| Author |
Message |
Clay Hilton
Guest
|
 Posted:
Wed Feb 09, 2005 2:39 am Post subject:
Permissions to change FRS replication |
|
|
We are looking to delegate permissions to a group to change our FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is Windows 2003.
Do other permissions need to be set for this? |
|
| Back to top |
|
 |
Glenn L
Guest
|
| Posted:
Wed Feb 09, 2005 6:48 am Post subject:
Re: Permissions to change FRS replication |
|
|
Hhmmmm
The replica set object contains the schedule attribute that controls the
schedule of all connection objects that do not have a schedule attribute
set.
You can also control the schedule on a per connection object basis.
If you go to the advanced permissions on the replica set object, does the
group have write all properties and all validated writes?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:eevqX5hDFHA.1496@TK2MSFTNGP14.phx.gbl...
| Quote: | We are looking to delegate permissions to a group to change our FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is Windows 2003.
Do other permissions need to be set for this?
|
|
|
| Back to top |
|
|
Clay Hilton
Guest
|
| Posted:
Wed Feb 09, 2005 10:10 pm Post subject:
Re: Permissions to change FRS replication |
|
|
thanks for the reply Glenn. I assume it does have this permission though
because I gave full control permissions. I am out of the office for the
next two days. I will check this when I return.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:uDMTO%23kDFHA.2288@TK2MSFTNGP14.phx.gbl...
| Quote: | Hhmmmm
The replica set object contains the schedule attribute that controls the
schedule of all connection objects that do not have a schedule attribute
set.
You can also control the schedule on a per connection object basis.
If you go to the advanced permissions on the replica set object, does the
group have write all properties and all validated writes?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:eevqX5hDFHA.1496@TK2MSFTNGP14.phx.gbl...
We are looking to delegate permissions to a group to change our FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is Windows
2003.
Do other permissions need to be set for this?
|
|
|
| Back to top |
|
|
Glenn L
Guest
|
| Posted:
Thu Feb 10, 2005 1:57 am Post subject:
Re: Permissions to change FRS replication |
|
|
When you say it did not work,
do you mean the "change schedule" button is greyed out?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:uUvqfHsDFHA.560@TK2MSFTNGP15.phx.gbl...
| Quote: | thanks for the reply Glenn. I assume it does have this permission though
because I gave full control permissions. I am out of the office for the
next two days. I will check this when I return.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:uDMTO%23kDFHA.2288@TK2MSFTNGP14.phx.gbl...
Hhmmmm
The replica set object contains the schedule attribute that controls the
schedule of all connection objects that do not have a schedule attribute
set.
You can also control the schedule on a per connection object basis.
If you go to the advanced permissions on the replica set object, does the
group have write all properties and all validated writes?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:eevqX5hDFHA.1496@TK2MSFTNGP14.phx.gbl...
We are looking to delegate permissions to a group to change our FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is Windows
2003.
Do other permissions need to be set for this?
|
|
|
| Back to top |
|
|
Clay Hilton
Guest
|
| Posted:
Fri Feb 11, 2005 1:29 am Post subject:
Re: Permissions to change FRS replication |
|
|
I am pretty sure this is the case -- but my contact back at the office who
is testing this took off a few days so I will not be able to be sure until
next week. I will repost then if we do not resolve. Thanks again.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:u6e6JGuDFHA.392@TK2MSFTNGP14.phx.gbl...
| Quote: | When you say it did not work,
do you mean the "change schedule" button is greyed out?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:uUvqfHsDFHA.560@TK2MSFTNGP15.phx.gbl...
thanks for the reply Glenn. I assume it does have this permission though
because I gave full control permissions. I am out of the office for the
next two days. I will check this when I return.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:uDMTO%23kDFHA.2288@TK2MSFTNGP14.phx.gbl...
Hhmmmm
The replica set object contains the schedule attribute that controls
the
schedule of all connection objects that do not have a schedule
attribute
set.
You can also control the schedule on a per connection object basis.
If you go to the advanced permissions on the replica set object, does
the
group have write all properties and all validated writes?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:eevqX5hDFHA.1496@TK2MSFTNGP14.phx.gbl...
We are looking to delegate permissions to a group to change our FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is Windows
2003.
Do other permissions need to be set for this?
|
|
|
| Back to top |
|
|
Clay Hilton
Guest
|
| Posted:
Mon Feb 14, 2005 8:47 pm Post subject:
Re: Permissions to change FRS replication |
|
|
I can go in to the Replication tab, change the schedule, and click OK. At
that point it gives me the "Access is Denied" message, and the schedule does
not change.
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:u06xyb6DFHA.3824@TK2MSFTNGP10.phx.gbl...
| Quote: | I am pretty sure this is the case -- but my contact back at the office who
is testing this took off a few days so I will not be able to be sure until
next week. I will repost then if we do not resolve. Thanks again.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:u6e6JGuDFHA.392@TK2MSFTNGP14.phx.gbl...
When you say it did not work,
do you mean the "change schedule" button is greyed out?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:uUvqfHsDFHA.560@TK2MSFTNGP15.phx.gbl...
thanks for the reply Glenn. I assume it does have this permission
though
because I gave full control permissions. I am out of the office for
the
next two days. I will check this when I return.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:uDMTO%23kDFHA.2288@TK2MSFTNGP14.phx.gbl...
Hhmmmm
The replica set object contains the schedule attribute that controls
the
schedule of all connection objects that do not have a schedule
attribute
set.
You can also control the schedule on a per connection object basis.
If you go to the advanced permissions on the replica set object, does
the
group have write all properties and all validated writes?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:eevqX5hDFHA.1496@TK2MSFTNGP14.phx.gbl...
We are looking to delegate permissions to a group to change our FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is
Windows
2003.
Do other permissions need to be set for this?
|
|
|
| Back to top |
|
|
Glenn L
Guest
|
| Posted:
Wed Feb 16, 2005 6:48 am Post subject:
Re: Permissions to change FRS replication |
|
|
I attempted to repro your issue, but was not able to.
I granted my delegated user full control parms to the DFS replica set
object.
I was able to then adjust the schedule and apply it without any error.
I suggest you execute (from the support tools)
DSACLS "cn=DFS replica set name,cn=DFS root name,cn=DFS Volumes,cn=file
replication service,cn=system,,dc=exampledomaianname,dc=com"
Then verify your delegated account has full control over the object
*snip* taken from my dump for delegated user DFSUSER
Access list:
Effective Permissions on this object are:
Allow NT AUTHORITY\Authenticated Users SPECIAL ACCESS
READ PERMISSONS
LIST CONTENTS
READ PROPERTY
LIST OBJECT
Allow ADITEST\dfsuser FULL CONTROL
Allow ADITEST\Domain Admins FULL CONTROL
Allow NT AUTHORITY\SYSTEM FULL CONTROL
Allow BUILTIN\Administrators SPECIAL ACCESS
<Inherited from parent>
DELETE
READ PERMISSONS
WRITE PERMISSIONS
CHANGE OWNERSHIP
CREATE CHILD
LIST CONTENTS
WRITE SELF
WRITE PROPERTY
READ PROPERTY
LIST OBJECT
CONTROL ACCESS
Also look for any deny entries in the output that may be preventing your
delegated user from updating the schedule attribute.
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <clay.a.hilton@usace.army.mil> wrote in message
news:uFu$9XrEFHA.1936@TK2MSFTNGP14.phx.gbl...
| Quote: | I can go in to the Replication tab, change the schedule, and click OK. At
that point it gives me the "Access is Denied" message, and the schedule
does
not change.
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:u06xyb6DFHA.3824@TK2MSFTNGP10.phx.gbl...
I am pretty sure this is the case -- but my contact back at the office
who
is testing this took off a few days so I will not be able to be sure
until
next week. I will repost then if we do not resolve. Thanks again.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:u6e6JGuDFHA.392@TK2MSFTNGP14.phx.gbl...
When you say it did not work,
do you mean the "change schedule" button is greyed out?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:uUvqfHsDFHA.560@TK2MSFTNGP15.phx.gbl...
thanks for the reply Glenn. I assume it does have this permission
though
because I gave full control permissions. I am out of the office for
the
next two days. I will check this when I return.
"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:uDMTO%23kDFHA.2288@TK2MSFTNGP14.phx.gbl...
Hhmmmm
The replica set object contains the schedule attribute that controls
the
schedule of all connection objects that do not have a schedule
attribute
set.
You can also control the schedule on a per connection object basis.
If you go to the advanced permissions on the replica set object,
does
the
group have write all properties and all validated writes?
--
Glenn L
CCNA, MCSE 2000/2003 + Security
"Clay Hilton" <chilton@jam.rr.com> wrote in message
news:eevqX5hDFHA.1496@TK2MSFTNGP14.phx.gbl...
We are looking to delegate permissions to a group to change our
FRS
Replication Schedules for a particular object. We added the write
permissions in ADUC here -- System\File Replication Service\DFS
Volumes\"object", but that did not work. Our environment is
Windows
2003.
Do other permissions need to be set for this?
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in