Applocker Publisher Rule Not Working

Hi,
I've got an Applocker publisher rule for JDK 1.6.0_45 on a 2012 R2 server.  The dll's and exe's are signed by "Sun Microsystems, Inc." but despite the publisher rule, they are still being blocked.  When I run the following command:
get-authenticodesignature -filepath "...\java.exe"
I get an UnknownError status - A certificate chain could not be built to a trusted root authority.  After a bit of googling, I see there's KB931125 that will update root certificates.
The server is patched using SCCM/WSUS but I can't find 931125 being installed on the server using wmic qfe.  Will installing KB931125 be sufficient to resolve this issue?  Problem is the updates are for Windows 7, 8 and 8.1.  I couldn't find
any specifically for servers 2008R2, 2012 and 2012R2.
Thanks.

Hi,
You can apply this hotfix below after apply the KB 931125:
SSL/TLS communication problems after you install KB 931125
http://support.microsoft.com/kb/2801679/en-au
If this is still too risky, I suggest you try to get the root certificate of Sun Microsystems from corresponding vendor, or seek this certificate from healthy machines.
Best Regards,
Amy

Similar Messages

  • Infopath form load rule not working in browser forms but works on Client

    Hi
    I am working on an Infopath form and there are rules on form load. The form load checks for a value in a list, if the username() matches the one in the list, then the form would change its view.
    It works when I open it on client, but on the browser it fails.
    Have anyone encountered such an issue.

    Check below:
    http://stackoverflow.com/questions/16222681/infopath-rule-is-not-running-when-checking-sharepoint-list-field-value
    Ensure that "Include data for the active form only" was checked (I had to separate this field into another data connection because that box could not be checked for another field I was using), and
    Ensure that in the rule I was selecting from the "dataFields" folder under the data connection instead of "queryFields"
    http://sharepoint.stackexchange.com/questions/28554/infopath-form-load-rules-not-working
    if I edit the Infopath form on Infopath 2007, it seems that the rules for the load form will be visible if created.
    This look like a bug. Here are the steps below that will lead you to the bug:
    Step 1: Open the infopath form in Infopath 2010 and create 6 rules for Form Load and Save it as a file.
    Step 2: Open that infopath form that you created in Step 1 in InfoPath 2010 and go to the
    Form Load section. You will only see the first 5 rules. The 6th rules that you created for Step 1 will just "vanish". Now, close that infopath form.
    Step 3: Open that infopath form that you created in step 1 in InfoPath 2007 and select Tools > Form Option. In the
    Open and Save category, click the Rules button and add a new rule in it and save it.
    Step 4: Open that infopath form that you modify as describe in Step 3 in InfoPath 2010. That 6th rule will be visible.
    Therefore, there might be a bug in InfoPath 2010 that restrict Rules to a max of 5 in Form Load and thus if anyone open that form in SharePoint, only the first 5 rules will be executed.
    If this helped you resolve your issue, please mark it Answered

  • Defaulting Rules Not Working for Repair Orders in OM?

    Hi,
    Defaulting Rules have been setup for return line & standard line based on few conditions and it is working fine if we create a sales order directly from OM (Manual SO)?
    But in our project we are using  Depot Repair(Repair Orders), we tried to create a service request and then converted to a sales order here defaulting rules not working for repair orders?
    Please help me to solve this issue ASAP.
    Thanks,
    Kishor

    Hi,
    You have like this:
    1. Price list
    2.OE_DEFAULT_PVT.Get_SOB_Currency_Code
    You have to make
    1. XXOE_DEFAULT_PVT.custom_code
    2. Price list
    3.OE_DEFAULT_PVT.Get_SOB_Currency_Code
    Did you made own custom code to pick currency?
    Regards,
    Luko

  • Web rule not working

    I have an environment of Lync Standard edition. We have published reverse proxy on TMG over UAG. Mobility is not working.
    On opening meet, dialin or lyncdiscover FQDN getting blank page.

    If you use TMG, please check you have created a new web publishing rule for the external Autodiscover URL. For the details, check
    http://technet.microsoft.com/en-us/library/hh690011.aspx
    Please check you have configure Web Publishing Rules for a single internal pool, for the details, you can check
    http://technet.microsoft.com/en-us/library/gg429712.aspx
    Check you have created DNS records in public DNS server for dialin, meet and autodiscover.
    Lisa Zheng
    TechNet Community Support

  • BIP report security from Dashboard to Publisher is not working

    Hi ,
    I created a BIP report(.xdo) and placed it on Dashboard as a link . As admin , I can see the report . As a user , I am able to get into publisher but not able to see the report . Iam getting the below error message .
    Error : Unauthorized Access: please contact the administrator.
    I suspect that security model from Dashboard through BIP is not working . I tried searching the online resources but couldnt find right help .
    Iam a newbie for BIP , I followed the regular BIP guides , configured eveything as per the docs and things work as admin . But I want to test the security as user .
    Where Iam doing wrong , Any ideas please help .
    Thanks
    Karthik

    Hello Vijay ,
    I have grant permissions to the user and the report in BI webcatalog and also in BIP under admin tab I have addes the role which the user belongs to and also the shared folder . Still the problem exists.
    My BI presentation servcies security is working . My user security is also working , all that I need is the user should be able to see the report when he clicks on BIP link placed in dashboard.

  • Published SWFs not working from CS3 on Mac?

    This one REALLY has me stumped..
    I am working on a Mac Dual 2-Gig G5 running OS 10.4.10 and
    Flash CS3.
    I have a web site for a client posted (
    http://www.aronwiesenfeld.com
    ). This site has been running flawlessly for over a year published
    to Version 8 Flash Player AS v2.0. This client asked me to create a
    new temporary splash page last night that would announce his new
    Art Show and then click on into the main site. This site uses a
    Shared Lib, a SharedTrigger, a Core SWF (containing the main site
    navigation elements and handles loading of various movies into
    levels) and a Splash SWF (that contains the two splash screens and
    initial navigation to areas of the site. The problem I THINK I am
    having is in the Splash SWF... or is a problem with my LOCAL Mac
    installation? When I click one of the 5 Site Nav buttons it is
    supposed to tell the main core movie to advance to a new frame (20)
    and I target that movie by referring to _level0. This has worked
    fine for the past year (on this and other sites). I am attaching an
    example of the code used on each of the initial Nav buttons in the
    Splash swf .
    So here is the mystery...
    When I "Test Movie" inside Flash CS3, everything works/looks
    "perfect". If I then go to the desktop and find the generated HTML
    file and open it in Safari (both version 2 and 3-beta), or Firefox
    or Opera, etc., everything looks fine until I click one of the
    initial text Nav Buttions. At that point it takes me to the main
    site and loads the external SWF into a level as it should
    (indicating that the 3rd line of code on the button is execution
    and by the fact the the Splash movie disappears, it indicates that
    the core movie is indeed moving to frame 20 (_level0) as requested
    in the first line of code. However, all of the main site navigation
    buttons along the bottom of the main site as well as the background
    NEVER APPEAR? Also when I start to move the mouse around the loaded
    external movie the site completely crashes and I get a blank screen
    - IN ALL BROWSERS whether I am launching the site from my hard
    drive or the Internet!! But it works perfect INSIDE Flash CS3.
    Now comes the real kicker...
    Just for the heck of it after spending 3 hours trying to fix
    this on my main G5 tower(publishing to Player version 9, etc.), I
    decided to try accessing the site from my old G4 laptop. Ready for
    this? The site appears to be working perfectly IN ALL BROWSERS ON
    MY G4 also running 10.4.10!!!
    So my guess is maybe their is a problem with the Flash Player
    Plugin in all my browsers on my G5 or the Flash Plugin has a
    problem with OS 10.4.10 only on my G5. BUT, even if I launch this
    site directly in Flash Player from the desktop on my G5 it does not
    work - so the stand-alone player is having the same issue - yet it
    works fine on my G5 INSIDE of Flash CS3.
    I thought I had seen it all the last 5 years with Flash, but
    this one has be completely stumped!
    My client emailed me from California and said the site was
    working fine there of his PC. If that is true then I am having a
    LOCAL Flash Player problem on my G5 running 10.4.10.
    In addition to my question, if anyone can give me feedback as
    to whether or not this site is working on your machine/browser/OS,
    could you please let me know? You will know if the site is working
    if you click on Enter Site, then click on any of the 5 buttons
    (except Info) and you see a grey background behind the image and
    the lower navigation string appears.
    Thanks!

    Well after trying everything I could think of I started down
    the list again. I re-downloaded the Flash Player 9 r47 Mac
    installer and ran the installer again (which I also did last night
    with no success).
    This time after re-installing the plugin - ALL THE BROWSERS
    IMMEDIATELY STARTED WORKING ad the site now comes up fine - so,
    apparently I had a bad Flash Player install in my browser!

  • Alert Rule - not working. Wild Card character issue

    Hi All,
           I have a requirement where I need to trigger alerts for mapping failures
    of all the interfaces whose namespace is urn:abc.com:odna* or urn:abc.com.odna*.     (in the first instance, there is dot before odna and int he second instance, a colon before odna )
    So to suit both the cases, I gave urn:abc.comodna in the Alert Rule.
    It worked before. But now its not working.
    Then when i changed it to urn:abc.com:odna* it works again. i really dont understand how it worked before and why it fails now.
    What is the reason for the unpredicatable behaviour of WildCard Character based Alert Rules?
    Should Wild Card Characters be avoided completely?

    Hey
    Just create two separate alert rules for the same alert category
    one for urn:abc.com:odna* and another for urn:abc.com.odna*.
    but before that please make sure that "Suppress multiple alerts of this rule" box is unchecked.
    Also please check SAP Note 913858
    Thanx
    Aamir
    Edited by: Aamir Suhail on May 20, 2009 9:16 AM

  • Rule not working in workflow but works in simulation mode

    Hi guys
    i have one more strange issue. I have a rule assigned to one of my task to dtermine the agnet based on a z table which is executed by a z function module in the rule. The rule works fine and gets the desired agent when run in the simulation mode. But when we test it from the workflow it dosent seems to be working. When i check the workflow log it says no agent for this task. any idea what am i missing?
    thanks in advance.

    Hi
    yes both the workflow and the dialog step( in our case a decision step)  is categorized as General task. I also have used the SWU_OBUF to refresh the buffer but still the same results. Rule works fine in simulation but when it is run in a workflow the workflow log says no agent found. any more suggestions? the workflow to rule binding is fine as well. The rule requires 3 parameters and in the binding i am pasing all the 3 elemts to the rule containers. so i am not sure why its not working?

  • Substitution rule not working

    Hi
    The substitution rule for getting the desired Business place and Section code is not working in Transaction code MRIS, whereas this substitution rule is working in all other Transaction codes.
    Please suggest.
    Regards
    Prakash

    Bhanu,
    Subsitution rule works when you are posting in Financial Accounting tables: BSEG and BKPF. FB60 and MIRO do that.
    The report doesn't make post in mentioned tables to get substitution done. Please make sure if there is a existing call transaction or only a planning are being assigned.
    regards    

  • "Edit" Button on Publishing Page Not Working

    I have a publishing site which has been upgraded from 2010 to 2013 and if I click the "Edit" button in the top right or in the ribbon nothing happens. If I check the page out first then the buttons work. The expected behavior is that it should
    check the page out as part of the edit operation and I see this working fine on other publishing sites that are virtually identical to the ones that are failing. When I compare the source of the pages of one that does not work and one that does work I see
    that there are a few key differences:
    sp.ui.pub.ribbon.js and sp.publishing.resources.resx are loaded on the site that is working but not the one that is failing
    JavaScript variables such as pullPageVariation, l_ur_plsWait, l_ur_rfct, etc., are defined on the page that works but not the one that fails.
    A JavaScript block which adds functions such as PublishingRibbonUpdateRibbon(), EnsurePublishingConsoleActionScripts(), etc. is loaded on the site that works but not the one that fails.
    There are other differences but I believe these are the relevant ones. In reflecting some code that handles the Edit button I can see that this missing pieces are key but I've not been able to determine why they're missing. I've looked at the delegate controls
    that are registered for AdditionalPageHead and there is no difference from the site that works compared to the site that doesn't. Note that I also found that the same exact site upgraded in two different environments (dev and production) had different results
    - one worked, the other didn't. Taking a backup of the site that was not working and restoring over the one that was (prod -> dev) resulted in dev now replicating the failure so I don't believe it's a farm specific thing but rather something about the content.
    I reactivated all site collection and site features in case there was some odd issue with that and that made no difference.
    Looking at the upgrade maintenance logs there was an error when attempting to activate the Translation feature which resulted in the PublishingSite feature having an incomplete upgrade status. Running the upgrade cmdlet again resulted in a successful upgrade,
    at least according to the logs.
    I'm at my wits end as to why this is not working and I would definitely appreciate any insights folks might have.
    -Gary
    Gary Lapointe, Blog: http://blog.falchionconsulting.com/, Twitter: http://twitter.com/glapointe Aptillon Inc.: http://www.aptillon.com

    try this link:
    https://social.technet.microsoft.com/Forums/office/en-US/f62ea03d-b272-473a-a663-79938d3fbea4/edit-page-button-not-working-in-publishing-site?forum=sharepointadmin
    Please mark as answer if you find it useful else vote for it if it is close to answer..happy sharepointing

  • Delete rule not working

    I subscribe to a mailing list using a particular email address (not my primary account), all mail for which is redirected into a mailbox. I only want to keep messages from the last five days. I have a Rule which is set as follows:
    If ALL of the following conditions are met:
    Account = <the account>
    Date Received is Greater Than 5 days old
    Perform the following actions:
    Delete Message
    This rule does does not work. It is the first rule in my list of Rules. And it simply does nothing. Why?

    Maxplanar,
    Mail rules only run when the item is first processed. So you are in effect going to delete things only when they are received in an "old" state.
    I would set up a smart mailbox or two. One to only show the 5 days of mail you want to pay attention to. Optionally make another smart mailbox to contain messages older than 5 days. You can just refer to the first mailbox and only see the messages you want. The other mailbox will be there for once a month when you select all the messages and delete them.
    Most macs can handle 5 to 10 thousand messages without even starting to slow down. Perhaps once you have a managable folder that shows you the messages you care to see, you can live with manually cleaning up much less often?

  • Derivation Rules Not Working for other company codes

    Hi,
    I have 5 Company codes and only for one FM was activated. now i want to activate FM for all 5 company codes. for which i have assigned the FM area to all 5 company codes. I have also assigned the derivation strategy to all 5 company codes as well. now when i post a transaction for any other company code derivation rules is not being process hence no commitment item or fund center is derived. however for the original company code for which FM was activated in the first derivation rule are working fine means system is deriving commitment item and fund center. can any one tell me why derivation rules are not working for other company codes? do i have to add Company code in source field of derivation strategy? could this be the reason? because in beginning there was no other company code so we did not included any company code field in the first place.
    Regards,

    Faizan,
    Go to  Funds Management Government> Actual and Commitment Update/Integration> Activate/Deactivate Funds Management.
    In the screen create an entry for each Company Code and Funds Management Area combination.
    Activate the AA Derivtn flag if you want the derivation to be called and the Update flag if you want to update commitments and actuals in FM.
    Thanks
    Shyam

  • Copa derivation rule not working for Discount GL

    Hi All,
    Kindly note that I have a distribution rule where company & plant combination is used where condtion is that customer group 3 should be 018 and then replace distribution channel to 03.However the rule is not working for discount GL posted in the billing document.
    I tried testing it in FB50 but then it does not allows me to enter plant and because of that derivation rule fails. However in my billing doc I do see a plant  against discount GL and still the rule is not getting picked.
    I had raised this issue earlier but the reply where not as expected and so I have rephraised my question.
    Kindly help me on this.
    Regards
    Pranay

    Hi Pranay
    I could not understand your req to a great detail, following are my observations
    1. There should be derivation rule in place 1st of all to derive customer group from billing doc...
    Check if Cust Group is populated in your COPA doc or not.. For this cust group should be a segment level char in KEQ3
    2. Create a derivation rule using method "Derivation".
    Source fields would be Cust Group, Plant and Company code ( I guess you want to change dist channel with this combination)
    Target field would be VTWEG (Dist Channel)....Click on the magnifying lens beside VTWEG and choose relevant radio button "Overwrite if ......."
    CLick on RULE VALUES and maintain the required Values there
    This should work...
    Regards
    Ajay M

  • Role membership rule not working

    Hi guys,
    When I create a role and assign 'membership rule' to it, the members are shown in preview screen.
    But they are not  show up in members screen of that role.
    My environment is 11gR2 SP1.
    It is working nicely in 11gR2 base. But from some bundle pack and after, it is not working.
    1. is it right?
    2. if then, why is it changed?
    3. and how shoul I assign members to role?
    (as a workaround I modified the memner arrtibute. => not working
    and restart OIM, => still not working
    and reboot the server.> still not working...)
    can anyone help this?
    regards,
    dongsu

    J,
    It has been a critical issue in real customer project this year.
    Certainly we informed it to local oracle team and they says it is intentional change and we have to accept it.
    (means create role first and read in users by trusted recon from source again.. bra bra..)
    But I do not get any documented information about it.
    Actually in BP4 (may be..) if I change any attribute value of that user who supposed to  belongs to that role, then it works.
    But in BP7 and now in PS1, even that approach do not working.

  • Some smart album rules not working

    At a bit of a loss here - either my upgrade to Mavericks or my upgrade of Aperture to 3.5 has caused my Smart Albums to not work with various EXIF checking rules.
    I frequently have rules which check the EXIF tag, Camera Make, and check if it is Canon - this allows me to filter out and focus on my Canon 5D3 photos and not get distracted in relatively pointless editing of iPhone snaps. Unfortunately it doesn't work. Camera Make is Canon returns no matches, Camera Make starts with Canon returns nothing, Camera Make ends with Canon returns nothing.
    If I go and look at a photo, I can see the Camera Make exif flag says "Canon" in the field. No spaces at the end or anything silly. It used to work.
    Anyone experienced similar? Anyone have solutions?

    Hmm, interesting. Given your use of quotes I just tried "Canon" including the double quotes, but that made no difference either.
    The EXIF filter is the only rule on the smart album, and while the smart album is set for a single project, there are several hundred photos that should match in it. If I set the smart album to "Library" rather than the project, it still matches none...! Just in case there's some other rule burried away that just isn't displayed, I switched the smart album to "Match Any" rather than "All", and that too returns no photos.

Maybe you are looking for