Account creation failed

I have 15 new iMacs which I am configuring for a school computer lab. This morning I went to create local administrator accounts on each machine for the teacher. I simply went to each one and launched system preferences, and had her type in her info into the Accounts screen.
Nine computers worked fine, and with six the SystemPreferences app hung. (After putting in usernames & passwords, clicked the "Create Account" button on the bottom and went into permaspin.) I had to hold down the power buttons to get them to restart.
Now when I go back to the Accounts pane in Preferences, the account that I tried to create is not there, and no directory was created, but it refuses to let me create an account with the name I was trying to use.
Anybody have any suggestions for cleaning up the mess?

etresoft wrote:
You really should be using MacOSX Server for this.
Yeah, yeah, but we're poor. If I had an extra $1000 I'd buy a replacement for one of my 4-yr-old teacher laptops... (Insurance is paying for the 15 iMacs after vandals broke into my lab and smashed 13 iMacs and 2 eMacs. Anyone ever seen an iMac with the glass broken out and 1/2-inch deep dents in the case where it was beaten on with a sun keyboard? With gooey hand sanitizer poured over the top, and fire extinguisher sprayed all over? It's pretty sad... Although, amazingly, 8 of my 10 eMacs survived unscathed, and the two dead soldiers still boot up and work, one has a broken case and one has deep scuffs in the glass. And several of the 13 iMacs appear to be fully functional except for the broken glass and one fried display. Any sysadmins out there, if you could have seen the carnage it would have made you cry...)
Besides, I've wasted too much of my life over the last 19 years fighting with NetInfo. (As in, here I am doing it again!) Now I have a sun 450 running nfs and ldap, which was completely unperturbed by having an iMac smashed into it. It cost me less than $500, and it runs like a battleship...
Interestingly, my 1/2-created account didn't have any groups, including the group made up of the username. So 'sudo dscl . delete /users/username' was all that was necessary to get rid of it...

Similar Messages

EXCH 2010 auto account creation fails after rollup 4 for sp 3

We use a PowerShell script to automatically generate student accounts when they register. It was working fine until the other night when we applied updates (I can supply the entire list if needed.) Rollup 4 was one of the updates. Now when the script
runs, it creates the first account in the list and then throws the error:
The type initializer for 'Microsoft.Exchange.Diagnostics.ExTraceConfiguration' threw an exception.
    + CategoryInfo          : OperationStopped: (System.Manageme...pressionSyncJob:PSInvokeExpressionSyncJob) [], PSRe
   motingTransportException
    + FullyQualifiedErrorId : JobFailure
In the event log the following two errors are generated:
Log Name:      Application
Source:        Windows Error Reporting
Date:          2/19/2014 8:37:51 AM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      <myservername>.lhup.edu
Description:
Fault bucket , type 0
Event Name: PowerShell
Response: Not available
Cab Id: 0
Problem signature:
P1: powershell.exe
P2: 6.1.7601.17514
P3: System.NullReferenceException
P4: System.TypeInitializationException
P5: unknown
P6: oft.Exchange.Diagnostics.SystemTraceControl.Update
P7: unknown
P8:
P9:
P10:
Attached files:
These files may be available here:
Analysis symbol:
Rechecking for solution: 0
Report Id: c8a838b5-996a-11e3-8362-005056b67715
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-02-19T13:37:51.000000000Z" />
    <EventRecordID>4104059</EventRecordID>
    <Channel>Application</Channel>
    <Computer>mail2.lhup.edu</Computer>
    <Security />
</System>
<EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>PowerShell</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>powershell.exe</Data>
    <Data>6.1.7601.17514</Data>
    <Data>System.NullReferenceException</Data>
    <Data>System.TypeInitializationException</Data>
    <Data>unknown</Data>
    <Data>oft.Exchange.Diagnostics.SystemTraceControl.Update</Data>
    <Data>unknown</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>c8a838b5-996a-11e3-8362-005056b67715</Data>
    <Data>0</Data>
</EventData>
</Event>
Log Name:      Application
Source:        Windows Error Reporting
Date:          2/19/2014 8:37:51 AM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      <myservername>.lhup.edu
Description:
Fault bucket , type 0
Event Name: PowerShell
Response: Not available
Cab Id: 0
Problem signature:
P1: powershell.exe
P2: 6.1.7601.17514
P3: System.NullReferenceException
P4: System.TypeInitializationException
P5: unknown
P6: oft.Exchange.Diagnostics.SystemTraceControl.Update
P7: unknown
P8:
P9:
P10:
Attached files:
These files may be available here:
C:\Users\Administrator.DOMAIN1\AppData\Local\Microsoft\Windows\WER\ReportArchive\Critical_powershell.exe_4fabcdf7532bfe17a44cd45b511ce052e7717_25de96ae
Analysis symbol:
Rechecking for solution: 0
Report Id: c8a838b5-996a-11e3-8362-005056b67715
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-02-19T13:37:51.000000000Z" />
    <EventRecordID>4104058</EventRecordID>
    <Channel>Application</Channel>
    <Computer>mail2.lhup.edu</Computer>
    <Security />
</System>
<EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>PowerShell</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>powershell.exe</Data>
    <Data>6.1.7601.17514</Data>
    <Data>System.NullReferenceException</Data>
    <Data>System.TypeInitializationException</Data>
    <Data>unknown</Data>
    <Data>oft.Exchange.Diagnostics.SystemTraceControl.Update</Data>
    <Data>unknown</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\Users\Administrator.DOMAIN1\AppData\Local\Microsoft\Windows\WER\ReportArchive\Critical_powershell.exe_4fabcdf7532bfe17a44cd45b511ce052e7717_25de96ae</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>c8a838b5-996a-11e3-8362-005056b67715</Data>
    <Data>0</Data>
</EventData>
</Event>
The report.wer file:
Version=1
EventType=PowerShell
EventTime=130372905673297717
ReportType=1
Consent=1
ReportIdentifier=c8a838b5-996a-11e3-8362-005056b67715
Response.type=4
Sig[0].Name=NameOfExe
Sig[0].Value=powershell.exe
Sig[1].Name=FileVersionOfSystemManagementAutomation
Sig[1].Value=6.1.7601.17514
Sig[2].Name=InnermostExceptionType
Sig[2].Value=System.NullReferenceException
Sig[3].Name=OutermostExceptionType
Sig[3].Value=System.TypeInitializationException
Sig[4].Name=DeepestPowerShellFrame
Sig[4].Value=unknown
Sig[5].Name=DeepestFrame
Sig[5].Value=oft.Exchange.Diagnostics.SystemTraceControl.Update
Sig[6].Name=ThreadName
Sig[6].Value=unknown
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7601.2.1.0.274.10
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
UI[3]=powershell has stopped working
UI[4]=Windows can check online for a solution to the problem.
UI[5]=Check online for a solution and close the program
UI[6]=Check online for a solution later and close the program
UI[7]=Close the program
FriendlyEventName=PowerShell
ConsentKey=PowerShell
AppName=powershell
AppPath=C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
My execution policy is currently set to unrestricted. The generation script follows:
Import-Module ActiveDirectory
Import-CSV c:\addusers\accounts.csv | % {
$pass = ConvertTo-SecureString -AsPlainText $_.Password -Force
New-Mailbox -Name $_.Name `
-FirstName $_.FirstName `
-LastName $_.LastName `
-Initials $_.Initials `
-Alias $_.Alias `
-SamAccountName $_.SamAccountName `
-UserPrincipalName $_.UserPrincipalName `
-Password $pass `
-ResetPasswordOnNextLogon:$True `
-OrganizationalUnit $_.OrganizationalUnit `
-Database $_.Database `
Set-User -Identity $_.Name `
-DisplayName $_.DisplayName `
-Notes $_.Notes `
Start-Sleep -s 30
Set-ADuser -Identity $_.Alias `
-homeDrive $_.homeDrive `
-homeDirectory $_.homeDirectory `
-scriptPath $_.scriptPath `
-description $_.description `

Hi James,
did you fix this problem? We see the same behaviour running a script creating mail enabeled groups. This script worked fine before installing SP 3 rollup 4
regards,
Ruth

MeetingPlace/WebEx: AutoAccount Creation Failed

We have a new MeetingPlace/WebEx node integration that went live yesterday. Most users are OK, however, this morning we have several users that are receiving an error message when trying to log in (for the first time: "Auto Account Creation Failed" message when trying to sign on for the first time. I see their account exists in the WebEx node and in MeetingPlace, and accounts are active in both. MeetingPlace users are synced from CUCM which are synced from AD. My first thought would be to delete them from WebEx and try to let the account creation process between MeetingPlace and WebEx happen again. Could anyone provide any input on this?
Thanks!
Mike,

Hey Mike,
Based on your description, I would assume you're on MeetingPlace 8.0 with MP owned user profiles.
The creation of user profiles in this deployment should only be done on MeetingPlace. The user profiles will not exist on WebEx until the first time that the end user logs onto the system using his/her credentials. If you seperately created the user profiles on the WebEx site as well as integrating from LDAP, you may encounter this sort of error. In this situation, erasing the user profile and letting it regenerate will likely resolve your issue.
If this doesnt work, you may want to check the status of your TSP connections to WebEx. This can be done by logging onto the CLI of the MP application server and entering the following command:
tspp.py -t
If your TSP connections show as disconnected, you will want to review the following document:
http://docwiki.cisco.com/wiki/Cisco_Unified_MeetingPlace_Release_8.0_--_System_Requirements_for_Cisco_Unified_MeetingPlace_Release_8.0#TCP.2FUDP_Ports_Used_in_Cisco_Unified_MeetingPlace_Scheduling_Deployment_Options
Hope this helps,

Windows 8 Sysprep - Can't skip local account creation and autologon fails, wrong admin password.

Using Windows 8 x64 Enterprise, Sysprep pauses to ask me to create a local user, which I don't want.
If I enable SkipSystemOOBE and SkipUserOOBE in OOBE under Microsoft-Windows-Shell-Setup sysprep (in oobe mode) will skip user creation and autologon works. But it only works correctly once. If I run sysprep again, when it tries to autologon
it will say that I have the wrong password for the local account. After I type in the password manually it works. If I use the same password for the local administrator account as for the autologon account, it looks to have the encrypted password
twice with an equal sign after it.
What I need to know:
How to skip local user account creation (we run on a domain but I have it connect through scripts later)
How to fix the autologon issue
Do I need the local administrator account enabled for this to work?
I have my unattend.xml file attached.
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<AutoLogon>
<Password>
<Value>[removed]</Value>
<PlainText>false</PlainText>
</Password>
<Username>[removed]</Username>
<LogonCount>2</LogonCount>
<Enabled>true</Enabled>
</AutoLogon>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<Order>1</Order>
<CommandLine>c:\folder\abatchfile.bat</CommandLine>
<RequiresUserInput>false</RequiresUserInput>
</SynchronousCommand>
</FirstLogonCommands>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
<NetworkLocation>Work</NetworkLocation>
<HideLocalAccountScreen>true</HideLocalAccountScreen>
<ProtectYourPC>3</ProtectYourPC>
</OOBE>
<TimeZone>Eastern Standard Time</TimeZone>
<DisableAutoDaylightTimeSet>false</DisableAutoDaylightTimeSet>
<RegisteredOrganization>Company Name</RegisteredOrganization>
<RegisteredOwner>CompanyName</RegisteredOwner>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<UserLocale>en-US</UserLocale>
<UILanguage>en-US</UILanguage>
<SystemLocale>en-US</SystemLocale>
<InputLocale>en-US</InputLocale>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<ComputerName>*</ComputerName>
</component>
</settings>
<cpi:offlineImage cpi:source="wim:[removed]/sources/install.wim#Windows 8 Enterprise" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>

The user accounts-creation page in Windows Welcome is suppressed if a user or a group is added to a local security group. Add a user or a group to a local security group by doing one of the following:
Create a local user.
Add a domain user to a local security group with the Microsoft-Windows-Shell-Setup | UserAccounts unattended installation setting.
To suppress the user accounts-creation page in Windows Welcome, without creating a local user, use one of the following workarounds:
Workaround 1
If the computer is already joined to a domain, use the following XML example to add the Domain Users security group to the Local Users security group.
<DomainAccounts>
<DomainAccountList wcm:action="add">
<DomainAccount wcm:action="add">
<Group>Users</Group>
<Name>Domain Users</Name>
</DomainAccount>
<Domain>FabrikamDomain</Domain>
</DomainAccountList>
</DomainAccounts>
Because joining a domain automatically adds the Domain Users security group to the Local Users security group, the DomainAccounts command does not affect the membership of the Local Users group. However, using this XML example to join a domain will also suppress
the user accounts-creation page in Windows Welcome.
Workaround 2
Use the Sysprep/Quit command to set the following registry value to 1:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OOBE\UnattendCreatedUser
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

Macbook bound to AD won't allow network login or new local account creation

As the title states I am having an issue related to a macbook pro that is bound to active directory. The only option we tweak when binding the macs to AD is that we opt to "create mobile account" option under directory utility.
It also seems that while we can login through the local admin account, new local accounts cannot be created (the account creation window hangs when you create account).
Any help would be appreciated

Hi
To successfully bind a mac workstation to Active Directory certain things need to be in place:
DNS has to be fully resolving on both pointers. This is done on the PDC or whatever server is the designated DNS Server.
Date and Time settings need to be adjusted to reflect whatever is designated as the NTP Server in the AD environment. Adjust the Date & Time Preferences Pane and find out from the Windows Network Administrator what the NTP Server IP address is.
You must use account credentials that has authority for the AD Domain. If you're trying to use your own account it may be restricted in what it can do? A domain account has special privileges not usually accorded to ordinary user accounts.
This assumes you're (a) not the Active Directory Network Administrator and (b) you're using the Active Directory plug-in the login options section of the Accounts Preferences Pane. It's a good idea to click the "Open Directory Utility" button when binding to Active Directory. It's also a good idea to access the Advanced Section once the Utility has opened.
If this is failing at the bind stage then perhaps you should review the details you've been given when binding to AD? It may be worthwhile to clear the workstation from the Computer OU before you try again?
The above is not an exhaustive list but should help?
Tony

Hyper-V 2012 R2 Cluster Creation Fails

I am trying to create a 2 Node Hyper-v 2012 R2 Cluster. The Cluster Validation passes with no errors or warnings but the the cluster creation fails.
The error is similar to
here .
In this case he solved it by joining the Nodes to a Windows 2012 Domain. We don't have that option in our environment.
In the System Logs Events 7024 The cluster service terminated... The cluster join operation failed, and 7031 Cluster Services Terminated unexpectedly.
Anyone have an idea?
Todd

Hi Todd,
For troubleshooting , please try to create a new OU then move cluster nodes computer to that new OU then block inheritance , restart the nodes .
After this try to use domain admin account logon the cluster nodes to build cluster again .
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

Guest account creation in ISE

Hello All,
I am encountering an issue in which I find only when guest accounts are created by sponsor through the sponsor portal, guess access is granted. If I manually add guest account in the same guest role via the administrative UI, instead of guest access authz profile is hit, ISE goes through supplicant provisioning flow. I know that I do have enable self provisioning flow but why would it kick in for guest user created by admin? I see many bugs dealing with guest portal flows but failed in finding one exactly matching to my senario. Any insight is greatly appreciated. version 1.2.
Fadi

You can create and manage guest user accounts to provide temporary network access for guests. If you have numerous guest user accounts whose account information is stored in an external database, you can import this information to expedite the account creation process.
Please Check the below guide for user’s creations:
http://www.cisco.com/en/US/docs/security/ise/1.1/sponsor_guide/ise_sponsor_chp2.html

DPM 2012 R2 Online Protection - Online Recovery Point Creation Failed

Hi
We are moving from protecting our DPM server with another server to use an Azure Data Vault. 2 of the Protection Groups work fine, but the third - protecting a pair of Folders - fails. On the DPM MMC it shows Online recovery point creation
failed, and in the Event Log it shows -
Creation of online recovery points for D:\ on blah.blah.co.uk have failed. The last online recovery point creation failed for the following reason: (ID: 3188)
The operation attempted cannot be performed at this time because a backup or restore operation is currently running. (ID: 100049)
The DPM server is the only one conducting any backups. The target server is Win 2003 (for the moment).
Could anyone give me any pointers?
Thanks

Ok, nobody any more ideas?
The latest test involved 9.75GB on the protected server. I created the protection group and this was the outcome:
Replica volume: 15.98 GB allocated, 0 KB used | Recovery point volume: 3.70 GB allocated, 0 KB used
I then create a recovery point and then deleted all 9.75GB on the protected server. And did a full restore from DPM. It then gave following outcome:
Replica volume: 15.98 GB allocated, 9.85 GB used | Recovery point volume: 3.70 GB allocated, 654.86 MB used
Then after the creation of the first recovery point (sync + recovery point), I get this:
Replica volume: 15.98 GB allocated, 4.79 GB used | Recovery point volume: 13.70 GB allocated, 3.27 GB used
As you can see DPM took the 9.75GB and added it to the recovery volume. And strangly it took away half of the replica volume.
In addition I get 3 entried in my logs:
1) The used disk space on the computer running DPM for the recovery point volume of E:\ has exceeded the threshold value of 90% (DPM accounts 600 MB for internal usage in addition to free space available). If you do not allocate more disk space,
synchronization jobs may fail due to insufficient disk space. (ID: 3169)
2) Synchronization jobs for E:\ on ****** have failed. (ID: 3115)DPM has run out of free space on the recovery point volume and will fail synchronization for E:\ on ***** in order to prevent existing recovery points from being
deleted. (ID: 30195)
3) Creation of recovery points for E:\ on ****** have failed. The last recovery point creation failed for the following reason: (ID: 3114)DPM does not have sufficient storage space available on the recovery point volume to create
new recovery points. (ID: 214)
I hope someone can help me with this.
regards,
Maurice

Audit Vault Agent account creation

Hi, I just installed the AV Server and about to configure the agents. The Oracle AV agent installation document suggests creating AV agent user by logging into the database as AVAdmin user(Section 3.1.1.c). However, the user creation fails with ORA-01031: insufficient privileges. Other database accounts (sys, system..etc..) are locked. Any clue how to resolve this ussue?
Thanks in advance.

1. Where in the OP's post do you see the word Windows?
2. Your advice is totally irresponsible in all respects. The proper way to administer the product is in compliance with the documentation. There is no rational reason to do what you suggest.
Were you an employee of mine, working on an audit vault project, you'd be terminated tomorrow morning when you walked through the door.
Again: your advice is misguided and totally irresponsible.

The timesheet creation failed, because of problems with the project I server or with data validation

Hi,
One of my user is facing issue in creating new time sheet,
"The time sheet creation failed, because of problems with the project server or with data validations".
This issue is coming to only few members out of 10000 members.
Note: For the same user, can able to do in other machines. only the problem in his machine. Have ran the office diagnostics, but still the problem persists.
Is any add-on's/any settings need to update in IE. Could any one please help me on how to fix this issue?
Many thanks in advance.

I would check the compatibility settings in IE etc, or try another browser (chrome, safari etc.)
Ben Howard [MVP] | web |
blog | book

Portmap translation creation failed for udp src inside dst inside

Hi!
I have a problem with allowing traffic to UC500 subnets on ASA 5505 inside interface.
My asa is a main router with addres 192.168.1.1
UC500 voip box is connected to ASA's inside interface through UC500 WAN port with UC500 with 192.168.1.2 address.
Firewall and NAT on UC500 is disable
UC500 sip traffic works fine. voipbox creates its subnets for data and voip - 192.168.10.0 and 10.1.1.0. another important address is 10.1.10.1 which is UC500 CUE.
My problem is that from within ASA local network (192.168.1.0) i cannot reach UC500 subnets, neither can I reach ASA's local network from the UC subnets.
the log says
3
Sep 07 2013
00:21:49
DC
53
PBXCUE
32901
portmap translation creation failed for udp src inside:DC/53 dst inside:PBXCUE/32901
I tried exempting uc500 subnets on ASA but that didn;t work.
Funny thing is that I CAN reach the UC500 subnets when connecting with VPN to ASA...
Please help! I am not familiar with CLI.
I configured static route to 10.1.10.0 and since then I was able to ping 10.1.10.1 thorugh ASA;s VPN.
I would be grateful for ideas.
Lukasz
global (inside) 1 interface
global (outside) 101 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 101 0.0.0.0 0.0.0.0
static (inside,outside) tcp interface https IIS https netmask 255.255.255.255 dns tcp 200 200 udp 200
static (inside,outside) tcp interface www IIS www netmask 255.255.255.255 dns tcp 200 200 udp 200
static (inside,outside) tcp interface smtp IIS smtp netmask 255.255.255.255 dns
static (inside,outside) tcp interface pop3 IIS pop3 netmask 255.255.255.255 dns
static (inside,outside) udp interface domain RenBetPBX domain netmask 255.255.255.255 dns
static (inside,outside) udp interface 5061 RenBetPBX 5061 netmask 255.255.255.255 dns
static (inside,outside) udp interface sip RenBetPBX sip netmask 255.255.255.255 dns
static (inside,outside) tcp interface 13000 SQL 13000 netmask 255.255.255.255 dns
access-group inside_access_in in interface inside
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 x.x.x.x
route inside PBXCUE-network 255.255.255.0 RenBetPBX 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy

Hello Julio!
Thank you for your advice.
I have managed to solve my main problem by reconfiguring my switches vlans - enabling trunk port configs for required ports and allowing them access to both vlans.
Now I can see everything from all of my inside networks.
I continue my ASA adventures - I have managed to configure L2TP client access for my windows users, RADIUS authentication for domain users and yesterday night I have managed to configure site to site VPN with my RV120W router.
I am only an enthusiast but my recent successes have given me apetite for more...
I keep reading forums and trying to solve most of my problems myself but I have faced another one now and thought that maybe you could give me another tip on where to look for the issue:
I still have one problem with my L2TP VPN config - I have configured split tunnel on the group policy to tunnel only 192.168.1.0 network requests.
access-list DefaultRAGroup_splitTunnelAcl standard permit 192.168.1.0 255.255.255.0
My network at home is 192.168.2.0 but it still tunnels everything (when I check my ip after connecting to VPN my home laptop still identifies with ASA gateway(!) address .
access-list outside_access_in extended permit icmp any interface outside object-group DM_INLINE_ICMP_1
access-list outside_access_in extended permit tcp any interface outside object-group DM_INLINE_TCP_1
access-list outside_access_in extended permit tcp any interface outside eq smtp
access-list outside_access_in extended permit tcp any interface outside eq 8080
access-list outside_access_in extended permit tcp any interface outside eq 23456
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 object-group DM_INLINE_NETWORK_1 any
access-list outside_access_in extended permit tcp any interface outside eq 13000
access-list outside_access_in extended permit tcp any interface outside range 8001 8016
access-list outside_access_in extended permit tcp x.x.x.x 255.255.255.0 interface outside eq ssh
access-list inside_nat0_outbound extended permit ip any 192.168.1.240 255.255.255.240
access-list inside_nat0_outbound extended permit ip any PBXVOIP-network 255.255.255.0
access-list inside_nat0_outbound extended permit ip any PBXCUE-network 255.255.255.0
access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 igolomska-network 255.255.255.0
access-list inside_access_in extended permit udp object-group DM_INLINE_NETWORK_2 any object-group DM_INLINE_UDP_1
access-list inside_access_in extended permit ip host IIS any
access-list inside_access_in extended permit ip any any
access-list inside_access_in extended permit ip host RBSTORE_NAS any
access-list inside_access_in extended deny udp any any object-group DM_INLINE_UDP_2
access-list inside_access_in extended permit tcp any any eq 5432
access-list inside_access_in extended permit tcp any host PBXCUE eq www
access-list inside_access_in extended permit tcp host PBXCUE any eq www
access-list inside_access_in extended permit tcp host RBCAMSTORE_NAS host EXCH-MBX eq smtp
access-list inside_access_in extended permit tcp host RBSTORE_NAS host EXCH-MBX eq smtp
access-list inside_access_in extended permit tcp host RENBETUPS host EXCH-MBX eq smtp
access-list inside_access_in extended permit tcp host RenBetPBX host EXCH-MBX eq smtp
access-list DefaultRAGroup_splitTunnelAcl standard permit 192.168.1.0 255.255.255.0
access-list outside_1_cryptomap extended permit ip 192.168.1.0 255.255.255.0 igolomska-network 255.255.255.0
route print shows:
and 192.168.1.240 is my VPN IP - its metric has higher priority than the local gateway.
How do I change it?
Active Routes:
Network Destination        Netmask          Gateway       Interface Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.126   4250
          0.0.0.0          0.0.0.0         On-link     192.168.1.240     21
      80.51.24.22 255.255.255.255      192.168.2.1    192.168.2.126   4251
        127.0.0.0        255.0.0.0         On-link         127.0.0.1   4531
        127.0.0.1 255.255.255.255         On-link         127.0.0.1   4531
127.255.255.255 255.255.255.255         On-link         127.0.0.1   4531
      169.254.0.0      255.255.0.0         On-link     192.168.2.126   4506
169.254.104.126 255.255.255.255         On-link     192.168.2.126   4506
169.254.255.255 255.255.255.255         On-link     192.168.2.126   4506
    192.168.1.240 255.255.255.255         On-link     192.168.1.240    276
      192.168.2.0    255.255.255.0         On-link     192.168.2.126   4506
    192.168.2.126 255.255.255.255         On-link     192.168.2.126   4506
    192.168.2.255 255.255.255.255         On-link     192.168.2.126   4506
        224.0.0.0        240.0.0.0         On-link         127.0.0.1   4531
        224.0.0.0        240.0.0.0         On-link     192.168.2.126   4506
        224.0.0.0        240.0.0.0         On-link     192.168.1.240     21
255.255.255.255 255.255.255.255         On-link         127.0.0.1   4531
255.255.255.255 255.255.255.255         On-link     192.168.2.126   4506
255.255.255.255 255.255.255.255         On-link     192.168.1.240    276
===========================================================================
I am starting to feel like I am using a bit too much of your friendliness ...
Best Regards and have a great day!
Lukasz

VPN problem behind ASA5505 -regular translation creation failed for protocol 50

Dear All,
I have to connect behind my ASA5505 with an VPN klient to an other site.
First time i got this failure.
"Deny protocol 50 src inside:192.168.50.X dst outside:x.x.x.x by access-group "acl_in" [0x0, 0x0]"
Than I opened our inside (src 192.168.50.0) network the UDP 500,4500 TCP 500,4500,10000 and ESP (dest x.x.x.x remote firewall ip).
access-list acl_in extended permit esp host 192.168.50.0 host x.x.x.x eq isakmp
access-list acl_in extended permit udp host 192.168.50.0 host x.x.x.x eq 500
access-list acl_in extended permit eudp host 192.168.50.0 host x.x.x.x eq 4500
etc.
After that i could connect for the remote firewall with vpn client but i couldn't reach any PC1s on there side and ping gives back no anwser.
Deny protocol 50 was solved but i got an other problem:
"regular translation creation failed for protocol 50 src inside:192.168.50.X dst outside:x.x.x.x"
I found somewhere thet lines can help:
crypto isakmp nat-traversal
inspect ipsec-pass-thru
But this wasn't usefull.
I tried a many thing but i'm stuck.
Could somebody help me what can i do to solve this problem?
Thanks for all anwsers!

The solution was the following for one IP!
object network x.x.x.x                      (inside IP)
   host x.x.x.x                                  (inside IP)
   nat (inside,outside) static y.y.y.y     (remote IP)

I have a problem syncing iCal on my Macbook air (10.7.5) and my iPhone 4s (5.1.1) over iCloud. The following server error message comes up "The request (CalDAVAccountRefreshQueueableOperation) for account "iCloud" failed." Been to Apple - no luck. Ideas?

I have a problem syncing iCal on my Macbook air (10.7.5) and my iPhone 4s (5.1.1) over iCloud. The following server error message comes up "The request (CalDAVAccountRefreshQueueableOperation) for account “iCloud” failed." Been to Apple Store - no luck instore, or with Super genius over the phone when with genius in store, taking data in real time via ethernet!
I had to do a full wipe of my system because of time machine back up issues 2 weeks ago, and the error has only occured at some point since then. I only did a drag and drop of my user account folders/files into an External HDD rather than a copy of my user account (advised by the staff in store at Apple to do this) and when reimported, the Mail folders are all present but each message is in a sub-sub-sub folder that is numerically named. I do not have a mirror image of the hard disk prior to the wipe, only a time machine back up from 2 weeks prior to it being done. I am uncertain if this reinstall has caused the issue.
I am not happy to upgrade the software in my iPhone until I have the calendars working. I have purchased Mountain Lion, but again am concerned about upgrading until the issues are sorted.
I have tried the other solutions on here with no luck. HELP please.
Many Thanks.

Progress Update.
I made a back of what existing phtos and Videos I had on my Iplhone. I used Image capture to do this making an entire back up of photos and videoa that were still intact on the phone.
Image capture is god for this purpose, as it does exactly what you ask it to do without applying any rules or squishing the files back into iphote (which might also be corupted)
Image capture wil do the basic function of retriving the contents of the phone and save them as native files on your hard drive.
Once I did this I erased my iphone, and re intitialised it restoring an older back up from icloud.
As the retore was happneing - I did retreive the missing files that cuased the intial beviour as above, and I could play the videos that were missing in the above scenerio. The wierd ting was however that even though the source files were now back on the device, the thumbnail previews were missing. Where I ahd balck thumb nails for server portions of the resotred content.
I then went to bed as the restore is a long process. When I woke up the library had library had cleaned itself up. Mysteriously the prcess had deleted the files missing the their thumbnails.
This is very perculiar and bad behavior.
I am now repeating the process, and will attempt to download the missing content as it is restored and prior to the phone trying to fix itself.
Here are the lessons learned.
DO NOT rely on Photo Stream to keep back ups and synchornise videos from you IOS device. IT DOES NOT SUPPORT THIS CAPBILITY
DO NOT rely on iCloud Back Up alone - always fd an occassional iTunes back up or more reliably still always take a back up of photos and video files using Image Capture to be doubly sure that you a have backd up any content.
DO THIS NOW - dont wait to loose your phone ofr have your phone repaired by replacement at the apple Store. (I did both :-(

RC-50004: Fatal: Error occurred in ApplyDatabase:Control file creation fail

Hi,
During the clone of R12.1 instance, while running the post clone on the DB tier, i am getting the following error
RC-50004: Fatal: Error occurred in ApplyDatabase:Control file creation failed.
when i looked into the log file, i can find this
Creating the control file for hr12at1_jsrc-cn6 database ...
SQL*Plus: Release 11.1.0.7.0 - Production on Tue Nov 17 04:41:58 2009
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Connected to an idle instance.
ORACLE instance shut down.
Connected to an idle instance.
ORACLE instance started.
Total System Global Area 1071333376 bytes
Fixed Size 1318172 bytes
Variable Size 427819748 bytes
Database Buffers 629145600 bytes
Redo Buffers 13049856 bytes
Control file created.
alter database open resetlogs
ERROR at line 1:
ORA-01152: file 2 was not restored from a sufficiently old backup
ORA-01110: data file 2:
'/u01/app/oracle11/db/apps_st/u32/oradata/R12HRM/tx_data11.dbf'
Please help
thanks a lot
Sasikala

Hi,
Sorry, my mistake, I did not pay attention to the cloning part.
For this error, looks like the database was not cleanly shutdown before copying the files or that preclone was not run successfully. You will have to run preclone again, and shutdown the database normally, then copy the file again.
Regards,
Hussein

When I try entering a new event in iCal on my MacBook Air, I get an error message popping up on my screen that says: The request for account "iCloud" failed. The server responded with "502" to operation CalDAVSetPropertyQueueableOperation. Help!!??

When I try entering a new event in iCal on my MacBook Air, I get an error message popping up on my screen that says:
The server responded with “502”
The request for account “iCloud” failed.
The server responded with “502” to operation CalDAVSetPropertyQueueableOperation.
The request for account “iCloud” failed.
I am then given the option of staying Online or going Offline.
Can anyone help me?
thanks

Hello b.krushel,
Thank you for using Apple Support Communities
Any number of things could cause this issue, so I would recommend this article named iCloud: Troubleshooting iCloud Calendar found here http://support.apple.com/kb/TS3999.
These sections in particular:
General Troubleshooting
Make sure there are no current issues listed on the System Status that affect iCloud Calendar. The System Status is located on the iCloud Support webpage.
Make sure you have fully enabled iCloud Calendar for the client you are using (for more setup and troubleshooting information on iOS, OS X, Windows and iCloud.com, see the additional details below).
Check to see if the issue you are seeing is covered in iCloud Help. To search iCloud Help, visit help.apple.com/icloud.
Check your settings and preferences as something may not be set up correctly. For example, having incorrect date and time settings can cause issues which are easily resolved by entering the appropriate settings.
Troubleshooting Calendar on OS X Mountain Lion (iCal on OS X Lion)Note: For instructions on setting up iCloud Calendar with Calendar or iCal on your Mac, see iCloud Setup.If you are having trouble with Calendar or iCal on a Mac and you are using iCloud Calendar, try each of these steps, testing after each to see if the issue is resolved:
Make sure you are using OS X Lion v10.7.2 or later. Click here for help verifying the version of OS X you are using.
Make sure your computer is online. Attempt to view www.apple.com and iCloud.com. If you can't connect to the Internet, your iCloud calendars and events will not update in iCal. Click here for more information about troubleshooting your Internet connection.
Verify that your iCloud member name is entered into the iCloud Preference pane in System Preferences. See iCloud Setup for more information about setting up iCloud on a Mac.
Make sure you enter and update calendar information in the iCloud section of Calendar or iCal. Only calendars and events in the iCloud section of the Calendar or iCal Calendar list will be pushed to iCloud. Both Calendar and iCal for the Mac support the display of and interaction with multiple accounts and datastores, for example, iCloud, On My Mac, Exchange, Google, and so on. This makes it easy to create or modify events or calendars in a section of Calendar or iCal that may not be updating iCloud. Learn more about moving local calendars to iCloud.
In some cases, you may find that you have data duplicated in both the local On My Mac and the iCloud sections of Calendar or iCal. Learn more about resolving this issue.
You can make the iCloud calendar your default calendar for all new events. In Calendar on OS X Mountain Lion, choose Calendar > Preferences > General, or in OS X Lion, choose iCal > Preferences > Generaland under the Default Calendar heading, select one of the Calendars under the iCloud heading. Close the Preferences window to save this change.
If recent changes simply don't appear, try forcing Calendar or iCal to refresh by selecting Refresh All from theCalendar menu.
Make sure your account was successfully created in Calendar on your Mac (or iCal). After upgrading to iCloud Calendar, you may need to quit and reopen Calendar (or iCal). To confirm your account is configured correctly in iCal:
Open Calendar (or iCal).
Open Calendar (or iCal) Preferences.
Click Accounts. You should see an account with your iCloud member name entered.
Turn iCloud Calendars off and back on
Quit Calendar (or iCal).
Choose Apple () menu > System Preferences > iCloud.
Remove the checkmark in the checkbox next to Calendars.
Close System Preferences and wait about a minute.
Open System Preferences and choose iCloud.
Replace the checkmark next to Calendars.
Close System Preferences.
Open Calendar (or iCal) and test to see if the issue has been resolved.
Restart your computer. This may sound simple, but it does reinitialize your network and application settings and can frequently resolve issues.
Take care,
Sterling

Account creation failed

Similar Messages

Maybe you are looking for