Hi,
has anyone an idea about problems wiht policies ?
After I make a “rename user” in the Domino Administrator vor a specific user - the policies (org or explizit) will not work anymore.
This means, if I change the setting (Desktop → e.g. Lockout time 43 minutes) in one policy, all existent user will be updated after the client restart (via ndyncfg.exe) - except the renamed user.
I tried this in different combinations
Client / Server ==> Windows 2000 SP4
Domino ==> Version 6.0.3 or 6.5
Client ==> Version 6.0.3 or 6.5
This problem was reproduced 4 times on different Domino & Windows installations.
I tried to isolate the “feature” (or bug ??):
-
first of all i created a new copy of the Names.nsf from the client ==> nothing changed
-
I deleted the bookmark.nsd & desktop6.ndk ==> nothing changed
-
I deleted the Cache.ndk ==> nothing changed
-
I made an “reconfiguration” from the client by deleting all client-files (*.nsf & notes.ini)
==> after I entered my username & servername (for setup) I got an error
“error signing note … you need editor rights and [PolicyModifier] or [PolicyCreater] role for this action”
and the client breaks down the setup
If I check the userrights on the Domino Directory (names.nsf on the server) the person has editor-rights with
all role-rights ==> this means the person should have the rights expected by the client (see error message).
So I tried a last thing --> I changed the "-Default-" entry in the ACL of the Domino Directory to editor & added
only the Role "[PolicyModifier]".
==> the effect of changing the -Default- entry solved my problem and the policy for the “renamed” user works fine again…
… til I change back the -Default- entry in the ACL of the Domino Directory to “no access” or “Author”.
I can´t believe this could be a feature ?? to give all of my people “editor” rights with “[policymodifier]” role after I renamed an user account.