GRANT CONNECT on Endpoint required for availaibity groups?

One of our DBAs recently left, and when I was removing there login I found they had explicitly granted a connect on the availability group's endpoint to it's login.
The login itself is a sysadmin, so everything I can find online seems to say that it should automatically have connect permissions to all endpoints.
Is there any reason that this would need an explicate grant? And if not, will just revoking the permission cause any issues? I am afraid that just revoking the permission will bring down the availabity group even though I cannot find a reason
it exists.
Thanks,
Jamie

Hi GamerAhoy,
Agree with skc_chat, usually, we can use the New Availability Group Wizard (in SQL Server Management Studio) to create and configure an AlwaysOn availability group in SQL Server . If a server instance is running under a domain user account and does not yet
have a database mirroring endpoint, the wizard can create the endpoint and grant CONNECT permission to the server instance service account. However, if the SQL Server service is running as a built-in account, such as Local System, Local Service, or Network
Service, or a nondomain account, you must use certificates for endpoint authentication, and the wizard will be unable to create a database mirroring endpoint on the server instance. In this case, we recommend that you create the database mirroring endpoints
manually before you launch the New Availability Group Wizard.
Since your DBA left, you can create new login accounts for AlwaysOn Availability if neccessary. For two server instances to connect to each other's database mirroring endpoint point, the login account of each instance requires access to the other instance.
Also, each login account requires connect permission to the database mirroring endpoint of the other instance. For more information, you can review the following articles.
http://technet.microsoft.com/en-us/library/hh403415.aspx
http://technet.microsoft.com/en-us/library/ms366346.aspx
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

Similar Messages

Unity Connections 8.6.x - Independent-persistent disk requirement for VM?

Does anyone know why Unity Connections has a requirement for it's vDisks to be set to independant-persistant mode? I don't see this requirement for any other UC application and would prefer to not set it in this mode as it prevents us for taking a snapshot when the machine is shutdown. I know that snapshots are not officially supported, but it is a great back-out plan in the case of doing maintenance off hours and deleting the snapshot before using the VM in production.
Expanation of Independent Disks:
Independent Disks are not affected by snapshots.
Persistent - Changes are immediately and permanently written to the disk.
Where I found the Cisco requirements:
http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/requirements/8xcucsysreqs.html
"All virtual disks assigned to the Connection virtual machine must be configured in independent-persistent mode, which provides the best storage performance."

Yea I also noticed that the OVA did not apply this setting. I have turned this on manually as this document states it is a requirement. Just wondering if this requirement has been droped at some point since that secton of the document was last modified June 9th 2011. I can't seem to find the requirement anywhere else beside this document and it is not stated anywhere that it was dropped.

Is SAP-OSS RFC Configuration required for Technical Monitoring ?

Hi Experts,
I have not configured the SAP-OSS rfc connection.Is it required for setting up the technical monitoring(Tcode : SOLMAN_SETUP).
If Yes can you please help me in solving the above problem.Our aim is to configure technical monitoring for system and self-monitoring.
Thanks In Advance,
Satheesh E

Hello,
I am assuming you are speaking about 100 concurrent users and not the entire company userbase.
Core i5 (although is dual core underneath) is generally meant for desktops, having said this, please note that its difficult to arrive at any recommendation based on simply userbase. You need to have more data with you with respect to amount of transactions, concurrent users, peak period, load during peak period etc.
You need to use SAP's quicksizer to calculate the amount of SAPS for your production servers, SAPS is the unit used to calibrate your hardware for running SAP Applications.
If you provide your SAPS value to hardware vendor, they will advise what CPU rating and how many CPUs you need. They will infact tell you the entire configuration that you need.
you can also buy the following book:
http://www.sap-press.com/products/Sizing-SAP-Systems.html
Regards,
Siddhesh

How to set required for group of condition type in the same condition class

Hello,
we have a group of condition type with the same condition class B, the last one have been set, and all of others will be inactive.
but we don't set any required for all the condition types in pricing control, so if user don't set any of them, the sales order or billing is still saved. that is a risk.How can i fix it? Thanks.
Sophie

Hello,
incompletion log is not available in invoices.
You have different options:
- activate a validation in FI when the Billing document is released into accounting, so that te release into accounting is not allowed if the invoice amount is zero;
- define a subtotal in the pricing procedure as sum of the pricing conditions of your group, then develop a custom routine to be assigned in the formula "CalType" (field T683S-KOFRM) where an error should be raised if the amount of the subtotal is zero (use as an example formula 48);
Best regards,
Andrea

Program ID Required for RFC Connection

Hi All,
I'm trying to create a RFC Connection betwen SAP BI and SSIS (SQL Server Integration Services). In SM59 screen i'm unable to get the appropriate Program ID required for the connection. Could someone please help me in knowing how to get it.

Yogesh,
While creating TCP\IP type RFC destination, when you select Radio button "Registered server program", there you have to provide Program Id there. So for your information:
Program Id is a string which can be anything even your name.
i know only R3 and XI integration and in that case you will make your RFC communication channel active first with a program Id(ant thing) and with logon credentials of other system + gateway host and service.
then use that program id in RFC destination and test it.
If get empty request then RFC destination is ok.
BR,
Alok

Requirements for participants - must they have Acrobat Connect Pro for meetings?

I am soon participating in a "eLearning" program and we have been told that the meetings are within "Adobe Acrobat Connect Pro Meeting".
It is not clearly stated anywhere if I need to subscribe and have this program installed myself or if it is actually only the host that needs the program.
Is having Adobe Acrobat Connect Pro Meeting installed/subscribed a requirement for the participants?
Thanks for any help - hope Adobe will state this much clearer on their webpages in the future.

All the techical requirements for joining a meeting are listed here: Adobe Connect system requirements, web conferencing, Mac | Adobe Connect
Basically you need to have Flash Player 11.2 or newer.

Mobility Group Requirements for Guest Anchor WLC

Hello -
I've alway assumed you can't create a guest tunnel between a local WLC and an anchor WLC that are in different mobility groups.   However, I was told recently (without much detail) that this is possible. So I have set out to test this.
I am trying to point one of my local WLCs guest SSIDs to a guest anchor WLC in a different mobility group.   I have a maintenance window coming up and I am looking to anchor the clients on one campus to the anchor WLC on the other campus so guest service does not go down.   Each campus is it's own mobility group.   In trying to set this up I went to the "mobility anchors" screen for the guest SSID on one of the local WLCs and I am unable to add the anchor WLC from the other campus because it's non in the drop-down menu. This is because it's not in the same mobility group.   So my question is how do I anchor clients coming through a local WLC in one mobility group to an anchor WLC in another mobility group?
To me it doesn't seem possible without significant configuration changes.   I don't want to reconfigure/recreate mobility groups.
Thanks
Chuck

Not only is it possible, I would recommend it. However, you may be confusing some concepts.
The Mobility Group is different than the Mobility Domain. I generally refer to the Mobility Group as those WLCs with the same Default Mobility Group Name, and the Mobility Domain as the entire Mobility List (where you can define up to 72 controllers from various mobility groups).
The point is that if WLCs 1-10 are GroupA, and WLCs 11-20 are GroupB, for anchoring to work you at least need to add the anchor to the mobility list of the foreign wlc, and vice versa.
If you notice, when you add a mobility entry to the list, it should ask you for mobility group. If you leave it blank, it should default to that of that WLC, but on GroupA controllers, you could define GroupB controllers (and specific GroupB) and then you should now have mobility established between your controllers and the Anchor configuration will have your anchors in the drop-down....
Does that make sense?

How to connect 3 endpoints to 1 reserved row

Is it possible to set up a route group in MAX that connects 3 endpoints to a single row of a 4x128 matrix card that has been reserved for routing?
I need to have all four rows set as reserved for routing so I can set all my other route groups up by specifing endpoints.
Thanks,
Jason
Solved!
Go to Solution.

Hi Jason,
I'm assuming that you're using NI-Switch 2.3. To my knowledge, NI Switch Executive was only released with the following versions: 2.0, 2.0.1, 2.1, 2.1.1, 3.0.
The option you listed is not your only option, but it is the option that I recommend for prior versions of NI Switch Executive. Remember that you can use Route Groups to store the separate row to column connections so that only one connect call is required.
An additional option you have is to use two NI Switch Executive Virtual Devices. One Virtual Device has the PXI-2532 rows reserved for routing and the other Virtual Device doesn't. Each time you want to connect multiple columns to the same row, you could close the session to the "reserved for routing" Virtual Device and open a session to the other Virtual Device (where you connect multiple column endpoints to the same row). Note that you cannot have sessions open to both Virtual Devices at the same time because they would attempt to share the same hardware.
Is upgrading to NI Switch Executive 3.0 a possibility? There are two additional features you would enjoy:
Intuitive Graphical Configuration Utility
Graphical point-and-click configuration environment - enables rapid development of switch systems
Edit Channel Aliases in place
Build complex routing groups by clicking on matrix crosspoints one at-a-time
Microsoft Excel Import/Export
Easily export NI Switch Executive configuration into Microsoft Excel environment
Increase channel count through simple text manipulation
Easily import newly edited files back into NI Switch Executive
It would be great if upgrading were an option. Let me know if you have further questions!
Chad Erickson
Switch Product Support Engineer
NI - USA

List of Manual Setup required for iSetup to work

Hi All,
This is Mugunthan from iSetup development. Based on my interaction with customers and Oracle functional experts, I had documented list of manual setups that are required for smooth loading of selection sets. I am sharing the same. Please let me know if I anyone had to enter some manual setup while using iSetup.
Understanding iSetup
iSetup is a tool to migrate and report on your configuration data. Various engineering teams from Oracle develop the APIs/Programs, which migrates the data across EBS instances. Hence all your data is validated for all business cases and data consistency is guarantied. It requires good amount of setup functional knowledge and bit of technical knowledge to use this tool.
Prerequisite setup for Instance Mapping to work
·     ATG patch set level should be same across all EBS instances.
·     Copy DBC files of each other EBS instances participating in migration under $FND_SECURE directory (refer note below for details).
·     Edit sqlnet.ora to allow connection between DB instacnes(tcp.invited_nodes=(<source>,<central>))
·     Make sure that same user name with iSetup responsibility exists in all EBS instances participating in migration.
Note:- iSetup tool is capable of connecting to multiple EBS instances. To do so, it uses dbc file information available under $FND_SECURE directory. Let us consider three instances A, B & C, where A is central instance, B is source instance and C is target instances. After copying the dbc file on all nodes, $FND_SECURE directory would look like this on each machine.
A => A.dbc, B.dbc, C.dbc
B => A.dbc, B.dbc
C => A.dbc, C.dbc
Prerequisite for registering Interface and creating Custom Selection Set
iSetup super role is mandatory to register and create custom selection set. It is not sufficient if you register API on central/source instance alone. You must register the API on all instances participating in migration/reporting.
Understanding how to access/share extracts across instances
Sharing iSetup artifacts
·     Only the exact same user can access extracts, transforms, or reports across different instances.
·     The “Download” capability offers a way to share extracts, transforms, and loads.
Implications for Extract/Load Management
·     Option 1: Same owner across all instances
·     Option 2: Same owner in Dev, Test, UAT, etc – but not Production
o     Extract/Load operations in non-Production instances
o     Once thoroughly tested and ready to load into Production, download to desktop and upload into Production
·     Option 3: Download and upload into each instance
Security Considerations
·     iSetup does not use SSH to connect between instances. It uses Concurrent Manager framework to lunch concurrent programs on source and target instances.
·     iSetup does not write password to any files or tables.
·     It uses JDBC connectivity obtained through standard AOL security layer
Common Incorrect Setups
·     Failure to complete/verify all of the steps in “Mapping instances”
·     DBC file should be copied again if EBS instance has been refreshed or autoconfig is run.
·     Custom interfaces should be registered in all EBS instances. Registering it on Central/Source is not sufficient.
·     Standard Concurrent Manager should up for picking up iSetup concurrent requests.
·     iSetup financial and SCM modules are supported from 12.0.4 onwards.
·     iSetup is not certified on RAC. However, you may still work with iSetup if you could copy the DBC file on all nodes with the same name as it had been registered through Instance Mapping screen.
Installed Languages
iSetup has limitations where it cannot Load or Report if the number and type of installed languages and DB Charset are different between Central, Source and Target instances. If your case is so, there is a workaround. Download the extract zip file to desktop and unzip it. Edit AZ_Prevalidator_1.xml to match your target instance language and DB Charset. Zip it back and upload to iSetup repository. Now, you would be able to load to target instance. You must ensure that this would not corrupt data in DB. This is considered as customization and any data issue coming out this modification is not supported.
Custom Applications
Application data is the prerequisite for the most of the Application Object Library setups such as Menus, Responsibility, and Concurrent programs. iSetup does not migrate Custom Applications as of now. So, if you have created any custom application on source instance, please manually create them on the target instance before moving Application Object Library (AOL) data.
General Foundation Selection Set
Setup objects in General foundation selection set supports filtering i.e. ability to extract specific setups. Since most of the AOL setup data such as Menus, Responsibilities and Request Groups are shipped by Oracle itself, it does not make sense to migrate all of them to target instance since they would be available on target instance. Hence, it is strongly recommended to extract only those setup objects, which are edited/added, by you to target instance. This improves the performance. iSetup uses FNDLOAD (seed data loader) to migrate most of the AOL Setups. The default behavior of FNDLOAD is given below.
Case 1 – Shipped by Oracle (Seed Data)
FNDLOAD checks last_update_date and last_updated_by columns to update a record. If it is shipped by Oracle, the default owner of the record would be Oracle and it would skip these records, which are identical. So, it won’t change last_update_by or last_updated_date columns.
Case 2 – Shipped by Oracle and customized by you
If a record were customized in source instance, then it would update the record based on last_update_date column. If the last_update_date in the target were more recent, then FNDLOAD would not update the record. So, it won’t change last_update_by column. Otherwise, it would update the records with user who customized the records in source instance.
Case 3 – Created and maintained by customers
If a record were newly added/edited in source instance by you, then it would update the record based on last_update_date column. If the last_update_date of the record in the target were more recent, then FNDLOAD would not update the record. So, it won’t change last_update_by column. Otherwise, it would update the records with user who customized the records in source instance.
Profiles
HR: Business Group => Set the name of the Business Group for which you would like to extract data from source instance. After loading Business Group onto the target instance, make sure that this profile option is set appropriately.
HR: Security Profile => Set the name of the Business Group for which you would like to extract data from source instance. After loading Business Group onto the target instance, make sure that this profile option is set appropriately.
MO: Operating Unit => Set the Operating Unit name for which you would like to extract data from source instance. After loading Operating Unit onto the target instance, make sure that this profile option is set if required.
Navigation path to do the above setup:
System Administrator -> Profile -> System.
Query for the above profiles and set the values accordingly.
Descriptive & Key Flex Fields
You must compile and freeze the flex field values before extracting using iSetup.
Otherwise, it would result in partial migration of data. Please verify that all the data been extracted by reporting on your extract before loading to ensure data consistency.
You can load the KFF/DFF data to target instance even the structures in both source as well as target instances are different only in the below cases.
Case 1:
Source => Loc1 (Mandate), Loc2 (Mandate), Loc3, and Loc4
Target=> Loc1, Loc2, Loc3 (Mandate), Loc4, Loc5 and Loc6
If you provide values for Loc1 (Mandate), Loc2 (Mandate), Loc3, Loc4, then locations will be loaded to target instance without any issue. If you do not provide value for Loc3, then API will fail, as Loc3 is a mandatory field.
Case 2:
Source => Loc1 (Mandate), Loc2 (Mandate), Loc3, and Loc4
Target=> Loc1 (Mandate), Loc2
If you provide values for Loc1 (Mandate), Loc2 (Mandate), Loc3 and Loc4 and load data to target instance, API will fail as Loc3 and Loc4 are not there in target instance.
It is always recommended that KFF/DFF structure should be same for both source as well as target instances.
Concurrent Programs and Request Groups
Concurrent program API migrates the program definition(Definition + Parameters + Executable) only. It does not migrate physical executable files under APPL_TOP. Please use custom solution to migrate executable files. Load Concurrent Programs prior to loading Request Groups. Otherwise, associated concurrent program meta-data will not be moved even through the Request Group extract contains associated Concurrent Program definition.
Locations - Geographies
If you have any custom Geographies, iSetup does not have any API to migrate this setup. Enter them manually before loading Locations API.
Currencies Types
iSetup does not have API to migrate Currency types. Enter them manually on target instance after loading Currency API.
GL Fiscal Super user--> setup--> Currencies --> rates -- > types
Associating an Employee details to an User
The extract process does not capture employee details associated with users. So, after loading the employee data successfully on the target instance, you have to configure them again on target instance.
Accounting Setup
Make sure that all Accounting Setups that you wish to migrate are in status “Complete”. In progress or not-completed Accounting Setups would not be migrated successfully.
Note: Currently iSetup does not migrate Sub-Ledger Accounting methods (SLA). Oracle supports some default SLA methods such as Standard Accrual and Standard Cash. You may make use of these two. If you want to use your own SLA method then you need to manually create it on target instances because iSetup does not have API to migrate SLA. If a Primary Ledger associated with Secondary Ledgers using different Chart of Accounts, then mapping rules should be defined in the target instance manually. Mapping rule name should match with XML tag “SlCoaMappingName”. After that you would be able to load Accounting Setup to target instance.
Organization API - Product Foundation Selection Set
All Organizations which are defined in HR module will be extracted by this API. This API will not extract Inventory Organization, Business Group. To migrate Inventory Organization, you have to use Inventory Organization API under Discrete Mfg. and Distribution Selection Set. To extract Business Group, you should use Business Group API.
Inventory Organization API - Discrete Mfg & Distribution Selection Set
Inventory Organization API will extract Inventory Organization information only. You should use Inventory Parameters API to move parameters such as Accounting Information. Inventory Organization API Supports Update which means that you can update existing header level attributes of Inventory Organization on the target instance. Inventory Parameters API does not support update. To update Inventory Parameters, use Inventory Parameters Update API.
We have a known issue where Inventory Organization API migrates non process enabled organization only. If your inventory organization is process enabled, then you can migrate them by a simple workaround. Download the extract zip file to desktop and unzip it. Navigate to Organization XML and edit the XML tag <ProcessEnabledFlag>Y</ProcessEnabledFlag> to <ProcessEnabledFlag>N</ProcessEnabledFlag>. Zip it back the extract and upload to target instance. You can load the extract now. After successful completion of load, you can manually enable the flag through Form UI. We are working on this issue and update you once patch is released to metalink.
Freight Carriers API - Product Foundation Selection Set
Freight Carriers API in Product Foundation selection set requires Inventory Organization and Organization Parameters as prerequisite setup. These two APIs are available under Discrete Mfg. and Distribution Selection Set. Also,Freight Carriers API is available under Discrete Mfg and Distribution Selection Set with name Carriers, Methods, Carrier-ModeServ,Carrier-Org. So, use Discrete Mfg selection set to load Freight Carriers. In next rollup release Freight Carriers API would be removed from Product Foundation Selection Set.
Organization Structure Selection Set
It is highly recommended to set filter and extract and load data related to one Business Group at a time. For example, setup objects such as Locations, Legal Entities,Operating Units,Organizations and Organization Structure Versions support filter by Business Group. So, set the filter for a specific Business Group and then extract and load the data to target instance.
List of mandatory iSetup Fwk patches*
8352532:R12.AZ.A - 1OFF:12.0.6: Ignore invalid Java identifier or Unicode identifier characters from the extracted data
8424285:R12.AZ.A - 1OFF:12.0.6:Framework Support to validate records from details to master during load
7608712:R12.AZ.A - 1OFF:12.0.4:ISETUP DOES NOT MIGRATE SYSTEM PROFILE VALUES
List of mandatory API/functional patches*
8441573:R12.FND.A - 1OFF:12.0.4: FNDLOAD DOWNLOAD COMMAND IS INSERTING EXTRA SPACE AFTER A NEWLINE CHARACTER
7413966:R12.PER.A - MIGRATION ISSUES
8445446:R12.GL.A - Consolidated Patch for iSetup Fixes
7502698:R12.GL.A - Not able to Load Accounting Setup API Data to target instance.
Appendix_
How to read logs
·     Logs are very important to diagnose and troubleshoot iSetup issues. Logs contain both functional and technical errors.
·     To find the log, navigate to View Detail screens of Extracts/ Transforms/Loads/Standard/Comparison Reports and click on View Log button to view the log.
·     Generic Loader (FNDLOAD or Seed data loader) logs are not printed as a part of main log. To view actual log, you have to take the request_id specified in the concurrent log and search for the same in Forms Request Search Window in the instance where the request was launched.
·     Functional errors are mainly due to
o     Missing prerequisite data – You did not load one more perquisite API before loading the current API. Example, trying to load “Accounting Setup” without loading “Chart of Accounts” would result in this kind of error.
o     Business validation failure – Setup is incorrect as per business rule. Example, Start data cannot be greater than end date.
o     API does not support Update Records – If the there is a matching record in the target instance and If the API does not support update, then you would get this kind of errors.
o     You unselected Update Records while launching load - If the there is a matching record in the target instance and If you do not select Update Records, then you would get this kind of errors.
Example – business validation failure
o     VONAME = Branches PLSQL; KEY = BANKNAME = 'AIBC‘
o     BRANCHNAME = 'AIBC'
o     EXCEPTION = Please provide a unique combination of bank number, bank branch number, and country combination. The 020, 26042, KA combination already exists.
Example – business validation failure
o     Tokens: VONAME = Banks PLSQL
o     BANKNAME = 'OLD_ROYAL BANK OF MY INDIA'
o     EXCEPTION = End date cannot be earlier than the start date
Example – missing prerequisite data.
o     VONAME = Operating Unit; KEY = Name = 'CAN OU'
o     Group Name = 'Setup Business Group'
o     ; EXCEPTION = Message not found. Application: PER, Message Name: HR_ORG_SOB_NOT_FOUND (Set of books not found for ‘Setup Business Group’)
Example – technical or fwk error
o     OAException: System Error: Procedure at Step 40
o     Cause: The procedure has created an error at Step 40.
o     Action: Contact your system administrator quoting the procedure and Step 40.
Example – technical or fwk error
o     Number of installed languages on source and target does not match.
Edited by: Mugunthan on Apr 24, 2009 2:45 PM
Edited by: Mugunthan on Apr 29, 2009 10:31 AM
Edited by: Mugunthan on Apr 30, 2009 10:15 AM
Edited by: Mugunthan on Apr 30, 2009 1:22 PM
Edited by: Mugunthan on Apr 30, 2009 1:28 PM
Edited by: Mugunthan on May 13, 2009 1:01 PM

Mugunthan
Yes we have applied 11i.AZ.H.2. I am getting several errors still that we trying to resolve
One of them is
===========>>>
Uploading snapshot to central instance failed, with 3 different messages
Error: An invalid status '-1' was passed to fnd_concurrent.set_completion_status. The valid statuses are: 'NORMAL', 'WARNING', 'ERROR'FND     at oracle.apps.az.r12.util.XmlTransmorpher.<init>(XmlTransmorpher.java:301)
     at oracle.apps.az.r12.extractor.cpserver.APIExtractor.insertGenericSelectionSet(APIExtractor.java:231)
please assist.
regards
girish

Please wait for the group policy client - shutting down issues

Hi
I have issues with shutting down machines. When machine is connected to company's LAN everything works fine. However, if machine is connected to VPN - Juniper NC - 1 hour or more it always hangs when it is shutting down. When I shut down the machine
(verbose mode on), first stage is:
Please wait for the system Event Notification service.
This ends exactly
after 3 minutes. Next stage:
Please wait for the group policy client windows 7
...is never timed out (even after few hours). Machine never shuts down.
In Application logs there are always these 4 events when machine is unsuccessfully shutting down:
6005: The winlogon notification subscriber <Sens> is taking long time to handle the notification event (Logoff).
4627: The COM+ Event System timed out attempting to fire the Logoff method on event class {D5978650-5B9F-11D1-8DD2-00AA004ABD5E} for publisher and subscriber . The subscriber failed to respond within 180 seconds.
The display name of the subscription is "ISensLogon2". The HRESULT was 80010002.
6006: The winlogon notification subscriber <Sens> took 180 second(s) to handle the notification event (Logoff).
6005: The winlogon notification subscriber <GPClient> is taking long time to handle the notification event (Logoff).
Sens is timed out after 3 minutes while there is no 6006 event for GPClient and machine is stuck there for ages (Please wait for the group policy client
stage). I noticed in System logs that machine always hangs if there is this error
5783: The session setup to the Windows NT or Windows 2000 Domain Controller \\server for the domain X is not responsive. The current RPC call from Netlogon on \\machine to \\server has been cancelled.
I made a group policy log and below you can see part of GPSVC log when machine is unsuccessfully shutting down:
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Entering with event 0xe58
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Canceling pending calls
GPSVC(2d4.1cfc) 21:31:24:327 Client_CompleteNotificationCall: failed with 0x71a
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Cancelled pending calls
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(438.1a04) 21:31:24:327 Waiting for user group policy thread to terminate.
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Entering with event 0xe10
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Canceling pending calls
GPSVC(218.c88) 21:31:24:327 Client_CompleteNotificationCall: failed with 0x525
GPSVC(2d4.1cfc) 21:31:24:327 Client_CompleteNotificationCall: failed with 0x71a
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Cancelled pending calls
GPSVC(2d4.9c8) 21:31:24:327 CGPNotify::OnNotificationTriggered: Completenotification failed with 1317
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Entering with event 0xdcc
GPSVC(218.1054) 21:31:24:327 CGPNotify::UnregisterNotification: Entering with event 0x20cc
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(2d4.9c8) 21:31:24:327 CGPNotify::OnNotificationTriggered: Completenotification failed with 1317
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::UnregisterNotification: Entering with event 0xd90
GPSVC(218.1054) 21:31:24:327 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(2d4.1cfc) 21:31:24:327 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(2d4.1cfc) 21:31:24:342 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(218.d48) 21:31:24:342 Client_CompleteNotificationCall: failed with 0x525
GPSVC(218.d48) 21:31:24:342 CGPNotify::OnNotificationTriggered: Completenotification failed with 1317
GPSVC(218.1c04) 21:31:24:327 Client_CompleteNotificationCall: failed with 0x525
GPSVC(218.1c04) 21:31:24:342 CGPNotify::OnNotificationTriggered: Completenotification failed with 1317
GPSVC(218.1054) 21:31:24:342 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(218.1054) 21:31:24:342 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(218.1054) 21:31:24:342 CGPNotify::UnregisterNotification: Entering with event 0x2100
GPSVC(218.1054) 21:31:24:342 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(218.1054) 21:31:24:342 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(218.1054) 21:31:24:342 CGPNotify::UnregisterNotification: Entering with event 0x1264
GPSVC(218.1054) 21:31:24:342 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(218.1054) 21:31:24:342 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
I tried with signing out from VPN before shutting down machine, I even switched off WiFi but machine still hung. If i tried to get GP results before shutting down machine it takes ages and it is stuck in "Getting the user name" stage.
Gpupdate /force never updates policy (It stops at Updating Policy...). I tired with installing different hotfixes which did not resolve the issue. I never have any
issues with logging in, no GP scripts are applied when user is logging off or on, no roaming profiles. The only issue is when machine needs to be shut down.
I excluded 1 machine from GP and left it on VPN for a few hours, several times. It always shuts down successfully. I applied GP back one by one and the one which is presumably causing an issue is Avecto which adds admin rights when VPN application
starts (event 100):
Process started with admin rights added to token.
Command Line: "C:\Users\User\AppData\Roaming\Juniper Networks\Setup Client\JuniperSetupClient.exe"
Process Id: 5540
Parent Process Id: 2252
Policy: EA-PrivilegeGuardSettings.UK Policy
Application Group: EA-PrivilegeGuardSettings.Applications Granted Admin Rights
Reason: <None>
File Name: c:\users\User\appdata\roaming\juniper networks\setup client\junipersetupclient.exe
Hash: 27D8463A913A802E555AEEF45717B122249AA993
Certificate: Juniper Networks, Inc.
Description: Juniper Setup Client
Application Type: exe
Product Name: Juniper Setup Client
Product Code: <None>
Upgrade Code: <None>
Product Version: 8.0.6.48695
I guess there is a DNS issues when machine is on VPN which leads that GP cannot be applied / updated. Not sure if or why Avecto would have an impact on this. When machine is trying to shut down it still somehow thinks it is connected to DC. What
I also noticed are several explorer crashes while machine is on VPN.
Does anyone have same issues? All machines are Dell with Juniper NC (VPN).
Thanks,

Hi,
According to event log, Winlogon process takes a long time to handle logoff event. That's to say winlogon process is waiting for response to logoff.
According to your description after, this problem is most probably caused by Avecto. You can try to disable or uninstall it temporarily for test.
To make further troubleshoot with this problem, you can try to use WPT (Windows Performance Tool) to make troubleshoot.
http://blogs.technet.com/b/askpfeplat/archive/2013/03/22/troubleshooting-windows-performance-issues-using-the-windows-performance-recorder.aspx
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

What are the privileges required for explain plan in Oracle 11g database

I am facing the problem in doing a explain plan for a view in Oracle 11g database. When I select from the view like this:
select * from zonewisearpu
It does a select on the view but when I give explain plan like
explain plan for
select * from zonewisearpu
I get the error like insufficient privileges.
Please let me know if things are getting missed out as I guess system level privileges are required to execute this.
I hope, my question is clear.
It’s a humble request to revert urgently if possible as I need to complete a task and do not know the way out.
Regards

975148 wrote:
Thanks for your reply. I have found out that an explain plan is possible on the user's own objects and is not possible on the granted objects from a different schema. For eg, if I do a explain plan on a view querying on tables from a different view, it would not allow the explain plan to proceed. This could mean that explain plan needs different privileges than just a select.
Requesting for a revert to this.
Here is a simple test case that I have perfomed
SQL> create user test1 identified by test1;
User created.
SQL> create user test2 identified by test1;
User created.
SQL> grant connect, resource to test1,test2;
Grant succeeded.
SQL> create table test1.tab1 as select * from v$session;
Table created.
SQL> connect test2/test1
Conencted.
SQL> show user
USER is "TEST2"
SQL>
SQL> explain plan for
2 select sid,serial#,status,username from test1.tab1 where username<> '';
Explained.
SQL>
So, as can be seen I am able to do a explain plan from user test2 for tables belong to user test1.
As far as privileges are concerned, following is the list
SQL> select * from dba_role_privs where grantee in ('TEST1','TEST2') order by 1;
GRANTEE                        GRANTED_ROLE                   ADM DEF
TEST1                          CONNECT                        NO YES
TEST1                          RESOURCE                       NO YES
TEST2                          CONNECT                        NO YES
TEST2                          RESOURCE                       NO YES
SQL>
SQL> select grantee,owner,table_name,privilege from dba_tab_privs where grantee in ('TEST1','TEST2') order by 1;
GRANTEE    OWNER      TABLE_NAME           PRIVILEGE
TEST2      TEST1      TAB1                 SELECT
SQL>
SQL> select * from dba_sys_privs where grantee in ('TEST1','TEST2') order by 1;
GRANTEE    PRIVILEGE                      ADM
TEST1      UNLIMITED TABLESPACE           NO
TEST2      UNLIMITED TABLESPACE           NO
SQL>

What are the minimum db user privileges required for CDC?

What are the minimum privileges required for the source data server user in order to to successfully implement CDC
Currently I'm getting an "Insufficient privileges" error when trying to start a CDC journal on a model. The error is happening on the step that creates a trigger on the table in the source schema.
Here's the situation:
The data server uses the user "ODI_TEMP" for its connection. ODI_TEMP has been granted select privileges on the desired tables in the source schema. When starting the CDC journal on the model for the source schema, ODI tries to create a trigger on the source tables. This fails since the ODI_TEMP user can't create triggers on anything outside of it's own schema. For obvious fundamental security reasons, we cannot give the ODI_TEMP user the CREATE ANY TRIGGER system privilege on the data source.
Journalizing is set up using JKM Oracle Consistent. ODI is 11g, DB is 11g.

Hi,
You can go for this
Grant CREATE ANY TRIGGER system privilege to ODI_TMP
Start the Journal , it will create triggers in ODI_TMP schema for the tables present in your source schema.
Now revoke CREATE ANY TRIGGER system privilege from ODI_TMP.
It will continue to work .. only when you are restarting the journal (due to adding or removing some tables in CDC) , you will be requiring CREATE ANY TRIGGER privilege.
Thanks,
Sutirtha

ISE 1.2 Patch 7 ERS API problem updating some endpoints with a new group

Hi,
I have a php library that i have implemented most of the ers api functions with curl requests, and it works fine, i can get all endpoints, search for a specific endpoint, delete endpoints and to some degree i can modify endpoints, but not all endpoints it seems. For some reason when i use my function on some endpoints, the static endpoint group assigment does not get updated, and the response from the ers api is just empty, whereas when it goes good, i get a list of the attributes that were updated.
Is there some specific requirements for which information has to be sent using the update_endpoint function in the ers api ? The examples have all information in every request, however what is actually needed in the request?
Jan

Have now tested by sending all parameters, even though i only want to change group or description, and it works.

Permissions required for an user to create a View in Oracle 10.2.0.1.0

Hi,
I am facing one serious issue with Oacle 10.2.0.1.0.
I have an user (Atlas) created with below permissions.
grant connect to atlas;
grant resource to atlas;
grant create public synonym to atlas;
grant select any dictionary to atlas;
grant query rewrite to atlas;
I will create my database schema on this user Atlas. All my scripts are executing properly with Oracle 9i and 10g version 10.1.0.2.0. But when it comes to Oracle 10g version 10.2.0.1.0 the views creation is throwing an error saying that Insufficient Priviliges.
I didn't get why this error is coming.
What previliges does an user should require for creating a view in Oracle 10.2.0.1.0 version?
I have installed Enterprise version of Oracle 10.2.0.1.0. Please suggest me with this.
Thanks
Rao

CREATE VIEW was taken away from connect or resouce in 10.2.x. It has to be explicity granted... Not sure what this has to do with XML per-se :)

UWL:User has no RFC authorization for function group SDIFRUNTIME .

Hi,
In portal, while registering the system in UWL , I am getting this error:
(Connector) :com.sap.mw.jco.JCO$Exception:User <userid> has no RFC authorization for function group SDIFRUNTIME .
I have given the permission to the user id as owner for the system, with which I am logged in, and registering the system.
It is also confirmed, that in the backend, the same user has authorization for the said RFC.
Please help as it is urgent.
Thanks,
Sonali
Edited by: Sonali M S on May 30, 2008 6:32 AM

Hi Sonali,
If your component is a webdynpro component, back end system is accessed via a logical system / JCO Destination. User id ( Lets say JCOUSER) and password is given for accessing backend via this JCO connection. This user id is different from particular user's backend user id. Verify whether JCOUSER has required authorizations in backend.
I hope it helps.
Regards,
Uday.

GRANT CONNECT on Endpoint required for availaibity groups?

Similar Messages

Maybe you are looking for