Azure MFA Server activation fails

Hi,
I installed the Azure MFA on my ADFS server and I cant activate it. It fails with 'Activation fails' error.
All the required ports are opened and I have also tried different internet connections.
How can I troubleshoot this issue?
Best,
Kaido

https://social.msdn.microsoft.com/Forums/azure/en-US/20028f79-a4ba-4da0-9aee-287586b87362/mfa-server-activation-failed?forum=windowsazureactiveauthentication
Now it works again.

Similar Messages

One way SMS + OTP in Azure MFA server

Hi, how can i enable one way SMS in Azure MFA on premise?
I have Azure MFA server and local active diretcory. I want users to receive a OTP and enter it to the logon page instead of replying to it? how can this be done? and if it is via the SDK, any one can explain more
ammarhasayen

MFA Server v6.2.2 and older doesn't have one-way SMS capability. It is being added to v6.3 which is expected to release in Jan 2015. The one-way SMS will work with the ADFS Adapter, RADIUS and the User Portal. In order to work successfully with RADIUS,
the system sending the ACCESS request will need to be able to handle an ACCESS CHALLENGE response so that the user can be prompted for the OTP.

Mobile Phone App and Azure MFA Server

I currently have directory sync enabled between my on-premise AD environment and Azure Active Directory, and also enabled multi-factor authentication on my profile. I installed PhoneFactor on my mobile device and am able to use it to verify my identity when
logging into my O365 OWA account.
I recently installed and configured the Multi-Factor Authentication Server to enable RADIUS requests for VPN connections, and have successfully tested MFA using the phone call method (when I connect via VPN client, I provide credentials, and receive a call
to verify my identity, press # and connection is accepted).
What am having trouble doing is using the mobile app as a method for verification. When I try to connect, I immediately receive 'Login Failed,' and there are no indications in PhoneFactor for an authentication request.
In the MFA Server logs, I see two entries:
No device configured for user '[email protected]'
PfAuth failed for user '[email protected]'. Call status: SKIPPED_USER_INCOMPLETE - "User lacks information required for phone auth".
I have read guidelines on creating a user portal within my network for self-registration, but I was hoping I could just use the Azure-provided portal.
Anyone have any ideas why this may be happening?

At present, the MFA Server user enrollment is completely separate from Azure AD. If you want to use the mobile app with the MFA Server, you need to install the User Portal so that users can generate activation codes and set their MFA method to mobile app.
Also, for users to activate their mobile apps, you have to install the Mobile App Web Service, which communicates with the MFA Server via the Web Service SDK to validate the activation code generated in the User Portal. Here are links for installing the User
Portal and Mobile App Web Service.
https://msdn.microsoft.com/en-us/library/azure/dn394290.aspx
https://msdn.microsoft.com/en-us/library/azure/dn394277.aspx?f=255&MSPPError=-2147217396

User Enrollment when you have Azure MFA for Office 365/Azure AD and On-Premise resources

I'm working on setting up MFA for our company and want to establish the following configuration:
implement MFA for Office 365/Azure AD/organizational account
implement MFA for a Windows Server 2008 R2 TS
i've got things working for Azure AD and have installed the Azure MFA Server on a DC. where i'm getting stuck is that it looks like you have to set up a user enrollment portal internally and have the users enroll a second time. we're using Azure
AD Sync between AD and Azure AD, but we are not interested in ADFS. is there any way to use the existing Azure AD enrollment for the internal users authentication?
take care,
Wylie

Not at this time. The MFA Server is currently independent of Azure AD so the MFA enrollment for users are separate. We are working to converge the on-premises and cloud scenarios to make a single enrollment possible for both locations. I don't have a timeline
to announce at this time, but it is in the works.

Activation failed: CBS Server Error

Hi,
We have done the activation and transportation many times before. But now we hit this error when trying to activate:
Activation failed: CBS Server Error: CBS failed to communicate with some other server( internal code: COMMUNICATION_ERROR).
At the WebGui -> CBS -> Activities, if we want to view or search any activities, we will see the error like this:
Communication Exception Occured. Contact System Administrator.
Any help would be much appreciated. Thanks.
- julius

Hi Julius,
This link should help you to check if the server is running and to check the CBS logs.
<a href="http://help.sap.com/saphelp_nw04/helpdata/en/40/372c7fd5ea984c894cb2bfe7472058/frameset.htm">http://help.sap.com/saphelp_nw04/helpdata/en/40/372c7fd5ea984c894cb2bfe7472058/frameset.htm</a>
You may go through Checking access to the Component Build Server and CBS Logging under the topic Configuring the component build server
Akshatha

Activation failed: CBS Server Error...Please help

Hello All,
I get this error while activating a DC/activity:
Activation failed: CBS Server Error: The user does not have the authorization for the requested operation( internal code: USR_MISSING_PRIVILEGE)
I have setup the required User Privileges as mentioned in help.sap site
Plus, I have also checked the NWDI.Developer role & it has all the foll actions, namely:
1. CBS.Developer
2. CBS.Display
3. CMS.Export
4. LcrInstanceWriterNR
Please guide...
Am working on EP7 SR2 (SPS 9) and am into NWDI.Developer group.
Please guide.
Awaiting Reply.
Thanks & Warm Regards,
Ritu

Hi Ritu
It is an authorisation error, not enough CBS rights,
please read http://help.sap.com/saphelp_nw04/helpdata/en/88/9959400d9d10
59e10000000a155106/frameset.htm for the configuration of the JDI UM.

Windows Azure Pack setup - 500 Internal Server Error - failed to configure databases and services

Hi,
I am trying to setup the Windows Azure pack to use the site to configure the Service bus 1.1 installation. When I try to configure the Windows Azure Pack I get the following error:
Admin Authentication Site
500 Internal Server Error - Failed to configure databases and services: Object reference not set to an instance of an object.
I'm not sure where the logs are to see what is causing this error. I have tried running as admin, running as a different user with no luck.
thanks,
Georgi
Georgi

Here's what I'm getting for this error:
Log Name: Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite/Operational
Source: Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite
Date: 3/27/2014 12:52:03 PM
Event ID: 103
Task Category: (65431)
Level: Error
Keywords: None
User: CLINICALSYSTEMS\Administrator
Computer: SERVER-PC.clinicalsystems.com
Description:
##### Application_Error: Exception=System.Web.HttpException (0x80004005): Failed to configure databases and services: Object reference not set to an instance of an object. ---> System.Management.Automation.CmdletInvocationException: Object reference not
set to an instance of an object. ---> System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.AddUserToGroup(GroupPrincipal group, UserPrincipal user)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureDefaultTrusts()
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureClaimSecurity(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureCore(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.FeatureConfigurer.Configure(Hashtable settings)
at Microsoft.WindowsAzure.Server.PowerShell.Common.BaseCmdlet.ProcessRecord()
at System.Management.Automation.CommandProcessor.ProcessRecord()
--- End of inner exception stack trace ---
at System.Management.Automation.Runspaces.PipelineBase.Invoke(IEnumerable input)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.PSClient.RunCommand(Command command)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.ConfigurationPSClient.InitializeFeature(String name, Hashtable settings)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<>c__DisplayClass3.<ConfigureFeature>b__0()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at lambda_method(Closure , Task )
at System.Web.Mvc.Async.TaskAsyncActionDescriptor.EndExecute(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass3f.<BeginInvokeAsynchronousActionMethod>b__3e(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.<BeginInvokeActionMethodWithFilters>b__33()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.<InvokeActionMethodFilterAsynchronously>b__49()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<>c__DisplayClass2a.<BeginInvokeAction>b__20()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<BeginInvokeAction>b__22(IAsyncResult asyncResult)
at System.Web.Mvc.Controller.<>c__DisplayClass1d.<BeginExecuteCore>b__18(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.MvcHandler.<>c__DisplayClass8.<BeginProcessRequest>b__3(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite" Guid="{1F742CC8-BDAA-56B6-A4B8-49F946D19CD1}" />
<EventID>103</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>65431</Task>
<Opcode>0</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2014-03-27T16:52:03.223741300Z" />
<EventRecordID>111</EventRecordID>
<Correlation />
<Execution ProcessID="8068" ThreadID="7680" />
<Channel>Microsoft-WindowsAzurePack-MgmtSvc-ConfigSite/Operational</Channel>
<Computer>SERVER-PC.clinicalsystems.com</Computer>
<Security UserID="S-1-5-21-3021050346-1670805799-1320812125-500" />
</System>
<EventData>
<Data Name="exceptionInfo">System.Web.HttpException (0x80004005): Failed to configure databases and services: Object reference not set to an instance of an object. ---> System.Management.Automation.CmdletInvocationException: Object reference not set to an instance of an object. ---> System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.AddUserToGroup(GroupPrincipal group, UserPrincipal user)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureDefaultTrusts()
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureClaimSecurity(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.CustomTokenServiceConfigurer.ConfigureCore(Hashtable settings)
at Microsoft.WindowsAzure.Config.PowerShell.Configurer.FeatureConfigurer.Configure(Hashtable settings)
at Microsoft.WindowsAzure.Server.PowerShell.Common.BaseCmdlet.ProcessRecord()
at System.Management.Automation.CommandProcessor.ProcessRecord()
--- End of inner exception stack trace ---
at System.Management.Automation.Runspaces.PipelineBase.Invoke(IEnumerable input)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.PSClient.RunCommand(Command command)
at Microsoft.MgmtSvc.Config.Controllers.PowerShell.ConfigurationPSClient.InitializeFeature(String name, Hashtable settings)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<>c__DisplayClass3.<ConfigureFeature>b__0()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
at Microsoft.MgmtSvc.Config.Controllers.ConfigurationController.<ConfigureFeature>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at lambda_method(Closure , Task )
at System.Web.Mvc.Async.TaskAsyncActionDescriptor.EndExecute(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass3f.<BeginInvokeAsynchronousActionMethod>b__3e(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.<BeginInvokeActionMethodWithFilters>b__33()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.<InvokeActionMethodFilterAsynchronously>b__49()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<>c__DisplayClass2a.<BeginInvokeAction>b__20()
at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<BeginInvokeAction>b__22(IAsyncResult asyncResult)
at System.Web.Mvc.Controller.<>c__DisplayClass1d.<BeginExecuteCore>b__18(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.Mvc.MvcHandler.<>c__DisplayClass8.<BeginProcessRequest>b__3(IAsyncResult asyncResult)
at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar)
at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar)</Data>
</EventData>
</Event>
Kori Francis Lead Software Developer Clinical Support Systems, Inc.

Server Marked Active/Failed

My MARS has started reporting lots of Server Marked Failed and Server Marked Active incidents. However, the report shows as Source and Destination IP addresses as "N/A". Is there any way to find out which Servers (or at least IP Addresses) are causing this so I can investigate?

Hello Yudong,
ASA version s 8.2(2)
aaa-server RADIUS protocol radius
aaa-server RADIUS (inside) host 192.168.1.1
key *****
authentication-port 1812
accounting-port 1813
aaa-server RADIUS (inside) host 192.168.1.2
key *****
aaa-server RADIUS (inside) host 192.168.1.3
key *****
All tunnel-groups contain "accounting-server-group RADIUS" and "authentication-server-group RADIUS"
The RADIUS server returns the VPN group assignment as OU=VPNgroup
I just did a packet capture on the RADIUS exchane and see the below happening.
Success
RADIUS request
RADIUS response with correct OU assignment
Failure
RADIUS request
RADIUS response with incorrect OU assignment
same time passes
syslog sent stating RADIUS server failed
tries a few more times, if the RADIUS server ever replies with the correct OU it will succeed otherwise it will timeout.
This appears to be a Window 2008 NPA issue.

How to Uninstall SQL instance on active-passive SQL server , which failed during Cluster Setup (Error-Failed at Validate Active Directory Configuration)

How to Uninstall SQL instance on active-passive SQL server , which failed during Cluster Setup (Error-Failed at Validate Active Directory Configuration)
active-passive SQL server cluster setup failed due to some steps missed in initial cluster setup,
now i have unistall sql instance from nodes,
Your help will higly appriciated.
Regards,
Anish
Asandeen

Hello,
Please refer to the following link about remove a node of SQL Server Failover Cluster Instance:
http://msdn.microsoft.com/en-us/library/ms191545.aspx#Remove
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

Data Collection Set 'Server Activity' Failure Waiting on a kernel object(s) failed. Inner Error ------------------ The handle is invalid.

All of the system data collection sets have been running for 6+ months without any issues, couple of weeks ago the 'Server Activity' collection set failed to restart after a planned maintenance server reboot.
When attempting to manually start the collection set it indicates "success", but after refreshing the collection set it showing as stopped. Viewing the logs for the Data Collection (Server Activity) I am getting the message:
Waiting on a kernel object(s) failed. Inner Error ------------------>
The handle is invalid.
After some research into this really unhelpful message I came across one posting where this error has been found to occur in SP1. We are running SP2 which include the fix so this shouldn't be the problem (ref http://connect.microsoft.com/SQLServer/feedback/details/585210/sql-server-2008-data-collection-execmasterpackage-timeout).
To see more detail on the root cause of the error I enabled the additional tracing for data collection (http://blogs.msdn.com/b/sqlagent/archive/2011/07/13/enabling-additional-tracing-for-data-collector.aspx). This provided an exception stack which indicated
that the issue was thrown to what looks like an existing file, referring to a location (e:\) which doesn't exist in our system.
DCEXEC!26d0!1b88!2012/11/28!11:17:25::    wmain _IN
DCEXEC!26d0!1b88!2012/11/28!11:17:25::    Command line: dcexec -c -s 2 -i "S160OLTP\OLTP" -m 0 -e 0x09C1635DD4C4C6478A145D679AFE718F_1_STOP
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Application::Init _IN
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Console code page (m_codePage): 437
DCEXEC!26d0!1b88!2012/11/28!11:17:25::      Application::ParseCommandLine _IN
DCEXEC!26d0!1b88!2012/11/28!11:17:25::      Application::ParseCommandLine _OUT:00000000
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Application::Init _OUT:00000000
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Application::Main _IN
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Started continuous mode collection on thread 12036
DCEXEC!26d0!2f04!2012/11/28!11:17:25::      StartCachedCollectionWrapper _IN
DCEXEC!26d0!1b88!2012/11/28!11:17:25::      Waiting for collection to exit or stop event to be signaled
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::       StartCollection _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::       StartCollection(iSetId = 2, iCollectionMode = 0, pwszInstanceName = S160OLTP\OLTP)
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::        CDataCollectorController::ExecuteCollectionSet _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::        SQL Instance Name: OLTP
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::         CDataCollectorController::TryExecuteCollectionSetOnce _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CDataCollectorController::Initialize _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CDataCollectorController::Initialize _OUT:00000000
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CDataCollectorController::PopulateCollectorPackageParameters _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CacheWindow=1, CacheDirectory='I:\MSSQL10.OLTP\MSSQL\dccache'
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CDataCollectorController::PopulateCollectorPackageParameters _OUT:00000000
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CDataCollectorController::PopulateSetPackageParameters _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CollectionSetUID='{49268954-4FD4-4EB6-AA04-CD59D9BB5714}', ExecutionMode=0, IsSystem=-1, LoggingLevel=0, DaysUntilExpiration=14, ExitEventName=''
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CDataCollectorController::PopulateSetPackageParameters _OUT:00000000
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CreateControlEvents _IN
DataCollectorController!26d0!2f04!2012/11/28!11:17:25:: e        ERROR: Win32 Error: GetLastError=183, retCode=0x4, function CDataCollectorController::CreateControlEvents, line 470, file e:\sql10_katmai_t\sql\mpu\shared\dc\runtime\controller\src\datacollectorcontroller.cpp
DataCollectorController!26d0!2f04!2012/11/28!11:17:25:: e        ERROR: Failed to create kernel event for collection set: {49268954-4FD4-4EB6-AA04-CD59D9BB5714}. Inner Error ------------------>
Cannot create a file when that file already exists.
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::          CreateControlEvents _OUT:00000000
DataCollectorController!26d0!2f04!2012/11/28!11:17:25:: e       ERROR: DC_FAILED: function CDataCollectorController::TryExecuteCollectionSetOnce, line 350, file e:\sql10_katmai_t\sql\mpu\shared\dc\runtime\controller\src\datacollectorcontroller.cpp
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::         CDataCollectorController::TryExecuteCollectionSetOnce _OUT:0x000004
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::        Collection set execution failed, retrying in 5 seconds...
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::        Waiting for exit event or retry timer failed.
DataCollectorController!26d0!2f04!2012/11/28!11:17:25:: e      ERROR: Win32 Error: GetLastError=6, retCode=0x4, function CDataCollectorController::ExecuteCollectionSet, line 278, file e:\sql10_katmai_t\sql\mpu\shared\dc\runtime\controller\src\datacollectorcontroller.cpp
DataCollectorController!26d0!2f04!2012/11/28!11:17:25:: e      ERROR: Waiting on a kernel object(s) failed. Inner Error ------------------>
The handle is invalid.
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::        CDataCollectorController::ExecuteCollectionSet _OUT:0x000004
DataCollectorController!26d0!2f04!2012/11/28!11:17:25::       StartCollection _OUT:00000000
DCEXEC!26d0!2f04!2012/11/28!11:17:25::      StartCachedCollectionWrapper _OUT:0x000004
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Collection thread returned (00000001)
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Waiting for collection thread to exit
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Collection thread signaled
DCEXEC!26d0!1b88!2012/11/28!11:17:25::     Application::Main _OUT
DCEXEC!26d0!1b88!2012/11/28!11:17:25::    wmain _OUT:0x000004
I am now stumped as I haven't found anyone else experiencing this issue.
Any ideas, please help??

Thanks for the pointer Eileen, problem solved.
Can't believe I missed it, but after reading the last section on system hangs it occurred to me that I hadn't checked that all dcexec.exe processes were killed when I disable the data collection service.
For anyone else experiencing this issue I identified the dcexec.exe processes using the following in cmd line:
TASKLIST /SVC /FI "IMAGENAME EQ DCEXEC.EXE"
On the default setup of the data collection there should be two dcexec.exe processes constantly running, one for "Server Activity" and another for "Query Statistics". On our server there were five running with the data collection disabled.
After killing all of the processes and restarting the data collection problem solved!!
Still need to understand why the processes didn't shut down cleanly when the server was restarted, but at least I know where to look now.

KMS client activation failed, but got server response?

I've been using KMS for several years. Generally there are no problems with KMS, but I have a single machine that is refusing to activate, and I cannot determine why. I've been doing extensive web searching but I'm not finding anything useful.
Windows 7 Pro client is using the Windows 7 Pro KMS client key GPDD4 as usual.
KMS Server is in Windows 2008 R2
The event log says the client is getting a response from KMS server (see below).
============================
Server: slmgr /dlv
Name: Windows Server(R), ServerStandard edition
Description: Windows Operating System - Windows Server(R), VOLUME_KMS_R2_B channel
Partial Product Key: 7GCM2
License Status: Licensed
Key Management Service is enabled on this machine
Current count: 50
Listening on Port: 1688
DNS publishing enabled
KMS priority: Normal
Key Management Service cumulative requests received from clients
Total requests received: 444
Failed requests received: 297
Requests with License Status Unlicensed: 0
Requests with License Status Licensed: 86
Requests with License Status Initial grace period: 12
Requests with License Status License expired or Hardware out of tolerance: 2
Requests with License Status Non-genuine grace period: 0
Requests with License Status Notification: 47
===============================
Client ability to find KMS Server:
C:\Users\foo>nslookup -type=srv _vlmcs._tcp
Server: UnKnown
Address: 172.20.0.8
_vlmcs._tcp.XXXXXXXXXXXX SRV service location:
priority = 0
weight = 0
port = 1688
svr hostname = dc3.XXXXXXXXXXX
dc3.XXXXXXXXX internet address = 172.20.0.11
===============================
Client: slmgr /dlv
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
Activation ID: b92e9980-b9d5-4821-9c94-140f632f6312
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00170-868-000000-03-1033-7601.0000-2092014
Installation ID: 011751536521019726056115618440708701492313365893152065
Partial Product Key: GPDD4
License Status: Initial grace period
Time remaining: 43200 minute(s) (30 day(s))
Remaining Windows rearm count: 1
Trusted time: 7/28/2014 9:36:41 AM
Please use slmgr.vbs /ato to activate and update KMS client information in order to update values.
=========================
Client: slmgr /ato
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.
Activating Windows(R) 7, Professional edition (b92e9980-b9d5-4821-9c94-140f632f6312) ...
Error: Product activation failed.
=========================
Client: Application Event log
Security-SPP Event ID 12288
The client has sent an activation request to the key management service machine.
Info:
0x00000000, 0x00000000, dc3.XXXXXXXXXX:1688, 637b796e-5348-4ce1-b0b5-4d750e9d471e, 2014/07/28 14:43, 0, 2, 43200, b92e9980-b9d5-4821-9c94-140f632f6312, 25
Security-SPP Event ID 12289
The client has processed an activation response from the key management service machine.
Info:
0x00000000, 0x00000000, 1, 0, 50, 120, 10080, 2014/07/28 14:43
Security-SPP Event ID 1033
These policies are being excluded since they are only defined with override-only attribute.
Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Microsoft.Windows.Smc-Enabled) (Shell-InBoxGames-FreeCell-EnableGame) (Shell-InBoxGames-Hearts-EnableGame) (Shell-InBoxGames-Minesweeper-EnableGame) (Shell-InBoxGames-PurblePlace-EnableGame) (Shell-InBoxGames-Shanghai-EnableGame)
(Shell-InBoxGames-Solitaire-EnableGame) (Shell-InBoxGames-SpiderSolitaire-EnableGame) (Shell-MultiplayerInboxGames-Backgammon-EnableGame) (Shell-MultiplayerInboxGames-Checkers-EnableGame) (Shell-MultiplayerInboxGames-Spades-EnableGame) (Shell-PremiumInBoxGames-Chess-EnableGame)
(Telnet-Client-EnableTelnetClient) (Telnet-Server-EnableTelnetServer) (TiffIFilterLicensing-EnableTiffIFilter) (WindowsAnytimeUpgrade-CanUpgrade)
App Id=55c92734-d682-4d71-983e-d6ec3f16059f
Sku Id=b92e9980-b9d5-4821-9c94-140f632f6312
Security-SPP Event ID 1003
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 4de78642-0f7f-4b61-9392-8add86d70ae8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 50e329f7-a5fa-46b2-85fd-f224e5da7764, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
3: 5a79ecd8-d33f-406c-a619-7785899b5d59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: 770bc271-8dc1-467d-b574-73cbacbeccd1, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 90a61a0d-0b76-4bf1-a8b8-89061855a4c9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: 92f9d22a-65f5-49a7-90fe-06491b4fc379, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
7: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
8: 9ccffaf9-86a2-414e-b031-b2f777720e90, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
9: b92e9980-b9d5-4821-9c94-140f632f6312, 1, 0 [(0 [0xC004E003, 0, 0], [( 1 0x80070057 30 0 msft:rm/algorithm/volume/1.0 0x00000000 0)(?)( 1 0x80070057 30 0 msft:rm/algorithm/volume/1.0 0x00000000 0)(?)(?)(?)])(1 )(2 [0x00000000, 0, 1], [(?)( 5 0x00000000 30
43200)( 1 0x00000000 0 0 msft:rm/algorithm/flags/1.0 0x00000000 0)(?)(?)(?)])]
10: c1027486-8ae8-4633-9cf9-9658ed80504d, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
11: c1e88de3-96c4-4563-ad7d-775f65b1e670, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
12: c33001fc-5e9c-4f27-8c05-e0154adb0db4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
13: cf3c5b35-35ff-4c95-9bbd-a188e47ad14c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
14: cff07cac-7534-4cc3-b3f3-99e1a0aa3c20, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
15: d188820a-cb63-4bad-a9a2-40b843ee23b7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
16: d8e04254-f9a5-4729-ae86-886de6aa907c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
17: da22eadd-46dc-4056-a287-f5041c852470, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
18: e120e868-3df2-464a-95a0-b52fa5ada4bf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
19: e838d943-63ed-4a0b-9fb1-47152908acc9, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
20: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
21: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
Security-SPP Event ID 1003
The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: b92e9980-b9d5-4821-9c94-140f632f6312, 1, 1 [(0 [0xC004E003, 0, 0], [( 1 0x80070057 30 0 msft:rm/algorithm/volume/1.0 0x00000000 0)(?)( 1 0x80070057 30 0 msft:rm/algorithm/volume/1.0 0x00000000 0)(?)(?)(?)])(1 )(2 [0x00000000, 0, 1], [(?)( 5 0x00000000 30
43200)( 1 0x00000000 0 0 msft:rm/algorithm/flags/1.0 0x00000000 0)(?)(?)(?)])]
============================
Client MGA output:
Diagnostic Report (1.9.0027.0):
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-J8D7P-XQJJ2-GPDD4
Windows Product Key Hash: xgsndMkYdJsYmUng0qIJ/thx+HI=
Windows Product ID: 00371-868-0000007-85411
Windows Product ID Type: 1
Windows License Type: KMS Client
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {5A310AE8-BFD2-49F1-A8BF-688D339981E8}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Plus 2007 - 100 Genuine
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-b01a_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5A310AE8-BFD2-49F1-A8BF-688D339981E8}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-GPDD4</PKey><PID>00371-868-0000007-85411</PID><PIDType>1</PIDType><SID>S-1-5-21-3521851180-3244512111-2218252725</SID><SYSTEM><Manufacturer>Dell
Inc.</Manufacturer><Model>Inspiron 546 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A09</Version><SMBIOSVersion major="2" minor="5"/><Date>20090808000000.000000+000</Date></BIOS><HWID>095F3D07018400F6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central
Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL </OEMID><OEMTableID>FX09
</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft
Office Professional Plus 2007</Name><Ver>12</Ver><Val>1208E0A87E81D86</Val><Hash>FlQRxKwAwaRad03SQZkKxNggIRU=</Hash><Pid>89409-707-0082056-65245</Pid><PidType>14</PidType></Product></Products><Applications><App
Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12"
Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
Activation ID: b92e9980-b9d5-4821-9c94-140f632f6312
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00170-868-000000-03-1033-7601.0000-2092014
Installation ID: 011751536521019726056115618440708701492313365893152065
Partial Product Key: GPDD4
License Status: Initial grace period
Time remaining: 43200 minute(s) (30 day(s))
Remaining Windows rearm count: 1
Trusted time: 7/28/2014 9:31:36 AM
Please use slmgr.vbs /ato to activate and update KMS client information in order to update values.
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0xC004C533
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:23:2014 07:16
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEAJJRe04hAjl+cEVTyEDPMabbK6kXsLQilArQ=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: no, invalid Windows marker
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value
OEMTableID Value
APIC DELL
FX09
FACP DELL
FX09
HPET DELL
OEMHPET
MCFG DELL
OEMMCFG
SLIC DELL
FX09
OSFR DELL
FX09
OEMB DELL
FX09
SSDT A M I
POWERNOW
================================
Windows 7 Pro was installed on this machine using Microsoft's volume activation media, and is a standard image applied via Windows Deployment Services to some 200 other computers with no problems.
We also use a variety of surplus/off-lease machines, usually Dell brand, never with any activation problems.

It's a Dell Inspiron desktop. Apparently a "for the home" system? Yet it was bought with Win 7 Pro OEM installed, and so I had hoped I could roll it into the KMS easily. Tried updating the BIOS but still acts the same.
How can a "home edition" BIOS that's incompatible with KMS come with Win 7 Pro OEM?
Oddly, we have several Dell XPS systems that are using KMS just fine. Those are almost exclusively marketed as "power gamer" systems for home use. I should see if there's some way to figure out which specific Dell products do this so they can be avoided.
Fortunately it seems Windows 7 Pro edition software does not care if I use the OEM key from the sticker, so I typed that in and it activated.
(Great, one weird machine that has to be treated specially from everything else we've got.)
Probably a question for Dell to answer. For whatever reason, Dell have not performed all the necessary OEM Activation (OA) configuration tasks on this machine, perhaps due to their manufacturing/marketing strategy for this model, or perhaps due to a defective
configuration pass in the factory. Perhaps the mainboard in this machine was repaired or replaced at some stage, and wasn't correctly re-configured. Only Dell can resolve the missing marker, since it requires OEM tools.
Activating using the COA sticker product key, doesn't depend on the marker being present.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

MFA Server unable to use RADIUS

I have MFA server installed and setup per this guide (http://www.isaserver.org/articles-tutorials/configuration-security/configure-windows-azure-multi-factor-authentication-forefront-threat-management-gateway-tmg-2010.html).
I have imported the test user, and when I use the test feature in MFA Server, I get the call or text, and everything works.
I have a test web listener setup and pointed to the radius server for auth. I have confirmed the server settings and shared secret are correct multiple times (I even changed the shared secret to a simple 4 digit secret to rule that out as the issue). Every
time I try and use the web listener to auth, the MFA radius logs show the following.
*edit* I also tried a 3rd party radius auth testing tool (radlogin) against the MFA server, and I get the exact same error. So this issue is specific to the MFA server, not Forefront TMG.
2015-04-02T20:17:39.602409Z|0|1868|1896|pfrad|Code 1 - ACCESS_REQUEST.
2015-04-02T20:17:39.602409Z|e|1868|1896|rpc|The remote procedure call failed. (0x000006BE = 1726)
2015-04-02T20:17:39.602409Z|e|1868|1896|pfrad|Couldn't find a secret for packet sourced from X.X.X.X, are they in the config?
2015-04-02T20:17:39.602409Z|e|1868|1896|pfrad|processIncomingPacket failed.
2015-04-02T20:18:44.610081Z|0|1868|1896|prfad|Event 3.
2015-04-02T20:18:44.610081Z|0|1868|1896|prfad|Sock 0x0000000000000114
2015-04-02T20:18:44.610081Z|0|1868|1896|pfrad|Code 1 - ACCESS_REQUEST.
2015-04-02T20:18:44.610081Z|e|1868|1896|rpc|The remote procedure call failed. (0x000006BE = 1726)
2015-04-02T20:18:44.610081Z|e|1868|1896|pfrad|Couldn't find a secret for packet sourced from X.X.X.X, are they in the config?
2015-04-02T20:18:44.610081Z|e|1868|1896|pfrad|processIncomingPacket failed.
The masked IP is the internal IP of the TMG server. So I'm not sure where the RPC call is failing (I shut off windows firewall on MFA server to test), and why it's saying it couldn't find a secret from the source. Any thoughts? I really need to get this
POC working today for a client.
Thanks.

Thanks for the post. I checked both links and don't see anything that applies to my issue. I have used wireshark to capture the packets, and don't see anything wrong (but I have limited radius knowledge). So the packet makes it from TMG to MFA Server, but
MFA fails to process with the errors listed in the OP.
I even tried to remove the shared secret on forefront (to force it not to match), and tried to log on. I assumed this would cause a failure with a different error, but I got the exact same error as before. So I can't figure out what RPC call is failing,
or what secret packet is missing.
I also ruled out TMG as the issue. I went ahead and downloaded Radlogin to test using the MFA Radius Server auth. I get the exact same error from that client as I do when using TMG. So the issue is the MFA/Radius server.

Mobile App Activation Fails

Hi, I am trying to test the MFA Mobile App on my Android phone. Phone based authentication is working fine but the mobile app fails to activate. My server is Windows 2008 R2 SP1 with MFA Server 6.1.1.15297.
I can log into the User Portal (with phone based authentication), generate an activation code, scan the QR barcode but then the app always returns "Activation failed, Please check the activation code to ensure it is correct. Error details: Server Error"
The URL in the mobile app is definitely correct. I am using self signed certificates with a CN equal to the URL. I have imported the certificate into the Trusted Root store on the server, my laptop client, and I tried to import it to the android 4.2.2 phone.
It says it imported it but then I can't see it in the list. None of this seems to have made any difference.
The MultiFactorAuthSvc log contains:
2014-04-01T14:46:24.453125Z|i|1352|3168|pfsvc|Phone App activation code '864598222' generated for user 'Andy.Pattrick'
2014-04-01T14:46:48.937500Z|e|1352|3168|iisabo|WMI error: -2147217394
2014-04-01T14:46:49.484375Z|e|1352|3960|credStore|Couldn't read credential identified by 'PfSmtp'. Element not found. (0x00000490 = 1168)
I googled those errors but came up pretty empty handed
Does anyone have any ideas? Has anyone got this working on Android using self signed certificates. I only have 19 days left on the trial and I need to establish whether the mobile app will work so I'm keen to get this working.
Cheers Andy.

Got the same issue and found the solution:
Issue: MFA activation works on Windows phone and iPhone , but not on the Android. This case is related with the Lync app issue with Android.
If you have add the correct http binding with the certificate hash than Lync mobile on android will work.
but in our case we used unique certificate and than MFA activation did not work either. So as you can only add one ipport0.0.0.0:443 related with the certificate has, you can NOT use unique certificate for ADFS federation and MFA activation on the same server
using a single IP address.
We found two solutions:
1) Either use a wildcard or SAN certificate
2) Bind the unique certificate namen with a unique ip address.

Unable to install 2nd SCOM 2012 Management Server - Services Fails and fails trying to get data reader writer accounts?

2nd Management Server Setup fails at "Data Warehouse Configuration".
error log:
[12:33:20]: Always: :Current Action: StartServices
[12:33:20]: Always: :Starting OM Services.
[12:33:20]: Debug: :StartService: attempting to start service OMSDK
[12:33:50]: Error: :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:33:50]: Error: :StackTrace: at System.ServiceProcess.ServiceController.Start(String[] args)
 at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:33:50]: Error: :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:33:50]: Error: :InnerException.StackTrace:
[12:34:51]: Error: :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:34:51]: Error: :StackTrace: at System.ServiceProcess.ServiceController.Start(String[] args)
 at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:34:51]: Error: :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:34:51]: Error: :InnerException.StackTrace:
[12:35:55]: Error: :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:35:55]: Error: :StackTrace: at System.ServiceProcess.ServiceController.Start(String[] args)
 at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:35:55]: Error: :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:35:55]: Error: :InnerException.StackTrace:
[12:36:32]: Error: :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:36:32]: Error: :StackTrace: at System.ServiceProcess.ServiceController.Start(String[] args)
 at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:36:32]: Error: :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:36:32]: Error: :InnerException.StackTrace:
[12:37:36]: Error: :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:37:36]: Error: :StackTrace: at System.ServiceProcess.ServiceController.Start(String[] args)
 at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:37:36]: Error: :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to
the start or control request in a timely fashion
[12:37:36]: Error: :InnerException.StackTrace:
[12:38:12]: Error: :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:38:12]: Error: :StackTrace: at System.ServiceProcess.ServiceController.Start(String[] args)
 at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:38:12]: Error: :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to
the start or control request in a timely fashion
[12:38:12]: Error: :InnerException.StackTrace:
[12:41:19]: Error: :StartService: Unable to start the service OMSDK after 3 minutes.
[12:41:19]: Warn: :Warning:OMSDK service could not be started
[12:41:19]: Debug: :StartService: attempting to start service healthservice
[12:41:19]: Debug: :StartService: Able to start the service healthservice after 0 minutes.
[12:41:19]: Debug: :StartService: attempting to start service cshost
[12:41:19]: Debug: :StartService: Able to start the service cshost after 0 minutes.
[12:41:19]: Info: :StartServices completed.
[12:41:19]: Always: :Current Action: GetDataReaderWriterAccounts
[12:41:22]: Error: :GetDataReaderWriterAccounts failed with the following exception: : Threw Exception.Type: System.Reflection.TargetInvocationException, Exception
Error Code: 0x80131604, Exception.Message: Exception has been thrown by the target of an invocation.
[12:41:22]: Error: :StackTrace: at System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct&
sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
 at System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
 at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
 at System.Delegate.DynamicInvokeImpl(Object[] args)
 at Microsoft.EnterpriseManagement.SetupFramework.ActionEngine.Action.Run(String displayStringNamespace, ProgressData progressData, Func`2 progressDelegate)
 at Microsoft.EnterpriseManagement.SetupFramework.ActionEngine.InstallStep.Run(String displayStringNamespace, ProgressData progressData, Func`2 progressDelegate)
[12:41:22]: Error: :Inner Exception.Type: Microsoft.EnterpriseManagement.Common.ServiceNotRunningException, Exception Error Code: 0x80131604, Exception.Message: The Data
Access service is either not running or not yet initialized. Check the event log for more information.
[12:41:22]: Error: :InnerException.StackTrace: at Microsoft.EnterpriseManagement.Common.Internal.ExceptionHandlers.HandleChannelExceptions(Exception ex)
 at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
 at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.ConstructEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore clientCallback)
 at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.RetrieveEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
 at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Connect[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
 at Microsoft.EnterpriseManagement.ManagementGroup.InternalInitialize(EnterpriseManagementConnectionSettings connectionSettings, ManagementGroupInternal internals)
 at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingComponent.GetDWWriterAccountFromManagementGroup(String managementServerName, String& userName, String& userDomain)
 at Microsoft.SystemCenter.Essentials.SetupFramework.InstallItemsDelegates.OMDataWarehouseProcessor.GetDataReaderWriterAccounts()
[12:41:22]: Error: :Inner Exception.Type: System.ServiceModel.EndpointNotFoundException, Exception Error Code: 0x80131604, Exception.Message: Could not connect to net.tcp://localhost:5724/DispatcherService.
The connection attempt lasted for a time span of 00:00:00.9950000. TCP error code 10061: No connection could be made because the target machine actively refused it 127.0.0.1:5724.
[12:41:22]: Error: :InnerException.StackTrace:
Server stack trace:
 at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
 at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
 at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
 at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
 at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
 at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
 at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
 at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
 at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
 at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
 at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
 at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
 at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
 at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
 at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
 at Microsoft.EnterpriseManagement.Common.Internal.IDispatcherService.Connect(SdkClientConnectionOptions connectionOptions)
 at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Initialize(EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
 at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
[12:41:22]: Error: :Inner Exception.Type: System.Net.Sockets.SocketException, Exception Error Code: 0x80131604, Exception.Message: No connection could be made because the
target machine actively refused it 127.0.0.1:5724
[12:41:22]: Error: :InnerException.StackTrace: at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
 at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
 at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
[12:41:22]: Error: :FATAL ACTION: GetDataReaderWriterAccounts
[12:41:22]: Error: :FATAL ACTION: DWInstallActionsPostProcessor
[12:41:22]: Error: :ProcessInstalls: Running the PostProcessDelegate returned false.
[12:41:22]: Always: :SetErrorType: Setting VitalFailure. currentInstallItem: Data Warehouse Configuration
[12:41:22]: Error: :ProcessInstalls: Running the PostProcessDelegate for OMDATAWAREHOUSE failed.... This is a fatal item. Setting rollback.
[12:41:22]: Info: :SetProgressScreen: FinishMinorStep.
[12:41:22]: Always: :!***** Installing: POSTINSTALL ***
[12:41:22]: Info: :ProcessInstalls: Rollback is set and we are not doing an uninstall so we will stop processing installs
[12:41:22]: Always: :****************************************************************
[12:41:22]: Always: :****Starting*RollBack*******************************************
[12:41:22]: Always: :****************************************************************

Hi,
Pls ensure there is no firewall in between DB, DW and MS or required ports are open and you have permission on DW for the account being used for installation.
http://technet.microsoft.com/en-us/library/hh298609.aspx
http://technet.microsoft.com/library/hh205990.aspx supported configuration
Thanks,
Varun

Office 2013 pro plus activation fail on windows 8

hi guys
I have issue about getting Office 2013 pro plus activation fail on windows 8 via KMS server.
When I test using KMS server via nslookup -type=srv _vlmcs._tcp all looks good with corporate KMS server.
Activation fine with windows 7 environment
Any idea
This topic first appeared in the Spiceworks Community

Hi
We recommend you download it from the website and extract it again to make sure your source install is complete.
Run setup.exe as administrator then try the install.
If the issue persists, refer to the article on General troubleshooting for installing Office 2013 and Office 365:
http://support.microsoft.com/kb/2822317
Regards
Tylor Wang
TechNet Community Support
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Azure MFA Server activation fails

Similar Messages

Maybe you are looking for