Use of .private as FQDN for SLS in split DNS configuration

I am setting up a new SLS and just wanted to reach out to see if anyone has had any negative experiences using a domain.private for a FQDN for the server and enabling mail service with mail.domain.com.
We will be publicly hosting domain.com on a completely different server.
I have the SLS server set up this way right now. We are in testing but not yet in production. It was set up that way based on discussion with a couple of Apple reps.
We do not plan to use any of the SLS services publicly, with the exception of Mail. All of the other services will be accessed locally on the network or through remote VPN connection to the SLS.
Server is working properly thus far with public static IP sitting on an Airport Extreme and private IP of the server NATted behind the Airport Extreme.
A record, MX record, SPF record, and PTR record have been properly set up the respective ports opened on the Airport Extreme. So mail is coming in and out properly.
Thanks to anyone who can share any insight on this general configuration!

I prefer to use a registered domain name, or a subdomain of a registered domain name, even if it's not externally accessible. That absolutely prevents domain collisions, and it means if (when?) you go public, you don't have to re-address everything. It's insurance at the cost of a couple of trips to the coffee shop a year...
If I'm going to make something up that I don't have registered (eg: .private) (and I don't prefer to do that), I prefer to make something up that will be extremely unlikely to ever be used. (eg: .local got used for zeroconf, and has subsequently been causing some "fun" for folks that squatted on it.)
IANA has been adding TLDs and that practice will undoubtedly continue, and they're in the process of opening it up to most anybody that wants to run their own TLD. (eg: .travel, .cat, and I expect there'll be a whole pile of new ones arriving as TLDs turn into "vanity" TLDs; as each company with a big enough budget to rent or run their own big DNS servers gets their own TLDs.)
Your configuration will require you to run your mail through NAT, or set up a split-horizon (you're not really running split-horizon yet) for your internal IP address translations or (probably the way you're going to do this right now) via an authorized relay and your external mail provider.
I've set stuff up using all of these. It works.
And though you don't mention it, get out of 192.168.0.0/16, or at least out out of the most common subnets in that IP address block. Using the block or particularly the common subnets in the block messes up VPN routing if (when) you get to wanting (needing) that. Best to start out in 172.16.0.0/12 or 10.0.0.0/8, as most home networks and most coffee shops are in 192.168.0.0/16 and most are in the same subnets within that block, and that precludes VPN routing.
The Airport and Time Capsule devices are good home routers, but comparatively weak server routers. Budget for a replacement firewall, particularly as you start using features. You'll likely then repurpose the Airport or Time Capsules as access points (APs), or what Apple calls "bridging", when you replace them with a server-grade firewall. (Requirements here can differ, but can include a VPN server within the firewall, DMZ, RADIUS authentication, or port forwarding requirements past the (very limited) capabilities of the Airport and TC boxes...)

Similar Messages

Providing external url for the fqdn for webfeed returns error in eventlog that shows internal url is being used - how to change to the external url?

I've got my Rdweb accessible on both my internal and external network by using split dns locally to resolve the external url (remote.domain.com/rdweb) to resolve and everything works fine. However users don't want to use the rdweb interface (as it is slower
than just clicking on a rdp shortcut.
Following the notes at http://social.technet.microsoft.com/wiki/contents/articles/14488.distribution-of-remote-apps-and-desktops-in-windows-server-2012.aspx - I've tried to set up the webfeed on a Win7+ machine but when I enter the external url that
is protected by an SSL cert the eventlog shows that the internal address is being used and it doesn't match the certificate. - "There is a problem with this connection's security certificate.
The remote computer cannot be authenticated due to problems with its security certificate.
Security certificate problems might indicate an attempt to fool you or intercept data you send to the remote computer.
Windows cannot continue setting up this connection. Contact your workplace administrator for assistance.
Connection name:
Connection URL: https://internalservername/rdweb/feed/webfeed.aspx
How do I set the servers to use the external address rather than the internal one - i'm assuming it's similar to exchange's
Set-webservicesvirtualdirectory command but I can't find the equivalent command documented anywhere.
http://absoblogginlutely.net

Hi,
Thank you for posting in Windows Server Forum.
Please check below mention point.
• Create a relevant DNS entry in the mentioned zone to point to the RDS environment’s internal IP address
• Create a relevant DNS entry in external DNS to point to the firewall which is publishing RDS’s external IP address
• You can use the below mention script to change the FQDN of the RDP files provided by RD Web Access / RemoteApp and Desktop connection feed.
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In addition please check below mention thread.
How do I change the URL to the Remote Web Access server in Windows Server 2012?
http://social.technet.microsoft.com/Forums/windowsserver/en-US/67dfab70-7e10-4e0b-a3c8-63ce776f2355/how-do-i-change-the-url-to-the-remote-web-access-server-in-windows-server-2012?forum=winserverTS
Apart from this, also check the settings under; IIS in RDWeb Server as per below mention path.
Expand the default Website >Pages >Application Settings >DefaultTSGateway >
Enter the external address (FQDN) of the RD Gateway in the Value Field.
Hope it helps!
Thanks,
Dharmesh

Single fqdn for rds?

I have server 2012 r2 that has all rds roles. It's hosting few apps that are published as remoteapp for both internal and external users.
Is there going to be problems that I should be aware of if I configure everything with single fqdn remoteapp.company.com? I'm buying certificate from public ca and I have problem because there is .local in servers internal name and I cannot append
that to certificate. I'm planning to configure internal dns so that remoteapp.company.com resolves to rds server private ip and external dns server resolves to public ip.
How does client determine when to connect via rd gateway? Will they always connect through the rd gateway if internal server name and rdgateway names are the same?

Hi,
There is no problem with using a single name since you have everything on one server. You will need to change the published FQDN using this cmdlet:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
In RD Gateway Manager, please edit the Properties of the RD RAP. On the Network Resource tab, please select Allow users to connect to any network resource. Alternatively you could create a RDG-managed local group that has the required names and
select that option instead.
In your firewall you need to allow TCP port 443 and UDP port 3391. Using the default setting internal users will not use RD Gateway whereas external users will use RDG since they will be blocked by your firewall from connecting directly on TCP/UDP
3389.
If you would rate the above cmdlet (hopefully 4-5 stars) I would appreciate it.
Thanks.
-TP

SSL: How to use the same key pair for ABAP & JAVA?

Hello,
I want to setup an XI (3.0 on Netweaver04)installation in the way, that ABAP AS and JAVA AS use the same key pair for SSL. My problem is to define the same private key on ABAP and JAVA. With the JAVA Administrator I am able to define or import a private key. But I could not find a possibility in ABAP to manage private keys in order to use the same on as in JAVA. What is the procedure for this?
Thanks and Regards,
Frank Tottleben

Hello,
I want to setup an XI (3.0 on Netweaver04)installation in the way, that ABAP AS and JAVA AS use the same key pair for SSL. My problem is to define the same private key on ABAP and JAVA. With the JAVA Administrator I am able to define or import a private key. But I could not find a possibility in ABAP to manage private keys in order to use the same on as in JAVA. What is the procedure for this?
Thanks and Regards,
Frank Tottleben

CRS Install hostname being used by more than once for the same node.

Hi, we're installing The Oracle Clusterware and on the Cluster Configuration screen of the universal Installer (the one were you specify the clustername and clusternodes) we get the following error message in a dialog box when the next button is clicked:
"You must enter unique values for the public node name, the private node name and the virtual hostname for all nodes in the cluster. The name, node1, that you entered is being used by more than once for the same node."
Has anyone experienced this error message before and know what the cause is?
Could it be a problem with the /etc/hosts file?
Thanks in advance,
M

Make sure you allocate separate IP addresses on your network for the VIP addresses on each RAC node (this is not the same as the machine IP already configured on the OS).
Also, the installer may complain if your private and public IPs are configured under the same subnet.
Finally, as mentioned before, check that name resolution for all the IPs to be used. On all RAC nodes, your /etc/hosts file should be configured with:
- public name and IP addresses of ALL nodes
- private name and IP addresses of ALL nodes
- VIP name and IP addresses of ALL nodes
Hope that helps
B.

Developing and using Adobe AIR native extensions for Android devices

I was using this tutorial:
"Developing and using Adobe AIR native extensions for Android devices"
http://www.adobe.com/devnet/air/articles/ane-android-devices.html
When packing the Flex mobile ANESampleTest to deploy on an Android device, the below error happens
Error occurred while packaging the application:
aapt tool failed:invalid resource directory name: /private/var/folders/k8/1thhvkf92h947n_g22hg_v9m0000gn/T/52ba05aa-9001-4d46-9438-db81ef83 06f0/res/drawable-xxhdpi
invalid resource directory name: /private/var/folders/k8/1thhvkf92h947n_g22hg_v9m0000gn/T/52ba05aa-9001-4d46-9438-db81ef83 06f0/res/values-sw600dp
invalid resource directory name: /private/var/folders/k8/1thhvkf92h947n_g22hg_v9m0000gn/T/52ba05aa-9001-4d46-9438-db81ef83 06f0/res/values-sw720dp-lan
Does anyone know what the issue might be?

Did you find a workaround for the Error? I'm getting the same and I can't seem to find any solution.

How to configure DPM2012R2 to use a private cloud

Hi,
I have configure a private cloud over several MS 2012 R2 servers. I have the storage and all required network done. I then installed DPM 2012 R2 and would like to use the "long term" storage function with the private cloud that I created. Has anyone
managed to get this done? The options in DPM 2012 R2 seems to only allow cloud association with Azure. Is it even possible to configure DPM 2012 R2 to use a private cloud deployment?
Any help with this will be greatly appreciated.
Kind Regards

Thanks for the reply:
How would I be able to do any of the long term storage to disk with second DPM?
My scenario is as follow:
Primary DPM server is onsite with shortterm backup configured to disk. There are several protection groups to allow for different kinds of backup scenarios ie different times, different types of clients, etc. Then there is a "offsite" dpm server with about
40Tb available storage that I'd like to use as a "long term" storage for the currently protected groups. However I'm not extremely proficient with DPM and therefore I'm uncertain how to get this done.
What needs to be achieved is:
Onsite I'd like to keep 14days (currently configured to do so, so no change required)
Offsite I'd like to keep 12months (1 per month for each month) as well as 1 per year for 2 years of all protected groups.
The offsite DPM server has thusfar only been configured as Server 2012 r2 Std and the storage has been allocated to the private cloud. This however doesn't need to stay like this and can be "broken" again and reconfigured. If there are step by step instructions
that you could provide to do this I'd really appreciate.
Kind Regards

Can someone help me in understanding Public ,Private ,VIP&SCAN for RAC11gr2

Can someone help me in understanding Public ,Private ,VIP&SCAN for RAC11gr2 as i am new to RAC 11gr2 installtion process

user12085983 wrote:
Can someone help me in understanding Public ,Private ,VIP&SCAN for RAC11gr2 as i am new to RAC 11gr2 installtion processThe public IP address is assigned dynamically using dynamic host configuration protocol (DHCP), or defined statically in a domain name system (DNS) or in a hosts file. It uses the public interface (the interface with access available to clients).
Oracle Clusterware uses interfaces marked as private for internode communication.
The virtual IP (VIP) address is registered in the grid naming service (GNS), or the DNS. Select an address for your VIP that meets the following requirements:
* The IP address and host name are currently unused (it can be registered in a DNS, but should not be accessible by a ping command)
* The VIP is on the same subnet as your public interface
Oracle Database 11g release 2 clients connect to the database using single client access names (SCANs). The SCAN and its associated IP addresses provide a stable name for clients to use for connections, independent of the nodes that make up the cluster. SCAN addresses, virtual IP addresses, and public IP addresses must all be on the same subnet.
The SCAN is a VIP name, similar to the names used for VIP addresses, such as node1-vip. However, unlike a VIP, the SCAN is associated with the entire cluster, rather than an individual node, and associated with multiple IP addresses, not just one address.

Adding alternative FQDN for local domain.

Hi,
I'm trying to configure RDS for my standalone Windows Server 2012 Essentials and it's almost done.
(Probablly) last thing i need to do is to change FQDN for my local domain to .com to use RDS externaly.
So, like i said, i've done dyndns config, added ssl cert, configured RDWeb, RD Gateway, RD License and RD Broker.
Now, when i'm logging into remote.mydomain.com/RDWeb , i can login with Active Directory credentials, get rdp i try login into server. But i can only try, becuase there is an error about wrong FQDN for server (know and not new error for anyone). So, what I
had done was changing FQDN for my domain by this powershell script http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80 (if anyone had problems with digitally unsigned script, google for "Set-ExecutionPolicy Unrestricted"), in
theory, this script changed FQDN, but in reality, i still have same problem trying to connect externally.
I also read that i should add new DNS Zone for my .com domain and there add (A) record for my subdomain for remote desktop, that points to internal IP adress of my server. When i tried that, it was even worse because i couldn't even open RDWeb site. When that
dns zone was deleted, everything came back to previous state.
And now i'm here, out of ideas. Any suggestion what I did wrong? Maybe it was something with this DNS Zone for .com ? Maybe there should be Zone, but not normal one but "stub zone"?
I would be happy for any suggestion.

" suspect we may have a basic mis-understanding of what each of us is trying to say. Let me try again.
There are (at least) three ways to reach a LAN computer from the internet with Essentials. Remote Web Access, direct RDP and VPN. There are also third party solutions, such as Go To My PC and Log Me In. The third party type
usually involve a subscription model with recurring charges, the others may involve a fee for SSL certificates, but they are (usually) much less expensive and do not rely on a third party."
Yes, i can agree we difinitelly had problem with mis-uderstanding so, sorry for that. I was talking about direct RDP to my server because Anywhere Access is already configured (but remote desktop from there to server opened only Essential Dashboard, that's
why i left this solution). Also, like i said, i'm aware of risks and i'll
take responsibility for that.
"Direct RDP is configured at the router and points the port (3389, but it can be changed) to the IP of the device you want to contact. then, simply opening the RDP applet on your remote computer and typing in the public IP of the router/firewall
will automatically connect you to the chosen computer. This is a very high security risk and should be avoided when ever possible."
Here is double facapalm for me - when you wrote about 3389 TCP port, i got enlightenment that i didn't do that (because i ealier tried to work on 443 with Anywhere Access and forgot about it), also information i got after tries to connect weren't usefull neither
- because Windows gave me back information about wrong FQDN, i was strictly focused on that problem, but like we know now, problem was in much different place. When i opened that port, everything started to be like i wanted (i also find out, after testing
RDP client from remoteapp in web menu that why i'm using this when i want to used direct RDP anyway). So much facepalm.
Next thing for now will be different port then 3389 and in future, VPN instead of direct RDP.
Anyway, really, thanks for help!

Change published FQDN for 2012 R2 RDS

I have Windows Server 2012 R2 (single server hosting all the roles for RDS). I'm using RDS for publishing RemoteApps for both internal and external users. External users connect to remote.company.com and I have certificate from public ca (issued to remote.company.com).
Active Directory is company.local.
When external users connect through the rds gateway and run remoteapp they receive this warning message that is caused by fqdn mismatch
I tried to use this script to change fqdn to match remote.company.com and it does that but after that external users cannot open remoteapps anymore. Internally they work.
https://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
I get this error in eventlog:
The user "COMPANY\username", on client computer "xx.xx.xx.xx", did not meet resource authorization policy requirements and was therefore not authorized to resource "remote.company.com". The following error occurred: "23002".
If I change the published fqdn back to rds.company.local remoteapps starts to work again but with certificate error.
How can I fix this?

Hi,
In RD Gateway Manager, please edit the properties of the RD RAP. On the Network Resource tab, please select Allow users to connect to any network resource. After modifying the RD RAP please use Set-RDPublishedName cmdlet to change the published
name to the correct FQDN as you did before.
Once you verify it is working you could go back in (if you want to) and create a RDG-managed group with all of the required names.
Thanks.
-TP

Use a different KeyStore type for the SSL keystore

i use SUN Application Server PE 8 (with the included JDK 1.4.2) on Windows XP.
i want to configure a HTTP listener in a way that it uses the private key and certificate for SSL from a different keystore. the keystore is a PKCS11 keystore from an IAIK PKCS#11 Provider.
i know how to configure a HTTP listener using SSL (HTTPS) in principle. i get it working using a JKS keystore, i.e. the format of the SUN file keystore.
i added a new JCE provider (i.e. the IAIK PKCS#11 Provider) to the underlying JDK in the java.security file (i am quite familiar with JCA/JCE stuff). i added it in a way which works with JSSE and Java 1.4 in other stand-alone applications.
then i modified the SSL settings of that listener to use the name of my private key in my keystore. the entry in the domain.xml looks like this.
<http-listener acceptor-threads="100" address="0.0.0.0" default-virtual-server="server" enabled="true" id="http-listener-2" port="1053" security-enabled="true" server-name="" xpowered-by="true">
<ssl cert-nickname="CN=testcomputer1,OU=Insitute for Applied Information Processing and Communications,O=GRAZ UNIVERSITY OF TECHNOLOGY,C=AT" client-auth-enabled="false" ssl2-enabled="false" ssl3-enabled="true" ssl3-tls-ciphers="+rsa_rc4_128_md5,+rsa_3des_sha,-rsa_des_sha,-rsa_rc4_40_md5,-rsa_rc2_40_md5,-rsa_null_md5,-rsa_des_56_sha,-rsa_rc4_56_sha" tls-enabled="true" tls-rollback-enabled="true"/>
</http-listener>
in addition i changed a JVM option and added two new ones to configure JSSE to use the correct key store
<jvm-options>-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/pkcs11keystore.p11</jvm-options>
<jvm-options>-Djavax.net.ssl.keyStorePassword=1234</jvm-options>
<jvm-options>-Djavax.net.ssl.keyStoreType=PKCS11</jvm-options>
when i tried to start the server, i got an error from the ORB. it looked like this:
[#|2005-08-12T10:39:53.615+0200|WARNUNG|sun-appserver-pe8.0.0_01|javax.enterprise.system.stream.err|_ThreadID=10;|java.lang.reflect.InvocationTargetException
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at org.apache.commons.launcher.ChildMain.run(ChildMain.java:269)
Caused by: java.lang.ExceptionInInitializerError
     at com.sun.enterprise.iiop.IIOPSSLSocketFactory.init(IIOPSSLSocketFactory.java:216)
     at com.sun.enterprise.iiop.IIOPSSLSocketFactory.<init>(IIOPSSLSocketFactory.java:129)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:274)
     at java.lang.Class.newInstance0(Class.java:308)
     at java.lang.Class.newInstance(Class.java:261)
     at com.sun.corba.ee.impl.orb.ParserTable$3.operate(ParserTable.java:460)
     at com.sun.corba.ee.impl.orb.NormalParserAction.apply(NormalParserAction.java:22)
     at com.sun.corba.ee.spi.orb.PropertyParser.parse(PropertyParser.java:52)
     at com.sun.corba.ee.spi.orb.ParserImplBase.init(ParserImplBase.java:56)
     at com.sun.corba.ee.impl.orb.ORBDataParserImpl.<init>(ORBDataParserImpl.java:339)
     at com.sun.corba.ee.impl.orb.ORBImpl.postInit(ORBImpl.java:421)
     at com.sun.corba.ee.impl.orb.ORBImpl.set_parameters(ORBImpl.java:498)
     at org.omg.CORBA.ORB.init(ORB.java:337)
     at com.sun.enterprise.util.ORBManager.createORB(ORBManager.java:343)
     at com.sun.enterprise.util.ORBManager.init(ORBManager.java:230)
     at com.sun.enterprise.server.J2EEServer.createORB(J2EEServer.java:336)
     at com.sun.enterprise.server.J2EEServer.run(J2EEServer.java:180)
     at com.sun.enterprise.server.J2EEServer.main(J2EEServer.java:600)
     at com.sun.enterprise.server.ApplicationServer.onInitialization(ApplicationServer.java:232)
     at com.sun.enterprise.server.PEMain.run(PEMain.java:210)
     at com.sun.enterprise.server.PEMain.main(PEMain.java:172)
     ... 5 more
Caused by: java.lang.IllegalStateException: Invalid keystore format
     at com.sun.enterprise.security.SSLUtils.<clinit>(SSLUtils.java:68)
     ... 29 more
|#]
i thought it uses the same keystore. thus, i changed the NickName in the SSL configuration of the ORB listeners to use the same key. this did not solve the problem. then i tried to remove all SSL-enabled listeners for the ORB. the ORB should not use SSL at all. however, this did not help either. i get the same error. it seems that there is some code involved here which prevents using a different key store type.
can anyone help solving this problem, or at least finding the actual reason? one does not need a hardawre keystore to reproduce this problem. using a PKCS#12 keystore produces the same error; i.e. change the keystore type to "PKCS12" (implemented in the SUN JSSE provider) and the keystore file and password accordingly. i tried this with the standard configuration of the JDK, i.e. without any additional JCE providers.
please tell me how i can use a different key store type for SSL (HTTPS).
Karl

Application Server PE only supports "JKS" format. If you are interested in support for other formats, please submit a request for enhancement on project glassfish (Open Source application server) http://glassfish.dev.java.net.
If you have time, you might want to checkout and look at the source in glassfish/appserv-core/src/java/com/sun/enterprise/security/SecuritySupportImpl.java.
You should be able to fix it on your own.
Hope this helps,

Can I use the "Private browsing" mode on mobile?

Can I use the "Private browsing" mode on mobile?

Firefox for mobile does not yet have a built-in Private Browsing mode. However, you can do private browsing in a separate or temporary profile, by running "fennec -P" in the N900's Terminal app, or by using the [https://addons.mozilla.org/mobile/addon/mobile-profiles/ Mobile Profiles] add-on.

My 2011 MBP has begun running slow with frequent 'spinning beach ball' events. I'm running Yosemite and wondered if I should of use the original install disk for maintenance.

My 2011 MBP has begun running slow with frequent 'spinning beach ball' events. I'm running Yosemite and wondered if I should of use the original install disk for a maintenance reinstall. I presume I'd have to download Yosemite again, though I'd be happy just using Snow Leopard again too.
Thanks for the help.

When you see a beachball cursor or the slowness is especially bad, note the exact time: hour, minute, second.
These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
The title of the Console window should be All Messages. If it isn't, select
          SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
          View ▹ Show Log List
from the menu bar at the top of the screen.
Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.
Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.
Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
Some private information, such as your name, may appear in the log. Anonymize before posting.

Should my team use their private apple id:s or should we create new ones?

We have some problems regarding our apple id:s since we use our private accounts in the company.
Should we create new apple id:s just for the company? Whats the benefits? Problems?
How do we do to manage buying apps, music, use Spotify etc?

can I use the same email address for multiple Apple ID's?
My two kids dont need e-mail addresses

Can i use a private CC (Photographer) license on Corporate laptop without Audit problems

I have a corporate laptop, that i also use with my Creative Cloud license for Lightroom and Photoshop CC (im a private Photographer)
This is allowed within the company. But now i'm asked to remove al non (Corporate) licenced Adobe software because of an Audit.
They say that adobe only allows adobe software with a company license. Is this true?

Hi reinierh
It might be best to check with your company what they mean by this.
Companies can choose what type of license they wish to use - individual or volume licensing, for example - and providing you follow the terms of the licensing agreement there shouldn't be any issues- Licenses and terms of use | Adobe
Thanks
Bev

Use of .private as FQDN for SLS in split DNS configuration

Similar Messages

Maybe you are looking for