IIS Anonymous User using Plumtree Domain Account

Is it good or accepted practice to create a Plumtree domain account and have the remote portlets (web apps) use this username / pwd instead of the anonymous user (IUSR_MACHINE) accounts? Then we would only need to grant acess to the Plumtree domain account on file shares, etc.

The anonymous user for IIS should not be a domain user. It should be a local account and given minimal rights.
Michael [email protected]

Similar Messages

TS5223 can I have multiple users use one apple account?

can I have multiple users use one apple account?

I interpreted his post to mean that he meant multiple human users, not multiple devices. Hopefully, he'll clarify.

Unable to login to Server 2003 using adminitrator domain account

We were not able to login to a domain server with server 2003 using a Domain Admin account. We were able to log in using a Local Admin account. We tried dropping and re-adding the server to the domain, but still had the same issue. After logging in using
the Local Admin account we created a new SID using sysinternals. This seemed to work, but the next day after a server reboot, we encountered that issue again. Any ideas why this is happening and why creating a new SID seems to fix the issue until a reboot?

Try adding Domain Admins to local administrators group.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

2 iPad users using one iTunes account. how best to manage this?

My wife and I both have ipads, ipods, and iphones. We want to use one iTunes account but it has proven to be very frustrating. any advice?

as far as we can tell, iTunes has no concept that this is iPad1 and this is iPad2. The only to manage sharing 80% same content but diferentiating on 20% is to manage EVERYTHING manually. With lots of apps, movies, and 80GBs of songs, this is ridiculous. We can't be the only couple who want one account but lots of different devices with different desired items on them.
Some syncs can't be done manually so we have to go back and delete or add after the fact. Giant waste of time.
iTunes on the iPad is a bit of a joke. it doesn't seem to have any relationship to iTunes on our primary computer. It doesn't actually function the same way (doesn't actually store downloaded items) which leads to iTunes confusion, frustration, and sometimes duplicate buying.
I'm thinking I'll just wait for the cloud service but given apple's record with iTunes, I'm a little doubtful about that. Appreciate the response.

Trying to access SMB share, can read but not write, I use the domain account to autenticate and domain account has access to the share. its a samba domain and im a Windows Admin by trade.

I have two I Mac's Intel i7 models.
I have some problems getting them to write files to SMB shares.
The domain user account I use when requested to enter when i first try to connect to the share seems to go though without a problem and it presents me with a list of mounts (shares) I select one and the folder opens, I can read files and copy them but I cant write to any of the folders.
I have also mounted the network locatiosn to a folder from the terminal while also specifying a user name and password to use but this also doesnt allow the specified user account to write data to the share.
I have confirmed the user account can write to the share by having the user do so from a windows box.
any help from any of you mac guys would be great!!!!
Im a windows fan boy / Windows Server based Network Administrator and am slowly becomming a fan of your macs (mainly due to the Unix terminal access letting me realise there is more control to be had than most haters would lead you to believe).
Peace Out

I should add that I originally formatted the problematic drive for FAT32 from the Mac, but then the WinXP computer couldn't see the drive when I plugged it in directly via USB. That's why I went with Seagate's utility to format it.

Multiple users using same email account

I'm the computer tech for a volunteer fire department. We have multiple officers using this computer and each one wants access to the same email account under their personal user accounts. Can this be done?

You just need to "move" the profile to a common access location.
http://kb.mozillazine.org/Moving_your_profile_folder_-_Thunderbird

Which ipaddress which user use in domain enviroment without sccm

How to know which user which ipaddress use in dmain environment without sccm if any command available or if any free software.
Ananda

Hi lyncLab,
You may take a look at this thread:
How to find user's IP on domain network ???
Besides, if you have PC's hosts name, then you may take use of NSlookup to find the IP address:
Nslookup
Best regards
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Is it possible to use super domain account in the server to remove the file's irm setting when I upload a irm-enabled file?

We often need to send files downloaded from irm-enabled libraries of sharepoint to our clients who have no access to our rms server enviroment via e-mail or OA. Now we have to remove these files' irm setting mannually using the account who
have overall control rights to this files, and then send these files to our cilent via email or OA (Upload to OA and use OA's delivery system). I want to know is it possible to automatically remove irm setting when uploading files to OA.

Hello Tolab,
I'd suggest asking SharePoint specific questions on the
SharePoint 2013 - Development and Programming forum instead.

Can we assign account for anonymous user

Hi,
Is this possible to assign account for the anonymous user using idoc script or by any rule concept.??
Thanks,
Abhijit

There is no straightforward out of the box way to do this.
Accounts are instrinsically linked directly to a user and not a role. There is a DefaultNetworkAccounts config variable but this only applies to users who have logged in.
Two options are
1) a Java filter on 'alterUserCredentials' there is an example of this in the HowToComponents SecurityFilter
2) User Credential Mapping (Not used this on 11g)
Go to Administration > Credential Maps
Create a new map with a Map Identifier of myMap
Add the following lines to the map
|#all|, %%
@|#all|, @%%
guest, @your_account(R)
Add the following to config.cfg and restart
ExternalCredentialsMap=myMap
This should pull through all other existing roles/accounts and for guests it should give them R permissions to your_account
Not tested it but from memory this should work
Enjoy
Tim

Create DSN in admin tool using domain account

Hi. We're moving away from SQL authentication and using
domain accounts for SQL Server authentication. How does one create
a data source in the admin site to use a domain account? Is this
possible? We're using ColdFusion 6.1. Thanks.

We've tried that and get the following error,
Connection verification failed for data source: myDataSource
[]java.sql.SQLException: [Macromedia][SQLServer JDBC
Driver][SQLServer]Login failed for user 'MYDOMAIN\domainAccount'.
The root cause was that: java.sql.SQLException:
[Macromedia][SQLServer JDBC Driver][SQLServer]Login failed for user
'MYDOMAIN\domainAccount'.
The account exists on the SQL Server 2005 database and has
read/write privileges.

Is it possible for multiple users to use a "generic" account simultaneously without screen sharing?

Hey and thanks for checking out the thread.
I am wondering if it is possible to have users use a generic account at the same time without any sort of screen sharing.
I have set up a generic user account (for example useraccount, password 1234) for users to use in the time before I can set up a custom user name for them. However, I have run into some issues with this.
When multiple users log on using this generic account, their applications seem to be shared on each screen. In the room with multiple Mac workstations, if someone starts working on Photoshop, Photoshop will open on every one elses screen who is logged on under that generic account.
Is it possible for users to log on using a generic network account and have their own isolated work environment or is this sort of sharing a feature? I am new to Mac servers and am not sure.
Thanks for reading the thread.

That shared-account approach seems impractical for the various reasons you've identified, as well as the inevitable issue of cleaning up the detritus that'll inevitably build up in a shared account, and for the lack of accountability for activities occuring under the shared account for both auditing and security, and sharing directories would tend to introduce obscure conflicts around which-file-version-wins file updates when the same file is used in several places, and would probably be contrary to any per-user application software licensing agreements that might be involved.
Put another way, get unique accounts created for folks, and work toward the ability to create accounts for arriving folks, and — if it's applicable here — talk to management about getting any per-user software licensing issues sorted out, whether that's having spare copies purchased and ahead or some advanced notice on accounts, or establishing group software licensing where that's available.
AFAIK, there are tools around which can automate account creation, too. Either generic, a tool such as Passenger, or it's certainly feasible to script the account creation sequence.
Trying this shared-access generic-account approach just looks like it can create more work and more hassles and more effort to me...

Add list item using anonymous user in public website of shareopint 2013 office 365

Can any body know the solution to over come of following error while add list item using anonymous user using CSOM in shareopint 2013 office 365 public website.
I have tried following solution to narrow down the error from "Access permission"
http://sharepointtaproom.com/2014/08/28/anonymous-api-access-for-office-365-public-sites/#comment-2304

Try below:
http://www.codeproject.com/Articles/785099/Publish-a-Form-for-Anonymous-Users-on-a-Public-Sit
http://blogs.technet.com/b/sharepointdevelopersupport/archive/2013/06/13/how-to-allow-anonymous-users-to-add-items-to-sharepoint-list-using-client-object-model.aspx
// Allows AddItem operation using anonymous access
private
static voidAllowAnonAccess(){
Console.WriteLine("Enabling Anonymous access....");
SPWebApplication webApp =
SPWebApplication.Lookup(new
Uri(webAppUrl));
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Remove(typeof(Microsoft.SharePoint.SPList),
"GetItems");
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Remove(typeof(Microsoft.SharePoint.SPList),
"AddItem");
            webApp.Update();
Console.WriteLine("Enabled Anonymous access!");
// Revokes Add/Get Item operation using anonymous access
private static
voidRemoveAnonAccess(){
Console.WriteLine("Disabling Anonymous access....");
SPWebApplication webApp =
SPWebApplication.Lookup(new
Uri(webAppUrl));
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Add(typeof(Microsoft.SharePoint.SPList),
"GetItems");
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Add(typeof(Microsoft.SharePoint.SPList),
"AddItem");
            webApp.Update();
Console.WriteLine("Disabled Anonymous access!");
http://www.fiechter.eu/Blog/Post/12/Create-a-survey-for-anonymous-users-on-Office-365
If this helped you resolve your issue, please mark it Answered

Printing as "anonymous" user

Hi
I am trying to enable printing for "nearly anonymous" users using integrated mode (tcc on windows clients).
Users authenticate using a token that is saved in thair profile.xml but the userprofile allowes multiple login.
This works as log as the profile.xml is restored before each login.
The only thing that is not working is printing. :-/
I built a test-user that has this token AND a password to do some tests:
As long as there is only one session allowed for this user printig works using webtop and using tcc client.
(called with -application "..." to start the application directly)
When I set this user to allow multiple logins printing still works when I am logged in using webtop.
Starting the application using tcc I can not print.
Does anyone have further information about what is needed to print?
Could this be an authentication issue as the profile.xml is changed (token is deleted) when I log in as long as multiple logins
for this user are allowed.
Any hints appreciated.
Regards
Sebastian Ries

Most likely, the credential manager has the domain admin credentials for the connection to the server.
Since you did not include the necessary information, I will make some assumptions and you can correct me.
You have a client machine running Windows 7. The print server target is Server 2008 or greater. You have a queue view open on the client for the print share which is where you see both names.
If my cred manager postulation is correct, the print job is created with the user account information. The queue view is a representation of the local print job when Rendering on the Client is enabled, and the job when it goes to the print server.
When you see the regular user name, the print job is on the local machine. After it is copied over to the server, it has the domain security token so you see that user name.
check
Control Panel\All Control Panel Items\Credential Manager
Alan Morris Windows Printing Team

SQL Server Service Account - Domain Account - WMI Provider Error - 0x80092004

Hi,
if I try to use an domain account for SQL service start using SQL configuration Manager I receive the error
WMI Provider Error - 0x80092004
in Popup Window and in Eventlog 5 Error Events from Source MSSQLSERVER:
26014:
Unable to load user-specified certificate [Cert Hash(sha1) "BA78B5DBF93CCD7EFA1860C99B0D6141D480199A"]. The server will not accept a connection. You should verify that the certificate is correctly installed. See "Configuring Certificate for
Use by SSL" in Books Online.
17182:
TDSSNIClient initialization failed with error 0x80092004, status code 0x80. Reason: Unable to initialize SSL support. Cannot find object or property. "
17182:
TDSSNIClient initialization failed with error 0x80092004, status code 0x1. Reason: Initialization failed with an infrastructure error. Check for previous errors. Cannot find object or property.
17826:
Could not start the network library because of an internal error in the network library. To determine the cause, review the errors immediately preceding this one in the error log.
17120:
SQL Server could not spawn FRunCommunicationsManager thread. Check the SQL Server error log and the Windows event logs for information about possible related problems.
After I put the account in local administrator group the service starts up.
I want to use the lowest privileges. Do I really need the SQL server service account in local administrator group? How to fix the error?
thanks

Hi baschuel,
It is recommended to run SQL Server service by using the lowest possible user rights and it is supported to use a domain account instead of an account from local Administrators group to configure SQL Server service. According to your error messages, the
issue could be due to that the incorrect certificate is used, or the domain account has no access to the Crypto folder(C:\ProgramData\Microsoft\Crypto). To troubleshoot the issue, you could follow the two solutions below.
1.Import the correct certificate following the steps in the article:
http://windows.microsoft.com/en-hk/windows/import-export-certificates-private-keys#1TC=windows-7
2.Grant the domain account full access to the Crypto folder.
Regards,
Michelle Li
If you have any feedback on our support, please click
here.

Domain Account Can RDP into Workgroup Computer

Hi,<o:p></o:p>
Domain Accounts are able to RDP into WorkGroup computer which is not part of the domain. The workgroup machine is in AWS.<o:p></o:p>
This happens when the domain username and its password copied as local account in the workgroup computer. <o:p></o:p>
Domain Name: DName<o:p></o:p>
Name of the computer that is in the workgroup and not in the domain: system1<o:p></o:p>
Domain Account: DName\User1 Pwd: abcd<o:p></o:p>
Local System Account: system1\User1 Pwd: abcd<o:p></o:p>
As long as the domain account and Local System Account have the same name and same password we are able to RPD using the domain account (DName\User1).
If the password is different, this does not work.<o:p></o:p>
After RDP, when i run the whoami command the user shows up as system1\User1.<o:p></o:p>
Any info on why this would happen and how to fix the same will be highly helpful.<o:p></o:p>
Thanks in advance<o:p></o:p>

Hi there,
It sounds like you're still signing in as the local user, not the domain user. Even though you're specifying a domain name, the computer isn't associated with that domain. It will try to log in using the local account name, which as you mentioned, if the
usernames and passwords the same, will work.
Check in computer management to see if you have local users listed in there.
Why not add the computer to the domain?

IIS Anonymous User using Plumtree Domain Account

Similar Messages

Maybe you are looking for