ACS any Version with Domain Controller on Windows Server 2008 R2 64bit

Hi AllIs there currently any ACS version working with Windows Server 2008 R2 domain controllers?Our
server stuff has recently upgraded the Domain Controllers to 2008r2 and
turned off the 2003 servers. This didn't make our ACS 4.1.4 really
happy.I've read now serveral posts regarding issues with ACS and
Server 2008r2 and hope to find a solution (besides switching to LDAP,
yukk).Thankspato
Hi Pato,
Just check out the below link hope that help.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/release/notes/ACS42_RN.html
As per the link it says The support for Windows Server 2008 is applicable for ACS 4.2 Patch 4 onwards.
Hope to Help !!
Remember to rate the helpful post
Ganesh.H

Similar Messages

¿Is it possible to upgrade from SCCM 2012 a domain controller in Windows Server 2008 R2 TO 2012 R2?

Hi all.
I want to know if is it possible to upgrade a domain controller from Windows Server 2008 r2 to 2012 r2 installing from SCCM 2012.
Thanks.
Regards.

Hi all.
I want to know if is it possible to upgrade a domain controller from Windows Server 2008 r2 to 2012 r2 installing from SCCM 2012.
Thanks.
Regards.
Anything is possible if you can script it. You could create a task sequence to do the following (with scripts):
1. Demote 2008R2 DC to member server
2. Remove 2008R2 member server from domain
3. Build new 2012R2 member server and join to domain
4. Promote 2012R2 member server to DC
You can do this. However, why would you? Just because you can doesn't mean you should. In my opinion it's more trouble and testing than it's worth. How many times would you need to do this?
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Install Active Directory Domain Controller on Windows server 2008 enterprise, dont login on Sql Server 2008 R2

I install Active Directory Domain Controller on Windows server 2008 enterprise and dont login on Sql Server 2008 R2. Before install ADDC, I have logon SQL Server 2008r2 Success, After when i install ADDC is don't logon on SQL Server 2008r2 -->not success.
I have uninstalled ADDC but i still can't login on SQL server 2008r2.
please help me. it is very very disaster!
I think is loss account SQL server 2008r2!

Hello,
I stronly recommend you post the detail error message to us while you try to connect to SQL Server instance, it's useful for us to do further investigation.
Microsoft recommends that you do not install SQL Server 2008 R2 on a domain controller, there are some limitations:
You cannot run SQL Server services on a domain controller under a local service account or a network service account.
After SQL Server is installed on a computer, you cannot change the computer from a domain member to a domain controller. You must uninstall SQL Server before you change the host computer to a domain controller.
After SQL Server is installed on a computer, you cannot change the computer from a domain controller to a domain member. You must uninstall SQL Server before you change the host computer to a domain member.
SQL Server failover cluster instances are not supported where cluster nodes are domain controllers.
SQL Server Setup cannot create security groups or provision SQL Server service accounts on a read-only domain controller. In this scenario, Setup will fail.
On Windows Server 2003, SQL Server services can run under a domain account or a local system account.
So, I would suggest you try to open up Windows Services list and changed the account for SQL Server service.
Regards,
Elvis Long
TechNet Community Support

Upgrading windows server 2003 domain controller to windows server 2008

Hello friedns :
We have a company with about 2000 users , and two windows server 2003 domain controllers , one of them acts as a primary domain controller , and the other acts as secondary domain controller , all the FSMO s are on the primary DC ,we have decided to upgrade all of our servers from windows server 2003 to windows server 2008 , the first step is to upgrade the domain controllers to windows server 2008 , our domain controllers are so sensitive and has to be active 24 hours a day , i have stress upgrading it to windows server 2008 , what is the best solution to upgrade it with no risk ?
( i have an opinion but i am not sure and i dont have any guide about it , i want to install a windows server 2008 and promote it as an additional domain controller to the windows server 2003 DC and the transfer all the FSMOs to it , and then promote the first domain controller !!! is that possible ? if yes , is there any guide about it? )
If there is a guide available for it please let me know . (Specially if there is a tip & trick)
thank you guys.
Network is my LOVE

Hi,
This TechNet online article might be helpful for you.
How to Upgrade Domain Controllers to Windows Server 2008 or Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx
For your convenience, I have list some general steps for your reference.
Since the following operation have potential damage to Active Directory database, it is highly suggested that you'd better perform a full backup of Active Directory (System State) firstly. Also it is better to test the following procedure in a similar lab environment first.
General Steps:
=============
1. Verify the new server's TCP/IP configuration has been pointed to the current DNS server.
2. Make the new server become a member server of the current Windows Server 2003 domain first.
3. Upgrade the Windows Server 2003 forest schema to Windows Server 2008 schema with the "adprep /forestprep" command on old server.
Please run the "adprep.exe /forestprep" command from the Windows Server 2008 installation disk on the schema master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
Drive:\sources\ADPREP\adprep.exe /forestprep
4. Upgrade the Windows 2003 domain schema with the "adprep /domainprep" command on old server.
Please run the "adprep.exe /domainprep" command from the Windows Server 2008 installation disk on the infrastructure master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
Drive:\sources\ADPREP \adprep.exe /domainprep
5. Insert Windows Server 2008 Installation Disc in the new server.
6. Run "dcpromo" on new server to promote it as an additional domain controller in existing Windows 2003 domain, afterwards you may verify the installation of Active Directory.
Please refer to:
How to Verify an Active Directory Installation in Windows Server 2003
http://support.microsoft.com/kb/816106
7. Verify the new server's TCP/IP configuration has been pointed to current DNS server.
8. Enable Global Catalog on new server and manually Check Replication Topology and afterwards manually trigger replication (Replicate Now) to synchronize Active Directory database between 2 replicas.
Please note: It will some time to replicate GC between DC, please wait some time with patience.
9. Disable Global Catalog on the old DC.
10. Transfer all the FSMO roles from the old DC to the new DC.
Please refer to:
How to view and transfer FSMO roles in Windows Server 2003
http://support.microsoft.com/kb/324801
11. Verify that the old DNS Server Zone type is Active Directory-Integrated. If not, please refer to:
How To: Convert DNS Primary Server to Active Directory Integrated
http://support.microsoft.com/kb/816101
Note: Active Directory Integrated-Zone is available only if DNS server is a domain controller.
12. Install DNS component on new server and configure it as a new DNS Server (Active Directory Integrated-Zone is preferred). All the DNS configuration should be replicated to the new DNS server with Active Directory Replication.
13. Make all the clients change TCP/IP configuration to point to new server as DNS.
14. You may configure TCP/IP on all the clients, or adjust DHCP scope settings to make them use the new DNS server.
Please note: It is a good practice to make the old DC offline for several days and check whether everything works normally with the new server online. If so, you may let the old DC online and run DCPROMO to demote it.
Hope it helps.
Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.

What is the proper way to demote a Win 2003 Domain Controller running SQL Server 2008 WorkGroup Edition?

Hi,
What is the proper way to demote a Windows 2003 Domain Controller running SQL Server 2008 WorkGroup Edition?
I will be migrating AD from Win 2003 to 2012....
Thanks in advanced.

Running SQL on a domain controller is highly not recommended for performance reasons and for complexities it introduces in the management of both systems (You are already facing this situation now).
I would recommend proceeding like the following before demoting your domain controller:
Install a new SQL server on a member server
Migrate your databases to the new SQL server
Once done, you can safely demote your DC.
More if you ask them here: http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=sqlserver
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

OS 10.7, SMB Connection, Change to Unicode with Extended Security on Windows Server 2008 Standard

Hi All, I've searched Google, and I've also contacted Apple Support with no luck: I want to implement unicode with extended security on Windows Server 2008 Standard server shared folders so that Lion can connect normally (i.e. Finder->Go->Connect to Server->IP Address or server name) to SMB shares and access files. I'm lacking information; has anyone actually implemented unicode with extended security? If so, how?
Thanks in advance.
Tom

Thanks for the reply aorlich. Do you mean enable file sharing on my Mac? With file sharing enabled, I still cannot get to my Windows 7 shares, although the files on my Mac do become available to Windows. Thanks again.

Cisco NAC 4.8 and Windows Server 2008 Enterprise 64bit SSO

Hi,
     I try to setup SSO on Cisco NAC 4.8 and Windows Server 2008 Enterprise 64bit, but I can't start Active Directory SSO Service that show error follow below. I saw this error " KDC has no support for encryption type (14)" . Could anyone help me to troubleshoot this problem?
FQDN: active.test.com
Domain Name : test.com
User : ccasso
2011-02-05 12:00:30.225 +0700 WARN com.perfigo.wlan.jmx.adsso.GSSServer
- Server was not running ...
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- Server starting server ...
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- Server is now running ...
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - SPN : [ccasso/[email protected]]
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - building kdc list for domain active.test.com
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - done building kdc list for domain active.test.com
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - KDC(s) :[10.0.240.100]
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - writeKrbFile: writing to file ../conf/krb.txt
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - writeKrbFile: wrote to file ../conf/krb.txt
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - creating login context ...
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - created login context ...javax.security.auth.login.LoginCon
text@5ad7b2
2011-02-05 12:00:40.239 +0700 ERROR com.perfigo.wlan.jmx.adsso.GSSServer
- Unable to start server ... KDC has no support for encryption type (14)
2011-02-05 12:00:50.244 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- Notifying GSSServer status Stopped
2011-02-05 12:00:50.244 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- server is exiting .

Hi,
This error means that your DC does not support the encryption method the ACS wants to use.
Usually this happens when you run 2008 Server with 2003 functionality...
You will need to run ktpass.exe according to the DC you are running:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cas/s_adsso.html#wp1277452.
For Windows 2008 Server at 2003 Server functional level:
ktpass -princ newadsso/[adserver.][email protected] -mapuser newadsso -pass
PasswordText -out c:\newadsso.keytab -ptype KRB5_NT_PRINCIPAL
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Oracle DB 10g XE on Windows Server 2008 R2 64bit

Hello to everybody!
I have and old pc with Windows Server 2003 (32 bit) where i've installed Oracle DB 10g XE. Everything works fine.
Now i have to migrate the DB from that old machine to a new one with Windows Server 2008 R2 64bit.
I've tryied to install the Oracle DB 10g XE into the new server but, after installation is finished, i wasn't able to open the DB homepage at http://127.0.0.1:8080/apex. It said "This page can't be displayed". I try with SQLPLUS but after i insert the admin credentials i obtain these lines:
ERROR:
ORA-01034: ORACLE not available
ORA-27101: shared memory realm does not exist
Where can be the problem?

>> ORA-01034: ORACLE not available
Database is not running. Most likely the installer did not complete all its tasks, it can happen.
For windows, the database service has to be set up (see Start/Run/services.msc), services started, installer creates the database, and quite a few other setup chores. If the database creation fails, all the other stuff is not relevant.
Under the <drive:>oraclexe folder there *should* be a datafiles (*.DBF) files somewhere. Can't recall the exact location for 10g. Try file explorer and a search for *.dbf files, that will probably come up empty.
Note the requirements, at Oracle&reg; Database Express Edition it calls for x86, not x64. The 11g XE also has lots of trouble getting a successful install on x64 as well, note the Download page states "does not work on x64" although some folks have gotten it to work.Try the deinstall steps, and use a right click/run as Administrator that *might* get past the UAC glitch that happens on the later OS versions.

Problem of SAPConsle 7.10 (Patch 13) on Windows server 2008 R2 (64bit)

My company is moving from server 2003 to Server 2008 R2 (64bit). We installed SAPConsole 7.10 (Patch level 13) on test server without any problem and configured the profiles in SAPConsole administrator. However when we running the sapcnsl.exe from command prompt, it prompt with error message "*** ERROR => ***AgCom (006FC558): Error: Internal error" and failed to get the SAP login screen.
I checked SAP Note 1043241 saying SAPConsole 710 as patch level 7 could support Windows server 2008 (32/64bit) both.
Can anyone help advise on my issue? or is there anyone has testl the SAPConsole 710 on Server 2008 R2 64bit successfully?
Thank you very much!

Hello Jackcd,
I am not an expert in this area but I did a message search for "AgCom error internal error" and I found a message where the customer solved the problem by using a patch. In the customers own words:
"I installed sapgui 7.10 Patch level 6 on the server where I installed SAPCONSOLE 7.10. Now, the sapconsole working."
The Sapinator

Error Installing InDesign CS3 Server on Windows Server 2008 R2 64BIT

Hello there-
I'm trying to install InDesign CS3 Server on Windows Server 2008 R2 64BIT (x64) Edition, however, we get a failure indication on the installer. Before, we have installed it properly on Windows Server 2008 R2 32BIT (x32) but some how we cannot proceed on a x64 box.
Is there any limitation on this sense? Any documentation about it?
Thanks and appreciate your answers.
Regards,
Gustavo Ortega
Software Engineer

Hello,
Have you followed these recommendations from the installation guide ( Installation Guide u2013 SAP Content Server on Windows 2008 ) :
Note: In the IIS 7.0/7.5, all the roles are not selected during the installation by default,
Please make sure all the below roles are included and IIS 7.0/7.5 is installed.
Roles needed in IIS 7.0/IIS 7.5.
Common HTTP Features
Static Content
Default Document
Directory Browsing
HTTP Errors
HTTP Redirection
Application Development
ISAPI Extensions
ISAPI Filters
Health and Diagnostics
HTTP Logging
Logging Tools
Request Monitor
Tracing
Custom Logging
ODBC Logging
Security
Basic Authentication
Windows Authentication
Request Filtering
Note : Anonymous Authentication should be enabled.
Performance
Static content Compression
Dynamic Content Compression
Management Tools
IIS Management Console
IIS Management Scripts and Tools
Management Service
IIS 6 Management Compatibility
IIS 6 Metabase compatibility
IIS 6 WMI Compatibility
IIS 6 Scripting Tools
IIS 6 Management Console
Note: There is a File Upload limitation in IIS 7 on Windows 2008 Server, IIS will reject any file that is
larger than 30 MB. This is a default limitation of IIS. You can increase the maximum file size by
setting the parameter maxAllowedContentLength in the file ApplicationHost.config.
The following command can be used to set the parameter from the command prompt, please
change the directory to Windows\System32\inetserv and then execute the command.
appcmd setconfig /section:requestFiltering/requestLimits.maxAllowedContentLength:150000000
The value is only an example, in this case the upload limit is set to 150MB.Server has to be restarted
after execution of this command.
Also, are you using Maxdb to store the files or is it a "flat files" content server ?
HTH.
Steve.

OBI11g installation on Windows Server 2008 R2 (64bit)

Hi,
Sorry to pick up this topic again, but my research in the forum and other inet sites doesn't help me so far and my installation will not work.
My Situation:
I have a Windows Server 2008 R2 (64bit) default installlation. The server (HyperV-managed) has 4 GB RAM.
I added a Loopback adaptor and set for the loopbackadapter a fixed IP (10.10.10.10 Subnet: 255.255.255.0).
Entered in the host file (127.0.0.1 localhost and 10.10.10.10 servername)
Installed JDK 64bit
Installed Oracle Client 32bit
Then I tried all three options:
1) Default OBIEE Installation --> start of coreapplication_obips1 has failed. Everything else was fine. I was not able to start the obips1 manually
2) Enterprise Installation --> start of coreapplication_obips1 has failed. Everything else was fine. I was not able to start the obips1 manually
3) Manually installed WebLogic 1033 --> SoftwareOnly installation of OBIEE --> manually start config of OBI Installation --> same result as above!
Perhaps you have some hints for me.
Cheers
Wolfgang

Not in the slightest - I installed five just the other week
All our virtual machines, running 2008 R2 x64. We went for Enterprise Edition, but I believe in CF9 they're both 64-bit anyway. These are the from the build notes I built up:
Install extra roles:
    Application Server
    Web Server (IIS)
      Application Development
      IIS6 METABASE Compatibility
Install extra Features:
    SMTP Service
Other than that nothing else needs doing. It's worth noting (as a slight but irritating aside) that in 2008 R2 the SMTP service is set to Manual not Automatic, so you'll want to change that unless you want your emails to stop every time you reboot the box.
But the actual install itself was far simpler than CF8 on 2008.
O.

Now there is no available of windows server 2008 R2 64bit download. so i want to know the equivelent product in server 2012?

now there is no available of windows server 2008 R2 64bit download. so i want to know the equivelent product in server 2012?

Hi,
Windows 2008 R2 and Windows 2012 are not equivelent product, there are many new features in Windows 2012, and Windows Server 2008 R2 Evaluation (180 days) still availabe:
http://www.microsoft.com/en-us/download/details.aspx?id=11093
Regards,
Yan Li
Yan Li
TechNet Community Support

Adding second domain controller in Windows server 2012 R2

Hello, our primary domain controller is currently on a machine that has Windows Server 2008 R2 Standard. We are planning to setup a second domain controller as a failover to our primary domain controller. My question is, can we have a secondary domain
controller on a Windows Server 2012 R2 even if our primary domain controller is on a machine that has Windows Server 2008 R2?

I think I found the answer to my question.
http://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
"In Windows Server 2012, Adprep.exe is integrated into the AD DS installation process and runs automatically as needed. For example, when you install the first domain controller that runs Windows Server 2012 into an existing domain and forest, then adprep
/forestprep and adprep /domainprep automatically run and report the results of the operations.
Some organizations may prefer to run Adprep.exe separately in advance of an AD DS installation. For this reason, Adprep.exe is also included in the \Support\Adprep folder of the operating system disk.
In Windows Server 2012, there is only one 64-bit version of Adprep.exe. It can be run remotely from any server that runs a 64-bit version of Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012. The computer where you run it can be either
domain-joined or in a workgroup.
The version of Adprep.exe in Windows Server 2012 includes new syntax and parameter options in order to run it remotely. For more information, see
Adprep."
For more information about the objects and containers that are created when the schema is extended to support Windows Server 2012, see
Windows Server 2012: Changes to Adprep.exe.

Upgrade a Domain Controller running Windows Server 2012 Datacenter Eval

Hello,
because I couldn't wait for Server 2012 to show up on Dreamspark Premium I installed the Datacenter evaluation version after I found this blog
post telling me, I could simply enter my key when I get it to upgrade to the full version.
After entering the command I get notified that "Changing this Windows edition is not supported online for a domain controller.".
The TechNet article for upgrading evaluation versions states the following:
"If the server is a domain controller, see http://technet.microsoft.com/library/hh472160.aspx for important steps to follow before proceeding."
and taking me to an article for installing/uninstalling ADDS without further comments.
Simply typing "slui 3" and entering my key states that I have to enter an eval key.
My question is: Is there a painless way to upgrade my 2012 DC without losing my AD config?
Regards,
Hans

Hi,
Please refer to the following Microsoft TechNet article to confirm if the steps of converting to full retail version are correct.
Evaluation Versions and Upgrade Options for Windows Server 2012
http://technet.microsoft.com/en-us/library/jj574204.aspx
If the warning persists, it means Windows Server 2012 Domain Controller does not support such convert. If so, please install another Windows Server 2012 full retail version or
convert to full retail version and then promote it to an additional Domain Controller for this domain. After that, transfer FSMOs to this new Domain Controller and demote the original Domain Controller.
Regards,
Arthur Li
TechNet Community Support

Upgrade of OS windows server 2008r2 from without Hyper-v to Hyper-V with out re installing Windows server 2008 R2

Hi,
I have server with Windows server 2008 R2 Std, in this server, Hyper V feature is not available in Role and Feature in Server Manager, I want to add Hyper V with out re installing OS.
If it is possible Please provide the solution step by step.
Waiting for your reply.
Thanks
Sumit

Hi,
Any one can response on this?
Thanks
Sumit

ACS any Version with Domain Controller on Windows Server 2008 R2 64bit

Similar Messages

Maybe you are looking for