Ever get this annoying "Access is denied" error when you tried to add yourself to the TridionRsaKeyContainer? I have plenty of times.....
I always thought that the original Administrator account who did the Tridion installation can grant this access. But what if the original user account that was used was deleted or the employee left the company? Then you're screwed........ ok, that's not true!
Here's a way around it with the use of Microsoft PSTools
1) Download PSTools (http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx)
2)
Unzip the tools to somewhere on the server
3)
Drop out to a command prompt and go to where PSTools is unzipped
4)
Run: psexec -i -s cmd.exe (This should open another command prompt window)
5) In
the new command prompt windows, navigate to where aspnet_regiis is (should be
in c:\Windows\Microsoft.Net\Framework64\v4.0.30319
6)
Run: aspnet_regiis -pa "TridionRsaKeyContainer"
"Domain\UserName"
SUCCESS! Access is granted!
Hope this helps if anyone ever run into this issue.
Kudos to Brandon Truong from SDL Support!
Ah, I've just ignored that error to set things in the snap-in anyways. I think at least the "hide organizational items" works regardless of the error.
ReplyDeleteThanks for sharing, Robert!
Hi Alvin
ReplyDeleteI think you can make all changes in the snap-in except for the database settings. If you're an admin trying to connect the CM to a different DB, you will definitely need to have access to the Tridion RSA key (Ignoring the error in this case will not allow you to save the changes)
Thanks for the note!
If still Face issue use -
ReplyDeleteaspnet_regiis -pa "TridionRsaKeyContainer" "domain\use" -full
On one of Tridion environment MTSUser is able to give this permissions to other admin accounts and it works successfully . But on production instance we are not able give same permissions to other user from MTSUser. It says access is denied as above screenshot. We cannot install ps tools there . Any help
ReplyDeleteIt's likely a permission issue with that user. You can temporarily grant admin right to this user and try again
Deleteexcellent
ReplyDelete