-
Title
ADPro: ReACL Error - "Unable to update item security for 'C:\DumpStack.log.tmp': CreateFile" -
Description
We receive the following error when running the device ReACL.
"Unable to update item security for 'C:\DumpStack.log.tmp': CreateFile: The process cannot access the file because it is being used by another process"
What is causing this and how do I prevent it.
-
Cause
The operating system has these files lock down preventing the ReACL from taking action. These types of files are not needed, and may be blacklisted. -
Resolution
Currently there is no option in AD Pro to exclude a single file from being processed. the following process will allow you to update the back-end SQL database 'BlackList" table to allow the ReACL to skip the files contain in the root C:\ directory
Follow these steps via SQL Manager Console to run against the DSP-Dirsync Pro DB:
Run the following SQL StatementsUPDATE ADM_DeviceReACLProfile SET CustomSettings ='{"blacklistFiles" : ["\\*.sys"]}'
UPDATE ADM_DeviceReACLProfile SET CustomSettings ='{"blacklistFiles" : ["\\DumpStack.log.tmp"]}'
Perform a simulation reACL against an affected machine/device. The log should contain something similar to below:
Info,ReACLEngine,Blacklist Files: \*.sys,
Info,ReACLEngine,Blacklist Files: \DumpStack.log.tmp,
Note : All files on root of C drive will now be blacklisted as desired.
Additionally, a specific profile may be used by appending a "Where" to the update statement, see below:
Select * from ADM_DeviceReAclProfile
Per above output should be a reACL profile that is default and another one where it is not default. This is the reACL profile you should edit with below update statement
UPDATE ADM_DeviceReACLProfile SET CustomSettings = '{ "blacklistFiles": ["\\DumpStack.log.tmp"] }' WHERE ADM_DeviceReACLProfile_PK = XXX
Run a simulation reACL to see if the result is correct before you run the full reACL.
Contact Support if you have any issues or questions