ADPro: ReACL Error - "Unable to update item security for 'C:\DumpStack.log.tmp': CreateFile" (4321366)

We receive the following error when running the device ReACL.

"Unable to update item security for 'C:\DumpStack.log.tmp': CreateFile: The process cannot access the file because it is being used by another process"

What is causing this and how do I prevent it.

Currently there is no option in AD Pro to exclude a single file from being processed. the following process will allow you to update the back-end SQL database 'BlackList" table to allow the ReACL to skip the files contain in the root C:\ directory

Follow these steps via SQL Manager Console to run against the DSP-Dirsync Pro DB:

UPDATE ADM_DeviceReACLProfile SET CustomSettings ='{"blacklistFiles" : ["\\*.sys"]}'

UPDATE ADM_DeviceReACLProfile SET CustomSettings ='{"blacklistFiles" : ["\\DumpStack.log.tmp"]}'

Perform a simulation reACL against an affected machine/device. The log should contain something similar to below:

Info,ReACLEngine,Blacklist Files: \*.sys,

Info,ReACLEngine,Blacklist Files: \DumpStack.log.tmp,

Note : All files on root of C drive will now be blacklisted as desired.

Additionally, a specific profile may be used by appending a "Where" to the update statement, see below:

Select * from ADM_DeviceReAclProfile

Per above output should be a reACL profile that is default and another one where it is not default. This is the reACL profile you should edit with below update statement

UPDATE ADM_DeviceReACLProfile SET CustomSettings = '{ "blacklistFiles": ["\\DumpStack.log.tmp"] }' WHERE ADM_DeviceReACLProfile_PK = XXX

Run a simulation reACL to see if the result is correct before you run the full reACL.

Contact Support if you have any issues or questions