SEP File-sharing fails “Default Block Microsoft Windows 2000 SMB”

We use Symantec Endpoint Protection (SEP) Small Business Edition across most of our clients’ PC. Sometimes a PC is acting as a file-server, whether for general file sharing or because of multi-user Sage Accounts access.

Normally we just create a new EP Policy and enable rule “Allow File and Printer Sharing”.
sep rule allow-file-a-p-sharing

However that’s not been enough in some cases. Then PCs on the same network still could not access the file-share. We turned on logging with “Report Blocked Events”.

sep firewall report-blocked-events

The logging showed that port 445 was being hit for rule:

Default Block Microsoft Windows 2000 SMB

The network had IPv6 internet connection, so five different addresses were tried: two different IPv6 ULA destination address, one IPv4 address, and two IPv6 global addresses. Initially I thought it was a Symantec IPv6 bug, but then the IPv4 attempt should have worked.

We contacted Symantec support and they quickly came back asking us to try the solution in TECH213284 ( That’s to add a new rule enabling more ports for the shared network.

That solved the problem.

Leave a comment

Posted by on January 19, 2018 in Uncategorized


Ricoh printer scan-to-email “No Privilege”

Scan-to-email is a very useful feature on multi-function printers. That’s where you give the printer the SMTP details for your email server, and users can then scan to their inbox. That’s better than scan to a network share for many reasons including many businesses now longer having a file-server, instead using cloud storage; and it’s better for data-protection as the scan goes one recipient rather than sitting in a share folder that anyone can access.

Setting up scan-to-email is always a bundle of laughs however!

This is mostly because the printers that I’ve used do not give useful troubleshooting or debugging help. When the scan-to-email fails normally you get a not very useful error message. It’s even worse when doing the set-up, whether through the printer’s console or through its admin web page. The communications with the email server can fail in various ways. You’d hope that the printer would tell you at which stage it failed and give you information from that failure. Within the SMTP connection the SMTP server will return a specific error code and more importantly an error message that often includes very useful details. The printer sadly doesn’t report those details.

There are many places it can fail:

  1. No network cable connected
  2. No IP address etc assigned
  3. No response from DNS server
  4. Non-successful result from DNS server for the given SMTP server name
  5. No TCP connection to the SMTP server
  6. TLS or SSL connection fails to the SMTP server
  7. Then within the SMTP session, there are various steps:
    1. Initial handshake failed
    2. Authentication if used, failed
    3. Sender address not accepted
    4. Recipient address not accepted. For instance, if the email server thinks you are spamming then it will generally return an error here.
    5. Email sending failed

On a Ricoh printer, there is no test facility when using the admin web pages to do set-up. The only way to check it is working is to do a test scan and hope that the error message guides you. If you’re doing this remotely you of course have to ask someone near the printer to do the scan for you.

Through the printer’s console, there is a Test button on the page where you set-up the SMTP server name/address. It reports only a success or fail and gives no further information. Worse it is slightly misleading. According to an expert in these printers that test is simply an ICMP ping. So, it’s not any use in checking most of the stages in the SMTP connection where it can fail as listed above and does not give the error reason.

Perhaps there is a whole series or article on this subject, but for now I just want to cover one case where the error code the Ricoh device case was unlisted in any Ricoh manuals I could find on the internet and Google didn’t find anything.

This case: “No Privilege

In this case the email server was Office 365. We had used that successfully elsewhere. The Test button on the SMTP server page returned success (as had the DNS Test, and pinging remote destination etc). On a scan the only error message it provided was “Error” which is not useful!  The help in the scan logging screen showed that it would report some SMTP failure e.g. failure to connect, authenticate, etc.

There were no job logs through the admin web page, but I did eventually find related logging in the Download Logs feature. Analysis of them took some time as they contain multiple lines per job. I eventually found this bunch of logging for each failure:

2017-11-13T14:12:02.0 Scanner: Sending Failed Control Panel Failed Output Failure 0x00000022 1 0x00000000000003e0
Succeeded Completed 0x00000000000003e0 Scan File 2017-11-13T14:11:40.0 2017-11-13T14:11:56.0
Failed Failed No Privilege 0x00000000000003e0 Send 2017-11-13T14:11:57.0 2017-11-13T14:12:02.0 Abi

I’ve removed tens of columns from the middle of that, so if looking at those logs yourself expect to do lots and lots of horizontal scrolling!

As noted above there is no information I can fine on “No Privilege“.

For comparison a failure when the network is down, it gives this error logging (I’ve removed most right-hand columns) and two rows only:

2017-12-21T14:41:34.0 Scanner: Sending Failed Control Panel Failed Output Failure
Failed Failed Connection Failed with Destination

After much investigation, as an educated guess we turned on SMTP Authentication. The initial set-up had been done without that as the previous model could not authenticate to Office 365. (The SSL/TLS implementation was far too old and insecure to be accepted by Office 365, and without encryption Office 365 won’t accept authentication).

Authentication fixed the problem. Scanning was working! So, it was something about the SMTP connection that was going wrong.


Job done? No, there’s the why still hanging! Since the printer doesn’t give us any help we need to look at other SMTP debugging methods. One is to use a terminal client (e.g. telnet) to speak to the printer which allows us to the see the email server response — those which the printer sadly does no show us!

This is the SMTP session I did by hand. The indented lines are my commands to the server.

220 Microsoft ESMTP MAIL Service ready at Thu, 11 Jan 2018 18:43:27 +0000
250 Hello [] 
250 2.1.0 Sender OK
550 5.7.606 Access denied, banned sending IP []. To request removal from this list please visit and follow the directions. For more information please go to (AS16012609) []
221 2.0.0 Service closing transmission channel

So, we can immediately see why the email is not sending. If only the printer had shown us that error message we would have been save hours of troubleshooting,

550 5.7.606 Access denied, banned sending IP []. To request removal from this list please visit and follow the directions. For more information please go to (AS16012609) []

So, we’re on a shared IP address range from our ISP and other are apparently sending spam then the address range is barred from sending. Hence why authentication fixes it: we prove to Office 365 we’re authenticated permitted senders.

Please please printer manufacturers start including better troubleshooting. For instance, please have a test feature that sends a scan email and includes full information as to where it fails, and if it fails during the SMTP session please include the full error message from the SMTP server.

Leave a comment

Posted by on January 12, 2018 in Uncategorized


Sage install update error Ox800704DD

Sage Software Updates  An error has occurred.  Error Adding File (The operation being requested was not performed because the user has not logged on to the new.ork. The specified service does not exist. (Exception from RESULT: Ox800704DD)).   Please contact Sage Customer Services

Error Adding File (The operation being requested was not performed because the user has not logged on to the new.ork. The specified service does not exist. (Exception from RESULT: Ox800704DD)).

 I upgraded a small charity’s Sage installation recently and got the above error on two out of three machine. After the upgrade completed the update dialog appeared but it failed with the above error. One the one machine the update process installed (Service Pack 4) successfully.

On the other two machines, a bit later I just reopened and closed Sage, then the update re-ran and was successful on both PCs.

Leave a comment

Posted by on June 1, 2015 in Uncategorized


No Import Contacts to Office 365 OWA Shared-Mailbox — Use Powershell

I was wanting to import a CSV file of contacts into the contacts folder of a Shared Mailbox and using OWA (Outlook Web App) to do so. Normally one goes to wheel->Import-Contacts, supply the file name, and success…

OWA Import-Contacts menu     OWA Import-Contact window

In OWA it’s possible to open a Shared Mailbox if you have the rights to do so (use the menu with your name and select “Open another mailbox…”). However if you try this it fails with a 403 error. Shame.

OWA Import-Contact fails if opened Shared Mailbox
(Failing URL is

Of course PowerShell comes to the rescue. Office 365 has a cmdlet Import-ContactList (help). Connect PowerShell to Office 365 in the normal way and call that cmdlet specifying the user to import to and the CSV and it does the job.

PS C:\temp> Import-ContactList -Identity -CSV -CSVData ([System.IO.File]::ReadAllBytes(‘Antony_no_groups.csv’)) -Verbose
VERBOSE: Importing contacts to mailbox “”.RunspaceId       : bdf8902b-e858-44ba-a8ee-368fc809f6c2
ContactsImported : 136
Identity         : tmp-contact-import1
IsValid          : True
ObjectState      : New

PS C:\temp>

The Contact folder for the Shared Mailbox is now full:

OWA contacts

Leave a comment

Posted by on August 7, 2014 in Office 365


Add RSS feeds in Office 365

Outlook and Outlook Web App can display RSS/Atom feeds.

Outlook RSS feeds

RSS Feeds in Outlook (2010)

Outlook OWA RSS feeds

RSS Feeds in Office 365 OWA

There’s apparently no way to add feeds from within OWA. So you’ll have to have Outlook set-up for your account for this to work. But once they’re added in Outlook they then appear in OWA.

I had another complication however: I have multiple Exchange accounts. It seems that one can only add Feeds to the primary exchange account but I wanted it in one of the other accounts.

Outlook Add New RSS Feed on menu

Add Feed on the primary Exchange account

Outlook no Add feed on secondary account menu

No Add Feed on the secondary account

So I added it to the primary and then tried to drag it into the RSS folder in the other account. However no go! (Two error messages.) Then I waited and tried again just in case it was still synchronising. But again it failed.

The solution? Copy the feed of course. Moving it didn’t work but creating a copy in the second account did work. Yay!

Ohh and for double fun, to get a Facebook Page’s timeline as a feed use a URL like the following:  See e.g.

Leave a comment

Posted by on June 23, 2014 in Office 365


“Post Snippets” WordPress plugin backup

I use the Post Snippets plugin on some of my WordPress website. I made a change on one of them and made a mistake and wanted to get back the original content. The plugin has a Export feature but I hadn’t used it to make a backup recently. But I had done SQL and files backups of the server. So where in those files would I find the Post Snippets content?

I expected to find a new table in the SQL backup but there wasn’t one. I didn’t expect to find a file in the plugin’s folder and sure enough it wasn’t there. After a closer look I found the content within WordPress’s wp_options table I found a row. It starts:


I was able to copy out the text I wanted from there, unescape it, i.e. change \” to “, and paste it back in and restore my lost text.

Leave a comment

Posted by on December 21, 2013 in wordpress


Yahoo email import CSV

When importing contacts from a csv file into Yahoo there is no help given on the screen.

yahoo csv dialogI spent much time trying to get the import to work. Was it a filename extension issue (I started with .txt), what it a charset issue (I started with UTF-8+BOM), or what??? By trial and error I discovered that there is a single particular data column format that Yahoo expects. If you don’t use that format this will fail with the following.

yahoo csv dialog NOT-csv

So a rubbish error message and no link to a help page that describes what format is required!

As there’s no help link, I tried googling and could find no information. I only found the required format by guessing that it would be same as the export format, doing a dummy export and copying the header line. After massaging my file into those columns the import worked.

The headers from the export file are:

First Middle Last Nickname Email Category Distribution Lists Messenger ID Home Work Pager Fax Mobile Other Yahoo! Phone Primary Alternate Email 1 Alternate Email 2 Personal Website Business Website Title Company Work Address Work City Work County Work ZIP Work Country Home Address Home City Home State Home ZIP Home Country Birthday Anniversary Custom 1 Custom 2 Custom 3 Custom 4 Comments Messenger ID1 Messenger ID2 Messenger ID3 Messenger ID4 Messenger ID5 Messenger ID6 Messenger ID7 Messenger ID8 Messenger ID9 Skype ID IRC ID ICQ ID Google ID MSN ID AIM ID QQ ID


"First","Middle","Last","Nickname","Email","Category","Distribution Lists","Messenger ID","Home","Work","Pager","Fax","Mobile","Other","Yahoo! Phone","Primary","Alternate Email 1","Alternate Email 2","Personal Website","Business Website","Title","Company","Work Address","Work City","Work County","Work ZIP","Work Country","Home Address","Home City","Home State","Home ZIP","Home Country","Birthday","Anniversary","Custom 1","Custom 2","Custom 3","Custom 4","Comments","Messenger ID1","Messenger ID2","Messenger ID3","Messenger ID4","Messenger ID5","Messenger ID6","Messenger ID7","Messenger ID8","Messenger ID9","Skype ID","IRC ID","ICQ ID","Google ID","MSN ID","AIM ID","QQ ID"

That’s appears to be what’s documented at which I managed to track down after all that manual effort.

Leave a comment

Posted by on November 6, 2013 in Uncategorized