Granting additional users and groups access to the TEMP folder

Question

&nbsp;Hi!We try on customer system EV 11.0.1 CHF4R1 and in our testsystem EV 12.0.1 to use the regkey TempFolderExceptions as in this article described:Granting additional users and groups access to the TEMP folderhttp://www.veritas.com/docs/000102553Unfortunately it seems the key don't work. We try different ways, but every time the Admin Service shut down like here described:Enterprise Vault temporary folder security checkshttp://www.veritas.com/docs/000023496Any ideas?thx

chrislangevin · Answer

Kai,I think the first step is to get a dtrace of the Admin Service when you start it and it fails. Attach it here so we can also see the exact way you've written the Registry string.&nbsp;--Chris

kai_schröer · Answer

Hi Chris,thanks for suggestion. Maybe we are a little bit closer now.In our test environment we can find out it works when we add the users just with Read-Rights. With Full-Access we get the issues.We have to check this with customer and see.thanks.

kai_schröer · Answer

Same on custome side.With Read-Rights the key worksWith Full Access the key doesn't work.

chrislangevin · Answer

Kai,I'll look into it and see if I can reproduce it.&nbsp;--Chris

chrislangevin · Answer

Kai,&nbsp;I tried this morning and the key seems to be working correctly. Granting the user read access or full control, either way the dtrace and the result is the same.&nbsp;7758&nbsp;&nbsp; &nbsp;08:39:18.749&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsFolderSecure Entry. Checking folder 'C:\Users\VAULTA~1\AppData\Local\Temp\'7759&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::LoadExceptionsFromRegistry Entry7760&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::LoadExceptionsFromRegistry: Found temp folder exceptions reg key.7761&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::LoadExceptionsFromRegistry Exit7762&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSidAllowed Entry, sid type : 17763&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsAllowedAdminSid Entry7764&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsAllowedAdminSid Exit :passed sid is not a well known admin sid.7765&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSidAllowed Testing user type sid...7766&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSIDInGroupToken Entry7767&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSIDInGroupToken Exit.7768&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSidAllowed Exit. Username: user37769&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsFolderSecure SID is not in the approved list, proceeding to registry lookup..7770&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSidInRegistryList Entry7771&nbsp;&nbsp; &nbsp;08:39:18.750&nbsp;&nbsp; &nbsp; [26668]&nbsp;&nbsp; &nbsp;(AdminService)&nbsp;&nbsp; &nbsp;&lt;6464&gt;&nbsp;&nbsp; &nbsp;EV:L&nbsp;&nbsp; &nbsp;CPermissionsHelper::IsSidInRegistryList: passed sid found in registry exception list.&nbsp;Please gather a dtrace of AdminService while reproducing the issue and post it here, so we can see what's different about your situation. Please also include exact string from your TempFolderExclusions registry value.

Forum Discussion

Granting additional users and groups access to the TEMP folder

Related Content

Very cool addition. This

Reports grouped by (user added) Host attribute?

List volume groups

Failover Service Group(Parent) on Top of Parallel Service Group(Child)

Failed to load media management library. Additional Information : 2