Error enumerating and uploading files

Hello,

I’m unsure if this is related to issue #215 and decided to create a separate incident.

Setup: Domain Controller with Myrtille on Windows Server 2016. Computer named “qeevtsd1” that is joined to the domain and on Windows Server 2016. I am connecting to qeevtsd1 remotely via the Myrtille web portal on the DC using a domain user. The domain user’s account has folder redirection enabled via Group Policy and is configured as described in the Myrtille Documentation. Everything appears to be working correctly except for files.

GetUserDocumentsFolderFiles Error:

2020-03-23 14:25:26,191 [9] ERROR System.Diagnostics redirection [(null)] - Failed to retrieve the user documents (System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Logon failure: the user has not been granted the requested logon type at this computer (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
System.ComponentModel.Win32Exception: Logon failure: the user has not been granted the requested logon type at this computer
   at Myrtille.Helpers.AccountHelper.GetUserDocumentsFolder(String userDomain, String userName, String userPassword)
   at Myrtille.Services.FileStorage.GetUserDocumentsFolderFiles(Guid remoteSessionId, String userDomain, String userName, String userPassword)
   at SyncInvokeGetUserDocumentsFolderFiles(Object , Object[] , Object[] )
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean is...).)

UploadFileToUserDocumentsFolder Error:

2020-03-23 14:25:26,213 [9] ERROR System.Diagnostics redirection [(null)] - Failed to upload file Domains.xlsx to user one.qeev documents folder, remote session 7008bba3-ac66-4bd7-8362-c9fbcd13c97a (System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Logon failure: the user has not been granted the requested logon type at this computer (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
System.ComponentModel.Win32Exception: Logon failure: the user has not been granted the requested logon type at this computer
   at Myrtille.Helpers.AccountHelper.GetUserDocumentsFolder(String userDomain, String userName, String userPassword)
   at Myrtille.Services.FileStorage.UploadFileToUserDocumentsFolder(UploadRequest uploadRequest)
   at SyncInvokeUploadFileToUserDocumentsFolder(Object , Object[] , Object[] )
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)).)

I have modified the security settings for the folder and share to allow Full Control to Everyone to ensure that this is not related to the file permissions. Thanks!

[cedrozor]

@DrVaskee I don’t know about this “temp” profile, this is something managed by Windows.

Did you allowed multiple sessions per user ? (https://github.com/cedrozor/myrtille/blob/master/DOCUMENTATION.md#remote-desktop-services). By doing so, Windows should have a synchronization mechanism for roaming profiles (and avoid locking or creating temporary profiles).

@camjcorley is right, you should open another issue if the problem persists.

[camjcorley]

@cedrozor you’re correct, I was able to enumerate and upload/download files when using a domain admin account to connect. I’ll have to narrow down the access that the user accounts are missing. Thank you for your help!

@DrVaskee while the symptom/error is similar I believe that is a different issue. I’m marking this one as closed since my original inquiry is resolved. Obviously it’s up to cedrozor but you may want to open a separate issue.