Administration Node and non-default certificate

Hello,
We are running our administration server on one host, and we have multiple other hosts configured as administration nodes. We used our company CA to generate a server certificate for our administration server, and that appears to be working fine. We tried to do the same thing on our administration nodes, and something curious is happening.
I used certutil -R to generate a CSR and private key. I then took the generated CSR, obtained a signed certificate from our company CA, then used certutil -A -t u,u,u to install it (and certutil -A -t CT,, to install the CA cert itself). Running certutil -L, I see that in addition to the default Admin-CA-Cert and Admin-Server-Cert our company CA cert and the newly signed cert show up. So far, so good.
Next, I modified the server.xml to specify the server-cert-nickname as that assigned to my new cert.
To put these changes into effect, I stop and start the admin server, but upon doing so, I see this message:
warning: LCM0006: Lifecycle module [AdminLifecycleModule] threw ServerLifecycleException [com.sun.web.admin.exceptions.AdminException: ADMIN3668: Cannot start an unregistered node. Register with an administration server. ]
OK, so I run wadm register-node to re-register the admin node (presumably it needs to tell the admin server about our new certificate) and then start the admin server again, and it starts. Problem is, the act of running wadm register-node has reset the server-cert-nickname back to the default (Admin-Server-Cert) and even more bizarre, has deleted both our local CA and my new certificate from the certificate & key database.
How do I - or is it even possible to - run my admin nodes with certs signed by our company CA?
Thanks,
Bill

Hi,
Can u explain the problem elaborately
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support"

Similar Messages

  • Recursive node and Non Recursive node

    Hi,
    What is the difference between Recursive node and Non Recursive node ?
    Thanks,
    Teja

    Hi Teja
    Recursive node
    If you wish to represent a recursive data structure within the context, a recursive node is the correct node to use. The simplest example of recursive data within a hierarchical structure is a file system. A dictionary can contain either files or subdirectories. This definition is then repeated for each subdirectory level down the hierarchy.
    Within the context, a recursive node is a special node that has only two properties: name and repeatedNode. As with any context node, a recursive node must itself name, but the repeatedNode property is where the recursion is defined. This property holds a reference to some parent node and indicates that, at runtime, the location of the recursive node will be occupied by a node of the type indicated in the repeatedNode property.
    You should think of a recursive node as a design time placeholder used to indicate a node will be created at this location at runtime, and will be of the type named in the repeatedNode property.
    The node name identified by repeatedNode must lie on the direct path back to the context root node.
    When a recursive node is created at runtime it always created as a non-singleton node. This is a hard-coded feature and cannot be changed.
    Non recursive node is opposite to recursive node
    Regards
    Ruturaj

  • How to establish user equvalance between 2 rac nodes on non default ports??

    Hi Friends,
    Please shed some light on how to establish user equvalance between 2 rac nodes on non default ports such as ssh on 22...
    i want to establish user equvalance on other ports..
    Thanks
    RB

    R12DBA wrote:
    Hi Friends,
    Please shed some light on how to establish user equvalance between 2 rac nodes on non default ports such as ssh on 22...
    i want to establish user equvalance on other ports..
    Thanks
    RBHi RB ,
    22 is default port for ssh. For configuring
    http://yasarmoran.wordpress.com/2010/06/12/configuring-ssh-on-oracle-rac-nodes/
    For non default port , first of all you need to configure ssh on new port . For that refer :
    http://www.itworld.com/nls_unixssh0500506

  • Singleton node and non singleton practical scenario

    Hi  Friends,
    Iam totally confused with singleton and non singleton node implementation please explain practical implementation on singleton and nonsingle ton node . In which scenario  non single ton node is used.
    Thanks in advance
    Prasad

    Hi,
    Singleton Node:
    A singleton node contains only one instace of the node at runtime. And that instace contains multiple elements at runtime.
    By default if we create a node under ROOT context node, it will be allways singleton true.
    Non singleton node:
    A non singeton node contains more then one node instance at runtime. And each instance contains multiple elements at runtime.
    It is not possible to create NonSingletonNodes directly under ROOT context node. We can create under any node which is under ROOT context node.
    Note: In terms of datastorage at runtime we can say if node is table then each elment of node instance is a row of that table.
    When is it requried to create non singleton nodes?
    For example if you have list of SalesOrders and each and every oder is having list of items. Then we can create this node structure in two ways:
    Orders (singleton true)
    > Items (singleton true)
    Here in this case at any point of time the there will be only one instance of Items node exist for currently selected element of Orders node. And that instance contains multiple elements nothing but items of that order.
    Orders (singleton true)
    > Items (singleton false)
    Here in this case at any point of time all the instances of Items node exist for all the elements(not only for currently selected element) of Orders node. And those instances contains multiple elements nothing but items of those corresponding orders.
    I hope it helps.
    Regards,
    Vijay K

  • Grid control and non-default listener

    I have oem 10.2.0.5 on linux redhat 5
    i have a series of databases with 2 oracle homes on solaris.
    1. we use virtual IPs instead of the host ip. so one IP for each database. This is due to our active/passive cluster. I have read the documentation on this. I was able to configure for this by taking the tnsnames file and using that in the target configration.
    My problem now is that the OEM sees my listener as being down. I think this is because it is looking for the default listener on port 1521. We have 1 listener per database and they are on non-default ports. This is for our active/passive failover.
    how do I configure the target to look for the correct listener? so I do not have a listener called listner.
    My listener has the same name as the database name and is on the same port as my database.

    Guess2 wrote:
    I have oem 10.2.0.5 on linux redhat 5
    i have a series of databases with 2 oracle homes on solaris.
    1. we use virtual IPs instead of the host ip. so one IP for each database. This is due to our active/passive cluster. I have read the documentation on this. I was able to configure for this by taking the tnsnames file and using that in the target configration.
    My problem now is that the OEM sees my listener as being down. I think this is because it is looking for the default listener on port 1521. We have 1 listener per database and they are on non-default ports. This is for our active/passive failover.
    how do I configure the target to look for the correct listener? so I do not have a listener called listner.
    My listener has the same name as the database name and is on the same port as my database.Your database isn't "on" a port, so the fact that you make a statement like "My listener . . . is on the same port as my database." indicates you don't yet have a clear understanding of the relationship of the listener to the database. The fact that you would name your listener the same as your database further indicates you don't yet have a clear understanding of the relationship of the listener to the database.
    The database (actually, we're talking about the instance) really has no inherent relationship to the listener. The listener is just a connection broker. One listener, listening on one port, can service requests for multiple databases, even multiple versions (9.x, 10.x) databases, even databases running out of different homes. For that reason alone, I consider it bad practice to name a listener the same as a database. That implies a relationship that simply doesn't exist. Only under extraordinary circumstances would it be necessary to have more than one listener running on a server, regardless of how many database instances may be on that server. And for that reason it really doesn't make much sense to name your listener anything but the default - "listener".
    You configure your listener to listen on a certain ip and port. You configure your clients (via tnsnames or other naming method) to send connection requests to the ip and port the listener was configured to listen for, requesting a connection to a service name the listener knows about. The listener knows about service names either through coding in the SID_LIST section of listener.ora, or through self-registration by the instance.
    I worked with active/passive clusters with virtual IP's a few years ago and there was really nothing special I had to do as far as the databases, clients, or listeners.

  • Anonymous classes and non-default constructors

    I've got a class with only one constructor and that takes an argument. In another class, I want to have an anonymous class that extends this class with something like:
    new MyClassWithoutDefaultConstructor(myConstuctorArg) {...}
    However, I get a "The constructor MyClassWithoutDefaultConstructor() is undefined".
    As a workaround I can create a local class (not anonymous) that extends MyClassWithoutDefaultConstructor and then includes a default constructor which passes my arg to the super constructor. But this is rather messy.
    Am I missing something?

    The following works fine for me (prints 5):
    public abstract class Test
        private final int parameter;
        public Test(int parameter)
            this.parameter=parameter;
        public int getParameter()
            return parameter;
        public abstract int getSomething();
        public static void main(String[] args)
            Test test=new Test(3)
                public int getSomething()
                    return getParameter()+2;
            System.out.println(test.getSomething());
    }You say your anonymous class is in a different class to the one it extends - what is the access modifier on the constuctor you are calling in the base class? Is the constructor visible from the class containing the anonymous class? Can you post a concise example that produces the compiler error that you are getting?

  • I have two libraries within iPhoto, however can't find or open the non-default library and can't find a way to even locate the non-default library.

    My iPhoto software got set up with two separate libraries of photos, one marked as default.  I have saved photos to the non-default library, however now can't seem to find a way to open the non-default library.  Every once in a while when I open iPhoto it will ask me, but usually it just opens the default library.  How can I open the non-dafult library of photos?

    When you launch iPhoto with the option key depressed you'll get this window:
    Click to view full size
    All libraries on your hard drive (and on external drives) will be listed and the currently used library will be listed as (default).
    OT

  • Problem: Mixed Exchange 2007 / 2013 CAS Servers with wildcard certificates in Europe and non-wildcard Certficate in China

    Hi,
    we have following problem. We have a mixed multi-domain one-forest AD environment. We also have still a mixed exchange 2007 / 2013 environment. We also have different CAS Servers for 2007 SP3 (RU15) and 2013 (CU8) in europe and one 2007 SP3 (RU15) CAS Server
    in China, because of bad connection to Europe. For the Migration to 2013 in Europe we installed a wildcard-certificate *.xyz.com and used the Set-OutlookProvider EXPR -CertPrincipalName msstd:*.xyz.com, so the wildcard certificate is accepted. Everything in
    Europe works fine, inside and outside also between exchange 2007 and 2013 (both CAS Server 2013 and 2007 use the same wildcard certificate). But since the change of the Set-OutlookProvider EXPR we are facing problems with our CAS Server in China, because this
    server has a different non-wildcard certificate and a different domain name (cas-server.xyz-china.com instead xyz.com). Now we have the problem that this Chinese CAS server the Outlook Anywhere does not work anymore and prompts always for the username. As
    I see it is because of the EXPR change. Is it possible to set the the Outlook-Provider EXPR per Cas-Server ? (They also have their own Autodiscover on this front-end server). Because I see that the Outlook-Provider can only be stored forest-wide.
    If not the other solution would be to register the chinese cas server in our xyz.com domain and use the same wildcard certificate on this system right ?
    Any help would be appreciate….

    Yes setting the EXPR value is most likely the cause of your issue.  When you set this value you are telling Outlook to only accept connections from connections that have the cert with the subject name you specify here.
    Unfortunately, based on my experience I believe this is an organization wide setting and cannot be configured on a CAS by CAS basis (If I'm wrong someone please keep me honest :)).  
    So the only option would you have is to change all the URLs to be on *.xyz.com domain.  There's no need to change the domain the server actually resides on.  The other option would be to purchase a UCC Cert with all the names you need and apply
    to all your CAS servers and reset the EXPR value. 
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

  • I want ro remove all of the default Firefox bookmarks. There are way too many and none of which are usefull to me. I would like to make my old IE Favorites folder the default. How can I do this?

    I need to remove the default Firefox bookmarks.
    There are way too many and none of which are usefull to me.
    Also, I am vision impaired and reading through such a long list is very eye-fatigueing to me.
    I would like to make my old IE Favorites folder the default. How can I do this?

    Did you import an iPhoto Library from the old Hard Drive? Do you still have that old Library?
    The way to clear out a Library is to Export the photos - Apps like iPhoto2Disk or PhotoShare will help you export to a Folder tree matching your Events.
    For the annoying start-up message:
    Go to your Pictures Folder and find the iPhoto Library there. Right (or Control-) Click on the icon and select 'Show Package Contents'. A finder window will open with the Library exposed.
    Look there for a Folder called 'Import' or 'Importing'.
    Drag it to the Desktop. *Make no other changes*.
    Start iPhoto. Does that help?
    If it does then look inside that folder on your desktop. Does it contain anything you want? If not you can trash the folder.

  • Thermocouple Node Part Numbers - Difference between programmable and non-programmable nodes?

    Hello!
    We just received our starter kit and nodes.  When looking at the part number on the back of the programmable thermocouple node (with the starter kit), it is listed as "197085D-01L".  There is no number that matches the Part Number listed on the website, such as 780998-02.  The non-programmable thermocouple nodes also have this same "197085D-01L" part number on the back.  Is there another way to determine which of these nodes have LabVIEW capability?
    Thanks!
    Garrett
    Solved!
    Go to Solution.

    Hello,
    There is a $300 difference in the list price for the programmable and non-programmable nodes which is the ballpark figure for the license. I have included the links below for the product pages below, but our Sales team would be able to assist you with the actual price. Purchasing and sales contact information are also listed on the product pages as well. 
    NI WSN-3212 4 Ch, 24-Bit, Programmable Thermocouple Input Node
    http://sine.ni.com/nips/cds/view/p/lang/en/nid/207089
    NI WSN-3212 4 Ch, 24-Bit, Thermocouple Input Node (Non-programmable)
    http://sine.ni.com/nips/cds/view/p/lang/en/nid/206922
    Best,
    National Instruments
    Applications Engineer

  • Different between home oc4j and other created non-default oc4j

    I found that there seems to be difference between the home container and any non-default container.
    What is there difference between them? What do I need to configure in the non-default container to be the same as the home container?
    Thanks.

    what do you mean by 'same as home container' ?

  • How to use non default port 1521 while 11.2.0.1 grid upgrade to 11.2.0.2

    Hi Team ,
    We are planning 11.2.0.1 Grid infra rolling upgrade to 11.2.0.2 with out any downtime.
    But while up gradation due to default scan port 1521 , 11.2.0.1 databases are not able to connect (remote connections)
    We are using 1900 port for existing 11.2.0.1 grid infra scan.
    While up gradation it is taking default port of 1521 insted of existing port 1900.
    Please provide the solution to use non default port while 11.2.0.2 up gradation.
    After upgrade the status as below.
    grdoratst104:/apps/grid/grdhome:+ASM4> srvctl config scan_listener
    SCAN Listener LISTENER_SCAN1 exists. Port: TCP:1521
    SCAN Listener LISTENER_SCAN2 exists. Port: TCP:1521
    SCAN Listener LISTENER_SCAN3 exists. Port: TCP:1521
    Here I was getting TNS:no Listener errors from the client connections.
    I have modifyed the scan port then it is working fine.
    grdoratst104:/apps/grid/grdhome:+ASM4> srvctl modify scan_listener -p TCP:1800
    grdoratst104:/apps/grid/grdhome:+ASM4> srvctl config scan_listener
    SCAN Listener LISTENER_SCAN1 exists. Port: TCP:1800
    SCAN Listener LISTENER_SCAN2 exists. Port: TCP:1800
    SCAN Listener LISTENER_SCAN3 exists. Port: TCP:1800
    grdoratst104:/apps/grid/grdhome:+ASM4>
    Here the problem is we need to do the grid infra upgrade with out downtime,but due this default port issue clients are not able to connect to the database.
    Thanks
    Bala
    Edited by: user12032334 on May 31, 2011 11:46 AM

    Why are you using a non default port? It does not improve security. It makes network management more complex. And causes the type of issues that you are facing now.
    So before changing defaults, make sure that your reasons are technically sound. And using port 1900 when 1521 is available, is not technically sound by any means.
    As for addressing the problem you have created for yourself by mucking around with port numbers. Use a NAT firewall (on each RAC node) to rewrite packets headers received on port 1900 and send these to the server's port 1521 instead (on the VIP or static IP as required).
    This can be fairly easily done using iptables if your o/s is Linux. You need to:
    a) create a pre-routing NAT rule
    b) create a post-routing NAT rule
    c) create a forwarding filter rule for port 1900/tcp
    d) create an input filter rule to accept traffic on 1900/tcp

  • Jtree Select node and change leafs icon problem

    Hi All,
    i create a tree and implement a TreeSelectionListener:
    my mission is whenever i select a node i need to change the icon of this node (for now.later i will have to find if it have childrens).
    import java.awt.Color;
    import java.awt.Component;
    import java.util.Enumeration;
    import java.util.NoSuchElementException;
    import java.util.Vector;
    import javax.swing.ImageIcon;
    import javax.swing.JTree;
    import javax.swing.event.TreeExpansionEvent;
    import javax.swing.event.TreeExpansionListener;
    import javax.swing.event.TreeSelectionEvent;
    import javax.swing.event.TreeSelectionListener;
    import javax.swing.tree.DefaultMutableTreeNode;
    import javax.swing.tree.DefaultTreeCellRenderer;
    import javax.swing.tree.TreeModel;
    import javax.swing.tree.TreeNode;
    import javax.swing.tree.TreePath;
    public class TreeView{
         DefaultMutableTreeNode top;
         JTree tree ;
         Color frameColor;
         public static ImageIcon NoTSelIcon;
         public static ImageIcon SelIcon;
        public static String[] name= new String[8];
         public TreeView(Color BackColor) {
              // TODO Auto-generated constructor stub
            top =  new DefaultMutableTreeNode("Diagnostics");
            this.frameColor=BackColor;
             SelIcon = createImageIcon("../Resource/Images/Select.gif");
             if (SelIcon == null)
                 System.err.println("Tutorial icon missing; using default.");
             NoTSelIcon = createImageIcon("../Resource/Images/NotSelc.gif");
               if (NoTSelIcon == null)
                 System.err.println("Tutorial icon missing; using default.");
         public Component createTreeComponents(){
                //Create the nodes.
                 createNodes(top);
            //Create a tree that allows one selection at a time.
            tree = new JTree(top);
            //TREE LISTENERS
            //Treeselction listener
            Handler hObject = new Handler();
            tree.addTreeSelectionListener(hObject);
           //Tree expand/collapse listener
            HandlerExpansionListener hObjectExpan = new HandlerExpansionListener();
            tree.addTreeExpansionListener(hObjectExpan);
    //       tree.getSelectionModel().setSelectionMode(TreeSelectionModel.DISCONTIGUOUS_TREE_SELECTION);
            //set tree background
            tree.setBackground(frameColor);
             tree.setCellRenderer(new OverrideTreeCellRenderer(frameColor,SelIcon,NoTSelIcon));
            return tree;
          private void createNodes(DefaultMutableTreeNode top) {
                 DefaultMutableTreeNode category = null;
                 DefaultMutableTreeNode SubCategory = null;
                 DefaultMutableTreeNode SubCategoryBasee = null;
                 DefaultMutableTreeNode SubSubCategoryBasee = null;
                 category = new DefaultMutableTreeNode("Dfe");
                 top.add(category);
                 //Sub test visible
                 SubCategory = new DefaultMutableTreeNode("Test Visible");
                 category.add(SubCategory);
                 SubCategory.add(new DefaultMutableTreeNode("Son 1"));
                 SubCategory.add(new DefaultMutableTreeNode("Son 2"));
                 SubSubCategoryBasee = new DefaultMutableTreeNode("Test Base");
                 SubSubCategoryBasee.add(new DefaultMutableTreeNode("Grandson 1"));
                 SubSubCategoryBasee.add(new DefaultMutableTreeNode("Grandson 2"));
                 SubCategory.add(SubSubCategoryBasee);
          class Handler implements TreeSelectionListener {
                   public void valueChanged(TreeSelectionEvent arg0) {
                        // TODO Auto-generated method stub
                        System.out.println("treeSelect event ");
                        TreePath trph;
                        trph=arg0.getNewLeadSelectionPath();
                        int count=trph.getPathCount();
                        DefaultMutableTreeNode Selnode = (DefaultMutableTreeNode)tree.getLastSelectedPathComponent();
                        String Name = (String)Selnode.getUserObject();
                        setSelected(Selnode,true);
                        int number_ofnodes=getNodeCountBelow((TreeModel)tree.getModel() , Selnode, false);
                        System.out.println("The Number of nodes under "+Name+"="+number_ofnodes);
                        tree.setCellRenderer(new IconRenderer(SelIcon,NoTSelIcon,frameColor));
          class HandlerExpansionListener implements TreeExpansionListener {
                   public void valueChanged(TreeSelectionEvent arg0) {
                        // TODO Auto-generated method stub
                        DefaultMutableTreeNode node = (DefaultMutableTreeNode)  tree.getLastSelectedPathComponent();
                        if (node == null) return;
                      }     // The inner class
                   public void treeCollapsed(TreeExpansionEvent arg0) {
                        // TODO Auto-generated method stub
                        System.out.println("treeCollapsed event ");
                   public void treeExpanded(TreeExpansionEvent arg0) {
                        // TODO Auto-generated method stub
                        System.out.println("treeExpanded event ");
          /** Returns an ImageIcon, or null if the path was invalid. */
             protected static ImageIcon createImageIcon(String path) {
                  //ImageIcon imcon= new ImageIcon(path);
                  //return imcon;
                 java.net.URL imgURL = TreeView.class.getResource(path);
                 if (imgURL != null) {
                     return new ImageIcon(imgURL);
                 } else {
                     System.err.println("Couldn't find file: " + path);
                     return null;
             DefaultMutableTreeNode newnode;
             public void setSelected(DefaultMutableTreeNode Selnode ,boolean isSelected)
                    Enumeration Enchilds=Selnode.children();//ENUMRATE ALL CHILDS FOR THIS NODE
                 if (Enchilds != null)
                      while (Enchilds.hasMoreElements())
                           newnode=(DefaultMutableTreeNode)Enchilds.nextElement();
                           String NameSel = (String)newnode.getUserObject();
                           setSelected(newnode,isSelected);
             //GETTING THE TREE DEPTH
             public int getNodeCountBelow(TreeModel model, Object node, boolean includeInitialNode)
                 int n = includeInitialNode ? 1 : 0;
                 for (int i = 0; i < model.getChildCount(node); i ++)
                     n += getNodeCountBelow(model, model.getChild(node, i), true);
                 return n;
    import java.awt.Color;
    import java.awt.Component;
    import java.util.Enumeration;
    import java.util.NoSuchElementException;
    import javax.swing.Icon;
    import javax.swing.JTree;
    import javax.swing.tree.DefaultMutableTreeNode;
    import javax.swing.tree.DefaultTreeCellRenderer;
    public class IconRenderer extends DefaultTreeCellRenderer {
         private static final long serialVersionUID = 1L;
         Icon SelectedIcon;
         Icon NotSelectedIcon;
         Color BackgroundColor;
         boolean Selected=false;
         boolean Leaf=false;
         boolean IsItaChild=false;
         DefaultMutableTreeNode SelctedNode=null;
        public IconRenderer(Icon SelIcon,Icon NoTSelIcon,Color Bacground) {
             SelectedIcon = SelIcon;
             NotSelectedIcon = NoTSelIcon;
             BackgroundColor=Bacground;
             setBackgroundNonSelectionColor(BackgroundColor);
        public Component getTreeCellRendererComponent(JTree tree,Object value,boolean sel,boolean expanded,
                                                        boolean leaf,int row,boolean hasFocus)
             super.getTreeCellRendererComponent(tree, value, sel,expanded, leaf, row,hasFocus);
             Selected=sel;
             Leaf=leaf;
             DefaultMutableTreeNode node = (DefaultMutableTreeNode) value;
             String s2 = (String)node.getUserObject();
       return this;
    }my problem is :
    when i select a node the the method "getTreeCellRendererComponent"
    start to run on the entire tree from buttom to top and than from top to buttom.
    for me it waste of time because if has say 100 nodes it wont botthers me.
    but i have 20000 nodes and more its take a time.
    and for all this nodes i have to make compares.
    is there a way to force the DefaultTreeCellRenderer to not run the entire tree???
    Thanks

    You need to make sure that your TreeModel interprets your group nodes to be non-leaf nodes (one of the methods in the TreeModel interface is called isLeaf). If you are using a DefaultTreeModel with DefaultMutableTreeNode objects, you can use the askAllowsChildren property of DefaultTreeModel and the allowsChildren property of DefaultMutableTreeNode to control this. See the API for more details:
    http://java.sun.com/j2se/1.4.2/docs/api/javax/swing/tree/DefaultTreeModel.html
    http://java.sun.com/j2se/1.4.2/docs/api/javax/swing/tree/DefaultMutableTreeNode.html

  • Web Server 7 Admin Server and Self-Signed certificate

    Is it possible to create and install a self-signed certificate for the administration server in Sun Web Server 7. The default installation comes with a self-signed certificate but we would like to install our own certificate and not the certificate issued by "admin-ca-cert"
    Message was edited by:
    aar

    As far as I know its not a problem. You can install your own certificate. Make sure that the certificate nick name is changed accordingly in "server-cert-nickname" in server.xml section as shown below :
    <http-listener>
    <name>admin-ssl-port</name>
    <port>2224</port>
    <server-name>alamanac.india.sun.com</server-name>
    <default-virtual-server-name>admin-server</default-virtual-server-name>
    <ssl>
    <server-cert-nickname>Admin-Server-Cert</server-cert-nickname>
    </ssl>
    </http-listener>

  • Windows Server 2012 R2 non-default domain admin limitations

    Enivronment: Windows Server 2012 R2Problem: members of Domain Admins group are restricted in ways the default domain admin account is not. This is with or without UAC disabled; there are even more prompts with UAC enabled. Here are two examples:Attempt to copy to Public Desktop. Built-in domain admin or local admin account can do so without restriction; any other member of Domain Admins group is prompted for administrator permission (although clicking Continue proceeds without actually requiring further authentication/permission)Right-click -> Properties of hard drive in Explorer is missing Shadow Copies tab for non-default Domain Admin. Yes, I can simply right-click the drive and go to Configure Shadow Copies, so this one is not so important. But it is an inconsistency that means I have to access things just a bit differently...
    This topic first appeared in the Spiceworks Community

    I have already replied to that here: https://social.technet.microsoft.com/forums/windowsserver/en-US/b57abf72-90e6-44d7-93a5-0e57cb5404c9/nic-teaming-with-ws2012-ad
    I still do not see an MS statement saying that it is supported for DCs.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

Maybe you are looking for