We lost all our user > group > access mapping (CE10)

[eo]

Hi,

We use Windows authentication. We tested a new user group, but in the attempt, we lost all our user > Group > Access settings. We immediately reverted back to the existing user group, and all the users appear (by their NT user names), but their bespoke data (such as FUll Name), and their access rights (which groups they are members of) have dissapeared.

How can I get it back?

EO
Hertfordshire, England

 

[MJRBIM]

When did you last back-up your CMC and Input/Output repositories...?

Best you can do is revert to your last back-up.

 

[eo]

File repositories backed up every day, and we back up or CE10 sql database daily as well (is this what you mean when you say "back-up" CMC? If not please advise what is meant by the latter.

If it is the SQL database, is it a case of restoring the whole database, or will it be safer to restore only certain key tables?

Any help greatly appreciated.

EO
Hertfordshire, England

 

[MJRBIM]

I would call BOBJ support to confirm first, but I would revert to the last SQL CMS database back-up and FRS back-up that you did before you started making changes to your groups and users.

 

[pelajhia]

In future-
I think you can make sure you don't lose your users' custom info if you set them up as enterprise as well as ad.
There may be a script available in boe for you to run periodically to make sure all users are set to enterprise.

 

[eo]

If I then do lose them, how do I get them back from Enterprise Users to AD? Do you know where to find the script?

EO
Hertfordshire, England

 

[pelajhia]

you get back to ad the same way you just did so - successfully pull in the mapped group / ad group - making sure you have checked 'Assign each added AD alias to an account with the same name ' on the windows ad auth page before you do the update so the accounts are merged.

I am on business objects xi r2, so I don't know if the script is available for you, that's why I said 'might be'...ours is located along the default website path, under business objects\enterprise115\createEnterpriseAliases\ there's a logon.csp which calls the script after you successfully logon.
I figure this is provided by Business Objects since it's in the bobj folder, I don't think it's something a previous devloper at our office created...I can not find ANYTHING on the web about it, however. (so far)