BPC User Creation: No Users Available Under Domain

Hi Experts,
We have upgraded BPC 7.5 NW SP6 on our development system and
configured domain in the server manager but when trying to add new user
from admin client, system is not display any list of users under
configured domain, we are using windows domain authentication and
windows 2003 server regional settings and language settings are English
(US). Please suggest.
thanks
Venkata

Hi Venkata,
Can you please tell me how did you solve this... the issue is that im trying to set up users for the 1° time in my appset (the one created after apshell) and all my credentials seem to be invalid i dont know why.
Any input will be appreciated.
Regards
Velázquez

Similar Messages

Can we map three BPC users with single domain user

Hi..
When we map the three BPC users in the ABAP server in the program UJA3_WRITE_SYS_USERS with domain user,can we map with only one domain user for all three BPC users or we have to use three different domain users to map the three BPC users?
Please do reply
Thanks
Bobby

yep
u can map three bpc user with single domain user.
but domain user must have management roles.

Office 2013 will not open unless user is a Domain Admin

In order to get the Office 2013 suite to install from Office 365, I had to make all the users (115 in 4 offices) a domain admin, we then installed the software on everyone's computers and we have migrated our email. However, I now need
to remove all the users from being a domain admin, but when I do none of Office programs will open, no error message, just a spinning wheel for 10 seconds and nothing. I need to remove the users from being a domain admin as they can now see
network drives that they were previously restricted from. All computers are Windows 7 Pro. I have even installed the suite on a brand new computer, installed as admin, login as a domain user and nothing will open.
Thanks

What's the default right for the user in your domain, domain user?
Can we open the Office application when the domain user is in local administrator group?
Please turn off all of security programs and 3rd-party programs (Windows clean boot) and then launch Office component, such as Word.exe with safe mode. ("Winword.exe /safe") to check if it opens successful in non-domain user rights.
Don't use Office shortcut to open Office but double click the .exe file under %programfiles%\Microsoft Office to check if the office process appears in Windows Task Manager.
In addition, please go to eventvwr to check if there is any errors regarding to permission or Office exist. If so, post it here for further checking. Thanks.
Tony Chen
TechNet Community Support

Replication between publish1 to publish2 instances to make users available on both instances.

Hi,
we need to make 2 publish environments with load balancer, if a user register on the website, his details would be stored in CRX only on one publish instance, if the second request goes to other publish instance then there would be a issue as his details would not be available there. this is the reason i want to make the users to be available on both publish instances so that there would not be any issue.
Could you please help me how to make the users available on both publish instances. we have 2 publish instances, user profile details would be stored in the CRX of one publish instance, i want to make this user profile details to be available in other publish instance also.
/home/users folder need to be replicated upon node creation or modification between both publish instances.
Request you to please help me to know if we can replicate users between publish instances directly? or do we need to reverse replicate to author first and replicate to publish.
another issue if i replicate to author and then publish1 and publish2 : we have only one author for 3 data centers(3 diff servers) ; if i use reverse replication to autor and replication to publish1 and publish2 then the user informaiton would be replicated to all 3 data centers which is not permitted by the client. can we directly replicate the users between publish1 to publish2 instances? if yes, please help me.
Thanks,
Ravinder Jilla...

Hi Ravinder,
The steps to move from publish1 to publish2 instance without replicating to author is
1 Setup replication agent in each publish instance.
2 Create Workflow Model to activate the user.
3 Configure Workflow Launcher to listen for new registration & call the model created in step2. Please note:- In launcher you need to set condition to avoid infinite loop & especially with modification.
If you could file a daycare we can understand your requirement better & discuss prons/cons & can come up with proposing right implementation.
Thanks,
Sham

R12 limit the user privilage under multi-org situation

Hi
In R12, users needn't change the repsonsibilty to achieve the same transaction for multi-org.i.e. u can do the ou1,ou2....under the same AP responsibility.
while if i want to limit users privilage under this situation, user1 is just limited to the ou1, user2 is just limited to the ou2....how can i relaize it?
Any help will be preciated.
Regards,
Chelsea

you can achieve this easily...I would suggest go through Documentation atleast once. This Subject is very new.
Here is one senario how can it acheive for AP Invoice Entry
Responsibility: Payables
Navigation: Invoices:Entry > Invoices
On the Invoice Workbench, you can select an Operating Unit, or enter another field, such as PO or Supplier Site, from which the system will default an OU. Your list of available OUs is determined by your multi-org security profile defined in Oracle HR and associated to their responsibility through the MO Security Profile profile option.
How it works....once the application automatically provides the operating unit of new (uncommitted) invoices during entry. The following are methods by which the operating unit is derived:
1)Default Operating Unit from “MO: Default Operating Unit” Profile Option
2)Default Operating Unit from Invoice Batch Header
>>When entering invoice batches, users have the option of establishing a default operating unit for the invoices entered in the batch. This can be overridden at the invoice level as with any other value (Payment Method, for example) entered in the Invoice Batches window.
3)Derive Operating Unit from Transaction Attributes
>>>Oracle Payables will derive the operating unit of an invoice based on certain user entered attributes. If the user chooses a PO (via PO Default or QuickMatch features) or supplier site when the Operating Unit field is empty, the Operating Unit corresponding to the selected value will be populated onto the invoice.
4) Set Operating Unit from Single Operating Unit Security Profile
>>>>> That mean when a user’s security profile contains only one operating unit, it can be said that the user’s operating unit context has been “set” to this operating unit. This value is automatically defaulted to all new invoices and it cannot be overridden.
Hope this make sense.
same is true for other activity like payment , period close.Let me know , in case if you are not clear.
thanks

Is there a way to migrate AD users to different domain?

Hello SharePoint Fam,
I have a 10,000 user environment and these users are spread across 15 different domains. Our data/network team are beginning to migrate and consolidate our environment down to one domain. We did a test and had them migrate a couple of accounts
to different domain and confirmed that this breaks the user access. Is there a script or recommendation that I could use to migrate specific users to this domain? This new domain is still under the same forest
Thanks n advance,

Hi,
According to your description, my understanding is that you want to migrate AD users to another domain.
The tool you need to migrate users between domains is ADMT (Active Directory Migration Tool) which will migrate users, groups, and computers.
After that, we need to use Move-SPUser to migrate the users to new accounts:
$user = Get-SPUser -web http://my.website.url -Identity DomainA\UserA
Move-SPUser -IgnoreSID -Identity $user -NewAlias 'DomainB\UserA'
More references:
http://technet.microsoft.com/en-us/library/ff607729(v=office.15).aspx
http://localhost25.blogspot.com/2012/06/sharepoint-2010-migrate-users-with-move.html
http://blogs.msdn.com/b/sowmyancs/archive/2012/01/07/migrate-users-groups-powershell-script.aspx
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

How to add BPC users in the batch?

I would like to add BPC users in the batch.
Does anyone know how to achieve this on BPC 7.0 MS?
I think it is almost impossible to add thousand of BPC users without errors via BPC Admin Console.

Hi,
The solution proposed by Sakthi will work if you want to give to all this account the same level of security.
Once you're in the "Add User", the AD filter will show all accounts. Just select all of them and choose team / task profile .. etc in next screens.
Maybe you could create seperate domain group like BPC Admins, BPC Users.. and so on. And create customized filter for each of them. So when you add your users, just select the right AD filter and give to them the right set of security parameters.
Edited by: Sebastien Michel on Jun 19, 2009 3:01 PM

BPC user management

I'm looking for a way to automatically add users to BPC and assign them the appropriate permissions. I plan on using an Identity Management system to create the account but can't figure out how to integrate with BPC. For example, in ABAP systems we can create the account and assign it groups; in the Portal we can add the account to Active Directory groups and assign permissions to the Active Directory group in the Portal. Is there anything like this for BPC? Any exposed webservices?
Thanks,
Chris

HI Chris,
If you want to automate the users and it's permisess you will have to have a bvast knowledge about the bpc tables that manage the users, there's the UJE_USER table that has the complete information of the user. There you can configure the user and the domains where they are avaliable, i think you will have to make an abap program for that kind of rutine. here in this document you can fin a little bit more of the bpc system tables /people/sheldon.edelstein/blog/2010/01/20/sap-businessobjects-planning-and-consolidation-version-for-netweaver--deleting-an-appset, I really don't know if there is a way to communicate directly to the active directory using a web service.
hope it helps,

"Can Portal Authenticate a single user into multiple Domains"

Hi All,
I have a requirement in the following way.is it Possible to achieve?
lets take user with user-id(SSO environment) ABC ,maintained in MS AD under domain name say "SAP.com"
We are going to migrate this domain into another domain say "SAP123.com" and so others,and we want to maintain the same user with same userID in new domain(SAP123.com) also.
In simple words user must be able to authenticate on both domains and he should be able to access all the applications in new domain also via role mechanism
This we are going to do only for test purpose,later we will be maintaining only 1 domain for 1 user.
My only question : is it possible to accomplish the above requirement by any means?and How?Does it make sense?
waiting for your valuable inputs.
Thanks in Advance
Amit Koyal

Hi Amit,
yes, I'm around, but unfortunately pretty busy at the moment (preparing the TechEd session for Amsterdam next week).
Here my answers:
1. As you can read from SAP Note 762419, "it is possible to use integrated Windows authentication in a multi-domain environment even if users' logon IDs (represented by the attribute "samaccountname") are not unique across all domains". Please make sure that you go through the limitations of the two options.
2. If you change the portal domain, SSO will work only with servers located in the same (new) domain as the portal. You don't need to make here any change if your (SAP) applications are also in the new domain. If not, please consult the documentation I gave you in my previous post.
Hope this helps,
Robert

"Send As" permission fails with users in second domain on same server

I have several users setup on an Exchange 2010 SP3 server with domain "domain1.com". "Send As" and full Permission access works fine and flawless between those users who need it.
Now I have added a second authorative Domain (domain2.com) on that server and set up a few users. Those domain2 users can send/receive email in domain2.com without problems.
I wanted to give certain users in domain1 "Send As" and Full Access permissions on a domain2 user mailbox. Full Access works, but sending a message won't work. The error that comes back is the same as if "Send As" permissions was not
assigned to that user. But I explicitly assign this permission.
Is this a known issue and there is a fix for it? Or is this simply not possible?
Thanks
Dan

First, you should not use both Send As and
“Send on behalf of” pick one or other. Another thing, if you are using
Send As, find the user in
Active Directory Users and
Computers right click the user and select properties, Click
Security
Tab then presses the
Advance button.
In there you should see the User listed under there with Send As permissions. If you do not see this that’s the main reason why you cannot “Send As”. Send As is an AD
ACL not Exchange. If you have set this in the EMC and it has not replicated or updated the ACL’s in Active Directory then you might have a delay/latency or a replication issue with Active Directory.
Hi Swetha,
Thanks for your reply.
I am only using "Send As" and not "Send on behalf".
The Send-as permissions are visible in the AD for that user.
Dan

IChat 4.0 won't automatically make user available after Computer wakes up

iChat changes my status to away when my computer goes asleep. When it wakes up, it stays on the away status and does not automatically change to Available. In iChat preferences, I have checked "Set my status to Available" under the "When I return to my computer, if I set my status to Away:" But it doesn't work. I still have to go to iChat and manually change my status.

Hi,
I think Niel, one of the Level 5s, who posts here now and then, once posted an AppleScript here about doing exactly this.
Found it from this Search Which was AppleScript in iChat 3 restricted to ALL in the Date and Niel as User ID
7:57 PM Monday; February 11, 2008

Connected user in network domain

Hi, I need to put into variables in APEX the name of presently connected user in network domain, not only in computer (I think I would be solved with LDAP). Is it somehow possible, or - is it possible in APEX or should I use for exemple JAVA? Thanks for answers.

Hi,
I did not get the question completely. But yes , you can authenticate wireless user connecting to particular Wlan with LDAP server where LDAP server acts like an authentication data base.
For example , Users connecting to web-auth Wlan can be authenticated using LDAP server:
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/108008-ldap-web-auth-wlc.html
Similarly , dot1x users can also be authenticated. For that WLC has to be made Local EAP server and a local profile has to be created under Security > Local EAP. This is described in detail in any WLC configuration guide.
Regards
Dhiresh
**Please rate helpful posts**

How to give full access to mailbox to users in trusted domain?

Hi,
I am working on a migration-project where we migrate all users from one domain to a new domain. I have Exchange in both domains, and migrates mailoboxes from the old to the new domain. In the old domain I have a number of mailboxes that are used for common
calendars for the departments. My problem is: How can I give the users who has been migrated to the new domain full access to the existing calendar-mailboxex in the old domain? I have given the accounts in the new domain full access to the mailboxes
in the old domain by using to following command: get-mailbox mailboxname | add-mailboxpermission -accessrights FullAccess,ExternalAccount -user newdomain\username
After the command has completed I can see the account listed in the "Manage Full Access Permission"-dialog, but still the new useraccount cannot create appointments etc in the original calendar from Outlook.
Any tips on this?
Thor-Egil

Hi Thor,
Thank you for your question.
Did the issue occur when we use OWA?
Are there any errors when they cannot create appointments?
We could enable “Support cross forest delegation” on FIM(Forefront Identity Manager) to check if the issue persist.
There is an article for us to how to enable “Support cross forest delegation” by the following link:
http://blogs.technet.com/b/neiljohn/archive/2011/10/12/exchange-server-2010-cross-forest-delegation.aspx
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

When I moved all my music stored in my Windows 7 user account under the My Music folder to my PC's 'Public Music' folder, I could no longer add/delete music or movies to my iPhone using iTunes. How do I fix this?

I have been synching my iPhone with iTunes without problems for a long time. I also used iTunes to add/change/delete Music & Videos on my iPhone with tuch contents from my iTunes Library.
One day, I decided to move all my Music stored on my laptop's Windows 7 User Account under "My Music" to the Windows 7 User "Public" under "Public Music". When I opened iTunes, all my music was gone so I just added the folder "Public Music" to my iTunes Library, iTunes did some work and all my music was then back, listed in my iTunes.
However, when I would synch my iPhone now, when I view the music or movie contents in my iPhone using iTunes, I can no longer ADD Music or Movies to my iPhone and I cannot delete music or movies in my iPhone using iTunes anymore.
How do I fix this? Please help.

Try opening iTunes preferences. Then click on advanced tab. Then uncheck "Copy files to iTunes media folder when adding to library." By default, iTunes copies music to its own media folder when you use iTunes to play the music.

Error while creating user for a domain

i am developing a web-application which is hosted on tomcat server.
it is creating domains and users at another remote domain server.
localy it is working fine..
but when i test it online..
the problem is,
sometimes it works fine ,the domains are being creted at remote server..
but sometimes it delivers error that domain at remote server can not be created.
Is it due to fact that theat some errornous code in the buffer of application have older versions of applications causing the error ?
Code::
if(strPlanId.equalsIgnoreCase("3")) {
 //Create domain account for planid=3 plantype=Cp
 blnOK=false;
passwordGS comes from database
strUrl="http://sosync.net/sosync/admin?pwd="+passwordGS+"&action=user_createdomain&domain="+strSubDomain+".gosync.net&adminpassword=aspire3002&diskquota="+longdk;
 u=new URL(strUrl);
 uc=(HttpURLConnection)u.openConnection();
 code=uc.getResponseCode();
 if(code == 200) {
 rUrl="/TransCompleteServlet";
 blnOK=true;
 uc.disconnect();
 } else {
 rUrl="/GSView.jsp?page=GSError.jsp?REQ=Unknown";
 if(blnOK) {
 String strUrlUser="http://gosyncdesk.net/gosync/admin?pwd="+passwordGS+"&action=user_createuser&username="+strEmailId+"&password="+strPassword+"&domain="+strSubDomain+".gosync.net&communityname=Default&firstname="+user.getFirstName()+"&lastname="+user.getLastName();
 URL u1=new URL(strUrlUser);
 HttpURLConnection uc1=(HttpURLConnection)u1.openConnection();
 code=uc1.getResponseCode();
 response1=uc1.getResponseMessage();
 if(code == 200) {
 rUrl="/TransCompleteServlet";
 String strUrlTZ="http://gosyncdesk.net/gosync/admin?pwd="+passwordGS+"&action=user_setuserpreference&username="+strEmailId+"&domain="+strSubDomain+".gosync.net&name=web_timezone&value='"+timeZone+"'";
 u=new URL(strUrlTZ);
 uc=(HttpURLConnection)u.openConnection();
 code=uc.getResponseCode();
 if(code != 200) {
 rUrl="/GSView.jsp?page=GSError.jsp?REQ=Unknown";
 } else {
 rUrl="/GSView.jsp?page=GSError.jsp?REQ=Unknown";
 mailUtil.sendMail_admin("Error In Creating User for the Domain","While creating domain for "+user.getEmail()+" user could not be created due to following reason: "+response1+" GoSync UserName:"+strEmailId+" GoSync Password:"+strPassword+" GoSync Domain :"+strSubDomain+".gosync.net and URl String was :"+strUrlUser+"");
 }

if the problem is caching try setting the useChasses to false
uc.setUseCaches(false);

BPC User Creation: No Users Available Under Domain

Similar Messages

Maybe you are looking for