Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Note For Cary Shultz
Note For Cary Shultz [message #391796] Mon, 15 February 2010 05:53 Go to next message
Phil Angus  is currently offline Phil Angus  United Kingdom
Messages: 60
Registered: May 2009
Member
Hi Cary,

Please see my reply to a thread we had going a few weeks ago.
Note: I have now disabled the offline files cache setting in GP, but I
notice now that offline files are not synchronising!

*********************************************************

It certainly does help Cary, and I feel I am getting somewhere. Thanks very
much. :-)
Findings are:

NTFS permissions are fine for the folders.

"Encrypt the offline files cache". is enabled.

there is nothing set in Encrypting File System.

I do remember now that I set laptops up with offline files for their My
Documents and encrypted to add protection if the laptop is lost. All fixed
workstations simply have their My Documents redirected to the server.

Can you tell me what my best way forward is?

Thanks a lot and regards,

Phil

"Cary Shultz" <cshultz.nospam@nospam.outsourceitcorp.com> wrote in message
news:%23pRpXy7mKHA.6084@TK2MSFTNGP02.phx.gbl...
> Phil,
>
> First and foremost, make sure that the NTFS permissions' on the network
> share are correct. Let's just make sure that is in place (this is not the
> solution...just part of it).
>
> Next, check to see if the Offline Files are subject to be encrypted. I am
> going to bet that they are. This is located in the Computer Configuration
> | Administrative Templates | Network / Offline Files and the policy is
> "Encrypt the offline files cache". Going to be that this is indeed
> enabled.
>
> The next thing that you need to do is to take a look at the certificate
> that is being used for EFS. I am going to bet that it has expired. I
> might suggest that the errors that you are seeing started when the
> certificate expired. You will find this setting in the Computer
> Configuration | Windows Settings | Security Settings | Public Key Policies
> | Encrypting File System.
>
> Please note that you can not replace this Certificate. You would either
> have to add a new one -OR- you can disable the encryption on the offline
> files cache.
>
> Does this help?
>
>
> "Phil Angus" <phila@hammerplc.com> wrote in message
> news:OzhQd61mKHA.5508@TK2MSFTNGP02.phx.gbl...
>> Does anyone else have an idea about this. It is still on going and there
>> are a couple of other users now with the same issue!
>>
>> Cheers,
>>
>> Phil
>>
>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>> news:uwobOqxfKHA.5568@TK2MSFTNGP02.phx.gbl...
>>> Ok, I guess I didn't have a clear understanding of the issue. I still
>>> would run the test but I think you are correct.
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>
>>> http://www.pbbergs.com
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>
>>> "Phil Angus" <phila@hammerplc.com> wrote in message
>>> news:utj37JpfKHA.2104@TK2MSFTNGP05.phx.gbl...
>>>> Forgive me Paul, but unless I'm missing something this is probably
>>>> pointless.
>>>>
>>>> Sales person has the issue, and sends me a screenshot of all the files
>>>> that can't sync. He has no other issues on the network, and network
>>>> activity is pretty much choc a bloc with Outlook (Exchange 2003),
>>>> SalesLogix and Sage etc.
>>>>
>>>> I then log in as him on my laptop and get the same issues with exactly
>>>> the same files. It is only with these specific files that the issue
>>>> relates to, and these files are within folders that contain other files
>>>> (spreadsheets) that sync perfectly. The files that fail are perfectly
>>>> readable, and I was able to copy one to the desktop, delete it from
>>>> within "My Documents" (the folder that is being synced) and then copy
>>>> the file back in again.
>>>>
>>>> The part of the error that states "Access is denied" makes no sense as
>>>> the file is readable, deleteable, moveable and sits in a folder where
>>>> other files can be synced perfectly well. He has stacks of drive space
>>>> on his local machine and so do I on mine. I had even considered maybe
>>>> there was something in the formatting of the spreadsheet that linked to
>>>> something else that could not be synced accross, but one of the files
>>>> in question has simply been created from a template, and there are
>>>> several other files that have been created in the same way that are
>>>> fine.
>>>>
>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>> news:%23K%23ivqlfKHA.1648@TK2MSFTNGP05.phx.gbl...
>>>>> Try netdiag on the laptop to see if you have connectivity issues.
>>>>>
>>>>> netdiag.exe /v
>>>>>
>>>>>
>>>>> --
>>>>> Paul Bergson
>>>>> MVP - Directory Services
>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>
>>>>> http://www.pbbergs.com
>>>>>
>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>> This
>>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>>
>>>>> "Phil Angus" <phila@hammerplc.com> wrote in message
>>>>> news:OzwYhjlfKHA.2160@TK2MSFTNGP02.phx.gbl...
>>>>>> Thanks Paul. I actually logged in as this user on my laptop and got
>>>>>> the same sync issues. Sorry, I should have made this clear.
>>>>>>
>>>>>>
>>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>>>> news:eGTQ0OlfKHA.1648@TK2MSFTNGP05.phx.gbl...
>>>>>>> Open up the Event log from the laptop that is experiencing the
>>>>>>> issue. See if you are getting any specific errors related to the
>>>>>>> user. Also verify that the user is really logging in and he isn't
>>>>>>> using cached credentials.
>>>>>>>
>>>>>>> --
>>>>>>> Paul Bergson
>>>>>>> MVP - Directory Services
>>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>>>
>>>>>>> http://www.pbbergs.com
>>>>>>>
>>>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>>>> This
>>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>>> rights.
>>>>>>>
>>>>>>> "Phil Angus" <phila@hammerplc.com> wrote in message
>>>>>>> news:eLCYF3jfKHA.2780@TK2MSFTNGP05.phx.gbl...
>>>>>>>> Hi all,
>>>>>>>>
>>>>>>>> I have a curious error when a user synchronises offline folders.
>>>>>>>>
>>>>>>>> All of our users "My Documents" folders are held on a server via
>>>>>>>> group policy. Workstations do not use synchronised offline folders,
>>>>>>>> they are simply diverted to the server for their "My Documents"
>>>>>>>>
>>>>>>>> Laptops however (for obvious reasons) use synchronised offline
>>>>>>>> folders for their My Documents. They are also stored on the server,
>>>>>>>> but synchronisation occurs to hold a local copy for when they are
>>>>>>>> out of the office.
>>>>>>>>
>>>>>>>> This all works a treat for about 120 users (50 laptops). One user
>>>>>>>> however has suddenly reported a load of errors when synchronising.
>>>>>>>> He has hundreds of files, and the vast majority are fine, but there
>>>>>>>> are about a dozen spreadsheets that report an error "Unable to make
>>>>>>>> expenses_dec2009.xls available offline on
>>>>>>>> \\data\staffmydocs\john_s\My Documents\expenses Access is denied".
>>>>>>>>
>>>>>>>> I don't understand this as it is simply an expenses spreadsheet
>>>>>>>> similar to others that have not had a problem, and also that was
>>>>>>>> created by this user. I have checked the security attributes for
>>>>>>>> the file and it is correct for the user also.
>>>>>>>>
>>>>>>>> Any ideas?
>>>>>>>>
>>>>>>>> Thanks
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
Re: Note For Cary Shultz [message #394687 is a reply to message #391796] Thu, 18 February 2010 15:45 Go to previous message
Cary Shultz  is currently offline Cary Shultz  United States
Messages: 127
Registered: August 2009
Senior Member
Phil....

Howdy, Howdy! Not feeling well at all today (not looking for pity; just
saying that I am a bit off my game today)...so advice might be up for
discussion.

Did you look at the certificate? Has it expired? Kinda confused when you
say that there is nothing set in the Encrypting File System but you then say
that you remember that you did setup the laptops for encryption. Of course,
that could be my groggy brain right now....probably means that someone
removed that part from the GPO or that it is set elsewhere?

We just went through this exact issue about two months ago and the solution
was to turn the "Encrypt the offline files cache" to disabled. Have you -
before you do this - enabled the logging for this? We will get some really
good event ids on the workstations that will really help in the trouble
shooting. It is in the same place as the 'Encrypt the offline file cache'
and is called 'Event Logging Level' - if I remember correctly. Set it to
"3" - which is the highest you can - again, if I remember correctly.

I might also suggest - and this has not so much to do with this issue - that
you go to gpoguy.com and take a look at the .adm file that Mr. Mar-Elia has
put up for everyone. Puts up a lot of "useless" (er, please understand how
I mean that...Darren is da Man with this stuff) chatter when things are
working well but is absolutely invaluable when things are not working
well....go here: http://www.gpoguy.com/Free-GPOGuy-Tools.aspx

He has some awesome tools....

"Phil Angus" <phila@hammerplc.com> wrote in message
news:u$R0z3jrKHA.6004@TK2MSFTNGP04.phx.gbl...
> Hi Cary,
>
> Please see my reply to a thread we had going a few weeks ago.
> Note: I have now disabled the offline files cache setting in GP, but I
> notice now that offline files are not synchronising!
>
> *********************************************************
>
> It certainly does help Cary, and I feel I am getting somewhere. Thanks
> very
> much. :-)
> Findings are:
>
> NTFS permissions are fine for the folders.
>
> "Encrypt the offline files cache". is enabled.
>
> there is nothing set in Encrypting File System.
>
> I do remember now that I set laptops up with offline files for their My
> Documents and encrypted to add protection if the laptop is lost. All fixed
> workstations simply have their My Documents redirected to the server.
>
> Can you tell me what my best way forward is?
>
> Thanks a lot and regards,
>
> Phil
>
> "Cary Shultz" <cshultz.nospam@nospam.outsourceitcorp.com> wrote in message
> news:%23pRpXy7mKHA.6084@TK2MSFTNGP02.phx.gbl...
>> Phil,
>>
>> First and foremost, make sure that the NTFS permissions' on the network
>> share are correct. Let's just make sure that is in place (this is not
>> the
>> solution...just part of it).
>>
>> Next, check to see if the Offline Files are subject to be encrypted. I
>> am
>> going to bet that they are. This is located in the Computer
>> Configuration
>> | Administrative Templates | Network / Offline Files and the policy is
>> "Encrypt the offline files cache". Going to be that this is indeed
>> enabled.
>>
>> The next thing that you need to do is to take a look at the certificate
>> that is being used for EFS. I am going to bet that it has expired. I
>> might suggest that the errors that you are seeing started when the
>> certificate expired. You will find this setting in the Computer
>> Configuration | Windows Settings | Security Settings | Public Key
>> Policies
>> | Encrypting File System.
>>
>> Please note that you can not replace this Certificate. You would either
>> have to add a new one -OR- you can disable the encryption on the offline
>> files cache.
>>
>> Does this help?
>>
>>
>> "Phil Angus" <phila@hammerplc.com> wrote in message
>> news:OzhQd61mKHA.5508@TK2MSFTNGP02.phx.gbl...
>>> Does anyone else have an idea about this. It is still on going and there
>>> are a couple of other users now with the same issue!
>>>
>>> Cheers,
>>>
>>> Phil
>>>
>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>> news:uwobOqxfKHA.5568@TK2MSFTNGP02.phx.gbl...
>>>> Ok, I guess I didn't have a clear understanding of the issue. I still
>>>> would run the test but I think you are correct.
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>
>>>> http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>
>>>> "Phil Angus" <phila@hammerplc.com> wrote in message
>>>> news:utj37JpfKHA.2104@TK2MSFTNGP05.phx.gbl...
>>>>> Forgive me Paul, but unless I'm missing something this is probably
>>>>> pointless.
>>>>>
>>>>> Sales person has the issue, and sends me a screenshot of all the files
>>>>> that can't sync. He has no other issues on the network, and network
>>>>> activity is pretty much choc a bloc with Outlook (Exchange 2003),
>>>>> SalesLogix and Sage etc.
>>>>>
>>>>> I then log in as him on my laptop and get the same issues with exactly
>>>>> the same files. It is only with these specific files that the issue
>>>>> relates to, and these files are within folders that contain other
>>>>> files
>>>>> (spreadsheets) that sync perfectly. The files that fail are perfectly
>>>>> readable, and I was able to copy one to the desktop, delete it from
>>>>> within "My Documents" (the folder that is being synced) and then copy
>>>>> the file back in again.
>>>>>
>>>>> The part of the error that states "Access is denied" makes no sense as
>>>>> the file is readable, deleteable, moveable and sits in a folder where
>>>>> other files can be synced perfectly well. He has stacks of drive space
>>>>> on his local machine and so do I on mine. I had even considered maybe
>>>>> there was something in the formatting of the spreadsheet that linked
>>>>> to
>>>>> something else that could not be synced accross, but one of the files
>>>>> in question has simply been created from a template, and there are
>>>>> several other files that have been created in the same way that are
>>>>> fine.
>>>>>
>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>>> news:%23K%23ivqlfKHA.1648@TK2MSFTNGP05.phx.gbl...
>>>>>> Try netdiag on the laptop to see if you have connectivity issues.
>>>>>>
>>>>>> netdiag.exe /v
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Paul Bergson
>>>>>> MVP - Directory Services
>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>>
>>>>>> http://www.pbbergs.com
>>>>>>
>>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>>> This
>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>> rights.
>>>>>>
>>>>>> "Phil Angus" <phila@hammerplc.com> wrote in message
>>>>>> news:OzwYhjlfKHA.2160@TK2MSFTNGP02.phx.gbl...
>>>>>>> Thanks Paul. I actually logged in as this user on my laptop and got
>>>>>>> the same sync issues. Sorry, I should have made this clear.
>>>>>>>
>>>>>>>
>>>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>>>>> news:eGTQ0OlfKHA.1648@TK2MSFTNGP05.phx.gbl...
>>>>>>>> Open up the Event log from the laptop that is experiencing the
>>>>>>>> issue. See if you are getting any specific errors related to the
>>>>>>>> user. Also verify that the user is really logging in and he isn't
>>>>>>>> using cached credentials.
>>>>>>>>
>>>>>>>> --
>>>>>>>> Paul Bergson
>>>>>>>> MVP - Directory Services
>>>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>>>>
>>>>>>>> http://www.pbbergs.com
>>>>>>>>
>>>>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>>>>> This
>>>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>>>> rights.
>>>>>>>>
>>>>>>>> "Phil Angus" <phila@hammerplc.com> wrote in message
>>>>>>>> news:eLCYF3jfKHA.2780@TK2MSFTNGP05.phx.gbl...
>>>>>>>>> Hi all,
>>>>>>>>>
>>>>>>>>> I have a curious error when a user synchronises offline folders.
>>>>>>>>>
>>>>>>>>> All of our users "My Documents" folders are held on a server via
>>>>>>>>> group policy. Workstations do not use synchronised offline
>>>>>>>>> folders,
>>>>>>>>> they are simply diverted to the server for their "My Documents"
>>>>>>>>>
>>>>>>>>> Laptops however (for obvious reasons) use synchronised offline
>>>>>>>>> folders for their My Documents. They are also stored on the
>>>>>>>>> server,
>>>>>>>>> but synchronisation occurs to hold a local copy for when they are
>>>>>>>>> out of the office.
>>>>>>>>>
>>>>>>>>> This all works a treat for about 120 users (50 laptops). One user
>>>>>>>>> however has suddenly reported a load of errors when synchronising.
>>>>>>>>> He has hundreds of files, and the vast majority are fine, but
>>>>>>>>> there
>>>>>>>>> are about a dozen spreadsheets that report an error "Unable to
>>>>>>>>> make
>>>>>>>>> expenses_dec2009.xls available offline on
>>>>>>>>> \\data\staffmydocs\john_s\My Documents\expenses Access is denied".
>>>>>>>>>
>>>>>>>>> I don't understand this as it is simply an expenses spreadsheet
>>>>>>>>> similar to others that have not had a problem, and also that was
>>>>>>>>> created by this user. I have checked the security attributes for
>>>>>>>>> the file and it is correct for the user also.
>>>>>>>>>
>>>>>>>>> Any ideas?
>>>>>>>>>
>>>>>>>>> Thanks
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
>
Previous Topic:2008/2008R2??
Next Topic:Repadmin/syncall
Goto Forum:
  


Current Time: Wed Jan 17 05:50:05 MST 2018

Total time taken to generate the page: 0.03364 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software