BOE XI 3.1 Security Limitations and Assumptions

Hi,
Can any one please let me know the BOE XI 3.1 Security setup Limitations, Assumptions and Risks in Windows environment(Windows 2008 server)
Also please share the mitigation and solutions of these risks.
Regards,
Jai

Hi all,
Please check out the "Windows pattern security" section and security related sections of the windows pattern book below -
https://websmp201.sap-ag.de/~sapidb/011000358700000532872009E/xi31_bip_pattern_win_en.pdf
The pattern book should address most of the XI3.1 implementation related questions.
Below planning guide also provides good insight for planning your deployment
https://websmp105.sap-ag.de/~sapidb/011000358700001647142008E/xi3-1_bip_deploy_plan_en.pdf
regards,
Shiva

Similar Messages

  • Security scopes and reporting

    Hello,
    I'm trying to plan a ConfigMgr 2012 site that will be used by multiple groups who do not interact with one another. I'd like to divide this site into managerial groups using security scopes and RBAC, ideally so members of one group cannot view or manage
    collections, applications, and updates belonging to the other group. In a lab I've created groups A and B with access to security scopes A and B, with access to collections A and B. So far this has worked out nicely in almost every area except for reporting.
    As a full administrator I can view and run reports just fine; however, users A and B (who are not full administrators, but are members of the "ConfigMgr Report Users" role in my SSRS instance) cannot view any reports from the console. Additionally when I
    click Create Report under the context of user A or B, I get the error "Could not find an installed Reporting Services point. Verify the site role is installed and accessible." To me it sounds like there is a permissions issue somewhere in SSRS or ConfigMgr
    but I haven't figured out what yet.
    Aside from that, I would like so members of group A cannot report on objects that belong to security scope B. To my knowledge this won't be inherently possible because the SSRS security model is different from the ConfigMgr RBAC model. Has anybody been able
    to come up with any workarounds to scope down the reporting capabilities of limited ConfigMgr users? Any advice or direction in this realm would be greatly appreciated.
    Thanks,
    Nick

    Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
    This has been solve in CM12 R2, you can see it in the blog/video.
    http://www.enhansoft.com/blog/role-based-administration-rba-reporting-feature-in-sccm-2012-r2
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Security Profile with Assignment-level Security limitations

    Hi, We are on an R12 installation, and have a security profile based on Organization Hierarchy (With Assignment-Level Security - i.e. 'Restrict on Individual Assignments' checkbox is ticked); this is based on a specific organisation as the 'Top Org' rather than the User's own Assignment.
    The profile option "HR: Access Non-Current Employee Data" is set to 'Yes', but the security profile still restricts access to Future-Dated Assignments and Ended Assignments. Is this expected behaviour, and is the only solution to develop a Custom security profile, and is this even feasible (to replicate organisation hierarchy security using SQL in the custom security tab), or would we have to use a different criteria, such as Payroll?
    Regards, Chris

    Further investigation reveals this is a limitation of the product - within security, the selection criteria which determines which individuals (or assignments) is handled seperately to Assignment-level security (i.e. whether individual assignments are restricted), it is not possible to get around this issue even using custom security, as that does not give one the power to determine how individual assignments are handled. Thus if assignment-level security is implemented, the user cannot see Ended or Future-Dated assignments, even if the profile option "HR: Access Non-Current Employee Data" is set to 'Yes'.
    The only workaround we have found for this is to:
    a) remove assignment-level security, and
    b) ensure that where an employee has multiple assignments that cross security groups, this individual is set up twice, as two separate employees.

  • TA21328 I downloaded a security update and now I cannot access my online banking web site.  How do I fix it?

    Does anyone have a quick fix for this?  I downloaded the latest security update and now I cannot access  web page for online banking. 

    It is not asking what part of your country you are in, but what country/region you are in.
    Region encoding is the mechanism that enables motion picture studios to control the worldwide release of their movies. It is required by the DVD Forum (http://www.dvdforum.org/forum.shtml) in all commercial hardware DVD players. Every DVD-Video disc contains one byte of data representing a region code, which limits where the disc can be played.
    http://support.apple.com/kb/HT2397
    Once you have set the region in DVD Player five times it cannot be changed.
    Instead, use VLC to view videos from different regions:
    http://www.videolan.org/vlc/download-macosx.html

  • /etc/security/limits.conf

    Hello
    OS : Redhat enterprise Linux Ver 5
    When installed as per install guide, I see that /etc/security/limits.conf updated with entry as :
    oracle hard nofile 65536
    1) Why is the default limit of 1024 not sufficient ?
    2) Does oracle opens more than 1024 files at a time ?
    3) How to find the exact list of files open by the oracle user at any given point in time ?
    Thanks in advance for your help.

    Hi,
    that's a good question. I don't neither have an answer but I assume that especially in the past (8i) when datafile size was limited that it was causing problems on huge databases. Making it enough high could also reduce their support effort. This is just may stomach feeling which I am telling you but the truth will tell you someone else. Maybe someone else here in the forum knows more than me.
    I am not 100% sure but:
    $ lsof|grep oracle|wc -l
    1762 shows me over 1024 open files. This with a running ASM instance, a DB and a listener.
    Cheers,
    David
    OCP 9i
    http://www.oratoolkit.ch/otn.php

  • An alert message pops up upon opening saying could not initiate application security component, and it says to check to see if profile has no read/write restrictions.

    An alert message pops up upon opening saying could not initiate application security component, and it says to check to see if profile has no read/write restrictions. Than when it opens all of my saved passwords are gone, I use a master password and its disabled. When I try to enter in a new on e it says can't change password. I can't even open yahoo e-mail says that my ssl security is down but when I check it its clicked. I'm just very confused as to whats going on.
    == This happened ==
    Every time Firefox opened
    == 5/14/2010 ==
    == User Agent ==
    Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.1.249.1064 Safari/532.5

    See [[Could not initialize the browser security component]]
    Rename (or delete) secmod.db (secmod.db.old) in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case there is a problem with the file.

  • I have no "Rescue email" contact in order to reset my security questions and I don't believe I ever answered any security questions when I created my Apple ID for Itunes.  Someone kindly sent me Apple support link but to no avail!  Please Help me!

    I have no "Rescue email" contact in order to reset my security questions!!  I've been trying now for 4 days to contact Apple/Itunes but I only get sent answers from a support team that say they cannot help me with my problem!! 
    The thing is that I can't ever remember answering any security questions and without a rescue email, I'm unable to reset them or even set them for the first time!!
    I can't believe that no-one from Apple/Itunes can help me with this simple problem but unfortunately that is the case - Incredible, isn't it!!!
    Would anyone know how I could solve this problem online???   Because each time I sign into Itunes, the same security questions reappear and reappear and reappear.  In fact I've got to the point where I feel like uninstalling Itunes and downloading an alternative.
    Many thanks

    You need to ask Apple to reset your security questions; this can be done by clicking here and picking a method, or if your country isn't listed, filling out and submitting this form.
    They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
    (111154)

  • My iPod wont let me buy any apps becomes it needs the answers to my security question and I forgot the password and it won't send the email what do I do

    Please can someone help me

    From a Kappy  post
    The Three Best Alternatives for Security Questions and Rescue Mail
    Try # 2
       1. Use Apple's Express Lane.
    Go to https://expresslane.apple.com ; click 'See all products and services' at the
    bottom of the page. In the next page click 'More Products and Services, then
    'Apple ID'. In the next page select 'Other Apple ID Topics' then 'Forgotten Apple
    ID security questions' and click 'Continue'. Please be patient waiting for the return
    phone call. It will come in time depending on how heavily the servers are being hit.
    2.  Call Apple Support in your country: Customer Service: Contact Apple support.
    3.  Rescue email address and how to reset Apple ID security questions.
    A substitute for using the security questions is to use 2-step verification:
    Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

  • I am trying to use my account to purchase but i forget my security questions and also i gave the wrong email address. What can i do?

    i am trying to use my account to purchase but i forget my security questions and also i gave the wrong email address. What can i do?

    Apple ID security issues -
    Call Apple Care and ask for the Account Security Team. They can assist you with your issue.

  • I got a new iPhone and i am trying to buy songs but when I go to buy a song on iTunes it says I have to answer my security questions and I don't remember the answers. I pressed where it says for them to email you your answers but I haven't gotten an email

    I got a new iPhone and i am trying to buy songs but when I go to buy a song on iTunes it says I have to answer my security questions and I don't remember the answers. I pressed where it says for them to email you your answers but I haven't gotten an email.  Is there another way to change or get the answers for the security questions?

    If the email hasn't arrived after a few hours and isn't in a spam filter, you need to ask Apple to reset your security questions; this can be done by phoning AppleCare and asking for the Account Security team, or clicking here and picking a method, or if your country isn't listed in either article, filling out and submitting this form.
    They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
    (106007)

  • I forgot all of the answers to my security questions and when I set up my apple id I did not add a rescue email, I recently got a new iphone and I cannot purchase anything on it because it asks me to answer my security questions which i can't reset, help!

    I forgot all of the answers to my security questions and when I set up my apple id I did not add a rescue email, I recently got a new iphone and I cannot purchase anything on it because it asks me to answer my security questions which i can't reset because I do not have a rescue email. what do I do?

    this does not help. I have forgotten ALL of the answers to my security questions. I can NOT reset the answers to my security questions without answering two of the three security questions. The other way to reset the answers to these questions is for apple to send me an email on my rescue email addres which I DO NOT HAVE.

  • HT201269 When I try to setup my new iPad air, I go through all the steps for the iCloud sign-in and choosing security questions and what not. But after I hit the agree to the terms and conditions... It says Apple ID could not be created because of a serve

    When I try to setup my new iPad air, I go through all the steps for the iCloud sign-in and choosing security questions and what not. But after I hit the agree to the terms and conditions... It says Apple ID could not be created because of a server error. Have no clue what to do... I've restarted the iPad and get the same message. But my internet works just fine.

    1. Turn router off for 30 seconds and on again
    2. Settings>General>Reset>Reset Network Settings

  • HT5622 I keep getting a pop up about signing into an Icloud account. It won't take the password. I tried to log in on pc and sign in and screwed up on my security questions and it's kicked me out.. how long til I can try again?

    I am in iphone **** or better icloud ****. When I try to go ointo settings on the phone a signin prompt pops up continuously with one apple id. I think i've made it that i have a separate icloud and apple id. I am trying to delete the icloud id. I made all the passwords the same so that there should be no problem but the phone won't still take the password. So when i went in again, looking to see if I could delete the icloud, i screwed up answering my security questions and am now unable to enter that icloud id. How long til I can again? Secondly, since the phone won't accept any password, I have tried to delete it. When I do that, it come up with a request for that same password to shut of the locator service. What the heck? I'm frustrated. I just can't get the hang of apple software and itunes seems to be just as bad for me.  Any suggestions appreciated ( aside from stomping on it, I've considered it). Tried to take the battery out but not for me, mere mortal, thought might reset. Got sim card out. Whooopeeee.

    It sounds like you have the Find my iphone Activation lock for sure. Go to www.icloud.com/find and see if you put in that Apple ID that is coming up and yoru password to see if you are able to sign into the account that way to turn it off. If you are unable to, you will have to contact AppleCare by phone (chat cannot handle account lock outs or forgotten password due to not being able to verify your identity) and see if they can reset it. And are you sure the Apple ID that is coming up yours?

  • I can not purchase from the iTunes store because of the security question I am I do not know your security question and alternative mail has been hacked

    I can not purchase from the iTunes store because of the security question I am I do not know your security question and alternative mail has been hacked

    You need to contact Apple. Click here, phone them, and ask for the Account Security team.
    (87808)

  • Every time I try to purchase a song from itunes, it says I have to put in security questions and answer them, which it's never done before. Then after I do the questions, it says that an error occurred and my changes couldn't be saved. HELP!

    Every time I try to purchase a song from itunes, it says I have to put in security questions and answer them, which it's never done before. Then after I do the questions, it says that an error occurred and my changes couldn't be saved. It has been doing this for weeks, and I can't purchase anything! HELP!

    Hi mterry1723, one solution that might be worth trying is this:
    - Close iTunes, if it's open
    - Open Safari and got to 'Preferences'
    - Select 'Security' on the top
    - Untick all the security options in the menu
    - Click the 'Show Cookies' button and look for all the 'apple' entries in the left-hand column.
    - Highlight them (select them collectively) and press 'Remove'
    - Now open iTunes and buy the song as usual.
    - You may be asked to do the same security process as before, so do as asked.
    - Hopefully, the security check will now have accepted your answers and start downloading the song as normal.
    Remember to re-tick all the required security options you had just un-ticked in Safari preferences. You don't need to bother about opening the cookies again.
    I hope this has worked for you and my profoundest apologies if it has not. Worth a go, though!
    I did see this thread: https://discussions.apple.com/message/18259935#18259935 which may be of more help, mainly the last entry by 'c2boyd'
    Message was edited by: Bongomal

Maybe you are looking for