Similar Questions

• Cannot add permissions for users Active Directory - the directory access error

  Hi all

  VCenter, connected as long as user with administrator privileges on the server, Active Directory running I am can be used to add permissions for domain accounts and just get errors:

  Right-click on the data center & gt; Add authorization & gt; Select read-only & gt; Add users and groups & gt; Select the domain & gt; (the list is NOT populated with users)

  Among users, enter my account of user AD & gt; Click on check names & gt; "The following names are not found: xxx".

  Enter the AD user account in the search box & gt; Click Search & gt; "A general system error occurred: directory access error.

  The only son I can find or KB articles relate to the modification of the period of Active Directory.  I did, but it did not help.

  http://communities.VMware.com/thread/14150

  http://KB.VMware.com/kb/1010094

  Any ideas why I can't delegate permissions? I do not think we have group policies that are resticting access, but I don't know which of the log files I should I seek to find the real problem.

  Thank you

  Kevin

  Windows Server 2003 R2 Standard Edition, vSphere Client 4.0.0 build 162856, vCenter Server 4.0.0 build 162856, ESXi 4.0.0 build 181792

  The problem that I had was related to what service vCenter services were running as.  No doubt during the installation (for some reason that escapes me now) I had configured the VMware VirtualCenter Server and VMware VirtualCenter Management Web services run under the local administrator account.  Change these so they ran as system Local solved the problem, and then I have a list of domain users and assign them permissions.

  Kevin

• After you have configured remote access on Server 2003, I am unable to find the 'users Active Directory & computers'.

  am setting up remote access on the MS 2003 Server following the white paper, but can not find the 'users Active Directory & computers' to set the ip this part has been renamed or hidden somewhere?

  original title: MS Server 2003

  Post in the Windows Server Forums:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

• Multiple users Active Directory membership mapping group

  Hi all

  We got 4.2 ACS and two types of user access to our network:

  1_ we got some users in 'CiscoAdmins' Active Directory, corresponding group mapped Cisco ACS group is "switch Admins.

  2_ we also have some users in "VPN_Users' group Active Directory, corresponding mapped Cisco ACS group is"VPN_Users.

  In the "Command mapping" page on Cisco ACS 4.2, we put tte group 'CiscoAdmins' Active Directory mapping at the top "VPN_Users' Active Directory group mapping. So what happens is, if a user belongs to two "CiscoAdmins" and "VPN_Users" groups in Active Directory, users always goes in the "Switch_Admins" group in Cisco ACS.

  However for some users (who belong to two groups in Active Directory), we need to apply some IP allocation and specific authorization.

  The suggestiongs are welcome.

  Thanks in advance.

  Dumlu

  Yes, check ACS for belonging to the user group and it can determine if the user is a member of several groups and then map the corrosponding ACS group. Little additional material on the ACS group mapping

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/GrpMap.html#wp940538#wp940538

  -

  Note: Please rate the answer if it helped
  

• Change the password for the Active Directory account that is running VMware VirtualCenter Server

  We have an ESXi5.5 environment and I was instructed to change the password of the Active Directory account is used to run the VMware VirtualCenter Server Service.

  There is a Data Source configured for a separate MS - SQL Server that is configured to use Windows authentication

  I find the Article KB KB VMware: changing the vCenter Server database user ID and password

  On the key: KEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc., \VMware VirtualCenter\DB T HE for 2 and 3 values are empty

  It is not quite clear to me if the vpxd.exe Pei command is necessary for our environment (service AD account and Windows authentication) or if it is only if SQL authentication is defined on the Data Source - would anyone have experience with this change and be able to clarify for me?

  Thank you

  Yes you are right,

  but I would suggest to stop the services first before you do the activity, it can take the old password in a few times and lock the conduit to account

  2. once the password is updated, make sure that the login account is updated (is currently running services on the specified user account or local account?)

  If it runs using the specified account, you will need to updated and restart the services.

  3. make sure that the services are running fine and observe for a while, the user account must not get locked.

  Let me know if you have any other questions

• Connector for the Active Directory password synchronization

  Friends,
  We have a few questions about the connector for synchronization of Active Directory password:
  1. it is necessary to extend the AD schema when using this connector.
  2. If I have 10 domain controllers and are not synchronized, the literature tells us to install the dll in each domain controller. Is it possible to do this if necessary, to install this dll into a single domain controller?
  
  Thanks for your help.
  
  concerning

  Here's what I think:

  *1.* -> No
  * 2-> , I would say no, but it also helps you combat the failover scenario. Suppose that if you had only 1 ms then its failure would not send the password to IOM at all because none of the other DC would have this installed connector

  Thank you
  SRS

• Users Active directory in R12.1

  Hi guys,.
  
  can you please provide with the best strategy or notes metalink to integrate or to put my Windows Active Directory in EBS R12.1 users
  
  Thanks in advance.

  Hi user;

  Your welcome. If you think you have your answer please change the status of the thread to answer, he pretend to wasting time in other forums users while they are searching open question which remains unanswered.

  Respect of
  HELIOS

• search for Windows 'user' Active Directory

  the system will have many users, test records must be saved in the c:\Documents and Settings\\Application Data\Pacing FAT32\

  How can I dynamically determine this path for different users?

  I love the vi "To get the system directory" found in the subpalette of constant file of the file IO palette.  It could be LV2009 only.

  

  Note that the Application Data folder is hidden by default in win7.  In win7 x 64 the result is "C:\Users\\AppData\Local\Pacing System\" under XP, there "C:\Documents and Settings\Settings\Application Data\Pacing FAT32\"

  Approach to the Yamaeda registry gives me "C:\Users\\AppData\Roaming" questioning "LOCALAPPDATA" or "USERPROFILE" keys are also close to what you want.  If XP does not have these keys, you can also call a command line and environment variable %UserProfile% query.

  @Phil: I had trouble with the "Default data directory" vi before (yesterday actually).  It depends on a setting options in labview.  (Options > paths), I found that when I change this path in the options to use the system directory (uncheck the "use default" checkbox, click the exclamation mark, click on replace, then OK out of options), it gets resets the default restart labview, even if it appears in Labview.ini. This only happens if you use the system-specific path.  It seems to be an old problem:http://forums.ni.com/t5/LabVIEW/Custom-default-data-directory-path-reverts-to-Labview-default/m-p/36...

• Support for multiple Active Directory ACS 5.2

  Hello

  I couldn't find a way to add multiple domain controllers to Cisco ACS 5.2, all that he requires in the GUI of the ACS entered the domain name? We are limited to add the root DC /forest?

  I'm not a Microsoft Expert...

  I could not understand how ACS detects the DC through this simple entry? What is with the help of DNS?

  Comments are appreciated.

  Dumlu

  ACS 5 may be joined with a single domain right now. When GBA is joined to a domain, ACS can authenticate any user who belongs to this domain any domain controller in this domain. It relies on DNS resolution to find the appropriate domain controller.

  I think that what you are looking for is Multi domain authentication. If you do this, then you should have a two-way trust between the immediate area (the area which is a part of the ACS) ACS other areas. The ACS will send authentication to one of the domain controllers in its domain and it will then be forwarded to the other domain. It could be a child or a parallel domain, but it must have 2 path of trust between them.

  In other words, so that you may choose is to set up 2 separate domain controllers from different domains such as LDAP servers. In this case we do not need a way 2 trust and you can separately for each domain authentication request.

• Connect as a user Active Directory error

  Just get a dev system implemented for the first time.

  Logging the admin default user is fine. If I add a local user on the server VCAC, I can add this user to the Administrators group and the work of connection.

  If I add a user AD, VCAC correctly identifies the user in the format domain\username. But when I go to open as a user I get the following error:

  Inaccessible service

  A required service is not reachable at the address provided.

  Please contact your system administrator for assistance.

  REPO404 reference error.

  I solved this problem.

  My mistake was to have the services behind vCAC running as a local administrator on the host user. Once I changed to be a user of the AD, it works fine.

  VCAC Server service and the SQL server connection must be AD users, I think.

  Hope this helps someone.

• How can I delete an Active Directory user on a computer

  Hi all

  Thank you in advance for the answers.

  I have a user Active Directory on a computer Windows 7 Pro that I want to delete on this computer, and then have him sign in again and re-create the profile / user. (I have problems with its current profile)

  I don't know what the best way to cleanly remove the AD user on the Windows 7 Pro computer. Any help would be greatly appreciated.

  Thank you

  Alex

  If the connection is an AD account, you can simply delete the profile from c:\users folder and then it will be re - initialize the whole profile when the user logs in.  This is where the the user registry hive is stored, so it also cleans the registry by deleting this folder.

• Active Directory users

  Hello. I can't assign groups of users active directory (of MSADAuthenticator), there is an exception for her?

  I see:

  This page allows to configure the membership of a group for this user.

  Parent groups:

  (No value specified)

  This user may be a member of a

  and don't have options to assign a group.

  Thanks in advance

  I answer myself.

  Cannot assign groups AD Usert to Web Logic. But Weblogic recognizes ad groups to which users belong. I can then assign a role for the AD Group and user permissions are affected.

  Greetings.

• Active directory user cannot access the report.

  One of the users active directory is unable to access a report, I gave the user view and Explorer in shared services provisions, are there other provisions that I need to give?
  According to the user when he clicks on the report and tries to open it, it asks for a username and password and generates an error when you try to connect by using his ID and password.

  Hello

  Your questions on the financial reports or forms of data in planning?

  In the case of forms, you can add affect access to the user reading/writing/no access. Open the form add assign access-> user-> select user-> give the appropriate access.

  For the reports go to Navigate-> explore-> select the report-> right-click provisioning-> click on remove users-> selcet available user or group run Panel selected-> next-> access inherit-> ok.

  Thank you.

• New authentication active directory on wlc 2504

  Hello

  There is problem with very often a new authentication for servers active directory. Every time only if:

  -loose client wlan/wifi because of the wifi hole or low RSSI

  -output of build for a while customer

  -wlan loose customer due to problem with homelessness (slow, not perfect)

  There is possibility to keep authenticated users? I had hope that options: sleep customer, max session timeout, max idle timeout

  help, but they do not work for me :(

  My access point (2702) are all in a group flexconnect. WLC 2504 (8.1.102.0). My security in WLAN config is:

  Layer2: wpa + wpa2, PSK

  Layer 3: web policy, authentication with LDAP servers + asleep on client

  I always try to improve the radio covers n fast roaming (11 k, r, v) but if someone leaves the area wifi, to do authenticated which is a little annoying...

  Thanks for any advice or an index

  Peter

  You want people who re - attach to your network for to re-authenticate.  It's a good thing.  We do not want people using the old credentials, or expose you to a security breach.

  This behavior is by design - and good.

• E-mail notification triggered during the reconciliation of the Active directory trust

  Hello

  When we run the scheduled task of reconciliation of trust user Active Directory, the user gets created by IOM and sends a notification to the user to create . But, if there is no change in Active Directory for the same user (any attribute changes) and we run the recon work trust, will be change also trigger an email notification?

  I mean, is that the notification of the user to create triggers the user and Manager too?

  During the reconciliation of trust, generated notification is to create user... is it good?

  I searched a lot of places, but could not find any appropriate entries. Please provide some input?

  Thank you

  No, during the change won't email notification.

  Creating trusted users, suite of property gets used:

  Must send notifications in recon or not

  Determines whether the notification is sent to the user in the user login and password are generated in the event handler postprocess for the creation of the user through reconciliation of the trusted source. If the value is set to true, then notification is sent when the user name and password are generated in the event handler postprocess for the creation of the user through reconciliation of the trusted source. If the value is set to false, then notification is not sent when the user name and password are generated in the event handler postprocess for the creation of the user through reconciliation of the trusted source.

  Recon.SEND_NOTIFICATION

  true

  If you want to send messages during the recon trust (update/changes), you must write your own code to java of notification, FYI: http://www.ateam-oracle.com/oim-11g-notifications/

  ~ J