Solved

Problem with Offline Folders - Access Denied (Win 7), strange permission behaviors

Posted on 2011-02-24
7
548 Views
Last Modified: 2012-05-11
Hey everyone, I've been struggling with this for some time now trying to configure offline files to cache a shared folder on my Win7 x64 machine from the network. Usual permissions work fine, read/write etc. to all the shared resources. This particular share is a DFS share so I thought that had something to do with it but I can't even get it to run with a basic share from a single server. Always the same issue; sync fails due to access denied errors.

I've already reviewed this article: http://support.microsoft.com/kb/275461 and confirmed that the Authenticated Users group (also tried with Everyone) has atleast read permissions on the folders; they actually have read, write, modify.

My only clue to a possible problem is with the permissions for the Creater Owner group; at the root of the share the only permission is Spercial Permissions. If I try to set additional permissions and hit Apply it accepts it for a moment, appears to apply that change to child folders, then completes with the permissions' check boxes cleared again. Going into Advanced shows the permission entry correctly but it does not show on the main folder properties window on the Security tab.

I'd love to get this sorted out as I'd like to make use of this feature with more of my users. Thanks in advance!

P.S. the network environment is a mix of XP, Vista, Win7 machines, server 2003 x86, 2003 R2 x86, 2008 R2 x64, all standard edition. We are in an active directory environment. I am currently working on a Win7 Pro x64 machine.
0
Comment
Question by:jostafew
  • 5
  • 2
7 Comments
 
LVL 5

Expert Comment

by:ccns
ID: 34974790
i didnt see anything mentioned about share permissions can you let me know if they are: everyone full control? or auth users full control etc.
0
 
LVL 3

Author Comment

by:jostafew
ID: 34974826
Yes, share permissions are Everyone - Full Control.
0
 
LVL 5

Expert Comment

by:ccns
ID: 34974939
check the dfs services and FRS services make sure they are set to restart after failures. as i had a wierd issue where teh frs service would fail and then it would wait for 30mins before restarting. so i changed it in the services area.
0
Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

 
LVL 3

Author Comment

by:jostafew
ID: 34975057
Ok, checked the DFS and FRS services on both of the local servers hosting the DFS share (there is a 3rd, but I confirmed that I am connected to the appropriate local target). One had its DFS service to take no action after a failure. I've corrected that and restarted the service for good measure. Others were OK. That being said, I cannot even get offline files working on a simple, singular file share (ie. \\servername\sharename).
0
 
LVL 3

Author Comment

by:jostafew
ID: 35037878
I've done more digging and found that it's an issue to do with Encrypting the files. If encryption is turned off then everything goes according to plan. If I try to encrypt the files (though Offline Files manager) AFTER they've been made available offline then the encryption process fails. Still working on it....
0
 
LVL 3

Accepted Solution

by:
jostafew earned 0 total points
ID: 35058403
Found the problem, which is more of a mis-configuration than a "problem". We're in a domain environment here in the office with no PKI in place (no Certificate Authorities and no encryption keys to hand out). So, when trying to encrypt the files on the machine, it won't go because it cannot contact a CA and cannot get a key to perform the encryption. If we were in a workgroup the machine would auto-generate a key and everything would be fine.

I am closing this thread and would like to thank those experts who took the time to consider my question.
0
 
LVL 3

Author Closing Comment

by:jostafew
ID: 35115239
Traced the problem back to a related issue (see final my final posting).
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Raid problem 10 31
Authentication type 1 24
firefox deployment by sccm 1 20
Trying to create a report out of AD 2008 2 13
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now