Is it possible direct access (virtcube-roosource) for 0fi_gl_4?

I manually set virtcube as '1' in roosource but i doesnt work. I want display 0fi_gl_4 data remote.
thanks

Hello Triska,
As per my knowledge, setting virtualcube flag manually to 1 in ROOSOURCE will allow you to access data using virtual cube. It is being hardcoded by SAP itself hence if it is 1 or 2 only then said datasource is open for remote access.
Please inform me if you manage to find a way to access same DS using remote cube.
Thanks in advance.
Regards,
Ketan

Similar Messages

Direct Access 2012 -- method for disabling and re-enabling client access ?

We have a reliably functioning DA 2012 setup (which is great), but I need a way to selectively Disable and later Re-Enable DA for particular clients. We use a security group for the Computer accounts of the clients and this is referenced both by Group Policy
(to assign the right settings to the DA Clients) and by the DA Server (to grant the access).
We had hoped that we could simply delete the client Computer account from the security group, but when we tried this the DA server seems to just ignore it, even after a reboot of the DA Server.
We have looked all through the settings of the DA server to see if there is a "disconnect client" option, but can't find anything (which truly amazes me!).
I have seen one blog post from Richard Hicks which recommends running some PowerShell commands (http://directaccess.richardhicks.com/2013/06/11/disconnecting-directaccess-clients-on-windows-server-2012)
but after testing these it seems clear that this really only helps me in a scenario where (A) the client is offsite; and (B) I first Disable the Computer account in AD and then replicate AD.
Wondering what my options are? What do I do when we want to Disable DA for a particular client and then turn it back on again some weeks later?

When you remove the computer account from your group, it will stop DirectAccess from working, but only once the DA client machine receives it's next Group Policy refresh. The purpose of the group is to get those DirectAccess connectivity settings applied
from the DA GPO. So if you remove the account, sometime over the next couple of hours Group Policy will refresh on that laptop, and the DirectAccess settings will be removed. If you do this, then later down the road when you want to turn DirectAccess back
on, you'll need to get that laptop either back into the office or connected via some kind of VPN, because when you add the computer account back to the group, the client machine will have to receive the GPO settings all over again.
I have been installing DirectAccess for years in tons of places, and I don't think I have ever heard of the business requirement to remove and re-add computers to DA like you are describing - do you mind sharing your reasoning behind this? (I'm just truly
curious, I'm always interested in finding new ways that companies are using DA)
The quickest way to disconnect a client machine from DirectAccess is to disable the computer account in AD. You could then re-enable the computer account later and DA would start working again, but of course if you leave a computer account disabled in Active
Directory for a long period of time, it could cause other kinds of sync problems outside the scope of DA.
DirectAccess, if designed properly, turns itself off whenever the computer is connected to the corp network, whether physically onsite or connected via another form of VPN. Given this behavior, I'm not sure why you would want to be able to disable DA for
a while and then turn it back on again later...?

Possible to convert a Direct Access server?

Is it possible to convert a Direct Access server ( Windows 2012 server) residing in ESX 5.1 to a Hyper V version ( Windows 2012 R2 Datacenter) by a "normal" conversion process? The optimal result is that all the configuration of the Direct
access part is transferred correctly.
Thanks.

hey .. funny how expert opinions vary ... i have a handfull of IT and software RAID experts who disagree with you ... in my case, i'd rather get rid of it ... ( however i still have to find a solution to clone my boot drive that works flawlessly with all my software ... )
anyways ... how exactly do i go about splitting the RAID, to make sure i don't mess it up ....
1. restart from CD
2. Delete the mirrored RAID set
3. remove one of the HDs with the raid slice on it (i'll keep it as a backup 4 the moment just in case)
4. restart from the remaining slice disc
5. ... ?
do i need to do anything specific ... ? what about the name of the Volume .. for the moment my startup disk (the RAID) is called 'BootRAID' ... the slices are called 'RAID Slice (disk0s2)' and 'RAID Slice (disk1s2)' .. in order for everything to work properly, don't i have to rename the new startup disk ?
i'm scared ...
here's a screenshot of my setup: http://kinkajou.net/diskUtility_RAID.jpg
<Edited by Moderator>

I have Adobe Photoshop CS4 and have just upgraded my Mac operating system to Yosemite with the newest version of Java 2014 running. When I try to access Photoshop from Bridge or directly open it asks for a Legacy Version of Java 6. As I am a pensioner I c

I have Adobe Photoshop CS4 and have just upgraded my Mac operating system to Yosemite with the newest version of Java 2014 running. When I try to access Photoshop from Bridge or directly open it asks for a Legacy Version of Java 6. As I am a pensioner I cannot afford an upgrade does anyone know of a work-around for this problem?

Hi Daddyfred,
CS4 Photoshop has not been tested on Yosemite. But still you can try the Java 6 update using the below link.
http://www.oracle.com/technetwork/java/javase/downloads/java-archive-downloads-javase6-419 409.html
Thank you for posting on Adobe Forums.

Direct Access Management Servers, what are the entry good for?

In the advanced Direct Access setup wizard you have the ability to enter your management servers. I haven't been able to find an explanation of why, what is it good for? If I understand everything correct DA gives full access to the subnet so why is it of
interest to list some servers as "management servers"?

Hi,
Management servers are servers that you are able to access from the da client Before logged on as a user.
Your domain controllers are by default infrastructure servers, but in many cases you want to add for example SCCM, NAP and other servers to be accessable prior logon.
If you are using the manage-out functionality in DirectAccess, and want to access a client prior anyone is logged on, the management server is also needed there.
http://technet.microsoft.com/en-us/library/jj574200.aspx
Microsoft Certified Trainer
MCSE: Desktop, Server, Private Cloud, Messaging
Blog: http://365lab.net

Routing back to Direct Access Clients - is this possible?

Hi,
We have been using direct access for the past few months successfully, however the one problem we are still having is we can't use programs that require a route back to the Direct Access client (such as managing a Hyper-V machine on the local lan), using SourceOffsite
or even using Remote Desktop to remote onto a direct access client or ping the direct access client.
Our local LAN uses Ipv4 and we can route fine to the Direct Access clients from the Direct Access Server where the tunnel terminates but not from any other machine on the network. Do I need to change the direct access configuration to allow this or do I need
to somehow create a route on my LAN for the direct access clients?
Thanks in advance
David

I found out how to do this in this useful article and tested it and it is working fine - thanks.
http://www.packtpub.com/article/configuring-manage-out-to-directaccess-clients

Direct Access for Non Domain Machines

Hi,
In My IT-infra, there is multiple machines that is out my Office network & Domain..
Can we join these machines in domain via Direct Access implementation ? or for implementing Direct Access we required to join those non domain & out of office network machine to Domain first ?
secondly, can we implement the Direct access without any public certificate purchase, and without any IPV6 configuring in internal network,machines and in servers .currently i am using IPv4 IP on all Machines & Servers.
I have gone through the Direct Access Technet guide but i feel very complex document there ...can you please brief me about direct access implementation in simpale way, i want to implement direct access to join the internet based client machines to
domain and manage via/for SCCM ...
Shailendra Dev

Correct, DirectAccess clients must be domain joined. Also, only Windows 7 Ultimate, Windows 7 Enterprise, or Windows 8 Enterprise clients are able to be DirectAccess connected, so that may also make a difference to your situation. I see many customers deploy
DirectAccess for those Win7/Win8 domain-joined systems, and then make use of the traditional (RRAS) VPN on the same DirectAccess server for connecting any other operating systems or non-domain-joined machines. Those would just have to launch a manual VPN connection,
where the DirectAccess connections are of course automatically connected.
You don't "have" to use an SSL certificate that you purchased from a public CA, but you really should. It is definitely a best practice to use a trusted public certificate on your DirectAccess server. Further, if you have Windows 8 client computers,
you don't even need to distribute the machine certificates inside your network, but it is also a best practice that you do this anyway, to strengthen the authentication process.
No, you do not need IPv6 inside your network at all for DirectAccess to work.
Sounds like you might be interested in some additional reading on DA, here are the two books available on the subject:
https://www.packtpub.com/virtualization-and-cloud/microsoft-directaccess-best-practices-and-troubleshooting
https://www.packtpub.com/networking-and-servers/windows-server-2012-unified-remote-access-planning-and-deployment

LAN side firewall settings for Direct Access (Windows Server 2012 R2) in DMZ?

I am currently planning to set up our first Direct Access server (Windows Server 2012 R2). I will be in our firewall DMZ and we will be using the IP-HTTPS listener.
For the Internet facing rule only TCP 443 inbound/outbound is sufficient but for the LAN facing rules (not talking about the Windows server firewall) what would be the recommended firewall rules for a Direct Access server? Is there a best practice guideline
to follow for this? Appreciate any advice or comments. Thank you.

Hi Barkley
Please see this Technet Link which will backup your requirements - https://technet.microsoft.com/en-gb/library/jj574101.aspx
Section Reads -
When using additional firewalls, apply the following internal network firewall exceptions for Remote Access traffic:
ISATAP—Protocol 41 inbound and outbound
TCP/UDP for all IPv4/IPv6 traffic
Also another link from http://www.ironnetworks.com/blog/directaccess-network-deployment-scenarios#.VO3tfvmsVrU
"I have had a number of conversations with security administrators and network architects who have expressed a desire to place the DirectAccess server between two firewalls (firewall sandwich) in order to explicitly control access from the DirectAccess
server to the internal corporate network. While at first this may sound like a sensible solution, it is often quite problematic and, in my opinion, does little to improve the overall security of the solution. Restricting network access from the DirectAccess
server to the internal LAN requires so many ports to be opened on the inside firewall that the benefit of having the firewall is greatly diminished. Placing the DirectAccess server’s internal network interface on the LAN unrestricted is the best configuration
in terms of supportability and provides the best user experience."
Kindest Regards
John Davies
Thank for your reply and information John. I find it somewhat disappointing that Microsoft does not provide much more in the way of documentation and information regarding this topic. I required more information to show to our security team so they will allow
us to have the internal facing NIC not have more restrictive rules in place as it is a security concern.

Logical link / Work center for directly accessing "Business Activities"

Hi All,
We are upgrading from CRM 5.0 to CRM 2007. One unique challenge that I have encountered is the access to search, change or create - BUSINESS ACTIVITIES (Leading Transaction category: BUS2000126) in the CRM Web UI. We would like to directly access Business activities through a work center -> Logical link or a Logical link, in the SALESPRO business role.
This is available in the IC_AGENT business role. But you need to create a preceding Interaction record and then create a followup activity -> Business activity. We do not want to do this. We want to be able to access the business activites directly. For example, Leads and Opportunities can be accessed directly through the work Center: "Sales Cycle".
Does anyone know if there is a work center that I can use in SALESPRO business role that will give me direct access to Business Activities . I can use the transaction launcher to access the HTML version of the winclient transaction (T Code: (CRMD_BUS2000126) but I do not want to use the transaction launcher. Any ideas?

Well I am pretty Serious?!!!
The standard SAP delivered "ACTIVITIES" WORK CENTER has the following Logical links for CREATE:
Activity
Activity Scheduling
Activity Template
Appointment
E-Mail
Interaction Log
Task
Visit Plan
And when you use the Activity create - you ONLY have the option to create:
Interaction log - Channel report
Interaction log - Partner report
Task - Approve
Task - Recurring Task
I would expect to see more than this. There are other BUS2000126 Business Activity transaction types which are enable to be maintained online in SPRO. But they do not show up here. I can use the Search - Activity logical link and then use Activity Type to find the other Transaction types. But not in Create. I can control the transaction types that can be displayed for Leads and Opportunities. It doesn't seem to work for Activities!!!!
Is this part of standard CRM 2007 SALESPRO delivered role functionality??? I have SAP_ALL and SAP_NEW and have access to the other Business activities in my security role. My Ophthamologist did confirm that my eyes are doing fine so far. So this has something to do with the way this 'Work Center' has been designed. Apart physiological/anatomical impediments what am I missing???
Thanks,
Ramesh

Direct Access and WIndows Phone 8.1 for MySIte Resolution?

Hi all –
I am reaching out to the community here because I haven’t been able to find anything concrete.
The scenario is that we wish to have links which are sent through an on-prem SharePoint farm resolve on a user’s Windows Phone whilst roaming.
The root of the issue is that the client does not have split DNS in place.
Therefore when they send a link from the SharePoint site it’s URL is mysite.acme.int, for example, which is not resolvable from outside of the corporate network;
Acme.com is however.
We have Direct Access (2012 R2) in place and use Windows Phone 8.1.
What I am trying to determine is whether or not we can leverage a DA connection with the Windows Phones in order to attain URL resolution.
Barring that does anyone have any bright ideas on how to conquer the problem?
Kind regards and thanks in advance!
Wren

Hi Wren,
For your issue, you can try to configure alternate access mappings with IP address for your MySite Web Application and then you can access your site with IP address.
As I am not familiar with Windows Phone, you can connect with the Windows Phone support or post threads in Widnwos Phone forums to ask for more information:
http://answers.microsoft.com/en-us/winphone/forum/wp8?tab=Threads
Best Regards,
Eric
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Direct Access is working but how do I configure it for remote services, client management software, etc..

Good morning/afternoon/evening TechNet,
I've finally gotten a DA client connected to the corporate network utilizing an external network. I'm having a couple issues, one, not being able to ping the server from a computer that's on the same domain(I'm able to ping the DA client from the DA server).
I'm not sure if there is a firewall setting that needs to be open on the client for incoming echo requests? Second, we use a client management system called BMC and I would like the direct access server to be able to utilize the BMC server so that I can manage
the DA client whenever its on the network. I noticed on the DA server that "Step 3" offers an area where it allows you to add servers that will be used for direct access client management. Would I just need to populate the server in here and then
open appropriate firewall rules so that the DA server has access to them? Lastly, Trying to "mstsc" into the DA client what would I need to open up on both sides so that I'm able to do this?
Sorry about the horrible grammar but I've been up 24+ hours getting this awesome but pain in the butt Direct Access feature working.
Thank you as always!
-Liqsh0t

I'm afraid it's a bit more complicated than adding a server into the list in Step 3 :)
When a DirectAccess client is connecting into a corporate network that is IPv4 (I assume yours is, most are), it can reach into your IPv4 servers because the DA server is doing NAT64/DNS64 translations, turning all of your DirectAccess IPv6 packets into
IPv4 packets before they head inside the network. But even though this happens in the background without you really knowing about it, the key thing there is that all DirectAccess traffic is IPv6. This means the clients can only be contacted via IPv6. If you
have IPv6 inside your network, then you can route outbound fairly easily to your DA client computers. If you are all IPv4 inside as most companies are, then you have to either roll IPv6 out inside your network, at least partially, or you have to utilize ISATAP
inside your network in order to create a sort of "virtual IPv6 cloud" that runs on top of your IPv4 internal network. This enables your internal management systems (like the BMC servers and helpdesk computers for RDP access outbound) to have a connection
into the IPv6 world, which then enables them some routing capability to get out to the IPv6-connected DA clients. In addition to this IPv6 or ISATAP setup, you also need to configure WFAS rules on the DA clients so that they will allow this traffic.
There is some info on setting up ISATAP here: http://blogs.technet.com/b/jasonjones/archive/2013/04/19/limiting-isatap-services-to-directaccess-manage-out-clients.aspx
Otherwise one of the chapters in this book is also dedicated to the setup of a selective ISATAP environment, to be used for the purposes of DirectAccess outward management: https://www.packtpub.com/virtualization-and-cloud/microsoft-directaccess-best-practices-and-troubleshooting

RHCDOC_DISPLAY - any cluster for directly accessing changes?

Hi
Does anyone know whether the HRP Infotype changes as reported by program 'RHCDOC_DISPLAY' are stored in a particular table or cluster?
The HR Infotype logged changes are stored in PCL4, but I can't seem to find an equivalent for the PD changes?
We need to try to access the data for reporting on an interface file.
Cheers
Phil

Hi,
Try table CDHDR.
Hope this helps.
Donnie

Possible to share ext HD for time machine?

I have an large 4TB external hard drive hooked up to my iMac and am using it for time machine backups. I would like to have our MacAir to also access this drive for its Time Machine backups through our local network (wirelessly). Is this possible? If so, how?
Thanks.
Tony

Barney,
I finally got around to trying your suggestion. It partially worked...I was able to start the backup (i.e. it recognized the external HD on my iMac), but it got stuck at "preparing for backup". It just continued to spin and spin until I got some message that it wasn't able to back up. And, I did see the external HD was being accessed since the lights on it started blinking.
Anyway, close but not quite. I appreciate the help though. I'll just have to remember to connect the hard drive direct to the laptop from time to time and backup manually.
Regards,
Tony

Is it possible to access elements of a view in implementation class?

Hi,
In the BSP component workbench, is it possible to manipulate elements of a view (listbox, inputfields etc., hardcoded using htmlb tags) in the methods of view implementation class. For example, I have a inputfield which is initially invisible. I want to make it visible when a particular event is triggered. I wish to code this directly in the event handler method. Can anybody provide some pointers?

Arun,
As the UI elements (tags) do only exist during rendering phase a direct access from the view controller is not possible - especially not in the forward-oriented way from within an event handler as indicated from you in the posting.
However, it is of course possible to hard-code view layouts; for this approach you can use the BSP view corresponding to the view and code there whatever you like. BSP views can also contain code snippets to achieve dynamic effects. In your example it doesn't look like that you need code at all - you need to preserve the status (visible/ invisible) in a value attribute of a context node and use this value to bind visibility of the input field on the layout.
In CRM 2007, there are two main tag libraries (aka BSP extensions) being used:
- THTMLB (single tags, like input field, button, table, ...)
- CHTMLB (configuration tags; these are available for forms, tables and trees)
You should always use these tag libraries in the first place to assure common look and feel and avoid rendering issues.
Best regards
Peter

Server 2012 Direct Access Single NIC cant get it to work

Hi,
I am having some real issues with setting up Direct Access with Server 2012 and a Windows 8 client, it simply won’t work at all.
First of all I should describe my setup:
I have an internet connection with a static IPv4 address on the external network adapter of the router
The internal network address (the address of the router which has the internet connection) is 192.168.1.1
Server1 (windows 2008 R2 Standard) has a static IPv4 address 192.168.1.2 and has some ports forwarded from the router (443, 25, 80) this server is a domain controller, email server, and has the DNS, DHCP and
certificate services
Server 2 (Windows 2008 R2 standard) has static IPv4 address 192.168.1.3 it has no ports forwarded from the router as it has no services accessed externally, it is used as a file server and print server, backup
domain controller and backup DNS.
Server 3 (Windows 2012) has static IPv4 address 192.168.1.4 and has the Remote Access server role installed along with all the other default features and roles it requires in the setup process.
These servers have all got an IPv6 address which I assume the server has configured automatically, there has been no deliberate configurations made to disable IPv6
I have no UAG or proxy server or anything else to route packets to internal servers. Just this router which has the option for port forwarding (I assume that’s NAT isn’t it?) sorry don’t know much about that
area.
I go through the setup wizard in remote access to configure direct access, in the external URL I have entered da.mydomain.com and created a host A record in my external domain name providers DNS which points
the da record to my external IP address. The wizard creates all the GPO’s, scoped correctly, and applied to a Windows 8 client. The operational status shows its all working and I got green ticks. However, when I connect the client to the internal network it
doesn’t seem to have correctly got the DA settings. I run the following in powershell
Get-DnsClientNrptPolicy
Nothing displays – at all
Get-NCSIPolicyConfiguration
Description
: NCSI Configuration
CorporateDNSProbeHostAddress
: fdd8:dd4a:ea42:7777::7f00:1
CorporateDNSProbeHostName
: directaccess-corpConnectivityHost.mydomain.local
CorporateSitePrefixList
: {fdd8:dd4a:ea42:1::/64, fdd8:dd4a:ea42:7777::/96, fdd8:dd4a:ea42:1000::1/128,
fdd8:dd4a:ea42:1000::2/128}
CorporateWebsiteProbeURL
: http://directaccess-WebProbeHost.mydomain.local
DomainLocationDeterminationURL : https://DirectAccess-NLS.mydomain.local:62000/insideoutside
Get-DAConnectionStatus
Get-DAConnectionStatus : Network Connectivity Assistant service is stopped or not responding.
At line:1 char:1
+ Get-DAConnectionStatus
+ ~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo
: NotSpecified: (MSFT_DAConnectionStatus:root/StandardCi...onnectionStatus) [Get-DAConnect
   ionStatus], CimException
+ FullyQualifiedErrorId : Windows System Error 1753,Get-DAConnectionStatus
I go into services.msc and find that the network connectivity assistant is not started, it wont start either something must trigger it but I have no idea how to get it triggered to start… this might be my only
source of problem perhaps but on a more network level question:
If I have such ports as 80, and 443 (which I assume DA uses in some form with a public IPv4 internet address) directed at server 1, how does the DA connection get to server 3 which has the DA role installed?
I could create another record on the server which also opens port 443 to server as well as for server 1, but then how would the router know which server to pass the DA connection to if the same port is open for two different servers?
Either way, this first issue is that the client doesn’t seem to have the ability to connect internally correctly yet, so maybe this connectivity service is a good place to start? My understanding is that the
networks icon in the system tray should show that there is a corporate connection, but it doesn’t. also, the client seems to have the NLS certificate in the computer certificate store, so the cert side of things is working and the GPO side is working.
Many thanks
Steve

ahh i see, so just to enlighten me even further...
If a company has two web servers that would mean they would need two different public facing IP addresses so they can route to each internal web server. If, like the big companies have, they
may have many web servers (possibly more than 100) I’m assuming that simply buying more public IP addresses would have a limit, especially since the IPv4 address space is pretty much exhausted. So is this where proxy systems come into play like ISA and Forefront,
is this what they do?
I assume if such a product was implemented you could go down to just one or two public IP addresses, point all traffic to the ISA server and that in turn would do all the routing of packets
to each server behind the NAT/router (probably based on some sort of domain name or sub domain namespace as it’s parameter for forwarding?)
Secondly, what I have done is installed windows server 2012 and used that as a direct access client (I read on another forum that the windows 8 RP doesn’t have the enterprise bits to make this
work). I have got much further with the 2012 server acting as a client (installed on laptop, installed desktop experience and wireless LAN),
but when I run the following command on my DA client I get the following status
Get-DAConnectionStatus
Status:
connectedlocally
Substatus:
none
This appears to work fine, when im connected to the local network. But then I disconnect and run the command again and I get the following:
Status:
Error
Substatus:
NameResolutionFailure
On my router what I did is temporarily disable port 443 going to my original server and instead opened it up pointing to my other server, so 443 traffic should be going to my DA server now, but I don’t understand why its giving the name resolution failure
status. I have a host A record called “da” with my domain hoster, and entered the full domain namespace in the DA wizard as da.mydomain.com (the Host A record has been up there for more than a week so it’s propagated through the net)
So, a bit further but stuck again.

Is it possible direct access (virtcube-roosource) for 0fi_gl_4?

Similar Messages

Maybe you are looking for