Disable OCSP in Windows Server 2008 / IIS7

Is it possible to disable OCSP Stapling on Windows Server 2008 / IIS7?
The problem is that
FF30 does not allow access to a secure site if the server supports OCSP Stapling and the user's computer time is in the past. The error is sec_error_ocsp_future_response. So users are not able to access our site simply because their time is incorrect!
If they don't report the error to us, we can't tell them what to do about it and we lose customers. So we need to disable OCSP Stapling.
I've tried these thing with no luck:
add RequestOCSP of type DWORD and set it to
0 to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters\
certutil –setreg chain\ChainCacheResyncFiletime @now
certutil -urlcache ocsp delete
OCSP Stapling is commonly disabled (for example,
sites such as amazon and google disable it). Please let me know how to disable
OCSP Stapling on IIS7.

Hi, please check on iis.net's forum. You will have a bigger audiance than there. I unfortunaly cant move the thread there.
Thanks you for your understanding
Regards, Philippe
Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it!

Similar Messages

Issue with disabling teredo with Windows Server 2008(non R2)

Hello,
I am not able to disable teredo on Windows Server 2008 (non R2) .When I try to run the same set of commands on Windows Server 2008 R2 it works fine.I have followed the instructions as in the below link
http://technet.microsoft.com/en-us/library/cc770710(v=ws.10).aspx
C:\Windows\system32>netsh interface teredo show state
Teredo Parameters
Type                    : client
Server Name             : teredo.ipv6.microsoft.com.
Client Refresh Interval : 30 seconds
Client Port             : unspecified
State                   : offline
Error                   : client is in a managed network
C:\Windows\system32>netsh interface teredo set state disabled
Ok.
C:\Windows\system32>netsh interface teredo show state
Teredo Parameters
Type                    : client
Server Name             : teredo.ipv6.microsoft.com.
Client Refresh Interval : 30 seconds
Client Port             : unspecified
I have also tried changing the below registry to disable teredo , that didnot work as well.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\DisabledComponents DWORD value set to 8.But the teredo status for the netsh command remains the same even after reboot.
When I try to disable the 6to4 or isatap it works fine.I have checked in device manager ->network adapters with show hidden devices enabled, but I dont see teredo adapter even when teredo is enabled as per netsh.Also I dont see teredo adapter in add
legacy hardware- > network adapters - > Microsoft devices , but I see isatap and 6to4 adapters in there.
Can someone please help me..
Thanks in Advance

Hi,
In device manager, add legacy hardware, install Teredo adapter, update the drivers. Reboot and check if you can modify the status.
If this failed, reset tcp/ip stack.
http://support.microsoft.com/kb/299357
Hope this helps.

Windows Server 2008, IIS7, SQL Server 2005 - Will this work?

Hi,
Not super concerned about it being supported at this point, BUT, can I run/install CR XI SP2 on Windows Server 2008, IIS7, SQL Server 2005?
I've reference the System Requirement stuff and it was written before Server 2008 was released.
If it's possible, any help on what to install/not install would be great appreciated.
Thanks,
Mike

Try it. If it works great. As you are using ASP, your app must be using craxdrt.dll. This dll has been retired and no longer ships with CR 2008, so even when the next SP for CR 2008 releases, it will be of no use to you. If the ASP app does not work on the server, you may want to post your query to the Legacy Application Development SDKs forum:
SAP Crystal Reports - Legacy SDKs
and see if anyone can help.
Other than that, the only option will be to go to .NET once SP 1 releases for CR 2008, or use CR 10.5 which bundles with .NET 2008.
Ludek

How to disable sslv2 on windows server 2008 r2

we are getting alerts from our third party application regarding the vulnerability error in our doamin.they mentiojn the following vulnerability message
Abp

https://www.sslshopper.com/article-how-to-disable-ssl-2.0-in-iis-7.html
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

IE 9 downgrade to IE 8 Windows Server 2008 R2 x64

Hello.
I try to downgrade IE on my windows server 2008 machine. I start with this: http://support.microsoft.com/kb/957700#stepsforwin2008r2 , there is howto for IE 8,
but I using it for IE 9, propably there was my mistake...
After that command (dism /online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64) I don't have IE 9 and try to install IE 8, but i got error:
After this step i realize, that somewhere must be some IE 9 components still be, i start search and find that on Control Panel\Programs\Programs and Features\Installed Updates
was IE 9 and I uninstall it. (After all operations I restarted machine)
Now I can't install IE 8 (it have same error what before), and don't get/can't install IE 9.
In folder C:\Program Files\Internet Explorer and C:\Program Files (x86)\Internet Explorer
I got files:
Is some way to get IE 8 or at least IE 9?
Thanks!
On this thread is some discusion about this: http://social.technet.microsoft.com/Forums/en/winserversetup/thread/68e0da1e-75b9-42e6-a832-d7bb6dc580c7

Enable IE 8 on Win2k8 R2:
Open the Command Prompt as administrator and run the following commands.
To Enable IE on Windows Server 2008 R2 version -- run the following command
dism /online /Enable-Feature /FeatureName:Internet-Explorer-Optional-amd64
To Disable IE on Windows Server 2008 R2 version -- run the following command
dism /online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
You need to restart the server after executing these commands.
To uninstall/disable IE check the following KB
This is what I ran at system32 prompt after uninstalling IE9 from programs\features
dism /online /Enable-Feature /FeatureName:Internet-Explorer-Optional-amd64
This does not work on my server, says Error:0x800f080c
Feature name Internet-Explorer-Optional-amd64 is unknown.
A Windows feature name was not recognized.

How Do i disable ""enable advance Printing features on windows server 2008 ""

Hi ,
I have a windows server 2008 which is used as a terminal server . Users at remote locations log on to this server via "" DYNDNS"" to user our ERP and company files. We use ""DOT MATRIX PRINTERS "" to print . As we all know that ""enable advance
printing feature"" is checked by default on windows server 2008 the format of our ""DOT MATRIX PRINTOUTS "" CHANGE which creates a big mess.
I would like to know if there is any way where i can disable this feature permanently.

In previous operating systems, that setting was for designed for disabling and enabling GDI rendering on the server. Since you are using a TYPE 4 print driver, there is no GDI rendering and thus this setting is not configurable.
If you would like to change this setting, you will need to use a TYPE 3 print driver that does not use XPS rendering. Then the previous configuration methods you were using will work.
Alan Morris Windows Printing Team

PDF Indexierung auf dem IIS7 unter Windows Server 2008 mittels IFilter

Hallo,
ich suche nun schone eine ganze weile nach einem Ifilter oder einer vergleichbaren Lösung für den IIS7 unter Windows Server 2008.
Ich möchte meine eingesetzten PDF - Dokumente im Web "durchsuchbar" machen. Dazu habe ich mir gedacht, ich installieren einen Ifilter (Die Lösung habe ich früher bei dem IIS5 angewandt) und indexiere die PDF - Dokumente und realisiere so, dass die Besucher der Webseite über die Suche auch die hinterlegten PDF Dokumente durchsuchen können.
Hat das schon irgendjemand mittels IIS7 realisiern können und mag mir einen Tipp geben, wie man das anstellt? Bitte keine Sharepoint Lösung anbieten.
Cuxhaven09

Can't browse anything in Windows Server 2008 R2 SP1

Hi,
Need your help and expertise. Suddenly, i can't browse anything in my Windows Server 2008 R2 SP1 with IIS7. I tried already three(3) different browsers (IE8, Firefox & Chrome). Before, i can browse (using IE8 & Firefox) both private (LAN) and public
(Internet) websites be it via ip address or domain name without any issues whatsoever. In fact, i can't even access the local http website (status in IIS7 is Started) my server is hosting.
The only problem occured just yesterday in my server was drive C: got disk full but i was still able to access via RDP the server and free up disk space of 80GB. I tried already to clear the browsser history,
disable the add-ons of IE8 and turn-off the firewall. I have NOT tried to reset IE8 settings, disable third-party
program or service and startup in msconfig as it require reboot of the server. I'm apprehensive
to do things i mentioned i have not tried since the server is up and running for 919 days and 17hours. It is why i tried other browsers that i even installed Chrome just to test and troubleshoot the browsing problem.
Thanks
iootoo

Maybe this one helps.
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/8ca76e02-c80c-4648-8983-33b5715adb41/no-microsoftcom-server-reachable-ie-address-is-not-valid-changes-to-http
or possibly ask over here.
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ieitprocurrentver
Also check IE|Tools|Internet Options|Connection|LAN SETTINGS
is correct and possibly Automatically Detect
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

How to install IE8 on Windows Server 2008 R2 Datacenter?

Hello.
Can anybody tell me, how to install IE8 on 2008 R2 Datacenter?
I've downloaded this http://www.microsoft.com/en-us/download/internet-explorer-8-details.aspx for "Windows Server 2008 64-bit and more..", removed IE11, IE10, IE9 from installed updates, and runned "dism /online /disable-feature
/featurename:Internet-Explorer-Optional-amd64".
And nothing helps. I've got a message "Internet Explorer 8 is not supported on this operating system".

you can't "install" IE8 on WS2008R2, nor on Windows7 - because those OS's shipped with IE8.
IE is an OS component, and so when you "upgrade" or "downgrade" IE, you are affecting an OS component.
What this means is that the "IE8" download you are trying to apply, is actually IE8 for WinXP or maybe WinVista.
You can usually "downgrade" Win7 back to IE8, by uninstalling the newer "upgrade" of IE - this causes the OS to automatically attempt to revert to the prior IE version.
This reversion assumes/requires a healthy OS and component store (CBS), including all the pkgmgr file needed to revert to component.
Sometimes, the component store is damaged, or is missing files.
you may need to check the CBS logfiles, and may need to perform SFC /scannow
You may need to use CheckSUR to repair system health.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Problems LMS-4.2 Installation on Windows Server 2008 R2 Enterprise SP1

Hi all,
During the installation of the LMS-4.2,
It passed the "Initializing" and "Copying" stages,
but, in the "Configuring", it never finishes,
Anyone had have a similar problem?
the installer is for - LMS-4.2 and the OS is Windows Server 2008 R2 Enterprise SP1

Thanks for the update. Glad to know it has installed now.
There can be some port clashes and resource scarcity when other applications may be using it. Hence we recommend to have majorly LMS as the primary software on the server's.
Also, LMS is not supported in other languages installers or setups except English and Japanese.
There are a couple more things you can do/check prior to running the installation.
LMS generally need Naming convention to handle long names/path etc. By default C: has 8.3 Naming convention enabled. However if you installed on different drive (for eg E:), for which this may be disabled.
To check naming convention you can run the following command from Windows Command prompt:
cmd>fsutil.exe 8dot3name query <Drive>
Example:
C:\Users\winlau>fsutil 8dot3name query C:
The volume state for Disable8dot3 is 0 (8dot3 name creation is enabled).
The registry state of NtfsDisable8dot3NameCreation is 2, the default (Volume level setting).
Based on the above two settings, 8dot3 name creation is enabled on C:.
8dot3 needs to be enabled for all drives LMS will potentially use, including:
Drive where TEMP/TMP is located
The drive LMS is installed to
The drive LMS backs up to
Drive used for a relocated RME Shadow directory or other nonstandard paths written to.
In some cases, altering the TEMP and TMP variables to be a short path (eg C:/temp or C:/tmp) may avoid the issue, but not always.
Hence, to be safe, it is best to enable 8dot3name creation globally, either via the registry or Windows CLI
Sample command to enable globally:
"fsutil 8dot3name set 0"
Sample command to enable on one volume:
"fsutil 8dot3name set X: 0"
Note that this needs a reboot to take effect. You should not disable 8dot3name creation which already has it enabled, especially the system volume (usually C:).
For further information http://technet.microsoft.com/en-us/library/cc778996%28v=ws.10%29.aspx
-Thanks
Vinod
**Encourage Contributors. RATE them**

Installation of Client Access role fails on Windows Server 2008 R2 (Execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP")

Hello
I am trying to install Exchange Server 2010 beta 1 onto a Windows Server 2008 R2 (build 7000) machine which has also been set up as a domain controller.
However when attempting to install the Client Access role, setup fails with the error below.
Does anyone know of a way to get around this please?
I have already searched for this error and not found any similar threads.
Also every time I press the code button on this forum it crashes the browser and I keep losing the message! (IE8 from within Server R2). Also the message box is very small, will not expand and keeps jumping to the top.
Thanks
Robin
[code]
Summary: 4 item(s). 1 succeeded, 1 failed.
Elapsed time: 00:00:01
Preparing Setup
Completed
Elapsed Time: 00:00:00
Client Access Role
Failed
Error:
The execution of: "$error.Clear(); Install-ExchangeCertificate -services "IIS, POP, IMAP" -DomainController $RoleDomainController", generated the following error: "Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.".
Could not grant Network Service access to the certificate with thumbprint 2F320F5D5B5C6873E54C8AB57F604D8AFA31D18C because a cryptographic exception was thrown.
Access is denied.
Elapsed Time: 00:00:01
Mailbox Role
Cancelled
Finalizing Setup
Cancelled
[/code]
Robin Wilson

Hello
Thanks for all the replies.
I have since wiped the system and installed everything again and it all worked this time so not sure what was wrong last time. I did try to uninstall all Exchange components and then uninstall IIS and Application server, reboot and re-install but I received the same error still when it came to installing the client access role.
Walter: I just attempted the standard installation which should have used the default self-signed certificate. Everything was a fresh install done at the same time on a freshly formatted PC.
For info last time when it failed to work:
- Installed Windows Server 2008 R2
- Installed Domain Controller role using dcpromo. I set the forest and domain as Windows Server 2008 R2
- Added a forest trust between main domain and test Exchange domain (set up as ex2010.local)
- Installed IIS and Application Server role
- Installed Hyper-v role
- Installed Desktop Experience feature
- Installed Exchange and recieved the error
When it worked I set up the forest and domain in Windows Server 2008 mode (i.e. not R2), installed Exchange first and then set up the forest trust and then Hyper-v. It did say it failed to configure dns which was probably because it started trying to do automatic updates half way through the dcpromo! DNS seems to work ok though.
I did notice this time that Hyper-v gave a warning about the virtual network adapter not being set up correctly and the local network did not work correctly although I could access the internet. Not sure if this could have been related to the cause of the problem previously. For now I have disabled the virtual network until I get time to try and get it working and so the mail will work in the meantime.
I also noticed that Hyper-v added an extra 443 ssl binding to the default website so as it had 2 bindings on port 443 it refused to start. After deleting one it worked.
I decided to install Exchange onto a domain controller as it is only a test and I wouldn't do it in a live environment. I am also short of test machines! It didn't give me any warnings about this actually, I think previous versions warn you that it is not recommended.
Andreas and Chinthaka: I did not know about the requirement to run the domain at 2003 mode. The main domain is running in 2008 mode with Exchange 2007 so I assume this is just a temporary beta related requirement. It does seem to be working (second attempt) so far in a 2008 mode domain although I haven't had a chance to fully test it yet.
Thanks
Robin
P.S. Sorry it's taken me a while to reply!
Robin Wilson

EPM 11.1.2.1 Installation problem on Laptop (Windows Server 2008 R2 x64)

Dear All,
I hope someone can help me here with EPM 11.1.2.1 installation problem on my notebook - Windows Server 2008 R2 x65, 8 GB RAM, running SQLServer 2008 Express.
I installed Hyperion Foundation. The installation and configuration went through successfully.
I am facing two problems:
Problem 1
When I try to access the workspace through the URL http://hostname:19000/workspace/index.jsp, I get error:
Quote
Failure of server APACHE bridge:
No backend server available for connection: timed out after 10 seconds or idempotent set to OFF.
End-quote
Problem 2
Also, the service "Hyperion EPM Server" service not able to start. When I try to start, I get error message:
Quote
The Hyperion EPMA Server service on Local computer started and then stopped. Some services stop automatically if they are not in use by other services or programs.
End-quote
I tried checking everything but can't seem to figure out what's going wrong.
I have uploaded (1) EPM Config Manager screenshot (2) EPM System diagnostic report (3) EPM Registry editor output and (4) system services listing at
http://www.mediafire.com/?pr9l1v99w4d9u4r,c3vggxeibqkxbo2,lyzclu2aggbn8qh,8kur9gxal5b361z
It would be very grateful if someone can have a look and help me.
Many thanks in advance for any help / pointers / suggestions.
- Neil

Hi Pablo,
Thanks to your suggestion for database, problem #2 seem to be resolved. I am now able to start EPMA Service.
Re: Problem 1
a) Log for C:\Oracle\Middleware\user_projects\epmsystem1\diagnostics\logs\services\HyS9FoundationServices-sysout is as below
-----<start>--------
<Feb 15, 2012 4:04:47 AM > <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Feb 15, 2012 4:04:47 AM > <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Feb 15, 2012 4:04:47 AM > <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Oracle JRockit(R) Version R28.0.2-11-135406-1.6.0_20-20100624-2119-windows-x86_64 from Oracle Corporation>
<Feb 15, 2012 4:04:48 AM > <Info> <Security> <BEA-090065> <Getting boot identity from user.>
Enter username to boot WebLogic server:
------<end>-----
I am intrigued by the last line "Enter username to boot WebLogic server:" - is there anything wrong going here?
Log for C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\logs\FoundationServices0 is as below:
-----<start>--------
####<Feb 15, 2012 12:49:49 AM <Info> <WebLogicServer> <RCPL02> <> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <> <> <> <1329324589459> <BEA-000000> <WebLogic Server "FoundationServices0" version:
WebLogic Server 10.3.4.0 Fri Dec 17 20:47:33 PST 2010 1384255 Copyright (c) 1995, 2009, Oracle and/or its affiliates. All rights reserved.>
####<Feb 15, 2012 12:49:49 AM <Notice> <Log Management> <RCPL02> <> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <> <> <> <1329324589568> <BEA-170019> <The server log file C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\logs\FoundationServices0.log is opened. All server side log events will be written to this file.>
####<Feb 15, 2012 12:49:49 AM <Info> <Log Management> <RCPL02> <> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <> <> <> <1329324589584> <BEA-170023> <The Server Logging is initialized with Java Logging API implementation.>
####<Feb 15, 2012 12:49:49 AM <Info> <Diagnostics> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324589631> <BEA-320001> <The ServerDebug service initialized successfully.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "t3" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "t3s" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "http" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "https" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "iiop" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "iiops" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "ldap" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "ldaps" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594904> <BEA-002622> <The protocol "cluster" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594919> <BEA-002622> <The protocol "clusters" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594919> <BEA-002622> <The protocol "snmp" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594919> <BEA-002622> <The protocol "admin" is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594919> <BEA-002624> <The administration protocol is "t3s" and is now configured.>
####<Feb 15, 2012 12:49:54 AM <Info> <RJVM> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594950> <BEA-000570> <Network Configuration for Channel "FoundationServices0"
Listen Address          :28080
Public Address          N/A
Http Enabled          true
Tunneling Enabled     false
Outbound Enabled     false
Admin Traffic Enabled     true>
####<Feb 15, 2012 12:49:54 AM <Info> <RJVM> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594950> <BEA-000570> <Network Configuration for Channel "FoundationServices0"
Listen Address          :28443 (SSL)
Public Address          N/A
Http Enabled          true
Tunneling Enabled     false
Outbound Enabled     false
Admin Traffic Enabled     true>
####<Feb 15, 2012 12:49:54 AM <Info> <Server> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324594982> <BEA-002609> <Channel Service initialized.>
####<Feb 15, 2012 12:49:55 AM <Info> <Socket> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324595013> <BEA-000406> <NTSocketMuxer was built on Jan 24 2006 20:40:35
>
####<Feb 15, 2012 12:49:55 AM <Info> <Socket> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324595075> <BEA-000436> <Allocating 4 reader threads.>
####<Feb 15, 2012 12:49:55 AM <Info> <Socket> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324595075> <BEA-000446> <Native IO Enabled.>
####<Feb 15, 2012 12:49:55 AM <Info> <IIOP> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324595216> <BEA-002014> <IIOP subsystem enabled.>
####<Feb 15, 2012 12:49:59 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324599818> <BEA-090894> <Successfully loaded the OPSS Policy Provider using oracle.security.jps.internal.policystore.JavaPolicyProvider.>
####<Feb 15, 2012 12:50:00 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324600286> <BEA-000000> <Starting OpenJPA 1.1.1-SNAPSHOT>
####<Feb 15, 2012 12:50:00 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324600442> <BEA-000000> <StoreServiceImpl.initJDO - StoreService is initialized with Id = ldap_9V5rIdcvntKDauQNwFIW41HchnU=>
####<Feb 15, 2012 12:50:00 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324600722> <BEA-000000> <BootStrapServiceImpl.loadLDIFTemplate - Did not find C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\data\ldap\XACMLAuthorizermyrealmInit.initialized, will load full LDIFT.>
####<Feb 15, 2012 12:50:00 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324600738> <BEA-090074> <Initializing Authorizer provider using LDIF template file C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\XACMLAuthorizerInit.ldift.>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601050> <BEA-090075> <The Authorizer provider has had its LDIF information loaded from: C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\XACMLAuthorizerInit.ldift>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601315> <BEA-000000> <BootStrapServiceImpl.loadLDIFTemplate - Did not find C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\data\ldap\DefaultCredentialMappermyrealmInit.initialized, will load full LDIFT.>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601315> <BEA-090827> <LDIF template file C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\DefaultCredentialMapperInit.ldift was empty. The WebLogic provider CredentialMapper has been bootstrapped but has not been initialized with any LDIF data.>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601331> <BEA-000000> <BootStrapServiceImpl.loadLDIFTemplate - Did not find C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\data\ldap\XACMLRoleMappermyrealmInit.initialized, will load full LDIFT.>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601331> <BEA-090074> <Initializing RoleMapper provider using LDIF template file C:\Oracle\Middleware\user_projects\domains\EPMSystem\security\XACMLRoleMapperInit.ldift.>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601346> <BEA-090075> <The RoleMapper provider has had its LDIF information loaded from: C:\Oracle\Middleware\user_projects\domains\EPMSystem\security\XACMLRoleMapperInit.ldift>
####<Feb 15, 2012 12:50:01 AM <Info> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601565> <BEA-090093> <No pre-WLS 8.1 Keystore providers are configured for server FoundationServices0 for security realm myrealm.>
####<Feb 15, 2012 12:50:01 AM <Notice> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601565> <BEA-090082> <Security initializing using security realm myrealm.>
####<Feb 15, 2012 12:50:01 AM <Notice> <Security> <RCPL02> <FoundationServices0> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1329324601658> <BEA-090083> <Storing boot identity in the file: C:\Oracle\Middleware\user_projects\domains\EPMSystem\servers\FoundationServices0\security\boot.properties>
------<end>-----

Windows 7 or Windows Server 2008 R2 domain join displays error "Changing the Primary Domain DNS name of this computer to "" failed...."

Hi,
Windows 7 or Windows Server 2008 R2 domain join displays error "Changing the Primary Domain DNS name of this computer to "" failed...."
DC:windows Server 2008 R2
Domain functional level:Windows Server 2003
When Winxp join domain, have no this error message.
I checked http://support.microsoft.com/kb/2018583?wa=wsignin1.0 does't work.
There have 3 suggestion in this article:
1.The "Disable NetBIOS over TCP/IP" checkbox has been disabled in the IPv4 properties of the computer being joined.
Doesnt's work.
2.Connectivity over UDP port 137 is blocked between client and the helper DC servicing the join operation in the target domain.
On my DC, I run netstat -an, reslut as below:
UDP 192.168.20.3:137 *:*
3.The TCP/IPv4 protocol has been disabled so that the client being joined or the DC in the destination domain targeted by the LDAP BIND is running TCP/IPv6 only.
We are not using IPV6.
This server recently updated from Windows Server 2003 to Windows Server 2008 R2. Before upgrade, when Win7 and Win2008 join this domain, also have the same error message.
Please help to check this issue.
Thank you very much.
BR
Guo YingHui

Hi Guo Ying,
I have faced this critical error which makes over-writes the host names in the domain when you join.
For example: Already you had a host name called as PC.domain.com in the domain.com Domain.
When you try to add the another host name called as PC in the domain.com Domain, it doesn't give you the duplicate name error on the network it does over-write the existing host name called as PC.domain.com & it will add the new host name into the domain.
Host name which got over-written will get removed from the domain. I faced this issue in my project. My DPM host name got removed from the Domain & new host name got joined into the domain which halted my backups for one day.
Final Resolution is as follows:
You need to start the dns console on the DC & drop down the domain name.
Select the _msdcs when you click on _msdcs it will show the Name Server's list on the right hand side.
You need to add the Domain Naming Master under the _msdcs or add all the domain controllers which you had.
After you add the Name server's try joining the PC OR Laptop to the domain which is successfully joins it.
Regards
Anand S
Thanks & Regards Anand Sunka MCSA+CCNA+MCTS

Windows Server 2008 R2 - Won't load certain web pages - Happens in all browers - Won't do windows updates

This server (Windows Server 2008 R2 Standard with SP1) is used to host thin clients as well as RDP sessions. One morning the office is fine, they come back from lunch and all of the sudden they can't load certain web pages, such as adobe.com
and pandora.com to name a couple. This was roughly 3 days ago.
1.) I have tried machines that are not connected to this server (not thin client or RDP), but are on the same network, they can load up any web page fine with no issues.
2.) On the server I have tried Opera, Chrome, IE and Firefox, all have the same exact problem.
3.) Tried different DNS servers just to be sure, even though it only effects the server and no one else.
Based on these facts I know that it is something wrong with the server, but not tied to a specific brower. In all browsers when you load up a page in question it just sits there with a blank screen trying to load, it never generates any errors.
The Event Viewer is also clean, no errors. So with no errors I have had trouble trying to find a starting place for this. Things I have tried:
1.) ipconfig /flushdns to try and clear out any DNS issues
2.) Changing the DNS servers for the server to 8.8.8.8 and 4.2.2.2
3.) Scanning for Viruses and Malware/Spyware
4.) Checking proxy settings on the server
5.) Updating and then removing Adobe Flash (thought it was tied to flash at first). Problem persists even with no flash player installed.
6.) Completed a failed update of .net, no effect
7.) Loading up browsers in debug mode to try and find anything in the site code that I could relate between failed sites. I found nothing I could identify
Of all issues to finally be stumped on this seems like an easy one, but I can't even begin to come up with an idea at this point.
I have tried to lay out all of the facts that I know as plainly as I can. I am hoping that someone has seen this before as this issue is effecting a number of differnt users and keeping them from doing portions of their job.
Help is most appreciated, thank you!

I was able to figure out a solution.
CAUSE:
It appears that the Internet isn’t fully up to date and ready to use EDns -- which is enabled on Windows Server 2008 R2 by default. The solution for this is to disable Edns. Note that this isn’t
a problem for most Windows Server 2008 R2 member servers. It’s only a problem for DNS *servers* that do recursive lookups. i.e. likely only your domain controller will be affected if that is where your DNS Server role exists.
SOLUTION:
To disable EDns, you can do it from the command prompt, or by editing the registry.
Create a DWORD called EnableEDNSProbes and set to 0 in HKLM\SYSTEM\CurrentControlSet\services\DNS\Parameters
Restart the DNS Server service for it to take effect.

Windows Server 2008 R2 DNS service issue with BitLocker

I recently installed BitLocker on a Windows Server 2008 Platform. I did not encrypt the boot partition because the server hardware BIOS did not have the necessary requirements to encrypt the system drive.
The Server roles are ADSM, DC and File Server. For DC operation I am also running the DNS service.
When I installed the DNS role I was prompted to install the Log files on a different volume than the OS. I did this, but unfortunately, it was the same volume that was encrypted.
Since I could not encrypt the system disk, the encrypted volume must be unlocked via password in order to mount. Here in lise my problem.
When I do a full reboot of the server, I get to the point in the boot process where my mouse is visible and operational (this would be just before the Windows OS logo displays, I believe), then the server reboots. On the next boot up I am given the diagonstics
and recovery dialog because the OS failed to boot.
I believe the failure is the DNS service trying to launch, but because the log files are on the encrypted drive and it has not been unlocked, the system sees this as a security problem and reboots
Does this make sense? If it does, is there a way to boot 2008 R2 with the DNS service disabled, say with the original install disk in recovery mode?
Any help would be greatly appreciated as this system cannot be booted in its current state.
Peter C. Hesse Network/Systems Administrator

Hi,
I believe you mean the Active Directory Logs not the DNS logs, because these are necessary to startup a domain controller, because the AD database depends on these logs.
So if you have AD logs on a different partition and that is encrypted with Bitlocker you could probably automatically unlock it.
So you did not encrypt OS partition because the server does not have a TPM fully compliant chip ?
manage-bde /?
manage-bde -autounlock -enable Driveletter:
But you have to be able to boot server normal mode I am not sure if the command can be used in DSRM mode.
Below are some links that might help:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/c52ffc7d-f822-4b61-b633-46f8e04eac80/bitlocker-for-domain-controller
Hope this helps.
Regards,
Calin

Disable OCSP in Windows Server 2008 / IIS7

Similar Messages

Maybe you are looking for