Greetings!
We are having an interesting issue at our company. Using both PCs and Mac computers by the creative departments. When we try to save an Excel/Powerpoint file on our Windows file servers we get a sharing violation error, the permission table gets messed up and the file cannot be re-opened again until our server guys re-inherit the rights on the file servers. All Macs connect via SMB.
The Macs are running El Capitan (not fully up-to-date, 10.11.4) and the Windows file servers are all Windows Server 2012 R2. Previously not just excel sheets and powerpoint presentations had this problem but all other files as well. The servers are utilizing DFS and we also have Talon File Services installed.
We are granting access to the servers via Active Directory groups, two different ones, one for read-only and one for read/write. When the issue happens the file loses all individual and group rights in ACL, only the currently editing user is there with read/write access and everyone with no rights, but nobody can open the file again.
While a healthy file looks like this:
We did some testing as well with different methods:
We created a SuSe Linux server where we proxy'd the shares using MSDFS but we still got Sharing Violation.
On the same server we created a simple Samba based share but the results were the same.
If we create a Samba based share on a Mac of course that works.
I tried to force it from client side that the Macs should use SMB1, that works too but Excel and Powerpoint still acts up.
As a final charge I swapped Apple's Samba with the "free" Samba available on the internet, solves all problems as well, except Excel's and Powerpoint's sharing violation.
Also we have some servers where we made the AFP protocol available via ExtremeZ-IP/Acronis Access Connect, we don't experience any problems there but we can't utilize it on our other servers where Talon File Services is active.
I'd also like to note that where we are granting access directly not through AD groups, those drives doesn't seem to be affected with the sharing violation.
I also created a case at Microsoft but I'd like to hear/read what's your experience or suggestions regarding this.
(This is my first post here, sorry if I messed up something.)
Many thanks!
Regards,
Haven't had much success with wireshark or newer versions of Office unfortunately.
What I started to notice is that on shares where the .TemporaryItems folder is under my ownership (I don't know or understand how that happens) I can safely save and edit Excel and Powerpoint files.
When I do the same on a share where .TemporaryItems is "not mine" I get sharing violation.
Wireshark was showing a lot of "object not found" and "access denied" error messages on the "faulty" shares. Also when I check from Powershell on a Windows machine I can see that the ACL entries are sometimes duplicated or even triplicated on shares where I'm not the owner of Temp. For example this is a file that is editable but if I create a copy from it and try to save I get sharing violation.
A file that has no problems looks okay, otherwise all non-Excel and Powerpoint looks like this:
According to Microsoft they've seen that before and might have fixes, tomorrow the MS supporter should contact me, I'll be sure to share the solution with you if we found any.
