DirectAccess Server 2012 Configuration cannot be retrieved from domain controller

Hi everyone,
We are using DirectAccess over Server 2012. There is just one server, no load balancing.
Everything works fine, all clients can connect successfully and operations status page shows all in green. Nevertheless on the dashboard page in the configuration status section it say “Configuration for server [servername] cannot be retrieved
from the domain controller.”
I found a few hints what could cause this problem:
In my case, the RAConfigTask, a scheduled task, was not enabled on the affected WS2012 server (DA entry point in a multisite deployment). After just enabling it, the errors has gone."
http://blog.gocloud-security.ch/2013/01/11/ws2012-directaccess-and-the-configuration-for-server-server-name-retrieved-from-the-domain-controller-cannot-be-applied-error/
Group Policy was filtering out my DA server from the GPO object for some reason. To fix, I opened up Group Policy Management on the domain controller and made sure that my DA server was a part of the group."http://www.joedissmeyer.com/2012/12/more-issues-and-solutions-for.html
Server has no connectivity to the domain in order to update the policies. Run “gpupdate /force” on the server to force policy update. GPO replication might be required in order to retrieve the updated configuration.
This could be because there is no writable domain controller in the Active Directory site of the Remote Access server. http://social.technet.microsoft.com/Forums/en-US/winserverNIS/thread/56fedb17-1274-4e1a-b2d0-fea809f0bc45
I checked everything. Task is enabled and completed successfully, GPO is not filtered out, run gpupdate without any errors, could connect to domain controller, no errors on domain controller, domain controller is writable.
So, I have no idea what could cause this error. Any ideas or hints?
Thanks
Regards
Sebastian

i have the exact same problem i figured out that there was a problem with the logon as a service
secpol.msc --> Local Policies --> User Rights Assignement, Logon as a service i have NT Service\All Services
i can acces the group policy via the cpnsole just fine i have not connectivity issues what so ever.
i decided to open a call with microsoft, their suggestion .... we dont know reinstall so i did and here we are same problem and no solution. it is getting frustrating...

Similar Messages

Running two instances of Windows Server 2012 Essentials R2 on the same domain

We have Windows Server 2012 Essentials R2 running as a domain controller -- and have installed another licensed copy of the same thing on the same domain. We want to use the 2nd server for running an LOB application and provide backup for the
AD services.
The 2nd server is a member of the domain. Can I do this and have the 2nd server provide AD failover services like they do with 2012 Standard?

Two things to consider. In the XP and 2003 era, the OS was not written in a security-first fashion. While XP did have LUA, almost nobody used them. Then came Vista and UAC, and those prompts were a major pain point because nobody wrote for security. Fast
forward 6 years and standard accounts are a normal best practice. Almost nobody in business recommends running daily tasks as administrator.
I mention all this to illustrate that, similar to admin accounts, what you used to get away with no longer applies. Running LOB apps on a DC is just bad. Many times, the app just doesn't work. But even if you could get it to work, it is a terrible idea.
If the stories of Home Depot, Target, and most recently Sony don't already give it away, I'll spell it out. We no longer live in an age where you can take shortcuts and expect to be safe. Large organizations make national news when they screw up. But small
businesses are targeted just as often and are at just as much risk. From "leaking" their client info to having their data held for ransom, the small business is abused regularly, but never makes national news because they are, by definition, small.
If you can take simple easy steps to help minimize that risk, such as keeping a domain controller free of other software and locked down, then it is almost unethical to do Otherwise in the modern computing era. The world ha changed. It is our responsibility
as I.T professionals to change with it. That's why we get to call ourselves "professionals" in relation to I.T.
So, what bad things? Risking the customer's very livelihood. I consider that pretty darn bad.

Server 2012 R2 Essentials Trial Installation from USB asking for Product Key

Hi,
I've just downloaded Server 2012 R2 Essentials trial iso from Microsoft site (http://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2012-r2-essentials).
The downloaded iso file is 9600.16384.WINBLUE_RTM.130821-1623_X64FRE_SERVER_SOLUTION_EN-US-IRM_SSSO_X64FRE_EN-US_DV5.iso
I created a bootable USB using Windows7-USB-DVD-Download-Tool-Installer-en-US.exe installer and it automatically copied the server 2012 files from the iso file.
Once my server (HP MicroServer) is booted up from the USB, the server 2012 installation is asking me to key in the product key.
Please, can someone help me this. I just want to install a trial version.
Thanks in advance.

Try this: R9N79-23MWD-MBP9B-KHF8Q-C36WX

Using SQL Server 2012 SSIS to Extract Data From SAP

Hi
What is the current best practice for using SQL Server 2012 SSIS to extract data from SAP R3? Please note we are looking for a solution that does not use SAP BW or SAP OHS.
Ideally we would like to build our ETL SSIS process to make a .NET call to an SAP RFC procedure and avoid using web services.
With SS2012 can we use any of these without using SAP BW:
- SAP .NET Connector
- MS ADO .NET
- BizTalk .NET 3.0 Adapter
Thanks and take care,
Shayne

Hi Shayne,
You can use the .NET Framework Data Provider for mySAP Business Suite along with SQL Server Integration Service (SSIS) to import data from an SAP system into SQL Server database tables, flat files, or other compatible destination types. You can create an SSIS
package that can be executed to import data from an SAP system.
You must use the SQL Server Import and Export wizard to import data into the SQL Server database. You must provide a select query to specify data to be imported. The query must confirm to the semantics supported by the Data Provider for SAP. You can start the
SQL Server Import Export Wizard either from the SQL Server Management Studio or from an Integration Service project in Visual Studio. Detail steps please see:
Importing SAP Data Using SQL Server Management Studio:
http://msdn.microsoft.com/en-us/library/cc185161(v=bts.10).aspx
Importing SAP Data Using Visual Studio:
http://msdn.microsoft.com/en-us/library/cc185254(v=bts.10).aspx
Please feel free to ask if you have any question.
Thanks,
Eileen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. This can be beneficial to other community members reading the thread.

Can't find SQL Server 2012 Configuration Manager

In my Win8 I can't find SQL Server Configuration Manager.
I need to connect to an SQL Database using a specific port.
Does anyone know how to do that?
Thanks a lot!!

Hi Lina,
Did you install multiple SQL Server instances on your local server? We can not configure SQL Server 2012 instance under SQL Server 2008 R2 Configuration Manager.
If you had installed SQL Server Configuration Manager with SQL Server 2012, you can try to run "sqlservermanager11.msc". If this is not opening then you might not install SQL Server 2012 Configuration Manager.
Regards,
Fanny Liu
If you have any feedback on our support, please click
here.
Fanny Liu
TechNet Community Support

Server 2012 R2 cannot update from 2008 R2 WSUS server

Our WSUS server is on a 2008 R2 VM. Updates for all 2008 R2 and lower servers, and Windows 7 clients work fine. I have one Server 2012 R2 in production and it cannot check for updates. It gets 800b0001 as the error code. I can
click on check for updates from Microsoft, then it does reach out to the Internet, download and install updates.
I also tried from my Win 8.1 laptop and I get error 8024402C. Any idea's?

I found in another thread the fix.
In regedit go to HKLM\Software\Microsoft\Update Services\Server\Setup and change "wYukonInstalled"
from a 1 to a 0.
Installer succeeds.
However now the Update Services console does not work. I get a connection error.
It's one thing after another with these things. I don't understand why Microsoft can't ever make something simple. IISReset did not cure this either.
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.
The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,
Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.
System.IO.IOException -- The handshake failed due to an unexpected packet format.
Source
System
Stack Trace:
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.runTryCode(Object userData)
at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)
** this exception was nested inside of the following exception **
System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.
Source
Microsoft.UpdateServices.Administration
Stack Trace:
at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)
at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.GetUpdateServer(PersistedServerSettings settings)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.get_ServerTools()

Services of 2nd instance disappearded from SQL Server 2012 Configuration Manager but still running

We recently configured multiple SQL Server 2012 R1 (two-node) clusters. Some with two instances. However, we discovered later that the Configuration Manager only lists the services of the 1st instance (the default MSSQLSERVER instance). The other named instance
is still running and can be failed over from one node to the other using Cluster Failover Manager but the services are not showing up in Configuration Manager in any of the two nodes.
Any thoughts as to why we see this odd behavior and how to fix it? We have done two instances before in SQL Server 2008 R2 but never saw this behavior.
Thanks,
Omer

Please see my answer above about the SQLCM version. We use the highest.
As I said before that this happens only when we have two instances running in a SQL2012 cluster. We configured 7 SQL 2012 clusters. three of them have two instances but only the services of one instance are displayed in CM. Services of the default instance
are listed in two of these clusters while services of the named instance are listed in the 3rd one.
One thing to note about these configurations is that the installer could not bring the services at the end of installation online because it did not have permission to create the computer objects in AD during setup thus we had to follow a known workaround
that involves having the domain admin fix these permissions and then we were able to add the SQL Agent Service to the cluster and bring the services online after modifying the ConfigurationState key value of each instance in the registry.
The installer account is setup as a local admin and we asked the domain admin to give it "Read All properties" and "create computer objects" in AD but for some reason it does not seem to have the ability to create these computer objects during installation
and the objects are to be pre-created and their permissions reset afterward.
I am giving this information and I am not sure if it has anything to do with the fact that SQLCM is listing the services of one instance and not the other.

After upgrade from SQL Server to SQL server 2012 I cannot show Query Designer ?? Please help

Hi
I have installed the required .Net software, but never the less I've got this message. Could you please help me out ?
Thanx in advance
Pia
TITLE: Microsoft SQL Server Management Studio
Cannot show Query Designer.
ADDITIONAL INFORMATION:
Exception has been thrown by the target of an invocation. (mscorlib)
Unable to find the requested .Net Framework Data Provider. It may not be installed. (System.Data)
BUTTONS:
OK

also check
http://connect.microsoft.com/VisualStudio/feedback/details/652192/visual-studio-2010-add-connection-fails
mostly machine.config is referring to .net 3.0 assemblies
Balmukund Lakhani
Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
This posting is provided "AS IS" with no warranties, and confers no rights.
My Blog |
Team Blog | @Twitter
| Facebook
Author: SQL Server 2012 AlwaysOn -
Paperback, Kindle

The WSDL data cannot be retrieve from remote site

I am a new guy learning web services with NetBeans 5.5 and meet some problem in retrieving wsdl data from remote site.
I create a web service "WSTestServer" at Sun Application Server PE8.2 with real IP, say 111.110.11.10:8888, and there's a class "TestWS" with a method "getWS" to return a String. The server (or machine) name is ultra20. So, by following steps in NetBeans, I can get a wsdl file after generating the web service and it can be viewed at
http://111.110.11.10:8888/WSTestServer/TestWS?WSDL
Then, I create a web service client at the same machine, it is available to test this method by clicking Web Service Reference item in NetBeans and select "getWS" method to get that String.
However, when I create a web service client at remote site, it doesn't work and show exception message like
cannot find domain http://ultra20:8888/WSTestServer/TestWS....
I go back to check wsdl file, at the last line, it prints like
<soap:address location="http://ultra20:8888/WSTestServer/TestWS".....
If I test this case in LAN, e.g., the server IP becomes 192.168.1.2 and client IP is 192.168.1.3, then it works since machine name can be recognized within the same local area network. I try to revise the wsdl file above to replace machine name as real IP, but it is automatically changed back with machine name while deploying and copy the revised one as xxx.wsdl__orig.
Should I do additional configuration setup for server site? Such as, registering a domain name like aaa.bbb.edu instead of 111.110.11.10?
Any comment and help for this subject is appreciated!!
Thank you so much!

Works as designed,from documentation:
The database also retrieves all triggers and constraints defined on the table except for referential integrity constraints that reference other tables.
The retrieved indexes, triggers, and constraints have recycle bin names. Therefore it is advisable to query the USER_RECYCLEBIN view before issuing a FLASHBACK TABLE ... TO BEFORE DROP statement so that you can rename the retrieved triggers and constraints to more usable names.
For details see the FLASHBACK TABLE command description for your unknown database version.
Werner

Server 2012 R2 Core installation & Remoting from another computer

I have server 2012 R2 Standard Core install in server. I want to move that server to data center . now i want to create virtual machines remotly from my office. is this possible. i have tried enabling remote management but its gives below error.
Akshay Pate

By default, a Server Core installation allows remote management. However, the default configuration is based on Active Directory domain membership and a single subnet. This leaves you with two challenges:
In a non-domain environment, your credentials might not match the credentials used, locally, on the Server Core installation. This is an easy one to fix, by either making sure the password for both the 'Administrator' accounts are set to match, or
by creating a secondary account with administrative privileges on the Server Core installation using option 3 in
sconfig.
The Hyper-V Manager requires specific network traffic and permissions. John Howard, a Program Manager on the Hyper-V team has created a free script called
hvremote.wsf, that helps you address issues you might have and find specific connection problems.

DirectAccess - Server 2012 R2, Windows 8 Client, "No SAs match the specified criteria"

I'm trying to get DA set up and it is being a major pain. I have the DA server set up and everything is green on the monitor, everything seems to be working there. I have successfully deployed the GPO to the client, and the client is trying to connect. However,
it will not connect and "Get-DaConnectionStatus" is saying "NameResolutionFailure".
So I'm working through this guide (https://technet.microsoft.com/en-us/library/ee844114%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396) to try and sort out the connection issue. The client creates an IP-HTTPS tunnel and I am able to ping the IPHTTPSInterface
on the DA server from the client, so it can reach the server (Note: I cannot ping the client from the server though).
Where I'm running into problems is on step 6 of the first part of that guide, where it says to use the command "netsh advfirewall
monitor show mmsa". The result of that command is "No SAs match the specified criteria".
Any ideas on why this issue is coming up, and how to fix it?

Hi
If everything seems to be OK on the DirectAccess Gateway, let's see what's going on the DirectAccess client. Can you produce a log as documented by this post :
http://directaccess.richardhicks.com/2014/04/22/unable-to-generate-directaccess-troubleshooting-logs-in-windows-8-x-clients/ and publish it?
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

Server 2012 and Exchange 2013 Migration from SBS 2011

Server UpgradeI'm migrating an SBS 2011 server to a new machine with Server 2012 R2 and a Hyper-V server running Exchange 2013. I've set up the new machine, all is running well in a test environment. I now want to migrate the old server to new. These are the steps I'm going to take and I wanted advice for any modifications or errors. 1. Demote DC on Server 2012 that I set up to test. 2. Join new Server 2012 to existing SBS 2011 domain. 3. Promote Server 2012 to DC. 4. Join the Hyper-V Server 2012 to the Server 2012 domain.5. Migrate Exchange 2010 on the SBS 2011 Server to Exchange 2013. 6. Transfer FSMO role from SBS 2011 Server to Server 2012 DC. I'll copy shared data files using robocopy.The only things I'm not sure about is the FSMO order, when to do that and the fact that I already have Exchange 2013 installed in the test...
This topic first appeared in the Spiceworks Community

I recently acquired a SuperMicro chassis that has a SAS2 expander backplane. It has SFF-8087 ports on it.http://www.supermicro.com/manuals/other/BPN-SAS2-846EL.pdfI made a post on another forum and someone mentioned that the card couldn't be used with that backplane since it's a SATA controller, however, the backplane is both SAS and SATA device compliant, it's only the RAID controller, as far as I know, that is a "SATA II" controller, and not a SAS controller.So, I couldn't find anything in the official documentation of this controller on whether or not it was able to control SAS devices. The card itself has a 3 SFF-8087 ports though, couldn't this theoretically still be used with a SFF-8087 to SFF-8087 cable(seen below)since the backplane is a SAS/SATA backplane?...

Server 2012 R2 - Change network location from public to private

I am having an issue with changing Network location to private from Public on Server 2012 R2 X64 .
Please note all the reference for previous servers for fixing this issue does not work on 2012 R2.
I am using Static-IP and "Workgroup" as domain setting.
In 2012 server by Right clicking on Network and Turn sharing on or OFF worked but in 2012- R2 Right click is not working not providing turn sharing ON or OFF option.

Check if you can change from here :
Run -- Gpedit.msc-- Open Computer configration -->Windows Settings -->Security Settings -->select Network list manager policies
Arnav Sharma |
Facebook | Twitter Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other
community members reading the thread.
NO it did not work I had already tired and rebooted it does not work. Just for other having the same issue please note my Build is 9600 so this may not apply to you,if you have a different Build you might not have this problem.
I am going back to server2012 rather using R2.

Clean Installation of Windows Server 2012 R2 cannot access internet

I just installed a clean Windows Server 2012 R2 Data Center and all drivers installed with no issue. I used Ethernet connection to access internet via IE (let say google.com) but failed. Clicked "Fix connection problem" and returned "website
(www.google.com) is online but isn't responding to connections attempts." Therefore, I suspected Windows Firewall (WF) setting. I disabled WF, allow IE in WF, allow port 80 but all did not work in this case. I am able to ping google.com but it just does'n
work in browser (IE, Chrome, Firefox). The same cable connection I tried with Windows 8.1, 7 with no issue. Please advise is there any clue I miss up for Windows 2012 R2 Data Center?
Sean

C:\Users\Administrator>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : WIN-4O28FIG5HD5
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : 30-85-A9-94-5B-62
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.13(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Friday, June 6, 2014 11:46:30 PM
Lease Expires . . . . . . . . . . : Saturday, June 7, 2014 11:46:30 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled
C:\Users\Administrator>nslookup
Default Server: router.asus.com
Address: 192.168.1.1
> google.com
Server: router.asus.com
Address: 192.168.1.1
Non-authoritative answer:
Name: google.com
Addresses: 2404:6800:4001:801::1008
123.136.105.20
123.136.105.35
123.136.105.46
123.136.105.59
123.136.105.49
123.136.105.27
123.136.105.57
123.136.105.37
123.136.105.24
123.136.105.31
123.136.105.53
123.136.105.38
123.136.105.48
123.136.105.26
123.136.105.16
123.136.105.42
LAN settings in IE is set to Automatically detect settings, no proxy is selected.
Sean

Need assistance how to configure RDS on a standalone Server 2012 R2 not joined to a domain

Hi,
I need help on how to configure RDS on my standalone server 2012 R2 that is not joined to a domain. I would also like to see the counterpart of Terminal Services Manager.
I am familiar with Terminal Services on my old Server 2003 which I migrating.
Thank you for your assistance.
Sincerely,
Ramon

Hi,
the dedicated RDS/TS forum is here:
http://social.technet.microsoft.com/Forums/en-US/home?forum=winserverTS
Some useful articles, which seem to answer your questions:
http://support.microsoft.com/kb/2833839
http://ryanmangansitblog.com/2013/10/30/deploying-a-rdsh-server-in-a-workgroup-rds-2012-r2/
http://support.risualblogs.com/blog/2014/03/10/setting-up-a-2012-r2-rds-gateway-for-a-workgroup/
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

DirectAccess Server 2012 Configuration cannot be retrieved from domain controller

Similar Messages

Maybe you are looking for