DirectAccess 2012 - Best way to deploy between two firewalls (NAT'd)

We are deploying DirectAccess 2012 and have a requirement that traffic from the internet (red) must be proxied through the DMZ (yellow) before touching anything on the internal network (green). I will initially only be configuring it to use IP-HTTPS (no
teredo). We have two firewalls, one on the perimeter (FW1), and one between the DMZ and internal networks (FW2).
I'm trying to determine the best way of deploying this in our environment. I've come up with two possibilities:
1. Deploy with two network cards, each connected to separate DMZs. In this scenario, NIC 1 would contain the internet facing IP in DMZ 1 (say 10.10.10.2 and NAT'd by FW1), and NIC2 would contain an internal facing IP on DMZ2 (say 10.10.11.2). NIC2 would
be routable to the internal subnets via the internal firewall.
Crude diagram:    Internet -> FW1 -> 10.10.10.2---DA---10.10.11.2 -> FW2 -> Internal network
2. Deploy with one network card in the DMZ. This would be NAT'd by FW1, and then pass traffic through to to FW2. Since I'd be allowing all TCP/UDP traffic (as per MS) through FW2 to the primary network, this method seems unsafe to me.
Crude diagram:   Internet -> FW1 -> 10.10.10.2---DA -> FW2 -> Internal network
What is the best and most secure way to deploy this in the DMZ? I do not want to put an internal network IP directly on the DirectAccess server, as it needs to go through FW2 before reaching internal. The DA server should be isolated in the DMZ.
Advice is appreciated.

Hi,
The first solution is better. The DA server is under the protection of FW1, and the DA server
already offers certain security itself, such as the requirement of a Computer Certificate, domain membership (which mean domain authentication) and so on.
Here is a related threads,
DirectAccess 2012 + Security concerns
http://social.technet.microsoft.com/Forums/windowsserver/en-US/2e394a72-d263-449f-9ec2-02701aa8cb96/directaccess-2012-security-concerns?forum=winserver8gen
Hope this helps.
Steven Lee
TechNet Community Support

Similar Messages

  • What is the best way to switch between two sets of bookmarks, say 'work' and 'private'?

    I want to use to sets of bookmarks, so that when I'm working, I'm not distracted by my non-work bookmarks and vice versa. For the last couple of months, I've been using two user accounts to achieve this, but it's a bit of a PITA. Links from other applications, like Thunderbird mail are opened in the default profile. This means when I'm not at work and I click a link in an email, a new window is opened with my Firefox work profile.
    All I need is a trick or an extension to quickly switch bookmark sets. Or a way to switch profiles without opening a new Firefox window. Any ideas?

    You can't get Firefox to work as you are explaining you want. The Default Profile can't be changed on-the-fly to the Profile you are currently using. That message "Firefox is already running ..." comes up due to you or "something" trying to open a 2nd (or subsequent) Profile, unless that '''-no-remote''' command was used to open the additional Profile. And '''-no-remote''' won't work to open the Default Profile without causing issues with how Windows works with "calling up" the Default Browser.
    In response to your last statement - '''''"To separate my work and private stuff I only need to change the contents of my bookmarks bar, so I hoped there was some trick to maintain to groups of bookmarks."'''''
    This extension will allow you to change the Bookmarks Toolbar folder while you are using Firefox.
    https://addons.mozilla.org/en-US/firefox/addon/set-as-bookmarks-toolbar-folde/
    I just installed that extension and verified that it still works in Firefox 35.
    There is a context menu item added for '''"Set as Bookmarks Toolbar Folder"'''' that appears when the Bookmarks Menu Bar drop-down menu is used (not in the Library window or the Bookmarks Sidebar). That menu item appears when you right-click a folder in the Bookmarks Menu folder. It doesn't appear with the "Bookmarks Toolbar" folder or the "Unsorted Bookmarks" folder - only a folder that is in the "Bookmarks Menu".
    That should "solve" wanting to have two different settings for the Bookmarks Toolbar, but the Default Profile "thing" is still an issue for what you are trying to accomplish. I don't "see a fix" for that - without resorting to a 2nd Window User Account which is what I thought you were referring to by "I've been using two user accounts to achieve this" in your initial posting.
    And since the Menu Bar is hidden by default these days, you can use '''Alt''' then '''B''' to open the Bookmarks drop-down from the "revealed" Menu Bar so you can access that '''"Set as Bookmarks Toolbar Folder"''' menu item - without having to show the Menu Bar all the time.
    ''BTW, using "accounts" in lieu of "Profiles" can be confusing when discussing Firefox Profiles.''

  • What is the best way to deploy an application ??

    Hi,
    Please advise me how to automate in a best way to Deploy 10 different applications(.ear/.war)
    to 10 different Clusters(containing 40 Managed servers) in wls6.1......and that
    too in a Production environment.
    I know that we can use weblogic Console to deploy an application BUT if i have
    2 unix boxes and each box contains 4-4 clusters(each containing 16-20 managed
    servers) .....then i have to open up 2 Admin server consoles to deploy each of
    the respective applications and that too deploying these application to 8 clusters.....OR
    i can use deploy commad to do the same.
    AND if i have like 100 clusters .....then i would have to "deploy" 100 times ......
    is there any way that we can BEST AUTOMATE this process.
    Thanks a lot.
    -sangita

    Thanks Tommy. but i would like to know a very important point here: this is using
    the weblogic.utility that you just talkd about.
    Suppose iam having an ADMIN server that has say 10 clusters and 50 managed servers
    underneath to take care.
    1 cluster each = 5 managed server
    now iam deploying a simple .war file to say a single managed server, i have found
    out that it takes a looot of time to get the application deployed.
    what do you say about this situation ?
    what is the best approach ??????
    -sangita
    "Tomy Mathew" <[email protected]> wrote:
    >
    >
    To deploy the application from the command prompt in WebLogic 6.1 you
    use the
    following command
    $JAVA_HOME/bin/java -cp $WL_HOME/weblogic.jar weblogic.deploy -port $WEBLOGIC_PORT
    -host $WL_HOST_IP $WEBLOGIC_CMD $WEBLOGIC_PWD -component $WL_Server_NAME:$WL_Server_NAME
    $WL_APPLICATION_NAME YourApplication.war
    $WEBLOGIC_CMD sould be DEPLOY for the first time deployment and UPDATE
    for redeployment
    For deploying in a cluster you better create a shell script which call
    the above
    command with different cluster ip address as a parameter.
    Tomy
    "sangita" <[email protected]> wrote:
    Thanks Rob for your expertise advise. I would check to see wls8.1's
    ANT tasks.....for
    wls6.1, i would guess shell scripts to be a better option for us.
    thanks again.
    Rob Woollen <[email protected]> wrote:
    If you're using 8.1, then it's pretty nice to use ant for
    configuration/deployment/starting and stopping servers etc. There's
    a
    wlconfig task to do configuration, wldeploy to deploy applications,
    wlserver to start/stop servers.
    For 6.1, it's probably not a huge win to use ant. It's up to you.
    If
    you're more comfortable using shell scripts, that's certainly a
    reasonable route.
    -- Rob
    sangita wrote:
    Thanks Rob.
    But all the stuff that ANT can do for me FOR DEPLOYMENT (ONLY) .....ican do it
    from a simple shell script too.
    And i understand of ANT's cross-platform environment and usage of
    JAVA
    .....but
    can i use ANT to do something like CONFIGURING my wls6.1 managed
    servers/clusters/creating
    managed servers/db connection pools ......and all the other configurationthat
    i do from wls console(or manually) ....????
    and if yes, do you know of any examples, suggestions, ideas ?????
    basically, if i need to sell(?) ANT to my juniors ......what are
    the
    basic reasoning
    i can put forward....keeping in mind that these guys use wls6.1 &
    wls8.1......and
    these guys do CONFIGURATION and DEPLOYMENT only.
    sorry for asking, may be these silly questions.
    thanks, sangita
    Rob Woollen <[email protected]> wrote:
    sangita wrote:
    Thanks Rob.
    Rob, do you still consider or suggest using ANT for deploying say
    20
    applications
    on a 10 clustered environment.Yes
    do you see any advantages using [ANT + weblogic.deploy]..... over
    simply
    using
    weblogic.deploy utility ???Yes. ANT essentially gives you a cross-platform environment that
    allows
    extensibility through java. It's very powerful.
    -- Rob
    -sangita
    Rob Woollen <[email protected]> wrote:
    sangita wrote:
    Rob,
    I have found the answer for my question #1 ...this is the URL:
    http://edocs.bea.com/wls/docs81/admin_ref/ant_tasks.html
    iam still hoping to hear back from you for #2, #3
    thanks a ton.
    "sangita" <[email protected]> wrote:
    Thanks Rob.
    quick question:
    1) do you know of any example which illustrates the use of ANT
    wrapper....or
    please
    direct me to a URL where i can find some documentation about
    it.
    2) does this ANT wrapper has any advantages over using weblogic.Deployer
    utility
    ??If you're doing deployment via ant, then it's a bit more convenientto
    use <wldeploy> rather than invoking a raw <java> process, but
    fundamentally it's just a wrapper around weblogic.Deployer
    3) i would certainly check to see weblogic.deploy for wls6.1
    ....can
    i use ANT
    for deployment purpose in wls6.1 ?You'll just need to wrap it in a <java> task
    See:
    http://ant.apache.org/manual/CoreTasks/java.html
    -- Rob
    Rob Woollen <[email protected]> wrote:
    If you were using WLS 7.0 or later, you could use weblogic.Deployer.
    If
    you were using 8.1, you could use wldeploy which is an ant task
    wrapper
    for weblogic.Deployer.
    In WLS 6.1, you'll have to use weblogic.deploy which is a bit
    cumbersome, but it's still certainly possible to script deployment.
    -- Rob
    sangita wrote:
    Hi,
    Please advise me how to automate in a best way to Deploy
    10
    different
    applications(.ear/.war)
    to 10 different Clusters(containing 40 Managed servers) in
    wls6.1......and
    that
    too in a Production environment.
    I know that we can use weblogic Console to deploy an application
    BUT
    if i have
    2 unix boxes and each box contains 4-4 clusters(each containing
    16-20
    managed
    servers) .....then i have to open up 2 Admin server consoles
    to
    deploy
    each of
    the respective applications and that too deploying these applicationto 8 clusters.....OR
    i can use deploy commad to do the same.
    AND if i have like 100 clusters .....then i would have to "deploy"100 times ......
    is there any way that we can BEST AUTOMATE this process.
    Thanks a lot.
    -sangita

  • What is the best way to deploy application that uses web services?

    Hi all,
    I'm having some problems figuring out the best way to deploy our app now that we've switched over to using web services.
    I'm fairly new to Java and web services. From what I understand, JNLP and WebStart are methods to deploy Java clients to users and not for creating war files and the like.
    Here's a little background:
    We have a large PowerBuilder/Oracle application. The db consists of over 500 tables and the client consists of several thousand PB components. A user creates "transactions" which contain a series of "sub-transactions" within. Most of the data is collected and stored locally in the client in a series of datastores. When the "finalize" happens, the records are validated and sent to the database.
    We are in the process of moving each of the subtransactions (currently in the PB client) into subPROCESSES on a java project. We are using the JAX-WS framework to develop the web services in Netbeans. These web services aren't much more than remote xml as the messaging technology. For writing data back to the database, we are using the Java Persistence API to function outside of an EJB container but will shortly be migrating to the Glassfish application server to use several of the EJB container frameworks including the EntityManager.
    We haven't attempted any type of deployment and are unsure of where to start. Any suggestions would be so helpful and appreciated!
    Thanks!
    Edited by: doubleEspresso on Jan 10, 2008 8:06 AM

    >
    I'm fairly new to Java and web services. From what I understand, JNLP and WebStart are methods to deploy Java clients to users and not for creating war files and the like. >Correct, while Java Web Start has 'web' in the name, it has little if anything to do with web applications - certainly not providing much toward their installation. It is for launching rich client GUI based (AWT, Swing, SWT..) applications onto the end-user's desktop.
    There are some parts of JWS that might seem peripherally useful to the installation of a web-app., but it is really not a 'good fit'.
    >
    ..Any suggestions would be so helpful and appreciated!>You might try the forums for the 'web tier' APIs.
    <http://forum.java.sun.com/category.jspa?categoryID=20>
    Or perhaps the forum 'Java Technologies for Web Services' (under 'enterprise technologies')
    <http://forum.java.sun.com/forum.jspa?forumID=331>
    This one in 'BigAdmin' seems particularly relevant, 'Set up and Deploy'
    <http://forum.java.sun.com/forum.jspa?forumID=550>

  • What is the best way of deploying a jsp and bc4j aplication

    Hi
    I would like to know what is the best way of deploying a jsp and
    bc4j aplication in ias 9i.
    thanks in advanced
    rjc

    In the page I simply referenced the facescontext directly... no need for a custom servlet.
    public void createcookie() {
    FacesContext fc = FacesContext.getCurrentInstance();
    HttpServletResponse resp = (HttpServletResponse)fc.getExternalContext().getResponse();
    Cookie userCookie = new Cookie("cookiename", "cookievalue");
    userCookie.setMaxAge(-1);
    userCookie.setMaxAge(3600);
    resp.addCookie(userCookie);
    return null;
    public String readcookie() {
    FacesContext fc = FacesContext.getCurrentInstance();
    ExternalContext ec = fc.getExternalContext();
    Map cookiemap = ec.getRequestCookieMap();
    if (cookiemap != null) {
    Cookie cookie = (Cookie) cookiemap.get("cookievalue");
    return cookievalue;
    For reference I could not get getCookies() method of HttpServletRequest to work.. it would only return JSESSIONID.

  • Hi I would like to show a presentation written on my macbook air on my television what is the best way to connect the two ?

    Hi I would like to show a presentation written on my macbook air on my television what is the best way to connect the two ?

    Much depends on the available connectivity  of your television.
    If it has HDMI input available, all you will need is a minidisplayport to HDMI adapter, and an HDMI cable long enough to place the Mac in the desired proximity to the TV. The adapter is avaialble from the Apple Store online.
    Provided the HDMI input on the television supports sound, and the model of your MBA supports it as well, make suree that your adapter is also supportive of sound, otherwise you will need to run separate cabling from the headphone jack of the MBA to TV sound input or external speakers.
    This is a somewhat specific answer to a question without any requisite detail. You don't indicate the model or type of inputs on your TV, nor do you indicate the model/generation of MBA you have.

  • What is the best way to deploy/update custom security realm classes to WLS 6.0?

    From the WLS 6.0 console, I see that I can specify the Java class that
    implements my custom security realm but I am wondering what is the best way
    to deploy/update this code. I don't see a way to do this from the console.
    Does this mean that I have to manually copy the class files over that
    implement my custom security realm?

    Thanks Danut,
    A jar file seems to be a good way to package it up but it sounds like it
    still needs to be manually copied to each Weblogic server install directory
    post-installation and whenever it is updated. I thought it would be nice to
    be able to deploy/update the custom security realm by uploading it through
    the Console just as you can with web applications and EJBs.
    Brian
    "Danut Prisacaru" <[email protected]> wrote in message
    news:3aba2db0$[email protected]..
    You have to have your Custom Realm class in the class path. I usually havea
    jar file with all the Custom Realm classes and that jar I copy it in thelib
    folder. Then I modify "startWebLogic.cmd" and I add to the classpath
    ".\lib\CustomRealm.jar"
    set
    CLASSPATH=.;.\lib\weblogic_sp.jar;.\lib\weblogic.jar;.\lib\CustomRealm.jar;
    >
    Be aware that in order to have you custom realm besides creating thecustom
    realm using the console you also have to create a custom caching andchoose
    that one as your default caching realm.
    Here is how the security settings are looking in my "config.xml"
    <CustomRealm Name="CustomRealm"
    RealmClassName="Custom.appserver.weblogic.security.CustomRealm"/>
    <CachingRealm BasicRealm="CustomRealm" CacheCaseSensitive="true"
    Name="CustomCachingRealm"/>
    <Realm CachingRealm="CustomCachingRealm" FileRealm="wl_default_file_realm"
    Name="wl_default_realm"/>
    <FileRealm Name="wl_default_file_realm"/>
    <Security GuestDisabled="false"
    Name="mydomain" PasswordPolicy="wl_default_password_policy"
    Realm="wl_default_realm"/>
    Danut

  • Best way to deploy a new database

    What is the best way to deploy a database for a user base that mostly doesn't understand how to use SQL based db products or has some understand?
    I'm current working on a setup utility for my desktop application, which uses MySQL, right now I'm at a design issue where I'm not sure how to get the database deployed.
    I have a creation script for deploying the database, but I'm not sure wither to create a default user, assign the rights to the user or make the user customizible. [which starts to branch off way too much] The desktop application does have an option of using an already deployed databased else where or creating one locally.
    Does anyone have suggestions for deploying databases for desktop applications? I know that derby is a great solution for this, however, It is not nearly powerful enough to handle what I need a database for. [large amount of transactions and comparisons, really quickly] I also have been unable to find information on this as well.

    are you talking about creating another copy of your existing DB on the same server ??
    (Just wanna confirm as your last line seems to contradict with this?!?)
    2 ways:
    Go for RESTORE database with the Source option pointing to one of the existing databases.
    Go for COPY DATABASE (useful when the copy of the db is to be put in another server maybe..)
    Note that you would need backup of the existing DB to proceed..
    Thanks, Jay <If the post was helpful mark as 'Helpful and if the post answered your query, mark as 'Answered'>

  • What is the best way to deploy a java application ??

    Hi,
    I have a question about "deploying" a java application on to a weblogic server.
    Please advise me how to automate in a best way to Deploy 10 different applications(.ear/.war) to 10 different Clusters(containing 40 Managed servers) in wls6.1......and that too in a Production environment.
    I know of using Weblogic Console OR the "deploy" utility to do so ......BUT if i have like 100 clusters .....then i would have to "deploy" 100 times ......
    is there any way that we can BEST AUTOMATE this process.
    Thanks a lot.
    -sangita

    HELLO!!! WELCOME BACK!! I THINK YOU SHOULD USE
    deploy....Hey Thanks.
    is there any network congestion OR any other problem that i can anticipate before i use "deploy" utility. I have heared of some problems(i couldn't remember them now ....because honestly, i couldn't understand them atall when a BEA consultant told me those...).
    so, any problem that may arise ....that i need to think about before deploying ~10 applications to like ~70-80 clusters ....all at a time.
    thanks again for your advise. iam learning to see the big picture of application deployment.
    -sangita

  • The best way to deploy and redploy of a multiple SOA application

    Hi all,
    I'm looking for the best way to deploy and redeploy a multiple SOA application.
    1) The multiple SOA application contains many projects. Some projects depend on another projects.
    2) WebLogic is in productive mode.
    I wound like automaticly deploy and redeploy my multiple SOA application.
    Does anyone have any experience of this?
    Many thanks
    PG

    We use ant scripts to automatically deploy and redeploy multiple composites.
    The ant scripts gets shipped along with the SOA installation. The ant script that is used for the deployment is:
    ${oracle.home}/bin/ant-sca-deploy.xml
    You can also use the same for your deployment.

  • Best way to deploy IE11 in latest Version 11.0.7

    Hello there,
    I´m looking for the best way to deploy IE11 in the latest Version 11.0.7, because that one includes the Enterprise mode.
    When I just push IE11 out through WSUS, the RTM Version without Updates gets installed. So the scenario would be:
    Install IE11
    Reboot
    Install Updates
    Reboot
    Enterprise Mode ready
    That is of course not a good way, because after the first reboot the Enterprise Mode is not available yet and the RTM Version does not include the latest security updates.
    So I downloaded the IE11 installer and the latest IE11 Update (KB2929437) and tried the following things:
    Extract IE11-Windows6.1-KB2929437-x86.msu to get the IE11-Windows6.1-KB2929437-x86.cab
    IE11-Windows6.1-x86-en-us.exe /passive /norestart
    C:\Windows\System32\dism.exe /online /add-package /packagepath:"C:\Temp\IE11-Windows6.1-KB2929437-x86.cab" /quiet /norestart
    Reboot
    After just one reboot I had the latest Version of IE 11 (11.0.7) installed.
    I´m wondering now if this is a valid way to push it out or if there are a better ways of doing it.
    Thanks for your help!

    Hi,
    We could take use of the IEAK 11.
    IEAK 11 Overview
    IEAK 11 - Internet Explorer Administration Kit 11 Users Guide
    After we created the customized MSI package, we could use software distribution policy to deploy it.
    Deploy Internet Explorer 11
    How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
    Best regards
    Michael Shao
    TechNet Community Support

  • Best way of deploying an App on PC w/o JRE?

    Im looking on opinions on the best way to deploy an Java app to PC's without the JRE installed.
    1 - Load the JRE and the app at the same time.
    2 - Create the app as an Applet.
    The JRE just has to match the version of the JDK that the app was created on.
    Internet connectivity is not always going to be present.
    Thanks for your opinions.

    We deploy the JRE with our apps, in a subdirectory beneath the app's installation path. We then write a small C application that uses JNI to start THAT JRE and launches our application.
    The JRE is not all that huge (the installer for one of our apps (www.attachplus.com/index.jsp) is 7.5 MB).
    We use the Nullsoft open source installer system (with Modern UI plugin) to quickly create the installers - it takes a little bit of time to set up, but is very easy to use once you get used to the scripting constructs.
    This approach has a couple of really nice advantages:
    1. You are completely independent of which JRE is installed on the system
    2. You don't need to mess with separate deployment of the JRE
    3. Workstation security settings don't get in the way (i.e. users don't have to "install" the JRE, update the registry (if Win32 platform), etc...
    The (obvious) disadvantages are:
    1. You take up more drive space than you would otherwise need to
    2. It takes longer to do the initial download (we have a Setup and Update configuration of our installers - the Update config doesn't have the JRE in it, and is only 200KB).
    Another, very interesting approach (I'd like to do this, just haven't had time), would be to write a plugin for the Nullsoft installer that would check to see if a JRE is installed during setup, and would dynamically go to a web site and download and configure an appropriate JRE.
    Cheers!
    - Kevin

  • Which is the best way of deploying JSP (mod_ose or OSE) ?

    I need to deploy some jsps that are using servlet api 2.2 and i would like to know which is the best way of deploying these jsps?
    Thanks
    RJC

    Speaking of JServ Vs OSE, I have some related questions on it. I would appreciate if someone can answer:
    1.For a stateful servlet (assuming that we are using Oracle JVM), Will it not call the init() method of the servlet each time for a client (because each client will have his own Oracle JVM)? If so, isn't that expensive because it needs to initialize the servlet again?
    Again, for the same servlet, Will it not have a servlet context for each and every client? Isn't that expensive? ( A servlet context by definition maintains state information for all instances of a web application within any single JVM)
    2. If we have an application that has some portion of it which is stateless and some portion of it which is stateful, how do we make a choice JDK JVM vs Oracle JVM?
    Can we (for the same application) use both the JDK JVM as well as Oracle JVM? If so, how does the JDK JVM talk with Oracle JVM?
    3. Since Oracle JVM is useful for stateful applications only, does it mean that we cannot use it for Stateless session beans? (In an application we might have stateless session beans, stateful session beans as well as entity beans) Should we be using JDK JVM or Oracle JVM?
    4. For Servlets too, we might have stateless servlets and stateful servlets within the same application. If so, can we use JDK JVM for stateless servlets and Oracle JVM for stateful servlets? If so, how does the JDK JVM talk with Oracle JVM?

  • Two-way forest trust between two (single domain) forests with multiple identical user ID's

    Domain and forest levels - Windows 2003 (they both have one 2008 R2 DC)
    We need to create a two-way forest trust between two separate single-domain forests. The problem is that these two forests already access each others resources through a S2S. Users have the same login names and passwords on both forests/domains. Now, we
    are combining their infrastructures and need to set up a trust. From what I'm reading, you can't create forest trusts if you have the same SIDs, user ID's, or computer name in each of the forests.
    I'm looking into AD migration tool to copy the userSIDs (SID history?) between forest/domain, deleting the user ID's in the domain we migrated from, and then setting up the trust, but I'm leery about doing it this way as there is no easy 'recovery' should
    something go wrong. 
    Any suggestions for the easiest way to setup this forest trust?

    Hi,
    To eliminate your worries, two user accounts have the same user name doesn’t mean that they have the same SID. Moreover, the user’s SID remains the same even after it has been renamed.
    The SID for domain account/group consists of a
    Domain Identifier and a Relative Identifier. Domain Identifier is unique in every domain within a forest, and a Relative Identifier is unique within domain. It is unlikely that two user accounts with or without the same account
    name from two forests have the same SID.
    The Technet article you mentioned is talking about duplicate SIDs instead of “duplicate computer name or user account”, I will submit a change request to Microsoft about this.
    If there are duplicate SIDs when you create forest trust, you need to delete one of them as the article guides.
    Here are some related articles below for your references:
    How Security Identifiers Work
    http://technet.microsoft.com/en-us/library/cc778824(v=WS.10).aspx
    Security Identifier Structure
    http://technet.microsoft.com/en-us/library/cc962011.aspx
    Security Identifier
    http://en.wikipedia.org/wiki/Security_Identifier
    I hope this helps.
    Amy Wang

  • What is the best way to switch between multiple image buffers? AND How to synchronize saves?

    Hello,
    I'm trying to flip-flop between two buffers and wondering the best possible solution for this.  I'd like to acquire an image in one buffer, send that off to be processed, and then while that's being processed acquire a second image.  Right now I have a "Create IMAQ vi" in a for loop and have it creating 10 image locations.  I'm using a non-NI framegrabber (shame I know) which makes things a bit more difficult to replicate.  I have two while loops.  One while loop currently grabs images from the framegrabber and places in the 10 different locations.  The other while loop currently holds a case structure that does the processing.  I have created a local variable that holds all of the image locations and reads those to be processed.  I don't know if this is actually making things faster or if it's better to just make one image location.
    I have two images attached.  One image is the Grab While loop.  Since I have an array of locations, I have to use a for loop and index each one out to my display. I then have a shift register to carry the image location info over to the next iteration of the while loop.
    The second attachment is the bulk of the main while loop.  It shows what happens to the image while it's being fully processed in the left case structure.  I know it does not look like much but one of the cases (which is called by Boolean Image FFT) is a subVI that does most of the processing.  I believe that is what really slows it down because of how that program is written. 
    The right case structure shows my saving mechanism.  I have two file paths. One to save the image and the other to save the processed image.  I have a sequence to make sure they save at the same time once it gets to that point. 
    The problem though is the following:
    In the grabwhileloop.png, you can see that I have a timing to see how fast the images are being acquired.  This value is approximately 60 fps (which is the rate of the Basler camera).  There is a similar set up in the main loop case structure. This processes very slowly and is approximately 1.04 fps.  Which would mean that the image I turn into an array in the left case structure in the main while loop image is more than likely different than the image I'm trying to save off in the right case structure since the grab is occurring at the same time.  I'd like to have the processed image to save alongside the image I am processing.
    Sorry for the big bulk of text.  This code has come a long way as it is.  If you have any suggestions on making it faster or more efficient please feel free to chime in.
    Thanks,
    Rob
    Attachments:
    GrabWhileLoop.png ‏34 KB
    MainWhileLoop.png ‏68 KB

    Thanks for the comment.  I have looked into the producer/consumer architecture, but to be honest, I'm not quite sure how everything will work while doing that. I have seen the example codes, and I have thought about implementing (or at least attempting to) but I'm still unconvinced that it will run that much more efficiently.  There is other setup outside of the images that had to be done outside of either while loop. Also, I don't know where I would put both loops.
    Last time, I attempted to put the grab while loop inside of the state machine.  Things got chopped because it took so long to go through the main while loop's "acquisition" state (which is really the processing state).  I needed both to simultaneously run.  The grab reset every time it went to the "grab" state which is not what I wanted.  The only way I can thing to have combatted this was to combine the grab and acquisition in the same state.  If that were to happen, I'd take out the for loop and grab one image at a time.  However, that would still probably make things even slower than they already are.
    In terms of the doing something before an image is assigned in for loop, I don't need that pixel sum value to refresh too quickly.  As it is already, the main while loop is slow enough as it is, so I am more afraid that everything will run too slowly the more I do.  I know where the bottleneck is in my code, but I can't really see a way to "even out the flow".  Even if I moved to the other architecture, I feel it'd take the same amount of time that it does already.
    From my debugging, the Image local variable in the main while loop seems to refresh as quickly as the grab while loop spits it out.  Granted once the main while loop finally completes, main images have gone by.  This is what has to be though because it just take up so much processing power to run through the main while loop state.
    As a side note, does labview have an issue with acquiring images in real-time that you have heard of?  I ask because when I run the code, there is a solid white line that I'm supposed to see in my display.  Every time things either time out or something, the line moves which is not supposed to happen.  The line also moves every time I place my mouse cursor in the display or if I spin the mouse wheel to scroll.  If I don't do either of those things, it'll eventually move on its own.

Maybe you are looking for

  • Problem with Image File in Encore CS5

    I made a 6 GB Image File in order to make BluRay discs without having to open Encore each time.  I can't seem to find software that will allow me to use the file to burn the disc.  Simple copy/paste doesn't work either.  The problem may be that the i

  • Setting up and MDB in JDeveloper

    Hi, I tried creating an MDB in JDeveloper 10.1.3.3.0. But I am not sure of the set-up values that i have to use. I am pretty new at this. When i try running the MDB, i am getting an exception which states : An error occured deploying EJB module: java

  • Help! IPOD clickwheel doesn't work!

    hi guys, I just wanna get some help.. I dropped my IPOD last night, then the IPOD itself, its working.. But the clickwheel doesnt even work.. The display clearly shows up, the hold button completely works, but the clickwheel doesn't work.. what shall

  • Improvements for Siri?

    Voice recognition in general has come a long way however it's still got a long way to go. Siri so far has shown itself to be quite superior but I have a few ideas how it could improve. For the new next generation iPhone (i.e. iPhone 5) and iOS update

  • Mac mail send problem

    hi a problem with mac mail. while the laptop is at the office the mail program works fine, out of office it does not - it recives mail but does not send. we have our own mail server (leopard server) it's on the office network. We use IMAP. We connect