#Gfxbench gl access to files denied windows 10#
#Gfxbench gl access to files denied Offline#

They can create files, and save back to the file server (The file server is on Server 2016) if they are connected.

#Gfxbench gl access to files denied Offline#

Since Friday morning, users have experienced issues with their offline files. if there's a connectivity problem, or they are elsewhere). We have folder redirection for most user profiles, and use offline files so people can access those files even if they are disconnected from the network (e.g. “I've come across a weird issue that surfaced when I was off last week, which was misdiagnosed at the time, but I can't quite find the root cause of.

#Gfxbench gl access to files denied windows 10#

In the right pane, right-click the service account that's the identity of the application pool, select Properties, and then click the Delegation tab.Offline Files Windows 10 Cannot Synchronize Access Is Denied.

In the left pane, expand the Users folder.

In the Add Services dialog box, click Users or Computers, and then browse to or enter the name of the file server that will receive the users' credentials from IIS.

Make sure that Use any authentication protocol is selected, and then click OK.

If the Use any authentication protocol option is selected, the account is using constrained delegation with protocol transition. This workaround is not recommended because it requires Use any authentication protocol delegation on the computer account. If you must use the identity of applications as a service account and/or domain account, use the following workaround.

In the Available Services list, select the CIFS service.In the Add Services dialog box, click Users or Computers, and then browse to or enter the name of the file server that will receive the user's credentials from IIS. Make sure that Use Kerberos only is selected, and then click OK.Select the Trust this computer for delegation to specified services only check box.In the right pane, right-click the computer name for the web server, select Properties, and then click the Delegation tab.Expand domain, and then expand the Computers folder.Click Start, click Administrative Tools, and then click Active Directory Users and Computers.To do this on the domain controller for your web servers domain, follow these steps: Configure constrained delegation when the domain functional level is Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2. Use a machine account instead of a service account as the identity for applications that will be performing constrained delegation for CIFS. This has been identified as a problem between MrxSmb 2.0 and Kerberos when constrained delegation is involved. The Service account is trusted for delegation and configured for CIFS delegation for the file server.The server-side application is running under the context of a service account.Any server-side application that's being accessed from a client is accessing remote shares as user.The file server and web server types are listed in the Applies To section.Constrained delegation configured for CIFS is configured on the service account for the file server.The domain account is trusted for delegation for the cifs service on the file server. The IIS application pool that accesses that share is running under the identity of service account.The web app is trying to access a file server as a user.The file server and web server are running an operating system that's listed in the Applies To section.The domain account is trusted for delegation for the cifs service on the file server.The IIS application pool accessing that share is running under the identity of service account.The IIS website is set up with the home directory pointing to the remote share using pass-through authentication and constrained delegation configured for CIFS.The user is prompted for credentials, and access eventually fails with an access denied error if the following conditions are true: While accessing a service that uses network shares on a middle-tier server, users are prompted for credentials, and they eventually encounter an access denied error. This article helps fix an access denied error that occurs when you access a service that uses network shares on a middle-tier server.Īpplies to: Window 10 – all editions, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019 Original KB number: 2602377 Symptoms