS root as a drive see the mapped drive as empty. The behavior seems random--some clients are affected, others are not. I have seen the client behavior on XP, Vista, 7 and server 2003. When you go to the domain controllers and look in the DFS management tool, everything looks wonderful.
Any ideas?
Hi.
There was anoying feature (some call it bug) when Windows 2008 R2 UAC blocks folder acces if You are member of local Administrators group and NTFS ACL is allowing only Adminitrators and other users /groups, but not You. There was possible to avoid this via turning off UAC and rebooting computer.
Now, with Windows server 2012 (RTM, VL) problem is worse. You can turn off UAC (and reboot,i hope it does full reboot) but nothing changes. Still You are prompted
"You don't currently have permissions to access this folder. Click Continue to permanently get access to this folder. Continue(with Shield mark) Cancel"
And if i click continue, my account is added to folder ACL. Havent found any way to bypass it.
This is idiotic. If we have multiple admisnitrators every admin SID is added (at some point). And people are coming and leaving - and ACE's remain. And btw - how it is related with "Use groups for granting permissions" best practice ? Only way is to create "File Administrators group" , make administrators member of this group and add this group to ACL. Lot, of lots of pointless work.
Dear MS - how should we resolve it? Any secret policy/registry key, hotfix coming ?
I am using the following settings within FSRM to run a PS script that will generate a pop-up to users.
The script runs successfully when using syntax: AfUserNotify-gen.ps1 DOMAIN/USERNAME
however FSRM fails to use the variable [Source Io Owner] when running and does not generate the csv file.
any ideas? see scripts below.
FSRM settings:
AFUserNotify-gen.ps1
param($strUser)
if(!(test-path notify.csv)){copy notify-template.csv notify.csv}
#----------------------------------------------------------------------------------------------------
# Test for modules and import if necessary
#----------------------------------------------------------------------------------------------------
$blnAD = $false
$blnFSRM = $false
$moduleList = Get-Module | select Name
foreach ($module in $moduleList) {
if ($module -eq "ActiveDirectory") {
$blnAD = $true
}
}
if (!$blnAD) {
Import-Module "ActiveDirectory"
}
#----------------------------------------------------------------------------------------------------
# Obtain user pc's from extensionattributes
#----------------------------------------------------------------------------------------------------
$strSimpleUser = ($strUser -split '\\')[1]
$User = get-aduser $strSimpleUser -properties *
$pc1 = ($user.extensionattribute1 -split ' ')[0]
$pc2 = ($user.extensionattribute2 -split ' ')[0]
$pc3 = ($user.extensionattribute3 -split ' ')[0]
$pc4 = ($user.extensionattribute4 -split ' ')[0]
$pc5 = ($user.extensionattribute5 -split ' ')[0]
$PCArray = @($pc1,$pc2,$pc3,$pc4,$pc5)
#----------------------------------------------------------------------------------------------------
# MAIN
#----------------------------------------------------------------------------------------------------
foreach($pc in $PCArray){
add-content notify.csv "$strsimpleuser,$pc"
}notify.cmd
Powershell.exe set-executionpolicy remotesigned -File"C:\scripts\powershell\quotas\NewNotify\AFUserNotify-gen.ps1 %1"
NETCRAMMER
(My question is not really only related to "Windows Server/File Services and Storage", but that's the nearest choice I could find.)
I came across this article (http://blogs.technet.com/b/josebda/archive/2012/06/06/windows-server-2012-which-version-of-the-smb-protocol-smb-1-0-smb-2-0-smb-2-1-or-smb-3-0-you-are-using-on-your-file-server.aspx) which is quite good and detailed. But I have a doubt on one thing: SMB and CIFS.
The article says that CIFS is "The ancient version of SMB...", but I don't think so.
I would rather think it's the opposite, ie CIFS is a newer version of SMB (or maybe just a newer name of SMB).
For example, in this Microsoft KB (http://support.microsoft.com/kb/281308/en-us), look atMORE INFORMATION section, it's written that "To communicate over the SMB2.0 protocol, or CIFS (Common Internet File System), you ......" That means SMB2.0 is also called CIFS.
So, CIFS is old than or newer than SMB?
Here is what I am trying to do
Searched high and low but cannot find an answer for it
I need to map a NFS drive (from a Linux box) to a windows server 2008 and from the Windows Server I need to share this drive to several users within Active Directory using Windows 7 PC‘s
I have no problem creating the nfs map to the server, but it will not give me (as you know I am sure) the share option for windows. Therefore, I cannot create a map to the user.
So I tried to create a local folder and used SyncToy to move the files between the NFS share and the Local share via task scheduler (which would work ) if it would not create a .dat file on the Linux site , Linux cant process this file and tosses errors.
Does anyone know of a way to do this?
Thank you
Martin Strasser Carpe Diem
Hello,
We have a client who had data corruption on a large scale (virus) and did not have an active backup. Shadow Copy was enabled, but failed when attempting to restore using built-in Shadow Copy recovery. Folder and File level recovery failed.
We were able to use a tool called Z-VSSCopy to restore file-by-file, but as that was underway (days) the shadow copy service continued to run and eventually ran out of space, overwriting the shadow copies we were restoring from.
I know, I should have modified the schedule or at least increased the available size for shadow copies, but that is a lesson learned too late.
In viewing the shadow copy data in the \System File Information folder, I saw that the copies were in fact deleted, but I noticed two files that were from a month ago.
Z-VSSCopy and built-in are not recognizing them (or vssadmin) but I can see the data is still there. One is 300+ MB and the other 100+ MB.
Is there a way I can force recovery using data contained in these files, or are they lost?
I'm currently running a Data Recovery program in hopes I can recovery anything, but since there has been significant writing on this disk since the incidence, I have little hope.
Any help is GREATLY appreciated. Thanks.
Hi everyone!
I have this configuration in my test environment:
Windows Server 2012 R2 - Server for NFS role installed. Folder named Share2 shared out with NFS (Open to everyone, including anonymous access). Folder is populated with random .txt files.
Client side - Windows 8 Enterprise with Client for NFS installed. Mount Share2 as the O:. Open a .txt file successfully. Also have a ubuntu server that can mount and access text files without a problem.
Back on the server, i run these cmdlets:
Neither cmdlet returns any data. I'm basically trying to figure out the active NFS sessions with powershell. (Yes, i know showmount -a still works. but I want to know what these cmdlets are for)
Thanks,
Charles
This posting is provided AS IS with no warranties,and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread
GY
I have recently upgraded a clients servers to Windows Server 2012 & since doing so have lost the ability to scan to folder.
Both servers are domain controllers and previously on a 2008 domain controller I would have had to make the following change to allow scan to folder:
Administrative Tools
Server Manager
Features
Group Policy Manager
Forest: ...
Default Domain Policy
Computer configuration
Policies
Windows Settings
Security Settings
Local Policies
Security Options
Microsoft Network Server: Digitally Sign Communications (Always)
- Define This Policy
- Disabled
However I have applied this to the Windows 2012 server but am still unable to scan, possibly due to added layers of security in server 2012. The error on the scanner is Authentication with the destination has failed check settings.
I have also tried the following at the server:
Policies -> Security Policies
Change Network Security: LAN Manager authentication level to: Send LM & NTLM - Use NTLMv2 session security if negotiated.
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients and uncheck the require 128 bit.
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers and uncheck the require 128 bit
I have created a user account on the server for the ricoh and set this in the settiings of the Ricoh and verified everything is correct.
Are there any other things I have missed?
Hello,
I have one customer that wants to use Storage Server as provider for NFS Shares for his VMware environment. Now he asked, if the Storage Server integrates into vCenter/ESX Hosts via VAAI?
I did not find any information about this with internet search.
Does anyone knows something about it?
Kind regards, David
Hello
Currently we are planning to deploy Windows Server 2012 R2 DFS Servers, the domain and forest functional levels in the environment are set to Windows 2003. The schema version is Windows 2003 R2.
We want to validate if this will be a limit in order to configure a domain-based DFS namespace.
As far as we can found information, for Windows 2008 DFS replication the requeirements are that the domain level must be Windows 2008 and the forest functional level must be Windows 2003:
http://technet.microsoft.com/en-us/library/cc732863(v=ws.10).aspx
Also for Windows 2012 the DFS requirements are that the schema version must be at least Windows 2003 R2:
http://technet.microsoft.com/en-us/library/jj127250.aspx
So, the question is if we can configure a domain-based DFS namespace and replication without problems with the current configuration?
Regards.
Cristian
Regards. Cristian V.
Hi,
In the last couple of weeks I've migrated a number of fileshares:
1. From a physical FileServer1 (Win 2008) to a VM FileServer2 (win 2012 R2).
2. Fileserver1 was then rebuilt as HypServer1 and a new VM was created with the same name as the old physical FileServer1.
3. Files have now been moved to FileServer1 (win 2012 R2) from FileServer2.
Everything is fine on the LAN, but I cannot access the fileshares from any remote offices, only on the LAN. I can see the shares from just \\FileServer1\ but if I try to access some of them, it just sits there and eventually times out. All the share and NTFS permissions are just set to domain users or everyone (makes no difference), nothing there that should prevent remote access.
I check the IPv4 settings and they look fine. I also have migrated the local Domain Controller from HypServer2 to HypServer1, but AD seems to replicate fine but I suppose it could be related.
Any ideas would be welcome.
Here is what I am trying to do
Searched high and low but cannot find an answer for it
I need to map a NFS drive (from a Linux box) to a windows server 2008 and from the Windows Server I need to share this drive to several users within Active Directory using Windows 7 PC‘s
I have no problem creating the nfs map to the server, but it will not give me (as you know I am sure) the share option for windows. Therefore, I cannot create a map to the user.
So I tried to create a local folder and used SyncToy to move the files between the NFS share and the Local share via task scheduler (which would work ) if it would not create a .dat file on the Linux site , Linux cant process this file and tosses errors.
Does anyone know of a way to do this?
Thank you
Martin Strasser Carpe Diem
Hi All,
Good day to you,
I have shared folder projects in windows server 2003 and projects folder contain client folder A,B,C,D,E.........
on each client folder A,B,C..... has estimation folder(in all folders).
I want restrictions on only estimation folder(which belong to all client folders) all users except admin.
Please help!
Regards
Shabir