Posts

Showing posts from January, 2010

Help writing a excel function to a cell using powershell

i have been working on function write worklog information excel template. able work once added date column , tried write excel function i'm getting below error. exception setting "item": "exception hresult: 0x800a03ec"at c:\users\shuppz\documents\windowspowershell\modules\client config cdrl\source\get-assignment.ps1:1482 char:4 + $main.cells.item($i, 9) = $datefunction + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + categoryinfo : notspecified: (:) [], setvalueinvocationexception + fullyqualifiederrorid : catchfrombaseadapterparameterizedpropertysetvalueti the excel string need add cell add date , string created in below function called $datefunction. function create-worklog { param ($newfile, $dbname, $work) $before = @(get-process [e]xcel | %{ $_.id }) $excelobject = new-object -comobject excel.application $excelid = get-process excel | %{ $_.id } | ? { $before -notcontains $_ } $excelobject.visible ...

Can I run Windows Server 1709 Guest VM on Windows Server 2016 Hyper-V Host?

hello, can run windows server 1709 guest vm on windows server 2016 hyper-v host? as doesn't have gui/desktop experience feature, want gui on host yet want run server 1709 guest vms. thanks, young- ypae hi ypae, >can run windows server 1709 guest vm on windows server 2016 hyper-v host? as far know, can run windows server 1709 vm on server 2016 hyper v host. >as doesn't have gui/desktop experience feature, want gui on host yet want run server 1709 guest vms. do mean want hyper v host have gui management, while vm server 1709 not have gui, if understanding correct, then, far know, possible. host gui management won't affect vm. best regards, anne please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  ...

SmartCard Logon to RDWeb

i know previous posts smartcard logon rdweb page not supported. know if there plans add support, or workarounds it. users dont have usernames , passwords, , don't want have add them able authenticate site - when on, can use cards again? doesn't make sense? any patches going released resolve this... cheers! hello luff, i don't think the authentication rdweb can be done without domain credentials, in short future. you can find more discussion in following thread: http://social.technet.microsoft.com/forums/en-us/winserverts/thread/4ebfe787-d096-41e0-864e-f767b1e9fdf4 on july 1st making forum read only. after receiving lot of feedback community, decided forum duplication , therefore redundant of remote desktop services forum. so, until july 1st, start asking customers redirect questions remote desktop services forum. on june 11th, css engineers move new threads remote desktop services forum.   please post reply the announcement thread ...

Error message - the system could not log you on as the domain HOME is not available

my sons computer has been turned on morning , when login window comes hit enter there no password , boots ok. its running windows xp home. today receving following error message: "the system not log on domain home not available" i have tried boot in safe mode same login box , error. not sure or how in fix/restore. please help. not part of domain home computer.  have tried booting using last safe configuration , gets same error message to. machine amd sempron (tm) 2800+ running windows xp home edition.  any appreciated. many thanks.  hi, since computer didn't join domain, meinolf said, please ask in windows xp forum: http://social.technet.microsoft.com/forums/en-us/itproxpsp/threads thanks understanding. regards, cicely Windows Server  >  ...

Unable to access HTTPS websites....unable to download windows updates

Image
hi community, need 2 problems i'm having on windows 2008 r2 server.  believe connected.  server not able download windows updates , further checking found out cannot access external https sites.  did check both ports 80 , 443 on checkmyport.net , both open.  can browse other website , have no problems.  not using proxy server or wsus.  https site i'm able open if access outlook owa in network.  server , working fine without problem until short time ago. in advance! i first reset ie defaut setting tools-->internet options-->advanced , click on "reset" right next "reset internet explore settings" next check windows clock time , time zone ensure correct. ms forum Windows Server  >  Security ...

Google Safe-Search can't be forced on Windows Server 2008R2

Image
about 3 or 4 weeks ago (that know of) google started using https send google searches if @ machine user or has been logged gmail/google apps account. example, if sit down @ client machine , bring google , search goes through http, if log gmail account , go google , search web or images go through https. problem @ high school uses google apps education. if 1 of students logs his/her own private gmail account or school account , google search google search not filtered our web content filter in way shape or form. i've tried 2 different, known web filtering hardware devices (fortinet's fortiguard , cipafilter) , neither of them can turn https google search safe-search doesn't produce offensive results, images. helped support tech @ cipafilter in we've found far. google has fix this, fix doesn't work windows server 2008r2. contacted google support , had them step through steps create fix, every time got error @ end , wouldn't create cname record needed in ...

Server 2012 essential backup

hi, trying set server backup. have storage server has been joined domain, , want use main server. have mounted drive, set server backup wizard says "the wizard cannot find drives suitable backup destination..." there way make work? hi, posting in microsoft technet forums. regarding issue, suggest seek in our windows server 2012 essentials forum. there can more effective suggestion other experts familiar topic. understanding appreciated.   windows server 2012 essentials http://social.technet.microsoft.com/forums/en-us/winserveressentials/threads regards kevin Windows Server  >  Windows Server 2012 Setup

How to push down a group policy to block the use of USB external devices?

Image
dear server expert, we using windows server 2008 r2 our ad server , push down group policy users prevent use of usb external devices such thumbdrive or external hdd. please advise on how this. many thanks regards, hi hendri, the same policy setting located under same path in user configuration: you configure setting there, doing that, policy applied according user log in. best regards, wendy please remember mark replies answers if help. if have feedback technet subscriber support, contact tnmff@microsoft.com .  Windows Server  >  Group Policy

Best way to setup Windows Server R2 for a business - Should I virtualize it?

i setting server small business.  they using run software access sql database, , using file sharing etc.  they have 7 users accessing server.  i wanted set right , since purchased windows 2012 r2 server know comes 2 vm licenses.  i thinking using hyper v setup virtual machine , in virtual machine setup server database program , file sharing.   main reasons thinking setting way future.  if want put new server better hardware in future, transfer virtual machine on new machine without having setup scratch.  also research have been doing there may added benefit virtualizing disaster recovery.   still learning, , wanted ask pros thought best practice should in setting server this.   planning on installing gui version on host because not comfortable powershell yet.  i know best practice install core , setup vm's way, perhaps change in future. in case, virtualization solution. leave easy options future migration , disaster rec...

What are the downsides of a UPN named differently than the SamAccountName for a User object?

hello,  should username, or logon name of upn same samaccountname specific reasons?  seems if username/logon name other samaccountname, when logging on, samaccountname account logs on.  im wondering pros/cons of username/logon name being different samaccountname in domain. thanks help! sdedot in opinion upn should match samaccountname, unless policy have upn match email addresses , reason don't match samaccountname's. have common names (the value of cn attribute) same samaccountname because avoids confusion (and guarantees uniqueness). however, can result in less friendly common names. deciding factor should convenience of end users. admin perspective should not matter. richard mueller - mvp directory services Windows Server  >  Directory Services ...

Server 2008 x64 Terminal Server print issues

we trying hp laserjet 3050 redirected client running vista sp2. while connected terminal server can see printer redirected not print. printer shared xp machine vista machine , prints fine way. not print in terminal server. ideas? hi,   thanks post.   from description, understand hp laserjet 3050 printer redirected vista-based machine cannot work in remote session , problematic printer shared xp-based machine.   here need confirm:   1.     does issue occur on other printers in same remote session? 2.     does issue occur when connecting terminal server xp-based machine? 3.     what os installed on terminal server?   first, please ensure client printer drivers both local , network printers installed on terminal server. if installing third-party driver, make sure driver windows hardware quality labs (whql) signed driver.   we need collect mpsreport terminal server.   1. download proper mps rep...

Consolidating 2 AD's and Office 365

we looking consolidate our user accounts across 2 active directory’s , office 365. our current setup is: internal office/lan ad:  user names in format  firstname.lastname@internal.company.com . sam account name in format of 3 letter company acronym domain name, followed firstname.lastname e.g. com\firstname.lastname private cloud ad:  we have private cloud hosted external vendor hosts number of servers hosting client systems. additionally, holds our company’s sharepoint 2013 portal, , other infrastructure services. has domain controller has user accounts of our internal users have accounts on our internal office lan (in addition user accounts external users needing access cloud servers). usernames in format  firstname.lastname@company.com  , sam account name same internal lan e.g. com\firstname.lastname . full usernames match users company email address. office 365:  we have user accounts our users in office 365 have subscription office desk...

Can not remove the comment on a GPO setting

hi there, i remember saw thread on before , declared bug msft. can not remember if there hotfix or not. the problem use new feature heavily configured settings. now, if switch configured setting back to "not configured", still show in gpo report. we have gpos have 200 settings configured, it's not option create new gpo , set settings again, work around this. any other comment ;-) on this? thanks, gunter gunter, thread have in mind one: http://social.technet.microsoft.com/forums/en/winservergp/thread/c5ebb24c-1525-40f3-8acd-3b1a3a4f7f17 so far, ms decided not offer hotfix that. justification: impact not high , workaround easy. see 3 options you: 1. trick "blank" character 2. edit the  "comment.cmtx" on sysvol directly 3. edit gpo non r2 windows 2008 (or vista rsat). (the bug in r2 / win 7) anyway, if you'd open case @ ms, might bring more drive it... patrick ...

DNS Error 9002

im getting error message: the dns server encountered error 9002 attempting load zone . active directory. dns server attempt load zone again on next timeout cycle. can caused high active directory load , may transient condition. i have run dnscmd /enumzone , received: zone name type storage properties . cache ad-domain 0 .x.x.in-addr.arpa primary ad-legacy secure rev aging then same repeated other identifiable zones (for. , rev.), 9. i curious zone listed "." , am assuming that problems lie? i'm also guessing leftover of a caching only server? please follow below link fix issue.step step details given. http://networkadminkb.com/kb/a218/how-to-correct-dns-event-id-4521.aspx best regards, sandesh dubey. mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator | blog disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights. ...

How does the 'Set Numbering Value' dialog work ???

Image
how work? as can see 'set value to' grayed out , cannot changed. 8.9.1 incorrect , has been used. need set 8.9.5 how ??? why 'advance value' say' skip numbers'. want advance value don't want skip numbers. last number 8.9.4 need 8.9.5. why must ms word make difficult. why can't figure out last number used 8.9.4? this word 2010. the answer thread circumstances (mine), set numbering dialog cannot used correct numbering. you have erase misnumbered line, reinsert text normal text, reapply style. why works , renumbering dialog not mystery microsoft in infinite wisdom can answer. Microsoft Office  >  Word IT Pro Discussions

How to safely delete duplicated SPNs ?

Image
    hi ! i got on dc - windows 2008 r2 version 6.1 (build 7601: service pack 1 following error message: log name:      system source:        microsoft-windows-kerberos-key-distribution-center date:          4/26/2012 6:27:23 pm event id:      11 task category: none level:         error keywords:      classic user:          n/a computer:      srvdc.domainck.yy.dd description: kdc encountered duplicate names while processing kerberos authentication request. duplicate name mssqlsrv/srv01.domainck.yy.dd:1433 (of type ds_service_principal_name). may result in authentication failures or downgrades ntlm. in order prevent occuring remove duplicate entries mssqlsrv/...

"Get Windows 10" Fails due to VMWare SVGA 3D driver

i have 4 windows 7 x64 vms running on vsphere 5.5 should compatible windows 10 , receive free upgrade notification.  1 machine p2v of failing pc, has registered ok, other 3 built vms fail compatibility check.  "check pc" (on 4 w7 vms) says windows 10 not function on these machines due incompatibility vmware svga 3d driver, though multiple windows 10 preview vms running shows not case.  reason can see p2v box passed/registered ok once-upon-a-time had physical ati video card , there still lingering remnants of this.  can think of work-around or resolutions this?  if eligible/entitled these win 10 licenses have them. on on vm have removed vmware svga 3d driver , switched default standard vga graphics adaptor, i'm hoping it'll re-run assessment , pass.  i'm not optimistic though. go vmware forums , post inquiry there.  vmware more qulified advise on situation. Win...

Domain child segregation

hello,  currently have following architecture: parent-domain.local (server 2012 standard)         | | |     |    | child1-domain.parent-domain.local (server 2008r2 standard) child2-domain.parent-domain.local (server 2008r2 standard) in ad domain , trusts forest setup this: parent-domain.local  --child1-domain.parent-domain.local --child2-domain.parent-domain.local the child domains trust parent transitive set yes. if go child 2 member server can add user child1 , visa versa.  i noticed in firewall logs child1 , child2 talk each other.  i want complete separation between child1 , child2 , want block firewall communication between them.  right doesnt seem can this.   how childs through parent , have complete seperation between 2 childs?  that means if try add a child1 group child2 member server wont able to. thank you,  yes - ad has no capabilities prox...

Change the account under which the Cluster service run in windows server 2008

hi experts, in environment windows cluster service runing local service account. want run service newly created service account. service account has full control on both node of cluster i searched on google , found solution treid same. did not worked me.. example:- to change account under cluster service runs stop cluster service on nodes: make sure account has membership in local administrators group on nodes. open local security policy , grant following rights account, or local administrators group, on nodes: where? security settings/local policies/user rights assignments act part of operating system back files , directories restore files , directories adjust memory quotas process log on service increase scheduling priority default, cluster service account inherits following user rights result of being member of local administrators group: manage auditing , security log debug programs impersonate client after authentication if organization has remo...

Not all Active Directory DNS Servers will resolve a new DNS record

problem: not active directory dns servers resolve new dns record. new cname or record added dns of 1 server , after replication time allotment other dns servers cannot resolve new record. seems intermittent new dns record resolve expected dns server. these new records , not subject tombstoning yet. environment: many cross site domain controllers using active directory integrated dns (secure only), 2008 r2 servers few 2003 r2 servers, forest/domain function levels @ 2003. main forest dns zone replicating dcs in forest. troubleshooting: at first suspected replication issue, after using adsiedit , connecting dc=forestdnszones,dc=********,dc=*** a dnsnode instance found each problematic dns record on every domain controller. wasn’t getting published dns service. digging little deeper, found that these new dnsnode instance security permissions included permissions inherited zone , did not include “default security” permissions of dnsnode class defined active directo...

AD Demort issue

hi team, im having problem domain controller demotion. when trying demote domain controller it's asking need un install tapi3directory partition also. can explain partition , dose it's doing, im appreciating that. , please tell me if continue demotion process problem me in future?   thank you. chandima the tapi3directorydirectory is used ip & telephony service, if not using telephony service in domain, can delete safely, can recreate tapi3directory later. http://support.microsoft.com/kb/282272/en-us http://technet.microsoft.com/en-us/library/cc783825%28ws.10%29.aspx   regards awinish vishwakarma| my blog disclaimer : posting provided as-is no warranties or guarantees , confers no rights. Windows Server  >  Directory Services ...

Custom Shell GP affective but slow to render

08 server r2 using xp machines(going w7 workstations later year) created gp allow auto login using single account , custom shell occurs , program created fired off.  essentially, kiosk mode computer.  deployed 800 computers on us. it works, except when user auto logging in task bar available 13 seconds allows user able start programs. if take auto logon out of gp , manually login computer time between taskbar appearing , kiosk program starts less second. i hoping seemless, auto logon kiosk program starting immediatley.  no chance user click other kiosk controls. any advice?? thanks. errresult = objwmiservice.create("c:\cmi\cmi.exe", "c:\cmi\", null, intposid) why don't put cmi.exe directly in custom shell policy? looks "i'm using script because i'm able to." ((-: , if application development in control, have application ignore close request.        ("select * from_instancedeletion...

Unable to add a RDS session host

hi proceed adding rds 2012 session host, we'got 12306 error: "unable retrieve session collection properties", try both powershell , server management interface. can add host @ initial deployement of collection, can't add when collection created. same issues on existing collections. in rdms-ui debug see errors #40963: failed fetch local db connection string server, dbconnstring won't exist in hklm\...\tssdis\parameters. ideas ? thanks. hi, in order better analyze issue, please more specific rds deployment. i suggest check terminal services related logs see whether more clues can found under event viewer -> applications , services logs\ microsoft\ windows. best regards, amy please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com. Windows Server ...

virtual disk service error diskpart the object is in failed status

hi, we using windows server 2012 r2 standard edition. unexpected failure: error code 2@02000018 one of dynamic disk missing. diskpart error is:virtual disk service error diskpart object in failed status please me in regard thanks vikash pandey vikashp@yamaha-motor-india.com hi vikash, >>one of dynamic disk missing did try reactivate missing dynamic disk? if not, can use diskpart command this. regarding point, following article can referred reference. reactivate missing or offline dynamic disk http://technet.microsoft.com/en-us/library/cc732026.aspx besides, regarding troubleshooting disk management, following article can referred more information. troubleshooting disk management http://technet.microsoft.com/en-us/library/cc771775.aspx#bkmk_6 best regards, frank shen Windows Server  >  ...

How to check the comparability of my windows OS with forfiles command

how check comparability of windows os forfiles  command. or  is forfiles  command supported os or not? raja hi, confirm support "forfiles" command in os, open command prompt , type below command, forfiles /? above command should list details "forfiles" command , confirms support. regards, gopi www.jijitechnologies.com Windows Server  >  Windows Server General Forum

Deploy RDS Web Access without using IIS default port

i installed 2 rds host session servers , want deploy rds web access. how can install rds web access without interferring on default iis port 80 used existing web application. regards.     serge camara hi, if using windows server 2008 r2 rd web uses port 443, not interfere port 80. please consider reading link more information: http://technet.microsoft.com/en-us/library/ee126096%28ws.10%29.aspx default port , authentication settings remote desktop web access when install rd web access, following default settings apply: the rd web access web site uses forms-based authentication. the rd web access web site configured use https client connections web site. default port used secure sockets layer (ssl) connections tcp port 443. virtualization conference “pubforum 2011 dublin” , bible of remote desktop services! , microsoft virtualization solutions day dublin! ...

TS Gateway Questions

i have number of questions on ts gateway & ts web go , through each step.  these first.    have existing non-domain windows 2000 server in dmz hosts current website "companyname.com" , have certificate public ca "companyname.com".  setting new windows 2008 server in dmz host website and want install ts gateway & ts web access on external clients can access ts farm in internal network ("companyname.net").  want ts gateway & ts web access on machine in dmz that i won't required buy certificate. 1.  need create forest/domain as "companyname.com" or can call "companyname.dmz" or "companyname.web" or else? 2. need install ad on machine 3. users need authenticated in dmz or can have authentication requests forwarded internal network?    additional info: my internal network "companyname.net" has server 2008 ad 2003 domain functio...

Proxying Trusted Domain Requests

is there anyway proxy authentication requests trusted domain through local domain controllers?  i know default client gets referral each domain controller until gets proper 1 (having access directly). see  http://technet.microsoft.com/en-us/library/cc772808(ws.10).aspx  for example. my setup: have 2 domains in separate forests, 1 production dmz , 1 internal production network 1 way trust.  i don't want dmz hosts have access through firewall internal domain controllers. if going mention server 2008 rodc, we'd rather not because want sharepoint accounts (we host sp site external client) in dmz domain. use ntlm authentication (rather kerberos)... hth marcin Windows Server  >  Directory Services ...

What is the best way to push deployment of a exe file

can use gpo  or  do need use sccm  hello, .exe not possible deploy gpo directly. if .exe has command line options(ask vendor) can script installation network share startup script/logon script gpo, can deployed users or computers. be aware software requires admin permissions must use of time startup scripts computers run system permission during installation. for easier deployment sccm way go. best regards meinolf weber mvp, mcp, mcts microsoft mvp - directory services my blog : http://msmvps.com/blogs/mweber/ disclaimer: posting provided no warranties or guarantees , confers no rights. Windows Server  >  Directory Services

How to find logged on Users

hi, how find how many users logged on active directory using user name , password on domain joined machines in last 24 hours. is there script available. regards usman ghani usman ghani mcts exchange 2010/2007 you test , try richard's account looks @ lastlogon attribute replicated http://www.rlmueller.net/last%20logon.htm there lastlogontimestamp attribute 9-14 days behind. thanks mike http://adisfun.blogspot.com follow @mekline Windows Server  >  Directory Services

Publish Remote Desktop Session

hello, sorry stupid question.   have installed remote desktop services in server 2012 , can't find check box publish remote desktop session servers web app page. i use connect remote computer tab, liked how in 2008 r2 there in remote apps section. thank you walter hi walter, the equivalent setting located under server manager -- rds -- collections -- <collectionname> -- tasks -- edit properties -- general tab. under server 2012 rds collection (virtual desktop or session) may publish either desktops or remoteapps, not both.  if bypass limitation session collections only, may consider changing following registry value on rdcb: hklm\software\microsoft\windows nt\currentversion\terminal server\centralpublishedresources\publishedfarms\<collection>\remotedesktops\<collection> showinportal     reg_dword     0x00000001 please note using manual registry technique not supported. thanks. -tp ...

GPO

i created group policy , attached ou created.  installing piece of software.  added computer ou , works.  want add computers group , have group member of ou.  created security group in ou , added computer it.  gpo not applied computer seems.  missing something? howdie! catkinson wrote: > created group policy , attached ou created. > installing piece of software. added computer ou , > works. want add computers group , have group > member of ou. created security group in ou > , added computer it. gpo not applied > computer seems. missing something? you can't that. objects (users or computers) need objects in ous. security groups won't work. cheers, florian microsoft mvp - group policy (http://www.frickelsoft.net/blog) Windows Server  >  ...

How to save my powershell commands

i've created simple command in powershell , need way of saving in useful location. add text document. wondering if had useful, or more elegant, ideas on how save these? maybe create function or , load in profile, not sure. there has better way typing out command each time, or copying , pasting notepad adding functions profile excellent way stash re-used code.  read through get-help about_functions, create , test function of saved code, using ise.  when it's working want, run notepad $profile from command prompt, , copy , paste profile , save it. if want start using immediatly, run .$profile in current session, , reload profile (you'll errors trying recreate aliases or functions created, can ignore those). [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " " Windows Server ...

Hardware migration tools

hi, i search answer in forum did not find can me. i want migrate a server old equipment newer. search tool me make that. in life, i used this kind of tool on netware selected server to migrate and the new server . when process of migration finished, i had to shutdown the old server and reboot the new one. can tell if kind of tools exists windows server ? thanks help richard lapointe rlapoint_qc, far know, there no tool that. following links can understand better; how move windows installation different hardware http://support.microsoft.com/kb/249694 how perform disaster recovery restoration of active directory on computer different hardware configuration http://support.microsoft.com/?id=263532 if have ca; how move certification authority server http://support.microsoft.com/?kbid=298138 hope information can you. []`s thiago pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org ...

iisftpdr creating sites through a script

  i using iisftpdr.vbs create ftp sites, can create them fine need add write access directory through script?     i using iisftpdr.vbs create ftp sites; looking add write access ftp directory without going through gui?     iisftpdr /create ftpsite[virtualpath] name physicalpath [ /s computer [ /u [domain\]user /p password]]   any ideas? Windows Server  >  Management

Talk about Advanced Group Policies

Image
a wide convernsation advanced policies , benefits welcome. haven´t got hands on them yet, starting read this: http://technet.microsoft.com/en-us/library/cc749396(v=ws.10).aspx 1. think of benefits? 2. i´m thinking installing the extention in terminal server, gpo management done in case. 3. client machines require patch or extantion installation support utilization of advanced policies? hi, 1. think of benefits? that’s real benefits. companies today utilizing group policy control every aspect , area of desktop environment. in cases, group policy being utilized control servers. such heavy reliance on group policy, every effort possible should made protect group policy objects performing these configurations. new advanced group policy management (agpm) tool microsoft can , more. 2. i´m thinking installing extention in terminal server, gpo management done in case. that’s great. know there few features lacking in gpmc, new agpm tool, of these issue...

folder redirection - Enable access-based enumeration and Encrypt data access Error.

hi, trying deploy windows server 2012 r2 ad roaming user profiles , folder redirection. have followed following link - https://technet.microsoft.com/en-us/...(v=ws.11).aspx down names of group policies , folder names. however, there 2 problems face. if select enable access-based enumeration , encrypt data access folder redirection fails "access denied" event log entry @ host. if disable these 2 options works perfectly. can suggest on steps diagnose these options recommended security.  clients range windows vista windows 10 mix of home , professional edition (this test failed on both editions).  hi path, >> if select enable access-based enumeration , encrypt data access folder redirection fails "access denied" event log entry @ host. did mean user not access folder redirection when enable encrypt data access? if yes, please check link below troubleshoot , fix it: access denied error message when user tries access redirected folder...