Office 2019 - Recent Opened Files opens in write-protected mode first

phamtsf — Mon, 13 Mar 2023 12:42:32 GMT

Hello Alfresco community,

we are currently running Alfresco version v7.3.0 with the AOS addon (version: 1.6.0) on our server.

Our problem is that users who open an Office document from the "Recently Opened Menu Tab" - the document first opens in a read-only mode. Only after activating editing writing and saving is possible. (See: Photo 1: Write protected mode

Photo 1: Write protected modeThe users are using the Office version starting from 2019. The Source of the Documents (where they were opened first) is from a network drive, it was added via WEBDAV with the URL https://***dms.***.com/alfresco/aos/UserHomes/[specific User] .

(Office 2013 seems fine and there arent any Problems similiar to that)

What we triedso far:
- Adding WEBDAV drives Path to the Trusted Sites in the Office Trust Center. (example: K:\[User Home webdav link])
- Disable Protected View in the Office Trust Center (all three Options)

- Adding the WEBDAV / AOS URL to the Intranet Zone / Trusted Sites (example: https://...dms.com/aos/...)

Glad if anyone can help with this problem!

Re: Office 2019 - Recent Opened Files opens in write-protected mode first

crisdev13 — Tue, 14 Mar 2023 06:35:04 GMT

sir can you show your nginx.conf , docker-compose.yml , and alfresco-global.properties config thanks!

Re: Office 2019 - Recent Opened Files opens in write-protected mode first

phamtsf — Tue, 14 Mar 2023 09:28:06 GMT

We use the system exclusively on our internal network, so no proxy sits in front of the system. Also we do not use Docker.

We are running the System from bitnami. Alfresco Community Cloud Hosting, Alfresco Community Installer, Docker Container and VM (bitnami.com)

I can only attach the alfresco-global.properties now:

###You need to restart the server for the configuration changes to take effect.

dir.root=/opt/ALFRESCODATA
dir.keystore=${dir.root}/keystore

alfresco.context=alfresco
alfresco.host=**.**.**.com
alfresco.port=443
alfresco.protocol=https

share.context=share
share.host=**.**.**.com
share.port=443
share.protocol=https

### database connection properties ###
db.driver=org.mariadb.jdbc.Driver
db.username=bn_alfresco
db.password=***
db.name=bitnami_alfresco
db.url=jdbc:mysql://127.0.0.1:3306/${db.name}?useUnicode=yes&characterEncoding=UTF-8

### FTP Server Configuration ###
ftp.enabled=true
ftp.port=2121
ftp.ipv6.enabled=false
#ftp.bindto=local_machine_ip

### RMI service ports ###
alfresco.rmi.services.port=50500
avm.rmi.service.port=0
avmsync.rmi.service.port=0
attribute.rmi.service.port=0
authentication.rmi.service.port=0
repo.rmi.service.port=0
action.rmi.service.port=0
deployment.rmi.service.port=0

### Trashcan properties
trashcan-cleaner.cron=0 30 * * * ?
trashcan-cleaner.keepPeriod=P1D
trashcan-cleaner.deleteBatchCount=10000

### Initial admin password ###
alfresco_user_store.adminusername=admin
alfresco_user_store.adminpassword=***

### E-mail site invitation setting ###
notification.email.siteinvite=false

### File Protocol Root ###
protocols.rootPath=/${spaces.company_home.childname}

### License location ###
dir.license.external=/opt/bitnami/alfresco

### BMP Engine ###
system.workflow.engine.jbpm.enabled=false

### Solr indexing ###
index.subsystem.name=solr6
solr.port=8983
solr.host=localhost
solr.base.url=/solr
solr.secureComms=secret
solr.sharedSecret=***

### ActiveMQ configuration
messaging.broker.url=failover:(tcp://localhost:61616)?timeout=3000
messaging.broker.username=admin
messaging.broker.password=***

# Shared File Store properties:
sfs.url=http://localhost:8099
sfs.endpoint=${sfs.url}/alfresco/api/-default-/private/sfs/versions/1/file

# Alfresco PDF renderer
alfresco-pdf-renderer.root=/opt/bitnami/alfresco-pdf-renderer
alfresco-pdf-renderer.exe=${alfresco-pdf-renderer.root}/bin/alfresco-pdf-renderer

# Transform Core properties:
localTransform.core-aio.url=http://localhost:8090/
alfresco-pdf-renderer.url=http://localhost:8090/
jodconverter.enabled=true
jodconverter.officeHome=/usr/lib/libreoffice
img.url=http://localhost:8090/
tika.url=http://localhost:8090/
transform.misc.url=http://localhost:8090/

# Content store delete job
system.content.orphanCleanup.cronExpression=0 0 1 * * ?

## LDAP Authentication Conf #
###############################
##Authentizierungsreihenfolge
authentication.chain=kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad
ntlm.authentication.sso.enabled=false
ldap.authentication.active=true
ldap.synchronization.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@**.com
ldap.authentication.java.naming.provider.url=ldap://***
ldap.synchronization.java.naming.security.authentication=simple
ldap.synchronization.java.naming.security.principal=CN=**,CN=Users,DC=**,DC=**
ldap.synchronization.java.naming.security.credentials=****
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.personType=user
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.authentication.defaultAdministratorUserNames=***
ldap.synchronization.userIdAttributeName=sAMAccountName
## Set up regular synchronization with the LDAP server ##
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.synchronizeChangesOnly=false
###synchronization.allowDeletions=true
synchronization.allowDeletions=false
###Nicht noetig, da synchr jede 1 Min   synchronization.syncOnStartup=true
synchronization.syncOnStartup=true
# Wenn nicht in ldap, dann auch nicht anmelden
synchronization.autoCreatePeopleOnLogin=false
# When TESTING, synchronise every 5 minutes
# secs min hour dom mon dow
synchronization.import.cron=0 0/1 * * * ?
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
ldap.synchronization.userOrganizationalIdAttributeName=msExchALObjectVersion
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupType=group
ldap.synchronization.groupMemberAttributeName=member


###User Synchronisation
ldap.synchronization.personType=user
ldap.synchronization.userSearchBase=cn=Users, DC=xx, DC=xx
###ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=g_Alle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,OU\=Alfresco,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
###ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,OU\=Alfresco,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))

###ldap.synchronization.personType=user
###ldap.synchronization.userSearchBase=cn=Users, DC=xx, DC=xx
#######ldap.synchronization.userSearchBase=DC=xx, DC=xx
#######ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=g_Alle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
#######ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
###ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,OU\=Alfresco,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))
###Groupen Synchronisation
ldap.synchronization.groupSearchBase=OU=Alfresco, DC=xx, DC=xx
ldap.synchronization.groupQuery=(objectclass=group)
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))


triggering.aspect.qname={http://www.alfresco.org/model/content/1.0}templatable

#Versioning
version.store.initialVersion=false
version.store.enableAutoVersioning=false
version.store.enableAutoVersionOnUpdateProps=false

### Kerberos properties ###
kerberos.authentication.sso.enabled=true
kerberos.authentication.realm=xx.xx
kerberos.authentication.sso.fallback.enabled=true
kerberos.authentication.user.configEntryName=Alfresco

Regarding the problem we have found that Office stores the recently opened documents in a path (C:\Users\[Some User]\AppData\Roaming\Microsoft\Office\Recent) that can be found as shortcuts. See phot 2.

Photo 2: Shortcuts from Office programms

In the shortcuts instead of the UNC path (K:\[some path of user]\SomeDocument.pdf] the direct URL to the document (https://****/aos/UserHomes/[some User]/SomeDocument.pdf) is given.

If you open the document directly from the UNC path in the Office program or from the File Explorer, the specified error does not occur.

See picture: 2 URL instead of UNC in the Shortcut from the Hyperlinks of the Office Program

Photo 3 URL instead of UNC in the Shortcut from the Hyperlinks of the Office Program
We also tried Adding this Path to the Trusted Paths in the Office Programms, no changes.

topic Re: Office 2019 - Recent Opened Files opens in write-protected mode first in Alfresco Forum

Office 2019 - Recent Opened Files opens in write-protected mode first

Re: Office 2019 - Recent Opened Files opens in write-protected mode first

Re: Office 2019 - Recent Opened Files opens in write-protected mode first