+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 30 of 30
MIS Systems Thread, SIMS NTFS Permissions? in Technical; WSSecurity.exe is a file that we have been told to exec. Its a bit like simsperm.bat. However, . ICT gave ...
  1. #16

    Join Date
    Mar 2007
    Posts
    323
    Thank Post
    6
    Thanked 7 Times in 6 Posts
    Rep Power
    17
    WSSecurity.exe is a file that we have been told to exec. Its a bit like simsperm.bat. However, .ICT gave us it. It was written by one of the tech's there. We are supposed to use it instead of simsperm.bat.

    The server is a...
    HP Proliant ML370
    4GB RAM
    2x 3.20Ghz Xeon Cores ( Total of 2 CPU's )
    3x SCSI 15k 73GB Drives RAID5

    It's getting on now, almost 5 years old.

    The speed at which queries are running is very slow. The client's sims goes all white asthough its waiting for a response from the server.

    Looking at the server, theres 2 instances of sqlservr.exe. 1 @ 50-60% and the other at 0% but will also raise upto 50-60% at times. When this happens its all maxed out. The MEM usage of one sqlservr.exe is 1,500,500k and the other 212,000k.

    I find it really frustrating that .ICT can't help us any more other then defraggin the database!!!1

    Please help. I noticed a few other posts about it on here back in 2006 with sqlservr.exe being so high but end up with "capita will fix this in the next update".

  2. #17
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    952
    Thank Post
    37
    Thanked 167 Times in 134 Posts
    Rep Power
    95
    What are the sizes of the sims.mdf and ldf. There is a specific tool for defragging the sql data base that can help with slow issues. I would also have a look at the event logs as these can fill up with messages that are not errors.

    What version of SQL are you running

  3. #18

    Join Date
    Mar 2007
    Posts
    323
    Thank Post
    6
    Thanked 7 Times in 6 Posts
    Rep Power
    17
    sims.mdf 2,655,000KB
    sims.ldf 8,384KB

    .ICT ran a defrag query that re-indexed it. Is this the same tool you're referring to?

    I've just checked and cleaned the event log's anyway. Nothing much that appears to be anything.

  4. #19

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,943
    Thank Post
    1,199
    Thanked 1,071 Times in 762 Posts
    Rep Power
    330
    D: is the drive on the server which has S:Sims Folder shared which is then mapped as the S:drive.

    Access to the D:drive on the server is as follows:
    Everyone: special permissions on this drive only read and execute no inheritance.

    on mapped S:drive (Sims shared folder)
    1. MIS manager with full control no inheritance
    2. Authenticated users list folders read and execute no inheritance

    We also have software permissions for users deployed through GPOs:
    %UserProfile%\Local Settings\Temp\*.temp
    Allows Sims to use self registration for DLLs during installation.

    Hope this has been of help

  5. #20

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    SIMS folder permissions

    Does anyone actually know "best practice" set of permissions for the SIMS folder on the server? I've been looking for weeks and no one seems to know!!

  6. #21

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by harvester View Post
    Does anyone actually know "best practice" set of permissions for the SIMS folder on the server? I've been looking for weeks and no one seems to know!!
    i don't think capita do, so the rest of us arn't going to have a chance!

    ours have full read/write access to the folders, but not full control so cannot take ownership etc

    EDIT:they also have to have read write access to the sims folder on the C:\program files (capita say that you should set them up as local admins) they also need to have access to the sims.ini files in C:\windows plus the temp directory
    Last edited by glennda; 17th February 2010 at 12:05 PM.

  7. #22

    vikpaw's Avatar
    Join Date
    Sep 2006
    Location
    Saudi Arabia
    Posts
    5,682
    Thank Post
    692
    Thanked 1,408 Times in 1,166 Posts
    Rep Power
    354
    Quote Originally Posted by harvester View Post
    Does anyone actually know "best practice" set of permissions for the SIMS folder on the server? I've been looking for weeks and no one seems to know!!
    I think BOSSMAN's post is a working example of very nice strict permissions. The only time you need extra is for certain modules e.g. NovaT or Options, mainly the legacy suite.

    Quote Originally Posted by glennda View Post
    i don't think capita do, so the rest of us arn't going to have a chance!

    ours have full read/write access to the folders, but not full control so cannot take ownership etc

    EDIT:they also have to have read write access to the sims folder on the C:\program files (capita say that you should set them up as local admins) they also need to have access to the sims.ini files in C:\windows plus the temp directory
    i remember getting mixed messages when .ICT supported us, but Capita own them now so it should be consistent.

  8. #23

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    just remembered the sims.ini file is needed for lesson monitor i think not the normal use of sims

  9. #24

    vikpaw's Avatar
    Join Date
    Sep 2006
    Location
    Saudi Arabia
    Posts
    5,682
    Thank Post
    692
    Thanked 1,408 Times in 1,166 Posts
    Rep Power
    354
    Quote Originally Posted by glennda View Post
    just remembered the sims.ini file is needed for lesson monitor i think not the normal use of sims
    it's needed for NovaT too

  10. #25

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by vikpaw View Post
    i remember getting mixed messages when .ICT supported us, but Capita own them now so it should be consistent.
    we are supported by our lea, and the two/three main people that knew what they where talking about left and now they seem to be pretty hopeless, i have just signed up to the capita support site as all they do is search it on there and email it to us! its quicker to cut out the middle man!

  11. #26

    Join Date
    Mar 2007
    Location
    Heywood, Lancs
    Posts
    213
    Thank Post
    7
    Thanked 51 Times in 46 Posts
    Rep Power
    28
    We have found issues with permissions on the SIMS/Setups folder when updates roll out in the past, that seem to require write permission on it,so we have ours set up that way, but I think this is the only place where most SIMS users would need write permissions these days.

    Most of our SIMS users have read/execute on the main SIMS folder, Exams Officer has read/write/create on the EXAMIN, EXAMOUT and EXAMHOLD folder. MIS Manager has the same on LEA and the subfolders (for PLASC and CTF files and such) Timetabler full control of the SNOVA folder. In normal use, I'm not sure that there is anything that a typical teacher user needs to access in the SIMS folder at all, apart from connect.ini if, as on our system, there is a redirect to a central copy.

    When we moved SIMS to our new shiny server just before Christmas, these were the only folders we copied over; on our old server the SIMS folder was full of junk going right back to the old dBAse files.

    ....it was a simpler time when you could correct most SIMS problems by deleting the (very many) index files.

  12. #27

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,664
    Thank Post
    1,263
    Thanked 786 Times in 683 Posts
    Rep Power
    237
    Quote Originally Posted by harvester View Post
    Does anyone actually know "best practice" set of permissions for the SIMS folder on the server? I've been looking for weeks and no one seems to know!!
    We run SIMS over Terminal Services, and I think giving users read/write access to a folder inside the Program Files folder would be a bad idea. However that, of all places, seems to be where the QuickLetterTemplate.doc file lives. Therefore, I've just written a Windows service that monitors a separate shared folder with a copy of QuickLetterTemplate.doc in it and copies that file from there as soon as it changes. This way, users csan be given read/write access to the file they want (QuickLetterTemplate.doc) without letting them blunder around in the Program Files folder.

    --
    David Hicks

  13. #28

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,069
    Thank Post
    210
    Thanked 430 Times in 310 Posts
    Rep Power
    144
    2 Groups - SIMS users and SIMS admins

    SIMS admins have modify rights to the whole sims drive.

    SIMS users have read only rights to the SIMS directory and sub Directories only. Works for us.

    On the local machines simsperm.bat is run to set SIMS users to modify rights.

    Mike.

  14. #29
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34
    Quote Originally Posted by dhicks View Post
    Therefore, I've just written a Windows service that monitors a separate shared folder with a copy of QuickLetterTemplate.doc in it and copies that file from there as soon as it changes.
    I copy the most up-to-date quicklettertemplate in during logon. They have write access to the sims program files folder as per simsperm.bat, but can't browse to the folder because of GPO settings. It's never been a problem for us, because the template doesn't save into program files by default - it all saves to the DMS now anyway.

    Quote Originally Posted by philneal
    There has never been a need for staff to have full access rights to use or upgrade SIMS.
    Try removing their write access then installing the client. HINT: It shouldn't try to write to every bleeding folder under s:, but it does.

    As far as simsperm goes, it's OK but not perfect. SIMS still does some incredibly stupid things which need manual intervention to sort out. Off the top of my head I can think of:

    c:\windows\omrconfig.ini - a file created at the point when you first try to save OMR settings. Typically this will be way after installation and under a normal user account. Therefore an EPIC FAIL awaits. Why they can't consolidate all their bad practice and drop it in the program files SIMS folder I don't know.

    c:\pdoxusrs.net - Used by FMS. Again not created during install and requires write access by users. You may notice that it looks like it has something to do with a Paradox database. You may wonder what on earth an 1990s relic is doing in FMS which is now a wizzy, modern, MSSQL-based application. Me too. It's still needed though.

  15. #30

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,439
    Thank Post
    368
    Thanked 650 Times in 531 Posts
    Rep Power
    160
    Quote Originally Posted by dhicks View Post
    We run SIMS over Terminal Services, and I think giving users read/write access to a folder inside the Program Files folder would be a bad idea. However that, of all places, seems to be where the QuickLetterTemplate.doc file lives. Therefore, I've just written a Windows service that monitors a separate shared folder with a copy of QuickLetterTemplate.doc in it and copies that file from there as soon as it changes. This way, users csan be given read/write access to the file they want (QuickLetterTemplate.doc) without letting them blunder around in the Program Files folder.

    --
    David Hicks

    It now also looks in the My Sims Documents folder (within My Docs).

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Replies: 4
    Last Post: 29th July 2009, 02:49 PM
  2. Help with NTFS permissions problem...
    By kennysarmy in forum Windows
    Replies: 5
    Last Post: 7th February 2008, 02:29 PM
  3. C: drive NTFS permissions?
    By cookie_monster in forum Windows
    Replies: 4
    Last Post: 6th February 2008, 08:24 AM
  4. GTK restrict drives and NTFS permissions
    By CyberNerd in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 11th May 2007, 05:32 PM
  5. Mass setting NTFS permissions
    By localzuk in forum Windows
    Replies: 7
    Last Post: 8th January 2007, 04:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •