A solution to no network access in guest OS

Hi.
Host OS: Windows Server 2008 R2 / Hyper-V
Guest OS: Windows Server 2008 R2
Had a problem with "no network access" in guest OS.
However, as many others could not get rid of the Virtual Network card in Device Manager (which also seems to manage the LAN Connection object under Network and Sharing Center > Change Adapter Settings)
After a few hours this seems something like what you need to do to get rid of the faulting Microsoft Virtual Machine Bus Network Adapter ... so the Guest OS can automatically reinstall it. These steps worked for me:
Probable Prerequisites:
0)
- The host OS runs the Virtual Network Switch on one of the physical network adapters or on the same adapter (if there is only one). In my case I run on the 2nd physical adapter.
- Hyper-V Virtual Network manager has a virtual network on one of those adapters.
- The VM with the guest OS is bound to the virtual network
1) Event log > System probably has an event saying something is wrong with the Microsoft Virtual Machine Bus Network Adapter and you need to reinstall it (but how!!!)
Fix Guest OS LAN Connection:
1.a) Hyper-V Manager Actions:
Hyper-V Manager > Shutdown or turn off the Guest OS in
Hyper-V Manager > VM Guest OS > Settings > Network Adapter remove
1.b) Hyper-V Manager VM GUest OS States:
{ No network adapter available for guest OS }
2.a) Hyper-V Manager Actions:
Hyper-V Manager > VM > Start VM Guest OS
2.b) Guest OS States:
{ DM > Virutal network card and Network and Sharing Center > Connection LAN is strangely still available even though the virtual network adapter hardware was removed in step 1 }
3.a) Guest OS Actions:
Go to Network and Sharing Center > Change Adapter Settings > "LAN Connection" object > Properties
Click every protocol etc. and click the uninstall button
3.b) Guest OS States:
{ The LAN Connection object is gone under Network and Sharing Center }
{ The Network card is gone under Computer Administration > Device Manager }
4.a) Guest OS Actions:
cmd > Run as Administrator >
set devmgr_show_nonpresent_devices=1
devmgmt
In device manager goto the network node and uninstall all references to Microsoft Virtual Machine Bus Network Adapter
(In my case I used the guest os for a Windows Backup sysrecovery because of changes in the disk layout thus I also had some additional references now visible to the previous physical network adapters and uninstalled them as well)
4.b) Guest OS states:
{ Device Manager > Microsoft Virtual Machine Bus Network Adapter not present }
5.a) Hyper-V Manager Actions
Shutdown VM Guest OS
VM Guest OS > Settings > Add Virtual network adapter for external network
Start VM Guest OS
5.b) Guest OS States:
{ Guest OS ready for plug and play installation of Microsoft Virtual Machine Bus Network Adapter }
{ Device Manager > Network Adapters > Microsoft Virtual Machine Bus Network Adapter is installed and activated }
{ Network and Sharing Center > Connection LAN object is installed and activated }
{ LAN is connected with network access through the Virtual Network switch in the Host OS }

Thank you for the post. After searching for weeks on end and trying all kinds of solutions, I was finally able to resolve the issue by removing the "Microsoft Virtual Machine Bus" from the Guest machine on Hyper-V.
No matter what change I was applying I kept getting the "169" based IP.
My host system is "Windows 8.1 Pro" with Hyper-V role enabled and my guest machine is "Windows 8 Enterprise". I was starting to question if it's the enterprise machine that may be an issue, but glad this is resolved.
Thank you for the solution.

Similar Messages

  • Airport Extreme 802.11AC + 5th Gen and guest network access

    I have the current gen Airport Extreme 802.11AC with a 5th Gen extending the network. With this setup, I am unable to login using our guest network setup. I have tried using guest network with a password and one without but its the same results. When a guest logins, it stuck attempting to login with no error messages.
    So is it possible to have this configuration and still have guest network access?

    Please review what I said originally.......that the guest network function on the AirPort Extreme is designed to work with a simple modem......so the AirPort acts as the main router for the network..
    Another way of saying the same thing is that the AirPort needs to be "in charge" of your network for the guest feature to work correctly. The AirPort cannot be in charge if it is connected to another device that is already configured to be the main router on your network.....your Actiontec modem/router.
    The Actiontec device combines the functions of a separate modem and a separate router in one package. This type of device is known as a modem/router, or also known as a gateway.
    Some folks call a modem/router or a gateway......a modem. So, things can get confusing.
    I do not know if it is possible for the Actiontec device that you have to be configured to act as a simple modem.....so the routing functions of the device are completely turned off. (Turning off the wireless on the Actiotec does not turn off the routing function).
    If you turn off the wireless on the Actionec, it becomes a modem and a wired router. And that wired router is still in charge of your network.
    The guest network feature will not work correctly unless the AirPort is in charge of your network.
    My suggestion was for you to ask your Internet Service Provider (ISP), if they could supply you with a simple modem.  That is all that you need. You don't need two routers....and the Actiontec that you have now is not allowing the guest feature to work correctly.

  • Cascading EA4500s and Guest Network access

    Hi, I hope esomone can help me here. I've got two EA4500 routers connected via ethernet. The primary router has DHCP enabled and the secondary has it disabled. IP address of primary is 192.168.1.1 and the secondary is 192.168.1.2.
    I have set up guest access on both routers however only the primary router allows users to connect. When out of range of the primary router but in range of the secondary router the network is visible but when you try to connect to it, it only gives limited or no connectivity message and can't connect to the internet.
    Is it possible for the guest network access to follow the same pattern as the secure network, i.e. the same network throughout the house?
    Regards
    Jon

    Cascading two routers should have correct parameters set. For instance, the Ethernet port of the secondary router should be connected to the ethernet port of the primary one, and the DHCP should be disabled on the second router. The ip address you've set are correct for the both routers. This thing shoud be done if the connection is LAN to LAN.
    By the way there are two types of cascading: Click here for info!
    For the Guest Network:
    Guest Network would only work if the the DHCP is enabled on your router. It means to say that on the type of setup you're doing which is LAN to LAN (DHCP disabled on the second router), Guest network would not work on the secondary router. If the connection is LAN to WAN, then both of the router should have Guest Network working.

  • Qemu-kvm: network access from host to guest

    I need ssh and http access from my host (Arch) to the guest (other Linux). I've failed at setting up Tap networking as described in the wiki. I don't need to have the whole LAN access the guest, so is there another way the host can access the guest? Using the guest's IP of 10.0.2.15 doesn't work, but I'm hoping there is a way to do it.
    Thanks.

    Mr.Elendig wrote:Bridging is the best way todo it, so you should give us some more info on your atempt at it, so that we can help you fix it.
    Ok, I've followed the instructions from the wiki.
    One problem is that I'm on a laptop. eth0 is wireless and eth1 is wired. I chose to use eth1 since I thought it'd be easier to get working on one device before trying to make it work on both.
    1. bridge and tun modules are loaded from rc.conf
    2. In /etc/conf.d/bridges I have this:
    bridge_br0="eth1"
    BRIDGE_INTERFACES=(br0)
    3. In /etc/rc.conf I changed my networking portion to this:
    eth1="eth1 up"
    br0="dhcp"
    INTERFACES=(eth1 br0)
    4. In /etc/udev/rules.d/65-kvm.rules I have this:
    KERNEL=="tun", NAME="net/%k", GROUP="kvm", MODE="0660"
    5. My user is part of the kvm group, although I have also tried running qemu-kvm as root.
    6. In /etc/qemu-ifup I put:
    #!/bin/sh
    echo "Executing /etc/qemu-ifup"
    echo "Bringing up $1 for bridged mode..."
    sudo /sbin/ifconfig $1 0.0.0.0 promisc up
    echo "Adding $1 to br0..."
    sudo /usr/sbin/brctl addif br0 $1
    sleep 2
    7. Using visudo I added this to the bottom:
    Cmnd_Alias QEMU=/sbin/ifconfig,/sbin/modprobe,/usr/sbin/brctl,/usr/bin/tunctl
    %kvm ALL=NOPASSWD: QEMU
    8. I launch qemu-kvm with the following script:
    USERID=`whoami`
    IFACE=`sudo tunctl -b -u $USERID`
    qemu-kvm -net nic -net tap,ifname="$IFACE" -vga std -m 1024 -k en-us -usbdevice tablet -localtime /dev/sda
    sudo tunctl -d $IFACE &> /dev/null
    My system starts with br0 getting the dhcp IP on boot, so that part is working.
    When I run the qemu-kvm start script I get this error (running as user or root):
    /etc/qemu-ifup: could not launch network script
    Could not initialize device 'tap'
    /etc/qemu-ifup is executable
    Last edited by shakin (2009-06-05 19:13:14)

  • How to setup 24 hours guest network access with Time Capsule 4th gen. ?

    Hello,
    I just bought a Time Capsule 2TB and I cannot find the setting to limit the network access to 24 hours.
    I updated the firmware and Airport Utility to the latest version and it seems that most of help on this setting I fond on internat are based on previous version.
    By example I do not have a "Manual setting" in the "Base Station" menu like described in the manual.
    Can someone help on this ?
    Thank you and Regards,
    Sebastien

    Suggest that you download and install AirPort Utility 5.6 for Mac OS X Lion. It will have the settings that you are looking for.
    You can keep both AirPort Utility 5.6 and 6.0 on your Mac and use the one that you need.

  • Access to Guest Folder requires login when accessed from Portal/SSO

    We have wired XML-P to use OID and then registered it as a Partner Application in our Portal/SSO server (which also uses the same OID instance). All works well except now when we try to access the Guest folder from within Portal the SSO login screen pops-up. We have created a very simple HTML/URL portlet that points to the Guest folder and the idea is for users to have Public/anonymous access to this folder. Any ideas?

    Hi,
    You can try to enable "Turn on password protected sharing" in Network Sharing Center. After that, only people with a user name and password on the computer will be able to log into shared network folders.
    Another workaround method you can try:
    Open Run, type rundll32.exe keymgr.dll, KRShowKeyMgr, then Press
    Enter.
    In the prompt dialog, choose and delete the user account used to network sharing.
    Roger Lu
    TechNet Community Support

  • Network access and internet

    Is it possible to allow network acces to devices and to internet only for domain clients? So if someone brings his personal laptop to work and connect it by cable to network he can not acces nothing on network or internet?
    Solution with proxy is not good for me, so I am searching for something else.
    I never left an open problem....I search, dig and ask, until it's solved....

    Hi,
    >>Is there a way to lock just DNS to AD clients?
    Before going further, how was our network set up? Do we use DHCP to automatically assign IP addresses to clients? If we use DHCP server to automatically assign IP addresses, the computers connected to the network will automatically get
    their IP address and DNS server IP address if we don't have a network protection mechanism to restrict which computer can get IP address from DHCP server. In this situation, although we know that you don't want to use Network Access Protection to do this,
    as far as I know, this should be the solution which can best meet our target.
    Besides, for this is more related to network, in order to get better help, we can also ask for suggestions in the following network forum.
    Network Access Protection Forum
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverNAP
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • How do i turn on network access protection on windows 8.1 with an hp p6-2326S pc?

    i got a phone call from a unknown source today  at around  3 pm they said  that hackers where trying to access my computer . they  ran a scan  and it showed thre things one was  my network access protection was turned off .  2 hackers were trying to hack into my computer  i cant remember the 3rd one its in my note pad  but  then i got this big run around and i told them from the start that i had no money and that i had just buried my mom on the 2nd of this month after a long battle   and that i had just had a bad episode with my blood pressure wasnt feeling god  and so on ,all of which are true  once i finally convinced the  worker of the fact i had no money he put his super visor on the line .the supervisor was stalling i could tell im no dummy when it comes to software and computers i taught myself  xp professional and the windows 8.1 which im still learning   i finally got tired of his super visor retstartd my computer and got control uninstalled skype  mozilla nightly and mozilla experimental  and several other prorams  with my revo pro uninstaller  my computer is rinning smooth now but i have seen .that ny network access protection is turned off ,how do i turn this on and is it neccasary i have malware bytes new 2.7. something full time  bought and paid for protection and windows defender .i run  a discclean every day and my mal;ware bytes and windows defender any thoughts and ideas would be appreciated i do have HP SUPPORT ASSISTANT AND MY  WARRANTY IS UP TO DATE AND PAID FOR .. sincerely donald hutchison

    dhutch1 wrote:
    i got a phone call from a unknown source today  at around  3 pm they said  that hackers where trying to access my computer . they  ran a scan  and it showed thre things one was  my network access protection was turned off . ...
    Hi,
    Now the trouble may start, you did allow people to logon to your computer and you believe them !  HP Support Assisstant is there to support your technical problems it does not know you will open the door of your house for someone to comes in to steal your money.
    Now, please change all your passwords to logon to email, bank account(s) ..... before too late. Also please download the following tool nd run on your computer, hope it can remove the nasty bits.
    Good luck.
    BH
    **Click the KUDOS thumb up on the left to say 'Thanks'**
    Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

  • Vista Ultimate: Local Network Access Only (Wired and Wireless)

    Alright, I am not very experienced working with Windows Vista, and I'm having serious trouble solving this problem. I've been searching for solutions for two days and not found anything that works.
    The computer is a Compaq Presario A900 running Windows Vista Ultimate (Service Pack 2). My brother used the computer's wireless internet connection for four years without problems, but lost all internet access when he returned home a couple months ago. The
    computer will connect to any network, but has the message "Unidentified Network - Access: Local Only".
    The computer first had the problem trying to connect to the Internet through an iPhone's Wifi connection. It happened again on the wireless network at my home. I took the computer to work to test it with a wired connection and had the same result.
    I originally thought this was only a wireless problem and completely uninstalled and reinstalled the Atheros wireless card drivers.
    I have completely disabled the Windows Firewall and removed all Anti-Virus (Avira free was installed - Norton is not on the computer). I have tried Safe Mode with Networking, and it does not fix the problem.
    I ran a Fix-It yesterday that was supposed to fix specific registry errors, but that did not solve the problem either.
    I also found a solution on this website that involved enabling sharing. One user said it fixed the problem, but it did not solve it for me.
    The only thing I am certain of is that this cannot be a problem with the router. All three places I have connected have various other computers connected constantly: The iPhone regularly connects a different Windows Vista-powered laptop, Windows XP Desktop,
    and Windows 7 netbook to the Internet. My wireless router successully connects a Windows XP Desktop, Windows 7 laptop, and Macbook. Obviously, the wired connection at work successfully connects over a dozen computers.
    I'm out of ideas on this one...thanks.

    Hi,
    I've been having a similar problem; am not able to connect via wifi at our new home, but am able to connect easily at an internet cafe. Obviously, I'd like the convenience of getting connected at home! :)  Getting  "unidentified networK"
    and local only access. Also had the same problem with  the yellow ethernet cable  & LAN, but finally found a partial fix online somehow so am at home using the internet now. But it is still a PITA, because every time I  step away to take
    a break from the computer, it goes to "sleep" and loses the connection, so I have to do a restart to get the internet connection back. And it would be much nicer to get the Wifi problem fixed, so I can move around the house to a more comfy spot rather
    than being shackled in the corner by the yellow cable!  :D
    I will attach a screenshot of the ipconfig as suggested above, but am not all that savvy, so would appreciate step-by-step instruction how to solve this problem. I've tried a lot of suggestions, but nothing has worked yet... hoping someone here can help. Thanks
    in advance!  :)
    oops! edit to add: grrrr, it wouldn't let me include the screenshot unless I verify my account, which I have not figured out how to do yet... another hurdle!

  • SCCM 2012 R2 - Distribution Point untrusted domain - Not acknowledging Network Access Account (FYI)

    Hello!
    Scenario
    Built a single primary site server in one domain with multiple distribution points. All site servers are member of this one site.
    The distribution points in the primary site servers' domain function as expected. The distribution point deployed to an untrusted domain does not. The primary site server can see all objects in the domain, publishes successfully, and CCM client on the
    DP in the untrusted domain knows its part of the site, knows its AD site (according to locationservices.log). The DP role is installed properly, logs are populating, queries are being made for application lists and updates. nfortuantely authentication
    errors indicate that this software can'tbe downloaded.
    In essence the DP in the untrusted domain can't pull down content from the primary site server. The role uses BITS to download content from IIS on the primary site server, but the requests each throw a 401 error. Unauthorised. This should be an easy fix.
    Create a Network Access Account in the primary site server's domain, assign it to the site (Software Distribution setting), wait for the DP to pick up the setting and watch it retrieve its content. The DP in the untrusted domain is configured as a Pull DP,
    implying it has to use a Network Access Account to download content. It knows the content is available and makes every effort to download it.
    Problem
    The DP in the untrusted domain doesn't know a Network Access Account (NAA) has been defined for the site.
    The account does exist, created in the primary site server's domain and assigned to the site. Its not a password issue. IIS has not been set for Anonymous access as this isn't needed - the NAA should provide the credentials it requires to pull down content.
    A manual check using the URL of the package confirms the package is accessible from the DP when using the NAA's credentials. I've allowed enough time (i think) for the DP to acknowledge the NAA. For fun the DP role was removed, and the CCM agent removed. Both
    were reinstalled. A fresh install didn't detect the NAA.
    Solution
    After some soul searching and a little frustration, it came down to this: A Pull DP always uses the Network Access Account. If the DP can't find a Network Access account it will fail to pull down content. This is undisputed. Found an article that states
    the Pull DP always uses the CCM client configuration to do its dirty work. At that point the CCM client was checked. It had the classic problem of only displaying two Actions - Machine Policy Retrieval & Evaluation Cycle, User policy Retrieval & Evaluation
    Cycle. Most components were installed but not enabled. This is fairly common. Looked at the console, found the device, added the Approval column. Turns out it wasn't auto-approved. Reason being that the client is in an untrusted domain and clients in untrusted
    domains aren't approved automatically (by default).
    In this case something as simple as an Approving the client fixed these issues. 
    The DataTransferService.log highlights the issue:
    <![LOG[CDTSJob::JobError: DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' BITS Job ID='{38B81ADE-55B5-4BD7-A881-DBFF13943EDE}' ErrorCode=0x80190191]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
    context="" type="1" thread="3136" file="dtsjob.cpp:3501">
    <![LOG[CDTSJob::JobError: DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' URL='http://PRIMARYSERVER.A.B.COM:80/SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68'
    ProtType=1]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3136" file="dtsjob.cpp:3504">
    <![LOG[Authentication required by the proxy, DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' BITS Job ID='{38B81ADE-55B5-4BD7-A881-DBFF13943EDE}'.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
    context="" type="3" thread="3136" file="dtsjob.cpp:3513">
    <![LOG[DTSJob {8814E9A1-3D26-4089-83CF-3C7D17BCEC6E} in state 'Cancelled'.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3688"
    file="dtsjob.h:166">
    <![LOG[DTS job {17E0B672-F699-434D-B063-87CC2ACF715C} BITS job
    {38B81ADE-55B5-4BD7-A881-DBFF13943EDE} encountered Access Denied error during download.  Will retry using Network Access Account.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
    context="" type="2" thread="3136" file="dtsjob.cpp:3652">
    <![LOG[DTSJob {8814E9A1-3D26-4089-83CF-3C7D17BCEC6E} cancelled by client.]LOG]!><time="18:25:54.280+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3688"
    file="dtsjob.cpp:3205">
    <![LOG[No network access account info found.]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context="" type="1"
    thread="3136" file="netaccessaccount.cpp:288">
    <![LOG[The network access account is not defined.]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context=""
    type="1" thread="3136" file="netaccessaccount.cpp:858">
    <![LOG[DTSJob {17E0B672-F699-434D-B063-87CC2ACF715C} encountered error setting BITS job to use Network Access Account
    (0x00000000).]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context="" type="3" thread="3136" file="dtsjob.cpp:1885">
    The IIS server logs u_ex150219.log captures the request:
    2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
    401 2 5 1509 2
    2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
    401 1 3221225581 1509 4
    2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
    401 1 3221225581 1509 3
    2 x Domains: DomainA and DomainX
    - Single domain forests
    - No trusts between domains/forests
    DomainA\PRIMARYSERVER
    - Primary Site Server, MP, DP, IIS, all roles
    DomainX\DP1
    - Distribution Point, IIS, etc
    - CCM client installed

    Based on the above, you are using a PullDP. If so, have you installed the client agent on this system? The client agent is required on PullDPs in untrusted domains so that they can acquire the NAA.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • My airport extreme has connected to a Tplink router, i set my AE in Create network, so i get a problem of Double NAT. How can i repair this probleme because i have to use TPlink for my IP TV and i want to use AE to creat my network and the guest NW.

    my airport extreme has connected to a Tplink router, i set my AE in Create network, so i get a problem of Double NAT. How can i repair this probleme because i have to use TPlink for my IP TV and i want to use AE to creat my network and the guest NW. If we don't have a solution for this question, can i set my AE to use the IP TV and how??? I'm using a 4th Airport extreme

    No, not unless it is simply a network connection.
    How is your IPTV being provided.. if it is using a separate vlan or separate vpi/vci in the adsl connection. Who is your ISP?
    Is the TP-Link ADSL?
    Is the IPTV using a separate voice channel on adsl?
    Or a different vlan.
    Sorry but it is something where a definite answer is not possible unless you provide all the details.
    The setups are unique to each ISP around the world..
    Here is one for our local ISP.
    http://www.avenard.org/iptv/Setup.html
    He has a section on getting this working with apple router over wireless.. look
    http://www.avenard.org/iptv/IPTV_and_Wireless.html
    Google around and see if other people have had success.. the whole setup is tricky.. and it is hard if nobody has used it who actually understands networking.

  • Microsoft Network Access Proctection setting

    Hi all,
                 I been working on this project for nearly a moth now, but I still can't get it work. I am trying to use EAP/TLS, PEAP integration with Cisco 1100 Series AP using ACS Release 4.2(0) Build 124 Patch 5. And of course, I am integrate that with AD 2008. My ACS server is a member server. Have issued and signed for the ACS and the clients. I have configured EAP/TLS and PEAP in the ACS side and the suppliants. However, I am still getting EAP/TLS-PEAP fail during SSL handshake.
    One doc that I have read says that i need to enable Microsoft Network Access Proctection setting, but this feature is not the list under advance settings.
    Clients and AP are able to authenticate with another ACS server which has ACS Release 4.2(0) Build 124 Patch 10. This second ACS does not have Microsoft Network Access Proctection setting either. Beside different patches, both servers have been configured the same way.
    I am so lost now, I don't even know what to try anymore as i always changed all the settings.
    If you guys need more info in order to help get to the bottom of this, please let me know.
    Many thanks,
    Paul

    Obtaining NAC/NAP
    This initial NAC/NAP release is a limited offering from Cisco and Microsoft.
    If your organization has an immediate need to evaluate or deploy the NAC/NAP solution in your environment, contact your Cisco sales representative.
    Release Notes for NAC/NAP Interoperability Architecture 1.0
    http://www.cisco.com/en/US/docs/security/nac-nap/1.0/release/notes/NACNAPRN.html#wp1161060

  • 2012 R2 OSD refresh WinPE Network Access Account issue?

    Hi, 
    Environment: SCCM 2012 R2/MDT2013
    Since upgrading to R2 we're experiencing failures during an OS refresh task sequence. But only in one physical location.
    The same MDT task sequence runs fine for new computer builds (in both locations)
    Hardware is identical in both locations. One location completes the refresh correctly. The other location prestages content correctly, reboots into WinPE then immediately fails as soon as it attempts to download the first item (MDT toolkit package) from
    the distribution point. 
    SMSTS.log (below) logs 'no credential information in environment' and fails when attempting to pull from the dp. 
    This implies the network access account is not set.
    It is set and it works correctly at the other location (for the same refresh task sequence) 
    I know that R2 allows for multiple network access accounts. We've made no changes. We're just using the same account we used before the upgrade. 
    Boundaries are set correctly. Not sure what else to look for. 
    The error:
    Start executing an instruction. Instruction name: Use Toolkit Package. Instruction pointer: 61 TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Set a global environment variable _SMSTSCurrentActionName=Use Toolkit Package TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Set a global environment variable _SMSTSNextInstructionPointer=61 TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Set a global environment variable _SMSTSLogPath=X:\windows\TEMP\SMSTSLog TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Expand a string: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Expand a string: TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Command line for extension .exe is "%1" %* TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Set command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Start executing the command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    !--------------------------------------------------------------------------------------------! TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Expand a string: WinPEandFullOS TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    Executing command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
    [ smsswd.exe ] InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    PackageID = 'NZX000FC' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    BaseVar = '', ContinueOnError='' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    ProgramName = 'cscript.exe Scripts\ZTISCCM.wsf' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    SwdAction = '0001' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    ResolveSource flags: 0x00000000 InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    SMSTSPersistContent: . The content for package NZX000FC will be persisted InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    DownloadOnDemand flag is true. Attempting to download content locally for Package NZX000FC. InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
    Locations: Multicast = 0, HTTP = 2, SMB = 0. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Package Flags: 0x00000000 InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Multicast is not enabled for the package. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Trying https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    GetDirectoryListing() entered InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    No credential information in environment. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Initializing HTTP transport. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Setting URL = https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Address=https://SCCM.domain.local, Scheme=https, Object=/NOCERT_SMS_DP_SMSPKG$/NZX000FC, Port=443. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Setting Authenticator. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Set authenticator in transport InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Setting Media Certificate. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Media pfx is empty InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    CLibSMSMessageWinHttpTransport::Send: URL: SCCM.domain.local:443 PROPFIND /NOCERT_SMS_DP_SMSPKG$/NZX000FC InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    In SSL, but with no client cert InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    In SSL, but with no media cert InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    401 - Unsuccessful with anonymous access. Retrying with context credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Using thread token for request InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    401 - Unsuccessful with context credentials. Retrying with supplied credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Network access account credentials not supplied. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    401 - Unsuccessful on all retries. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    SendResourceRequest() failed. 80190191 InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    SendResourceRequest(), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\downloadcontent.cpp,516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    oDavRequest.GetDirectoryListing (setDirs, setFiles), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,2516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Download() failed. 80190191. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Here's the log from the location that works correctly. 
    Start executing an instruction. Instruction name: Use Toolkit Package. Instruction pointer: 19 TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Set a global environment variable _SMSTSCurrentActionName=Use Toolkit Package TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Set a global environment variable _SMSTSNextInstructionPointer=19 TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Set a global environment variable _SMSTSLogPath=X:\WINDOWS\TEMP\SMSTSLog TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Expand a string: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Expand a string: TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Command line for extension .exe is "%1" %* TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Set command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Start executing the command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    !--------------------------------------------------------------------------------------------! TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Expand a string: WinPEandFullOS TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    Executing command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
    [ smsswd.exe ] InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    PackageID = 'NZX000FC' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    BaseVar = '', ContinueOnError='' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    ProgramName = 'cscript.exe Scripts\ZTISCCM.wsf' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    SwdAction = '0001' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    ResolveSource flags: 0x00000000 InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    SMSTSPersistContent: . The content for package NZX000FC will be persisted InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    DownloadOnDemand flag is true. Attempting to download content locally for Package NZX000FC. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Locations: Multicast = 0, HTTP = 1, SMB = 0. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Package Flags: 0x00000000 InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Multicast is not enabled for the package. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Trying https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    GetDirectoryListing() entered InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Initializing HTTP transport. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Setting URL = https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Address=https://SCCM.domain.local, Scheme=https, Object=/NOCERT_SMS_DP_SMSPKG$/NZX000FC, Port=443. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Setting Authenticator. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Set authenticator in transport InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Setting Media Certificate. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    WinHttp credentials set InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    CLibSMSMessageWinHttpTransport::Send: URL: SCCM.domain.local:443 PROPFIND /NOCERT_SMS_DP_SMSPKG$/NZX000FC InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    In SSL, but with no client cert InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    401 - Unsuccessful with anonymous access. Retrying with context credentials. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Using thread token for request InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    401 - Unsuccessful with context credentials. Retrying with supplied credentials. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
    Request was successful. InstallSoftware 21/11/2013 5:17:15 p.m. 460 (0x01CC)
    Cheers

    So, still having issues after a lot of testing. Same machine type as before, I feel like this is a bug in R2 but I can't find a lot of information on it around the web. same thing every time.
    401 - Unsuccessful with anonymous access. Retrying with context credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Using thread token for request InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    401 - Unsuccessful with context credentials. Retrying with supplied credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Network access account credentials not supplied. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    401 - Unsuccessful on all retries. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    SendResourceRequest() failed. 80190191 InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    SendResourceRequest(), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\downloadcontent.cpp,516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    oDavRequest.GetDirectoryListing (setDirs, setFiles), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,2516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    Download() failed. 80190191. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
    The only information I can find on this regarding 2012 R2 is what Torsten posted in his blog. Although he doesn't post a solution to the problem.
    I believe there needs to be a KB hotfix released regarding the issue. at least some steps we can take to resolve it.
    the only thing I haven't tried that I believe could help is to recreate the boot images from scratch instead of just re distributing them to the DP. From scratch using the latest 8.1 ADK WinPE tools.
    Other info: when the SCCM 2012 R2 update became available, the 8.1 ADK that was available at the time had many bugs and was re released almost immediately!:
    http://www.deploymentresearch.com/Research/tabid/62/EntryId/114/Windows-ADK-8-1-re-released.aspx
    I only mention this because in my case, I updated my SCCM server to R2 within hours of the update becoming available which means I most likely had the "bad" 8.1 ADK before the re released it            ^
    recreating the boot images from the newly downloaded 8.1 ADK could be the solution to our problems! 
    This is the best guide that I have found about how to create boot images from scratch (meaning that no current media on the server is used to create the boot image(s)) :
     http://myitforum.com/myitforumwp/2013/08/01/how-to-create-configmgr-2012-boot-images-from-scratch/
    For now, the only work around (which I hate) is to enable anonymous access to the Distribution Point.. when I do this the task sequences complete without error.....
    some input from Microsoft would be AMAZING at this point.

  • AppleTV won't find my asleep computers,even with "wake for network access" turned on

    I've read about this a little on these forums, but haven't found the solution yet.
    My computer has "wake for network access" turned on. My AppleTV will not see my shared iTunes library, not until I wake up the computer by hand.
    The only other part of the equation is the FiOS router that I use, which is model number: MI424-WR.
    Has anyone come up with a guaranteed solution to this problem? Very annoying. Just bought the AppleTV, and think it's otherwise great. This flaw is just unacceptable. If I have to modify my router somehow, I'd be happy to hear about it... as I don't have any problem doing those kinds of things.
    Thanks for any help you can provide.
    -Dan.
    Running

    OK, I got an Airport Extreme, but still having issues.
    Why would I need to plug the AppleTV into an Ethernet cable? It doesn't have any sleep issues... it just can't wake up my Macs. I thought that would be possible.
    In any case, I can't connect my AppleTV to Ethernet... no ethernet near my television....

  • SCCM 2012 Network Access Account password problem

    Hello Everyone,
    I got a problem with the Network Access Account on SCCM 2012. I didn't have any problem previously and can deploy OS successfully. The problem started last week when I tried to deploy an OS. It gave me a error on Task Sequence then I searched for the error
    and found that its related with the Network Access Account. On SCCM Config Manager I checked the Network Access Account and found that I had the wrong password. But the bigger problem starts here: on configManager Administration/Security/accounts window
    I open my NAS properties and on the verify window tried to reach a simple network share and it says the password is wrong, then I change the password and tried to verify one more time and it successfully reaches the share, I simply click apply and
    OK as usual but when I open the properties window I always see the old password stays there. I tried to change the password maybe 100 time but I didn't work. My NAS is a normal domain account with Domain Users permissions, I ve already
    checked the password, account and password never expires options, they are all rightly configured. I also tried to make a new account to use as a NAS, then I set it on SCCM as a NAS but the result is always the same. Accounts
    have wrong password and I cant change and save it. Actually I can change till I close the properties window then its all gone , reset to old wrong password. Please help me with that, I am googling it like 2 days and found that the same thing happened
    to 2 other people, but there is no solution... 

    That workaround seems to work.  Only verify when you first type the password and get the success/confirmation message.  Once you hit OK to save the password, something happens to it (probably encrypts the password entered). If you open the account
    settings again, I assume SCCM takes the password from the database or task sequence in it's encrypted form and presents that in the text boxes.  Clicking OK will save the password again, but because it is presented in it's encrypted form, will re-encrypt
    this as a new password and effectively change what you originally entered as the password.  Again, I'm just assuming this based on what I observed. If it's true, then definately a bug.
    I think this is pretty correct. This whole (non?)-issue was a massive red-herring for me. I spent a week trying to understand what was wrong, but eventually discovered the issue was a couple of steps down the line. SCCM errors on the surface level are pretty
    consistently confusing. 9 times out of ten, I have been lead astray by them. Crack open your log files, your real problems will be in there.

Maybe you are looking for

  • My ipad2 16 gb wifi not being detected by itunes

    hi i bought a new ipad2 16 GB wifi, and connected to itunes,when it asked for upgradation for ipad2 ios 4.3.3 i downloaded the same and tried updating the OS but midway the updating got stuck and now neither itunes detects the ipad2 and the ipad2 is

  • Magic mouse not working in mountain lion

    magic mouse not working in mountain lion....What can I do?

  • ITunes wont sync videos to ipod

    Ok, ive read the whole guide on the net on how to get stuff from the itunes to ipod...ive even managed to get all my songs into the ipod no problems... but I cant get any videos to go...they are in iTunes just fine, iTunes seemed to convert anything

  • Error in Associating the Oracle Cache Administration user with the Cache Database

    hi good eve, i have done Configuration on the Oracle Database such as 1.create tablespace ttusers 2.running initCacheGlobalSchema.sql 3.creating cache administration user with username cacheadm 4.running grantCacheAdminPrivileges.sql 5.granting objec

  • Invalid Address

    BES user 8 years.  Have traveled out of state many a times with no issues.  Last week was in Las Vegas and received company mail all day long but when I did a reply and send I got a big fat red X and it stated Message included an invalid address.  Af