Intel vPro AMT integration with SCCM 2012R2 - Issues with SCCM finding the "ConfigMgr AMT Web Server Certificate"

Good evening all,
I'm attempting to get Intel SCS integrated with SCCM 2012 R2 and I have both sides working, doing what they do best, however, I have issues when I try to mate the two. I started with a single server for the site and then tackled the Intel side with success,
then I added another site server to run the Out of Band service point and Enrollment point. Up until this point I've had no issues with certificate templates, or issuance of those certs.
I have re-read the TechNet documents a few times regarding the PKI setup, some Intel documentation and three step by step articles and non of them seem to differ so I can't understand why I'm unable to choose my "ConfigMgr AMT Web Server Certificate"
when configuring the Out of Band Management Component Properties page. The "AMT web server certificate template:" dialog shows my CA FQDN and CA name, but the certificate template list is always blank. I've tried this from both the remote
and local ConfigMgr consoles. The site servers have rights on the CA to manage and issue certs, is there something I'm missing that isn't in the documentation or buried somewhere that I missed? Is there a Application policy that should be on the
cert that isn't mentioned anywhere?
Thanks in advance!
Tesfaye

Hi Joyce,
Thanks for responding. I pretty much have this error repeating in the log file and not much else:
[28, PID:13388][05/21/2014 15:17:15] :System.DirectoryServices.DirectoryServicesCOMException\r\nThere is no such object on the server.
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindAll()
   at Microsoft.ConfigurationManagement.AdminConsole.Common.ADUtils.EnumEnterpriseCACertificateTemplates(String domainEntryName, String certAuthorityFqdn, Boolean isServerAuthen)\r\n
I will look into this, but another hint would be greatly appreciated!
Thanks,
Tesfaye

Similar Messages

All my photos in the iphoto have disappeared, not sure if this related to any iphoto upgrade or other issue, tried to find the photos through the finder (JPG or photo) but failed, can you help me to get back my photos please?

All my photos in the iphoto have disappeared, not sure if this related to any iphoto upgrade or other issue, tried to find the photos through the finder (JPG or photo) but failed, can you help me to get back my photos please?

Help us to help you: There are 9 different versions of iPhoto and they run on seven different versions of the Operating System. The tricks and tips for dealing with issues vary from version to version and OS to OS. So before anyone can help, they need information to work with. Basic stuff:
- What version of iPhoto.
- What version of the Operating System.
- Details. What were you doing when the problem arose?
- Did it ever work properly?
- Are there error messages?
- What steps have you tried already to solve the issue.
Anything else you can think of that might allow someone else to understand your issue.
With this kind of information somebody can develop a starting point for troubleshooting the issue.
Posts that consist of "iPhoto doesn't work. Help" or "iPhoto won't print" or "Suddenly I have no photos!!!!!!!!!!" mean that any helper is simply guessing. More information means you get better assistance. (And no, more exclamation marks do not get help faster or make your issue seem urgent. They just make it seem like you have a stuck key )

Intel vPRO / AMT processor detection using SCCM.

Hi All,
I have an Intel consultant hopefully visiting me soon to discuss the benefits of activiating Vpro/AMT/OOB management in my infrastucture.
At the moment i have not got PKI linked in with SCCM, but its on its way as soon the team responsible have some time.
Anyway, the consultant has asked me to gather a report using SCCM of all the vPRO Cpus that we have, Model Numbers and AMT versions..... Now ive been looking at this for a couple hours and i cant see how i can easily create sucha report or even if
its possible.. multiple reports perhaps and it wont be a quick task seeing as my skills at creating custom reports are extremely minimal.
I have managed to create collections put even though the ';AMT Version' column is visbile it does not get populated.
I have seen elsewhere that in order to accomplish this i should have OOB Role installed? can this role be installed without PKI ?
There is a tool that intel have that can be distributed via sccm and can be used to query systems for their AMT details, but our infrastucture is too complex and seperated for this:
https://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=21144&keyword=%22SCS%22&lang=eng
Many thanks in advance for any help...

Since no one has answer this post, I recommend opening a support case with CSS as they can work with you to solve this problem.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Exchange Integration with MSX-A on a Windows 2003 Server

Hi
We try to integrate Microsoft Exchange (Version 2003 SP1) into SAP Enterprise Portal 6.0 SR1. The MSX-A components are installed on the OWA System, a different Windows 2003 System with Outlook XP (SP3) on it.
The error displayed in the Calendar iView on the Portal:
"An internal error occurred while generating the XML from the MSX-A component"
From the "SAP EP Test Exchange Transport Setup" Tool an error occures on the "Data Retrieval" Test:
"An error occurred retrieving the data."
and in detail:
MAPI_E_LOGON_FAILED(80040111)
MS KBase http://support.microsoft.com/kb/181739/en-us didn't help. To resolution 3: Policy "Log on Locally" on a Windows 2003 doesn't exist anymore (?). "Deny Log on Locally" isn't given to relevant groups.
Thanks and best regards
Nicolaj

hi All
i am illustrating the process of integration the central notes to be referred and constraints .hope this definitely helps you please do not forget to give full points for this effort
with regards
subrato kundu
Process
Microsoft outlook Integration With SAP Enterprise Portal 6.0
(Process description)
These documents describe the entire process of integrating Exchange server with enterprise portal server to leverage the usage of lotus notes within the portal framework.
Step1: Create a System
o Choose System AdministrationSystem configurationSystem LandscapePortal ContentContent Provided by SAP. Right click on collaboration and then choose New From ParSystem.
o Select com.sap.netweaver.col.app.gw and choose next.
o Select a server (Microsoft Exchange server) and then choose next.
o Enter the System Name and ID (for ex Exchange) and choose next and then finish.
o Enter System Aliases by choosing system Alias from the display drown list.
o Enter the system Alias in the alias field and choose add and then save.
Step II: Create E-Mail Transport
 The email transport defines the SMTP server and other configuration required for sending e-mails. To configure an e-mail transport choose
 System AdministrationSystem ConfigurationKnowledge ManagementCollaborationGroupWare TransportsMail Transport
 SMTP Sever: The address of the SMTPServer for sending e-mails
 Sent Messages: You specify the folder on the server where the sent e-mail is to be store: -Sent Items on Microsoft Exchange Server.
 System Alias name: Alias that was defined for the groupware server in system configuration.
Step III: Check E-Mailing Service
This is a global service that is required for sending e-mails and which can be located by choosing System AdministrationSystem configurationKnowledge ManagementContent ManagementGlobal servicesMailing Service. This service needs to be active and an email transport must already have been created.
Microsoft Exchange Transports
The overall transport consists of two parts: MSX-J on the portal server and the MSX-A on the Exchange Server or a machine near to the Exchange Server.
MSX-J is the java part that runs on the portal server is deployed automatically on the portal server during installation, and implements the groupware API.It uses the Groupware APIs and repository development kit.
MSX-A is the active server page and sap exchange connector.dll running on a n iis server with Microsoft Collaboration data objects (CDO) and in the same domain as the exchange server or in a trusting domain .The ASP and DLL are Collectively CALLED MSX-A and is installed as part of the Outlook Installation. This needs to be installed on every IIS SERVER dedicated to the MS Exchange Server
 The Process flow is
1.TheMSX_J transport makes an HTTP(s) call to the MSX_A running on the IIS.
2.Microsoft Internet Information Server (IIS) uses Basic Authentication to authenticate user based on NT user/password against the Microsoft Exchange Server.
3.CDO uses the authentication token and fetches the data.
4.MSX-A converts the data into XMl and returns it to MSX-J
Installation of MSXA Components
You have to carry out these steps for every IIS that accesses the exchange server or the Outlook WEB Access 5.5 SP Server in the system landescape:
1.Locate the MSX-A component shipped with Exchange transport.
The components can be found in<irj>\root\WEB-INF\PORTAL\PORTALAPPS\com.sap.netweaver.coll.appgw\WEB INF\external\Exchange.
2 Locate an IIS that is in the same domain as the Exchange Server or in a trusted domain.
3.Create a folder on the IIS for example,c:\SAPExchangeTransport.
4.Copy the MSX-A Components to the folder you just created.
5.Register the DLL by using command regsrvr32 in the command prompt for example c:\winnt\sysytem32\regsvr32.exe c:\SAPExchangeTransport\SapExchangeConnector.dll
6.Create a new Iis Website or if using Outlook Web Access 5.5 sp4 create a virtual directory
Since most of configuration errors arise in the setup and configuration of the MSX-A components a separate test application is shipped with the connectivity, which allows you to check that the setup is correct.
1.locate SAPPXchTest.exe which is shipped with the exchange transports.The components can be found at <irj>\root\portalapps\com.sap.netweaver.coll.appl.gw\external\exchange.
2 copy the executable file to the machine on which the MSX-A component has been deployed.
3.Test the CDO version by launching the executable file on the machine on which msx-a was deployed.Choose Test CDO-Version .You should receive a success message .if you recive an error message follow the instructions given
4Test data retrieval by launching the executable file on the machine on which MSX-A was deployed choose TestData Retrieval Fill in necessary fields you should receive a success message but if you receive an error message follow the instructions given
5.Choose Save Results
6.open the log file indicted by the message
Notes
0000801234 Additional attachment in room created appointments
0000788151 Post Installation Steps for Groupware after an upgrade
0000763062 Problem creating an appointment with attachment
0000738965 E-mail address is mandatory for Groupware Integration
0000736644 Mandatory Steps for MS Exchange Integration
0000736541 Support information for MS Exchange Integration
0000732911 Integrating Outlook Web Access in Enterprise Portal 6.0
0000712902 SSO to Outlook web access using user/password does not work
Constraints
Constraints of Microsoft Exchange Connectivity
 The Microsoft Exchange transport currently only support items with types appointment and meeting request .Other types such as discussion and not currently not supported.
 Deleting an instance of a recurring appointment affects only that particular instance
 Calendar items in personal folder are not supported. Users can only view and modify items located on the exchange server from the iviews
 Public folders on the exchange server are not supported
 Calendar items are delivered as such if sent to recipients within the intranet .If the recipients is in different domain than the sender ,the format in which the items are delivered depends on the server responsible for sending the item in question

Exchange 2013 MB/CAS integration with legacy Exchange 2007 CAS/MB/Trans server

Hi All,
I have an existing running Exchange 2007 SP3 RU13 server acting as MB,CAS,Transport using a Barracuda SPAM for SMTP (MX Record is assigned to here), and a TMG2010 server performing all ActiveSync, Outlook Anywhere, and OWA connectivity.
I have built a new Exchange 2013 SP1 server that will (for the meantime) act as a MB & CAS server only.
I successfully migrated a testuser mailbox to the new EX2013 server from the EX2007 server. The problem is that once migrated, OWA and Outlook can't access the mailbox.
OWA form our URL gives the message: Outlook Web Access is currently unavailable. If the problem continues, contact technical support for your organization and tell them the following: No Client Access servers of the appropriate version can be accessed from
the Internet
If I run OWA from the EX2013 URL it works ok, but not for MBs on the EX2007 server.
I tested this configuration in a VM lab and it worked ok. All I had to do was move the mailbox, then run Outlook. Outlook automatically found the new server and opened the MB.
Basically what I need to do is move all our existing MBs from the old 2007 server to the new 2013 server. I want to continue to use the exisiting transport/CAS/EDGE services on 2007 without having to rebuild both the internal and external comunications
infrastructure at the present time.
How can I get the EX2013 server to act as the MB server for the EX2007 communications infrastructure?

Hi,
Please try to create a new user on Exchange 2013, and send/receive email via both Outlook and OWA to test whether the Exchange 2013 mail flow well.
If Exchange 2013 works well, please try to bypass the TMG on Exchange 2007 for a little while for testing.
Additionally, we can use CAS 2013 URL to proxy/redirect previous CAS, or publish both CAS 2007 and CAS 2013 to be internet facing server with separate URLs, as Ed suggested.
Thanks
Mavis Huang
TechNet Community Support

Anyone with issues did you find the plastic film?

If you had heat problems with your MacBook or any odd stuff, did you find the thin clear film over the vents, if so did it fix your problems once removed?
R

not with mine and my friend one (white).
If there is any, then it should be at least help the air flow and circulate better and that is mean lower temp.
I believe that is a minor accident and not a widespread mistake during assembly line in china. Some casing that still covered with plastic film is passing through their quality control line without being noticed.

Problem with NAT? can get to web server internally but not externally

We are trying to setup our helpdesk software website so external users
can access it. However, we have been unsuccessful. We don't have any
issues accessing it internally from our 10.1.1.X LAN
We have had our ISP setup a public DNS "A" record of
customerservice.amerinet-gpo.com which resolves to 198.88.234.40 and that
appears to be working.
Next we added a NAT to our Firewall to take 198.88.234.40 traffic and put
it to the local IP of 10.1.1.23 which is our local address for the
webserver running the helpdesk software.
We also made sure that BM filters are allowing traffic on ports 80 and
443 to the local IP as well.
We have 4 other webservers (on a separate servers than our helpdesk
software website) that are exposed to the outside in this same manner and
all work fine.
The helpdesk website is on Windows 2003 server SP1 running IIS 6.0. Our
firewall server is NetWare 6 SP5 and BM 3.7 SP3.
I have tried to just telnet to the public IP of 198.88.234.40 on port 80
and it times out. I can't understand why, and have checked my entries on
BM and even deleted and re did them 3 times to make sure I didn't make a
mistake. I even have another web server on that block NAT'd the same way
and it works (198.88.234.36), if you telnet to it on port 80 it goes
right away.
What else can I try? Any insight would be greatly appreciated!
Thanks,
SCOTT

> > ok, the easiest way to calculate valid addresses is to use an IP
subnet
> > calculator. The one I like the most is the free utility by Wildpackets
> >
http://www.wildpackets.com/products/...tcalc/overview
> >
> > Anyway, with a 255.255.255.248 network mask the valid IP addresses
> > associated to the primary address of your BM server are in the range:
> > 198.88.234.33-198.88.234.38
> > therefore .40 isn't included. Actually .40 is the subnet identifier
of
> a
> > separate subnet. The addresses from .33 to .38 are the ones you can
use.
> >
> > --
> > Cat
> > NSC Volunteer Sysop
>
> I was mistaken, the subnet for that block is 255.255.255.240 so I was
> told by our ISP that our range was is 198.88.234.32 to 198.88.234.47
or
> 14 usable IPs since first and last are unusable.
>
> We have 3 different IP blocks from our ISP, the above 198.88.234.32 one
> with the 255.255.255.240 subnet, then a 199.217.136.184 with
> 255.255.255.248 subnet and finally a 198.88.233.1 with a
255.255.255.248
> subnet.
>
> So I think we should be able to use the 198.88.234.40 address.
>
> SCOTT
>
I was really hoping that we had the wrong sub net in BM for the
198.88.234.32 block! When I read your post last night, I thought that's
gotta be it...sadly I checked and it does have it as 255.255.255.240 when
I look in inetcfg under bindings. I even checked our Cisco router as
well to make sure it had the sub net correct since this is the first time
I've tried to use an IP above 198.88.234.36. The router looked fine as
well. Is there anyplace else that this could be wrong, maybe a config
file on BM or something?
Thx,
SCOTT V.

Issue on virtual servers on sun one web server

Hi all,
I configured sun webserver 6.1 sp8 on windows 2003 server
I configured php,asp,jsp succesfully on different virtual servers.
as
www.abc.com:80
www.php.com:2222
www.asp.com:3333
www.jsp.com:4444
Now the issue is
I want to run the applications by using url with out portno in the browser
like www.php.com instead of www.php.com:2222
my DNS is aware of the www.abc.com,www.php.com,asp.com,jsp.com
From Internet I can access www.abc.com:80 as www.abc.com becoz it is running on port 80.
If I type www.php.com it is directing to www.abc.com not to www.php.com:2222.
In the host file under windows/system32/drivers/etc I added the following lines
10.129.149.196 www.abc.com
10.129.149.196 www.php.com
10.129.149.196 www.asp.com
10.129.149.196 www.jsp.com
I want to run the applications without entering portno along with url in the browser.
Can any one help me please.
Thanks in advance

Dear M.V,
I choose one server(www.xyz.com) that is running on port 80,in its server.xml I added
<VS id="https-pqr" connections="ls1" mime="mime1" aclids="acl1" urlhosts="www.pqr.com" state="on">
<PROPERTY name="docroot" value="D:/Sun/WebServer6.1/docs"/>
<USERDB id="default"/>
<SEARCH>
<WEBAPP uri="/search" path="D:/Sun/WebServer6.1/bin/https/webapps/search" enabled="true"/>
</SEARCH>
<WEBAPP uri="/" path="D:/Sun/WebServer6.1/https-pqr/webapps/https-pqr" enabled="true"/>
</VS>
which is of pqr virtual server that is running on port 3333
Now with out port no ie, with www.pqr.com I am able to see the home page of application running on pqr virtual server.
With this configuration I need to check at client environment
If u find mistakes from the above configuration please let me know
Thanks alot
Bye

CR with Universe error: Unhandled exception in WebI server call

Hi,
I encounter an error when creating CR report with did any one ever got Unhandled exception in WebI server call when dragging objects into filter querys of query panel? This worked fine few days ago but failed now. I have check the BO servers are running and tried starting the machine, also not okay. Anyone can help. Thanks
Charing

Hello,
I get the same "Unhandled exception in webI server call" when I run my add more objects in my crystal report. I was wondering if you found solution to this exception. I will really appreciate if you can share the solution.
Thank you

Problem with maxprocs 1 on Sun One Web server 6.1

I am using sun one web server on Unix with maxprocs set to 3.
This means that there are 3 jvms running my application under 1 instance. However I have certain components like an application cache that I would like to share between these 3 processes.
Additionally is there a way to configure the server so that requests from 1 session are served by 1 process only.
I am really stuck here. Have searched in all the documentation, but in vain. Would really help if some one of the Sun Developers could answer this.
Thanks
Chetan

Elving,
It is great to hear that there is no predefined limit on number of sessions but if that's the case why the webserver always starts with 1000 allowed by default. Are there any potential performance reasons behind it?
I have your link open in my browser for a few days now as a reference because I am experimenting with different Session Managers. I am trying to find a solution for BheegaChicken to be able to accomodate several thousand simultaneous sessions for his application.
We use V6.0SP2 and SP6 and for BheegaChicken's app specifically V6.1SP2...
I have spent some time in the past looking for the answers how to handle higher then 1000 sessions capacity on one instance and that was even before V6.1 was out. I have found the following reco that talks about optimal performance for sites using threads:
http://docs.sun.com/source/816-5690-10/perf6.htm#17580
*** start qoute
Multi-Process Mode
You can configure the server to handle requests using multiple processes with multiple threads in each process. This flexibility provides optimal performance for sites using threads, and also provides backward compatibility to sites running legacy applications that are not ready to run in a threaded environment. Because applications on Windows NT generally already take advantage of multi-thread considerations, this feature applies to Unix/Linux platforms.
The advantage of multiple processes is that legacy applications that are not thread-aware or thread safe can be run more effectively in iPlanet Web Server. However, because all the Netscape/iPlanet extensions are built to support a single-process threaded environment, they may not run in the multi-process mode, and the Search plug-ins will fail on startup if the server is in multi-process mode.
In the multi-process mode, the server spawns multiple server processes at startup. Each process contains one or more threads (depending on the configuration) which receive incoming requests. Since each process is completely independent, each one has its own copies of global variables, caches, and other resources. Using multiple processes requires more resources from your system. Also, if you try to install an application which requires shared state, it has to synchronize that state across multiple processes. NSAPI provides no helper functions for implementing cross-process synchronization.
If you are not running any NSAPI in your server, you should use the default settings: one process and many threads. If you are running an application which is not scalable in a threaded environment, you should use a few processes and many threads, for example, 4 or 8 processes and 128 or 512 threads per process.
MaxProcs (Unix/Linux)
Use this directive to set your Unix/Linux server in multi-process mode, which may allow for higher scalability on multi-processor machines. If you set the value to less than 1, it will be ignored and the default value of 1 will be used.
Tuning
You can set the value for MaxProcs by:
Editing the MaxProcs parameter in magnus.conf
Setting or changing the MaxProcs value in the Magnus Editor of the Server Manager
Note You will receive duplicate startup messages when running your server in MaxProcs mode.
*** end quote
If it is not relevant anymore please explane.
I am still interested to understand which of the SessionManagers is recommended by Sun to have optimal performance for sites with high number of sessions and using threads. It is not really obvious from http://docs.sun.com/source/817-6251/pwasessn.html. On top of this that's documented just for V6.1. What about V6.0?
Thank you very much for your cooperation!
Sasha aka ttalex

Integration with MM how the asset transaction type is triggered during MIGO

Hello everybody,
Do you know how SAP triggers the asset transaction type during MIGO when Asset is purchase with MM?
Is there a customizing transaction to set up the link between the movement type used in the MIGO and the asset transaction type during the receipt of the asset?
Thank you in advance
Regards

Hello,
This is maintained in FI-AA Spro - Financial Accounting - Asset Accounting - Transactions - Specify Default Transaction Types
For example for GR (MIGO), the accounting transaciton is called "Acquis. from goods receipt w/o affiliated company" and the default FI-AA Transaction type is 120.
Hope this helps!

Integration with Remedy ARS to SAP using web services

Hi!
There have been made a wsdl file from a sap babi, this file is loaded into remedy and the fields are mapped (input and output). When doing a search from the remedy using the wsdl file, we get the error "No selection criteria specified", even if there are input search parameters sent.
Is there a way on the SAP side, to see what remedy is sending over and maybe try to find out if a field in the wsdl must be filled out or not. We use the BABI_EMPLOYEE_GET which is made into a wsdl. This has been tried local on a j2ee for sap and the wsdl worked there.
-RB

you can set a http (exteranl ) break point inside the BAPI and then call the WS (the user executing and the client needs to be the same)

Issue with Feature Deployment when DB and Web Server are on different machine

Hi,
We are trying to deploy our Custom Processes as site feature.
In Visual studio it shows Deployment Succeeded but feature is not available in Site features.
when we checked “Central Administration -> Manage Farm Solution” it shows below error.
Web Server : The solution was successfully deployed.
DB Server IP : Elements of type 'Receivers' are not supported at the 'Farm' scope. This feature could not be installed.
DB Server IP : Elements of type 'Receivers' are not supported at the 'Farm' scope. This feature could not be installed.
We are able to ping DB server from Web Server .
Also , we are able to add custom fields and lookup manually in web Server and those are getting reflected in DB .
Thanks,
Abhijit

Hello,
I would probably post this in the SharePoint forum as deploying features is a SharePoint process and not Project / Project Server (even if the feature is related to Project Server).
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS |
MVP | Downloads

Itunes/external hard drive issue - i cant find the answer anywhere

okay so here it is:
i am currently using an imac g5 (v. 10.4.8) and i just got a g-drive to store my music onto. i am using a 400 firewire cable and i have tried a few different methods to copy my music files to the drive (methods are listed here) but every time i transfer any song to the drive, it gives me this:
"the finder cannot complete the operation because some data in "file name" could not be read or written. (error code -36)."
i have looked through numerous forums about this problem and some have suggested to check the firewire connection but i doubt it's the connection because other files such as microsoft word documents or pictures can easily be transferred onto the drive without any problems.
my itunes library is comprised of mp3/m4a files.. some of which have been downloaded, others taken directly from my cds. i tried to see if this problem was occuring with my downloaded files (assuming some of them may be corrupted) but it's not the case because the error shows up with EVERY song I try to transfer onto the drive.
the problem MAY have something to do with the fact that... a long time ago, i tried to get rid of all my album artwork and i was looking through forums, and one of the solutions was to convert my files to "aac" (which can be done in the itunes preferences menu). however, i've tried converting some songs back to mp3 formats and transferring them again and it still doesn't work. also, one time i converted the id3 tags of the songs, but i dont think that has anything to do with it
this is the given information for one of my itunes songs if it's of any help:
i think i've tried just about everything, please help me! thank you
Mac OS X (10.4.8)

Some things to check:
What format is the drive? Is it formatted for OS X or for Windows? If windows is it FAT 32? Each of these have different naming conventions, different read and write capabilities. If your drive is only for use with your Mac, reformat it for Mac OS Journalled using disk utility.
This may also be a file permissions issue. As as we're not dealing with System Files here, Disk Utility is of no help.Try setting the permissions on the folder using BatchMod from
http://macchampion.com/arbysoft/
Regards
TD

How to find the database details from server audit specification with successfull login group?

Hi,
We have created a server audit for successfull logins.When we read the audit file using
sys.fn_get_audit_file we find that all the fields related to the databases
ie database_principal_id,database_principal_name,database_name are either 0 or null.
Is there a method to find out to which database the login is accessing from the server
audit specification of successfull login group.Although the logins are reading and writing
data to the databases why there are no details of the databases?
Thanking you in advance,
Binny Mathew

Hello Binny,
The logins are used to connect to the instance and the access to the databases is performed via database users. So, once you connect to the instance via your login, the server level audit takes this action, records it, but without caring to which databases
you want to connect after that.
Unfortunately there is no similar action group on the database audit specifications, that can track which user connected to the DB, except if you are using contained databases in SQL 2012.
Probably you can share why you need such information and if there is something else specific that you wish to achieve, so we can propose a different solution/audit configuration.
Regards,
Ivan
Ivan Donev MCT and MCSE Data Platform

Intel vPro AMT integration with SCCM 2012R2 - Issues with SCCM finding the "ConfigMgr AMT Web Server Certificate"

Similar Messages

Maybe you are looking for