Horizons in a domain environment.

Similar Questions

• Profile Manager - failed to install the remote access profile in the domain environment & multi-Active Network Directory

  Hi all

  I am a COMPUTER administrator for a college and I am trying to fix what seems to be the last hurdle in getting the Profile Manager works correctly.

  I worked for a while now trying to get the Profile Manager capable of pushing the device and profiles for Mac in our group network environment. I was able to operate intermittently, but not often. Most of the time I'm unable to install the remote management profile.

  When you try to install the remote management profile, I give myself one of the two errors-

  The first error is:

  The Installation of the profile failed.

  The «TeleManagement (com.apple.config. » profile (Server.FQDN.mdm:GUID) "could not be installed because of an unexpected error < MDMResponseStatus:500 >

  (Obviously server.fqdn and GUID are placeholders for their actual values)

  

  The second mistake is:

  The Installation of the profile failed.

  Failed to contact the Protocol SCEP server to ""http://server.fqdn: 1640/CEP / "."

  

  The server Mac OS X 10.11.4 works

  OS X Server is version 5.1

  Client Mac is for most running 10.10.4

  Here's a quick run down on the environment and the steps I have already taken to solve the problem.

  • The network is an Active Directory with several networks multi-domain environment. I mainly work with two different networks, each associated with one of the two areas.
  • The Mac server hosting the Profile Manager is a Mac Pro. The two network cards is used, each on one of the two networks. The Mac server is joined to the domain in the primary forest.
  • I opened all the ports and IP ranges for Apple's Push Notification service for two on our firewall and tested networks between the two networks to ensure that the AFN is accessible.
  • I created a static DNS entry for the server in the DNS zone for the main domain. I also have a separate DNS zone for the DNS record for the interface on the secondary network. I also confirmed that Macs see the correct IP address of the Mac server for their network.
  • I tried to change the settings for network access for the Profile Manager. The first error seems to happen when the Profile Manager are restricted to the network the Mac client is not connected. This same error also occurs if I open Manager profile access to "all networks".
  • I have experiemented with the different certificate types. In general, I use the self-signed certificates that are generated automatically. In this scenario, I install the profile Trust first (which works seamlessly regardless of network or domain). I also tried to use a certificate for Code signing signed with our own CA to sign the profile of remote management. The same errors will occur no matter what certificates are used.
  • The second error occurs when the access profile manager is limited to the same network that is connected to the Mac client
  • I ran Wireshark captures on several client computers, as well as on the Mac server interfaces and haven't seen any traffic blocked or rejected that seemed related to the Profile Manager
  • I've deleted and rebuilt my OD master
  • I also scoured newspapers for clues Profile Manager and haven't found much
  • In addition, I have also studied the problem and error codes/etc widely and have not found a lot of useful information
  • I don't know there are any other troubleshooting steps I took as well, but I've been question bout this for awhile and I don't remember everyone.

  That's a strange thing - I had it working for Mac on the main network and the domain. However, I discovered that the Mac on the secondary network and the field was unable to download the profile of remote management. This is when I started to change the Profile Manager, access network, which eventually introduce the problem on Macs connected to the primary/field of experimentation network. Change access return settings in Profile Manager does not restore functionality for pimps who worked.

  Another thing odd in this test scenario all - Mac on the network high school/area would not install remote profile unless management I temporarily moved it to the main network (I do not untie / reassign to one the main domain on these Macs) I could get the profile of remote management to install and then pushing profiles has worked. Even more strange, it's the Mac that I had to move temporarily secondary network to the main network to allow remote management profile install only works always as long as the Profile Manager are restricted to the secondary network and 'the Mac'. However, Macs in the same room, on the same network in the same field, using the exact image even get the errors described above.

  The only thing I have not yet done is delete/reconstruction Profile Manager. I would really like to avoid this if possible. Solutions that involve something like Casper or other software integration AD for Macs are also a non-starter.

  I'm happy to elaborate if necessary. I appreciate the help.

  Okay, I think I can find the root cause.

  Before this discovery, I had completely rebuilt Profile Manager. Now, I managed by pushing the management profile remote for Mac in the two fields/networks. However, many of them still refuse to install remote management profile.

  Macs who encounter the problem are all were imaged using NetRestore using an image captured from an another similar iMac. IMac even that was used to build the image has now been reassigned in a test of Mac. I found that when you attempt to register one of the Mac who had received this image it shows already as "registered" when you go to "mydevices" on my Mac server. I also noticed that they all have the serial number of the test Mac when viewing their "register". Among the issues of Macs, I activated the lock of the device from the page "mydevices" for the so-called problematic Mac registered (showing the serial number of the iMac used to create the image) and it locked the iMac used to create the image - not the Mac issue.

  This tells me that the CID (or Mac equivalent) is set on the Mac CID used to create the image for all of the Mac said image was deployed to. If it's a Windows box I have a sysprep prior to deployment or could perform a rearm after the fact. I am unaware of how to perform similar functions in OS X.

  I tested also since on some Macs that do not have this image, and they are able to register and install the profile of Managing remotely with success.

  If anyone has any suggestions on how to reset the CID (the computer ID) under OS X, I'd appreciate it. Thank you.

• Should I go to a domain environment?

  It is a standard of microsoft to have a domain environment, if I use clustered controllers on my place of work. I currently use the tcp/ip Protocol in my business system implemented.

  Hello MarcCando,

  Your question would be better for ITPros in the Microsoft TechNet Forum.
  http://social.technet.Microsoft.com/forums/en-us/winserverManagement/threads

  It would be for you to decide if you need a domain environment, compared to a workgroup environment. The idea behind domains is a centralized management to manage computers, users and groups.

  Look at the links below to help determine what might work best for your workplace.

  http://Windows.Microsoft.com/en-us/Windows7/what-is-the-difference-between-a-domain-a-workgroup-and-a-HomeGroup

  http://TechNet.Microsoft.com/en-us/library/dd897048.aspx

  I hope this helps.

• Working in a domain environment, a printer, XP machine only 10 people can connect to it at the same time

  Currently, I am working in a domain environment. And with an XP based PC, a HP Laser jet 2015 printer is attached. about 90 users printer mentioned. Problem is that only 10 people could make connection with this PC, everyone else remains in the queue and wait there turn. The manual solution to disconnect all sessions (my computer (right click)-> manage-> to connect to a remote computer-> shared-> sessions folder-> disconnect all sessions. but now I'm looking for a mechanism that must disconnect all ideal sessions after a determined time interval.)
  * original title - how do I resolve this issue *.

  From what I understand, WHAT XP allows only 10 concurrent sessions or anything of the sort... you need to install an operating system server to accept more. Not sure if windows 7 or vista no longer accepts.

  Can't really help with a "time out" on the sessions.

• Remote support unsolicited in the non domain environment

  Suppose you have two Windows 7 or machines in home network. Is it possible to configure * spontaneous * Remote Assistance? I tried, but I can't adjust properly authorized list of helpers * gpedit.msc*, since each tutorial that I saw added a domain group or domain user in the list and I don't use the field. It is even possible to configure this feature for non-domain environment?

  Hello

  Welcome to the Microsoft community.

  You can check out the following link and check if it helps.

  Connect to another computer using Remote Desktop connection

  If the problem persists, I'd recommend posting your query in the TechNet Forums. TechNet is watched by other computing professionals who would be more likely to help you.

  TechNet Forum

  http://social.technet.Microsoft.com/forums/Windows/en-us/home?category=w7itpro

  Hope this information is useful.

• Update creative cloud in the domain environment

  Dear support,

  We are in the domain environment and have about 40 computers with installation of creative cloud. In the past, all users have been defined to them as local administrator so domain users were able to first update, but due to the change in company policy, the local administrator permission is removed soon so IT admin must attend each machine to make the creative cloud or upgrading components if they are available. We are keen to know if Adobe has any suggestion to deal with similar scenario in order to minimize the effort of the system administrator.

  Thank you.

  See you soon,.

  LT

  You don't describe your organization, so this can not help but read Government accounts https://forums.adobe.com/thread/1483694 for ideas

• VPN connection before user logon in the domain environment

  I took a huge project, but managed to set up a comprehensive network for an organization not-for-profit.  Is only a single obstacle, but the answer is completely referring me.
  I installed a Windows 7 Ultimate in a test environment.  The server is standard 2012 and are located off site.  I have configured VPN and can connect, but remains one of the limitations...
  THE SITUATION
  ... the computer, I am preparing in aura production environment users and will be on the field.  They have shut down the computer during the night and on weekends.  During my tests, I found that VPN will NOT connect automatically.  I don't want a users to this remote location with access to the local office any longer.  Everyone must sign their credentials of domain only, and I'll be locking the local office with identifying information has changed.
  With the help of Google, I found several ways to automate so-called VPN connection, but every article I've read so far says that it happens as a script at logon Windows.  Who defeated the purpose here.  I wish the VPN to be connected at startup, BEFORE the opening of the session, so that users can sign on the field immediately after the power of the computer.  I had considered just giving a directive to leave the PC on 24/7, but in case of crash or regular updates of Windows, which would put us back to the start.
  DEMAND
  Can I do so that the VPN connects automatically TO a user on a desktop computer log?
  THE SPECS
  The clients are on Windows 7 Ultimate Edition
  Connection VPN set up in windows (no third party software)
  Windows Server 2012 with Active Directory server-side
  Before someone says, yes I know that Server 2012 has called DirectAccess, however even if it is installed, it is not an option with my setup because I won't drag desktop through the city to connect to the domain when I can use VPN just as easily without the risk of damaging the material.
  I appreciate the answers and eager to solve this.  It must be possible, as I hear from companies doing this all the time for satellite facilities.  Have a good night :)

  Hello Christopher,

  The question you have posted is linked to the virtual private network (VPN), and the right place for you to contact would be TechNet support.

  I suggest you to check with TechNet support for more information.

  http://social.technet.Microsoft.com/forums/en-us/newThread?category=WindowsServer&Forum

• Office creative cloud in a domain environment

  OK, I've been everywhere in Google and the forums here and have not yet found a solution. I will elaborate on our current issue.

  Currently, we run a mixed environment domain and not domain systems. All systems to communicate through the firewall even border. However, CCP (Creative Cloud Packager) and CCD (Creative Cloud Desktop) only work on non-domaine systems. On the systems in the domain, we can install both applications, however after installation, they simply clock when booting, or in the case of the CCP, we get the error "please connect to the Internet and try again. We have disabled the firewall and AV on these systems (even if both executed on systems not domain without any problem) nothing works. Similarly, we connected and used a local administrator account on these systems in domain (both install and run), still with no luck. It seems as if something to do with the domain, or the domain security systems preventing these products Adobe works fine, but we were unable to understand what he.

  Anyone know, or have experience with this problem or similar problems?

  Thank you in advance.

  Rob

  After a repair for the last week I finally understood that (a weekend away from work wonders makes auditing your head). It occurred to me that I became the security certificate prompt when starting of the CCD on field systems, but was not getting the prompt on systems not to a domain. This thread look at me the certificate and the certificate stores on the two systems. It turns out, put into service the first time, CCD wants to add a third party automatically trusted root certificate. However, it was not possible on the systems in domain as trust of third-party root certificates installation is disabled by domain group policy. The work around was to export the certificate from a non-domaine system and import manually in the domain system (requires administrative access). After manually import the certificate, CCD (CCP) starts and works very well.

• I can't connect you on some client computers on a domain environment unless I have remove the network cable.

  I have almost five machines on my LAN that cannot log on to the domain, unless I have remove the network cable and then it connects.
  Please advise?

  On the domain controller or problems by communicating with the domain controller, when you remove the network cable, you connect with that caching of credentials.  Also look at the DNS settings on the RODC, the RODC DNS should point to itself, make sure that the machines are all on the same subnet.

  John

• Install Windows Store Apps in a domain environment

  I work in the 8th largest school district in the nation and we are moving forward with Windows8. We are going to develop some applications of Win8 (LOB) and we are clear on their distribution to our users. But we also want our users to be able to install Win8 Store apps on the Windows Store.

  My question is how can our users install apps from the store without giving them or forcing them to have a Microsoft ID account? Nothing against the Microsoft Account ID (we are in the middle with Win8) but we have 25,000 employees and we do not know how to handle this? Someone has encountered this situation or know the best way to handle this?

  Hi Denny,

  Please post this question in the following TechNet forums link, because they are better equipped to help you:

  http://social.technet.Microsoft.com/forums/Windows/en-us/home?Forum=w8itprogeneral

  If you have questions about Windows operating systems, help us on this forum.

• CRM using SQL database in an environment of small business often inaccessible with the following error message

  Hello

  This is my first time on this forum so bear with my ignorance!  I'll expose the background of my setup and then explain the error.

  We have a small business with a server running SBS2011 and PC running Windows 8 and 8.1 connected to the server in a domain environment.

  We use a CRM product called Emu Tall that uses SQL Server 2008 R2 on the server for the database and the PC run a local application that connects to this database.

  On a daily basis, but completely randomly and sometimes several times a day, a user will try and open the application on a PC and get the following error message.

  Could not load file or assembly 'Microsoft.SqlServer.SqlEnum, Version = 10.0.0.0, Culture = neutral, PublicKeyToken = 89845dcd8080cc91' or one of its dependencies. The system cannot find the specified file.

  At first, I thought it must be a matter of waiting time as it seemed to happen every morning, but I've proved since that it occurs at any time of the day and is apparently unrelated to amount of users or idle time or something like that.

  Here's another oddity that hopefully sheds some light on it. If I go to the server and open the CRM application on the server, it works very well since it is only the PC that have the connection problem.  In addition, as soon as I connected to the server of any PC can connect immediately (until it happens again later in the day).  I don't need to stay connected to the server, connect one time and close the session and he "fixed" it for a few hours for all PC users.

  I contacted the CRM vendor, and they are completely confused and have no idea what to do.

  We are trolling along at the moment with me opening a session on the server for launch launch whenever a user receives the error message but it is far from satisfactory.

  A final observation is that it does not always.  It used to work fine.  The problem began just two months ago and seems to coincide with the increase in our user from 5 to 12 users license even if the CRM provider swear that it is nothing to do with the license.  They may agree; I don't know enough to argue the point.

  Any help will be appreciated! I'm sure it will be a simple solution and someone there will know why and the answer immediately but is elusive at this time.

  This issue is beyond the scope of this site and must be placed on Technet or MSDN

  http://social.technet.Microsoft.com/forums/en-us/home

  http://social.msdn.Microsoft.com/forums/en-us/home

• Configure a message to logon to the domain users

  Hello

  I installed a domain environment & user are properly login into that. but I want to configure different message to logon for users in my area I mean I want to send users information related to that particular user separately automatically when login in the field. can someone guide me?

  Ask your question in the TechNet forums, where the areas are supported (because they are not supported here)

  http://TechNet.Microsoft.com/forums

• Problem with to demote a domain controller

  Hi all

  I tried today demote a domain controller, but my domain environment is still need of this domain controller to work.
  I have windows Server 2003 Small Business DC as DC1 & lately I added windows Server 2008 R2 DC as DC2 in the new box as an additional area. Now, I need to downgrade the windows server 2003 SB (DC1) in an old box.
  I transferred FSMO (all 5 roles) and remove DC1 from the announcement. In addition, remove it AD users & computers and Services of & Sites AD and DNS... I used the steps in this link: http://www.petri.co.il/delete_failed_dcs_from_ad.htm
  When Dc1 is not connected to the network, you receive this error (see this picture of this link http://i41.tinypic.com/30upoxj.png) every time I opened all the consoles AD (AD users & computers, etc...).
  Also, when I tried to change the domain controller, it seems that he could not located the domain or domain controllers. Please, see this photo from this link: http://i43.tinypic.com/2n6afx1.png
  I can solve it reconnect DC1 to the network, but I don't want to keep it longer, and I don't know what Miss me? Also, I tried to use dcpromo to remove the domain controller DC1, but I got an error message that tells me that this is not the last domain controller in the forest and cannot proceed with the removal of the DC.
  Can you help me as soon as POSSIBLE, I'm right here.
  Waiting for your answer... Thank you!

  Hi Haitham2011,

  The question you have posted is related to Windows Server 2008 and would be better suited to the TechNet community. Please visit the link below to find a community that will provide the support you want.

  http://TechNet.Microsoft.com/en-us/WindowsServer/default

  I hope this helps.

• How to change a 2008 Server-based unique work and the affect connected PC based domain, group

  Single server running Server 2008, Version 6.0, SP2 25 user license
  Configured as a 'working group '.

  12 PC connected as Vista Ultimate
  2 connect ed PC running Windows 7 Enterprise - these have problems to connect automatically to the server which is one of the reasons we change to a domain environment.

  You will need to connect a VPN to a backup off site location.  Who needs domain.

  Please repost your request in one of the appropriate Forums for Windows Server.  Thank you!

• Order to kill Visual Basic and Windows domain Policyies

  We have a program more former that uses files in the folder root (C:\) thus produces a file in there when you use a command to be sent to the screen.  At the end of this programming, it uses a VB Kill command to remove the file that it created.

  In a domain environment, the policy prevents all to allow this file to be killed.  What is the policy for this, so I can assign users and groups to enable them to kill this file.

  I also have this problem with windows 7, where the files in the folder root can be read for this program, but they cannot be edited or deleted.

  Thank you!

  Hi John,.

  Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows 7 networking forum.

  http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads