How to test and troubleshoot access to the repository share or any share.
Access from Server
Enter the UNC path to the share in Windows Explorer on the server from which it is shared. Ex: \\servername\Repository
If this doesn't work check the following:
- Share settings - the repository owner needs Full Control
- Directory settings - If the Foray Technologies directory has not been created then the repository owner needs Full Control of the shared directory. If the Foray Technologies directory has been created then the repository owner needs to have full control and be the owner. From a security standpoint no other objects should have access.
- Server name - double check the spelling and that it can be accessed from the command line (try ping)
- Repository owner account - test the username and password by trying to login to the server using this account. The account may need to have interactive logon temporarily enabled if it is disabled in order to perform this test.
- For any workstation try uninstalling and re-installing "File and Printer Sharing for Microsoft Networks" See: Can no longer access computer or network shares to my server from any other computers on the network
Access from Workstation
Enter the UNC path to the share in Windows Explorer on a client workstation. Ex: \\servername\Repository
It this doesn't work check:
- Server name - double check the spelling and that it can be accessed from the command line (try ping)
...
Test with Configure Adams on a Workstation
Run Configure Adams on a client workstation and test the repository access using the same steps for a server. If this doesn't then it may be one of the following group policies.
Impersonate a client after authentication - Without this privilege impersonation of the repository owner account is prevented.
- Test locally
Administrative Tools->Local Security Policy
- Security
Settings->Local Policies->User Rights Assignment->Impersonate a client after authentication
- Right click->
Properties
- Add the repository owner account to the list of accounts
- Re-test. If access now works then this can be fixed at the domain level so that it doesn't have to be overridden on each workstation
- Fix globally
- On the domain controller:
Administrative Tools->Group Policy Management
Group Policy Management->Forest->Domains-><DOMAIN NAME>->Group Policy Objects->Default Domain Controllers Policy
- Settings tab
- Right-click anywhere in tab details->Edit ... this opens the Group Policy Management Editor
Default Domain Controllers Policy->Computer Configuration->Policies->Windows Settings->Security Settings->Local Policies->User Rights Assignment->Impersonate a client after authentication
- Right-click->
Properties
- This policy will have the "Define these policy settings" checked
- Add the repository owner account
- Users will need to log out and back in for this policy to be pulled down from the domain controller.
- On the domain controller:
Access this computer from the network - Without this privilege the repository owner account will not be able to access the network share from another machine.
- Test locally - Modify the local policy on the server hosting the repository share.
Administrative Tools->Local Security Policy
Security Settings->Local Policies->User Rights Assignment->Access this computer from the network
- Right click->
Properties
- Add the repository owner account to the list of accounts
- Re-test. If access now works then it must be fixed at the domain level so that it the privilege isn't removed when the GPO is re-applied to the server.
- Fix globally
- Set the Access this computer from the network policy so that the repository owner account has this privilege on the server hosting the repository share.
Start AdamsWeb and attempt to access the login page
- In some environments everything except AdamsWeb will work. Configure Adams and Digital Workplace will work fine but AdamsWeb will throw a LogonFailedException. In the case the issue may be group policy blocking AdamsWeb from logging on to the local machine as the Repository Owner account. Try the following:
- Test locally - Modify the local policy on the server hosting the repository share.
Administrative Tools->Local Security Policy
Security Settings->Local Policies->User Rights Assignment
Deny log on Locally
- If the Repository Owner account is on this privilege, either directly or via membership in a group it must be removed.Allow log on locally
- Explicitly add the Repository Owner account to this privilege. This can be either directly or via a group.- Re-test. If access now works then it must be fixed at the domain level so that it the privilege isn't removed when the GPO is re-applied to the server.
- Fix globally
...