LastLogonTimeStamp Attribute Not Updated for Computer Account Over SSL-VPN

We like to use LastLogonTimeStamp (LLTS) to find stale computer accounts, disable them, and eventually delete time. What we have found is that domain member computers that connect to the domain exclusively by SSL-VPN (for instance in the case of employees
who work from their home office) do not update LLTS. Consequently these computers frequently appear on stale computer reports.
I suppose the required logon type is never used when connecting over SSL-VPN. Therefore I would like to know if there is a way via a logon script or some other method that we can update this attribute.

That is normal as you connect to VPN using locally cached credentials for the user and the computer accounts.
My recommendation to track these computers is to have an agent that periodically report the computer status (Example: Using Microsoft Intune) or have a scheduled task that will run a script when the user is connected to VPN and register the computer name
as active in a file that is hosted in a share.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Similar Messages

Issue regarding 0MATERIAL_ATTR - Attribute not Updated for Some Materials

Hi All,
As per requirement, I had enhanced 0MATERIAL_ATTR DS with one customer field MRP Controller.
After enhancing 0MATERIAL_ATTR, I had made necessary changes in related objects like 0MATERIAL Info Object & related transformation for this new attribute.
After making changes, when I had done Repair full request for 0MATERIAL_ATTR, newly added attribute had not updated for all material, other attributes were updated correctly but MRP controller had not updated for some records.
I am confused with why attribute(MRP controller) updated in some Materials & for some materials its not updated.
I had checked in PSA, data for this added attribute is come in PSA but not updated in data target (0material).
I had also activated master data by running Attribute change run but still problem persist.
Please help.
Regards,
Divyesh Khambhati

Hi Venkatesh,
I had write code in CMOD for MRP controller.
As data is coming fine till PSA but its not updated in Data Target (0MATERIAL) .
if I take one example..
For exp Material XYZ has two entries in PSA table, one is updated during delta load & recent one which come though Repair Full request.
Now newly adder attribute MRP controller available in recent request of Repair Full but that is blank in case of prior delta update.
I am confused because MRP controller attribute is updated for some Material but for some material its remain blank.
please help.
regards,
Divyesh Khambhati

The security database on the server does not have a computer account for this workstation trust relationship

When I try to log on to my DC it says "The security database on the server does not have a computer account for this workstation trust relationship". It won't let me log on. I installed another server server 2012r2 (its virtual )
and I can get to ADSI edit.
I think what happened was I had a pc that could not connect without unplugging the network cable. So I found this fix
FIX: “The security database on the server does not have a computer account for this workstation trust relationship”2032011
I’ve seen a lot of solutions, or suggestions rather, with regard to the error in the title of this post. In my experience, the problem can almost always be resolved without extra domain add/removes and reboots, which is the most prevalent solution I have
seen around. Usually, this issue is due to a mismatch between attributes of the computer account in Active Directory and those values on the system itself. Here are the steps I take to fix this issue when it crops up:
Open up Active Directory Users & Computers pointed to the domain the computer account resides in
From the “View” pull-down menu, make sure that “Advanced Features” is checked
Navigate to the part of your organizational unit (OU) structure where the computer account for this server resides
Open the Properties for the computer object
Choose the “Attribute Editor” tab on the Properties dialog box
Check the Attributes dNSHostName & servicePrincipalName – anywhere that a fully qualified hostname is specified (e.g. myserver.mydomainname.com), make sure that the entry matches the hostname
you have configured when you go here on your server: Start -> Computer -> Right-Click, Properties -> Change Settings (under “Computer name, domain… settings”) -> Full Computer Name
As an example, for a fictitious W2K8 R2 server whose Full Computer Name is “srv1.mydomainname.com”, these attribute/value pairs should be in Active Directory:
dNSHostName:
srv1.mydomainname.com
servicePrincipalName:
HOST/SRV1
HOST/srv1.mydomainname.com
RestrictedKrbHost/SRV1
RestrictedKrbHost/srv1.mydomainname.com
TERMSRV/SRV1
TERMSRV/srv1.mydomainname.com"
Not reading it carefully I add a computer with the same name as the pc having the issue and followed the above. The problem is that I did not notice that the spn did not want the name of my server (serv1) but the name of the trouble
pc.
dcdiag output
PS C:\Users\administrator.TOM> dcdiag.exe
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
***Error: DC3 is not a Directory Server. Must specify /s:<Directory Server> or /n:<Naming Context> or nothing to
use the local machine.
ERROR: Could not find home server.
PS C:\Users\administrator.TOM> dcdiag.exe /s:DC2
Directory Server Diagnosis
Performing initial setup:
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site\DC2
Starting test: Connectivity
The host 9e0dca7a-d017-445a-b354-adee5ff53d48._msdcs.TOM could not be resolved to an IP address. Check the DN
server, DHCP, server name, etc.
Neither the the server name (DC2.TOM) nor the Guid DNS name (9e0dca7a-d017-445a-b354-adee5ff53d48._msdcs.TOM)
could be resolved by DNS. Check that the server is up and is registered correctly with the DNS server.
Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
......................... DC2 failed test Connectivity
Doing primary tests
Testing server: Default-First-Site\DC2
Skipping all tests, because server DC2 is not responding to directory service requests.
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : TOM
Starting test: CheckSDRefDom
......................... TOM passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... TOM passed test CrossRefValidation
Running enterprise tests on : TOM
Starting test: LocatorCheck
......................... TOM passed test LocatorCheck
Starting test: Intersite
......................... TOM passed test Intersite
PS C:\Users\administrator.TOM> regsvr32 schmmgmt.dll
PS C:\Users\administrator.TOM> netdig /fix
netdig : The term 'netdig' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ netdig /fix
+ ~~~~~~
+ CategoryInfo : ObjectNotFound: (netdig:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> Setup /PrepareSchema
Setup : The term 'Setup' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ Setup /PrepareSchema
+ ~~~~~
+ CategoryInfo : ObjectNotFound: (Setup:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> netdiag /test
netdiag : The term 'netdiag' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ netdiag /test
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (netdiag:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM> nslooup
nslooup : The term 'nslooup' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ nslooup
+ ~~~~~~~
+ CategoryInfo : ObjectNotFound: (nslooup:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
PS C:\Users\administrator.TOM>

Ok fixed.
At a elevated cmd prompt run ;
C:\Users\administrator.TOM>setspn -x
As you can see the DC serv1 had duplicate SPNs.
Checking domain DC=TOM
Processing entry 1
HOST/serv1.TOM is registered on these accounts:
CN=SERV1,OU=Domain Controllers,DC=TOM
CN=C00049,CN=Computers,DC=TOM
{14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/TOWN-HBWJ29ZOQC is registered on these ac
counts:
CN=Administrator,CN=Users,DC=TOM
CN=TOWN-HBWJ29ZOQC,CN=Computers,DC=TOM
{14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/town-hbwj29zoqc.TOM is registered on thes
e accounts:
CN=Administrator,CN=Users,DC=TOM
CN=TOWN-HBWJ29ZOQC,CN=Computers,DC=TOM
RestrictedKrbHost/serv1 is registered on these accounts:
CN=C00049,CN=Computers,DC=TOM
CN=SERV1,OU=Domain Controllers,DC=TOM
RestrictedKrbHost/serv1.TOM is registered on these accounts:
CN=C00049,CN=Computers,DC=TOM
CN=SERV1,OU=Domain Controllers,DC=TOM
found 5 groups of duplicate SPNs.
Went to the computers OU and changed computer c00049 to the correct SPN. Now I have a new issues, I'll start a new thread.

Windows could not update the computer's boot configuration. Installation cannot proceed.

HELP!!!
Windows could not update the computer's boot configuration. Installation cannot proceed.
The installation then it says "The installation was canceled" and "Any changes to your computer won't be saved.
I have been trying to sort this out for over 15 hours.
I have the MacBook Pro (Late 2011)
Quad Core i7 (Clocked at 2.2GHz)
4GB Ram
Radeon Graphics (512mb graphics ram)
Running OSX Yosemite (10.10.2)

Did you have to modify Bootcamp Inof.plist to see the USB Installer option?
Your USB device needs to be a USB2 device. Here is an example.

HT1338 ok so i know that my computer needs to be updated but I do the software update and it say there are no current updates I have not updated my computer in a long time

ok so I have not updated my computer in a long time and I go to the apple icon in the upper left hand corner of my computer and click on it and then click on softwear updates and it runs and says there are no updates.

You have to buy the next OS X version. Free updates are only available for the version you have. Since you're posting here, assume you want to upgrade to at least OS X 10.6? Or further?
Call the Apple online store, which in the US is at 800-MY-APPLE, or you can also order online from them too. OS X 10.6 is only available on DVD, not download. Get it, install, do Software Updates until no more are available. Done. You probably already have at least 1GB of memory, and some spare disk space to install it. Of course, backup first.
If you want to upgrade to OS X 10.8, see these requirements to see if your system is able to. Note the minimum memory is 2GB, however, 4GB is recommended. Assuming your system can run Mountain Lion, you can upgrade directly from OS X 10.6 to OS X 10.8. You don't need to upgrade to OS X 10.7 as an interim step. OS X 10.8 is downloadable from the App store.
If you want to upgrade to OS X 10.7, after you upgrade to OS X 10.6, call the online Apple store again to purchase a download code, then download from the App store.

CONSOLIDATION Package not updating Retained Earning Accounts(7.5NW, SP09)

Hi all
During consolidation data manager package run, the package is not updating "retained earnings accounts from PL and BS" of income statement items which are belongs to IC elimination.
please provide your feed/advice on this issue
thanks
ramana

Hi Tom
I am running datamanager package for consolidation for ic eliminations and consolidation of investments and have 4 business rules for income statement related ic eliminations which are causing issue by not updating retain earning accounts from balance sheet and income statement account.
i have defined one retained act with BS LEQ and the offset account with income statement account.
I am thinking what is the best way to define the retained earning account, can i define both accounts from BS LEQ level or
income statemnt side and balance sheet- leq?
process will be first load data in LC , default logic , currency translation and then followed by consolidation package is the process.
thanks
Ramana

Windows Could Not Update the Computer's Boot Configuration. Windows Server 2012

I am trying to install Windows Server 2012. When installing, I get the message Windows Could Not Update the Computer's Boot Configuration. Installation
cannot proceed. It cancel the installation. Can anyone help me with my problem?

Hi,
Any update about the issue?
Please post more detail information about the issue?
How did your do the installation? clean install or override install?
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows could not update the computer's boot configuration. via UEFI installation

I recently performed a clean WIndows 8.1 installation using my new Hard drive. However, under UEFI mode from BIOS, everytime the setup process reaches the "Installing Updates" stage, I kept on receiving an error "Windows could not update the
computer's boot configuration, Installation cancelled.
I was a bit puzzled as everytime I install Windows 8.1 via LEGACY mode from BIOS, setup finishes! I cannot tell whether I need to mod my BIOS or what.
please help.
raymund r

Hi,
Please make sure that Delete all partitions/volumes on the disk # (ex: Disk 0) that you want to install Windows 8.1 as UEFI on until that disk # shows as unallocated space.
Try again to install Windows 8.1 again.
If it still fails, please post back the setuperr.log and setupact.log under C:\$WINDOWS.~BT\Sources\Panther\ for our research. You can copy them out in WinPE command mode.
Also, I would like to check if you use bootcamp to install Windows 8.1 on Mac computer. If so, check the solution here:
https://discussions.apple.com/thread/5491283?tstart=0
Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Kate Li
TechNet Community Support

Error ''windows could not update the computer's boot configuration"

i have an Hp pavilion dv 6 -3045 product wr747ea#abe ,till now i installed windows 7 on it several times but this time after i formated the partition and started the instalation from usb at completing the installation a message popup ''windows could
not update the computer's boot configuration''.Also i tried with another copy of windows 7 also booted from usb but i get same message at same step. I used a memory stick and bootable windows 7 from usb with Rufus program.
Please any sugestions ?

Hi,
Please make sure you have format the system drive and perform a clean install, not just override or upgrade from the previous system.
The bootloaders for Windows Vista and Windows 7 are quite similar, you could have a look at this article and see if it's helpful to you:
When I try to upgrade an earlier version of Windows to Windows Vista, I receive an error message: "Windows could not update the computer's boot configuration"
http://support2.microsoft.com/kb/931697
Karen Hu
TechNet Community Support

TS3694 ipod 4gwill not update with computer: i get error 3194 also 1.6gb of other

ipod will not update with computer: i get error 3194.. i updated itunes and still nothing. tryed to restore,same thing... now i have no music(random) and 1.6 GB of "OTHER"....help me

This device is not eligible for the requested build: Also sometimes displayed as an "error 3194." If you receive this alert, update to the latest version of iTunes. Third-party security software or router security settings can also cause this issue. To resolve this, follow Troubleshooting security software issues.
Downgrading to a previous version of iOS is not supported. If you have installed software to perform unauthorized modifications to your iOS device, that software may have redirected connections to the update server (gs.apple.com) within the Hosts file. First you must uninstall the unauthorized modification software from the computer, then edit out the "gs.apple.com" redirect from the hosts file, and then restart the computer for the host file changes to take affect. For steps to edit the Hosts file and allow iTunes to communicate with the update server, see iTunes: Troubleshooting iTunes Store on your computer, iPhone, iPad, or iPod—follow steps under the heading Blocked by configuration (Mac OS X / Windows) > Rebuild network information > The hosts file may also be blocking the iTunes Store. If you do not uninstall the unauthorized modification software prior to editing the hosts file, that software may automatically modify the hosts file again on restart. Also, using an older or modified .ipsw file can cause this issue. Try moving the current .ipsw file, or try restoring in a new user to ensure that iTunes downloads a new .ipsw.
Error 3194: Resolve error 3194 by updating to the latest version of iTunes. "This device is not eligible for the requested build" in the updater logs confirms this is the root of the issue. For more Error 3194 steps see: This device is not eligible for the requested build above.
Above from:
http://support.apple.com/kb/TS3694#error3194

HT1338 i have apps to be updated but when i try to update them a message pops out saying "You have updates for other accounts, please sigh in with the other id". Can some one help me how can i still update the same with the new apple id ive created.

i have apps to be updated but when i try to update them a message pops out saying "You have updates for other accounts, please sigh in with the other id". Can some one help me how can i still update the same with the new apple id ive created. As i dont have the access to the earlier id anymore.

You cannot. The apps are assigned to that Apple ID and there is nothing you can do to change that. You could choose to download them again with the new Apple ID, any paid apps will need to be purchased again.
Hope that helps.

HT201077 As of recently any photos I add to a shared photostream will not update for others. Only I can see them. How come others sharing this photo stream are not getting the new photos?

As of recently any photos I add to a shared photostream will not update for others and I don't see the updated photos on my other devices. Only I can see them from the device that i've posted from. How come others sharing this photostream are no longer getting the new photos? My iphone (the device i'm adding from) shows 20 pictures in this shared photostream and yet 4 other people that I share this photostream album with and my ipad only show 12 photos. For the past week I keep adding photos thinking people will see them but it just won't update the new ones. Any ideas how to fix this?

You can stop new photos being automatically added to Photostream in iPhoto from iPhoto preferences > Photostream.

Originating document number not updated for one invoice line item

Hi,
We have a invoice document number in which the originating document number is not updated for one of the line items ,this is order related down payment invoice .May be this is due to system inconsistency so is there any SAP note to overcome this problem.
Best Regards,
Rohit

Dear All,
I found out the problem for not updated in F-04. "While create the receipt document in GL master Open item management maintained box was not checked". It can be found in BSIS table - OI Management'.
Is there any other way to clear this document.
Thanks...

Inspection Lot Status (CROK)not updating for Certificate Reciept

Hi
I want to inspect vendor materials on the basis of thier Quality certificates
1) Config Set up:
a) Certificate type :YA72
Cert for each PO item :checked
Certificate Check reqd: :Checked
Enhance cert processing: Checked
b) Control key :0005 ( Delivery release ,Certificate)
2) Material Master (QM View)
    QM Procurement : Checked
   Control Key :0005
   Certificate Type :YA72
3) Goods Recipt
    MIGO < Purchase Data<Cert Reciept :Yes
    Inspection lot is created
Question : Inspection lot status is not updating for Certificate Recived or not
                  My understanding is Inspection lot status should be :CROK -Certificate Recieved
CTCM-Certificate Missing
Pls correct my understanding in case i am missing something
Thanks in advance

Is the status in the GR document have the cert field set as 5?
Since you set the "certificate check required" you must do an explicit check of the cert. I included below the help screen from this indicator in SPRO.
You should be able to review the status of your cert in transaction QC53.
FF
Explicit Inspection of GR Certificate Necessary
If you set this indicator, at goods receipt the system will generally perform as described in the field "Control without certificate".
This means that even if you confirm the certificate receipt at goods receipt, and thereby set the status "2 - Certificate received", the system will still perform as specified in the field "control without certificate". See Control without certificate.
You must explicitly check the content of the certificate recieved at goods receipt and set the status "5 - Certificate filed and inspected ", before, for example, the inspection lot status will be set to CROK.
You can confirm that you have checked the content of the certificate in the certificate transaction or when making the usage decision.
Note
If you have set the indicator and chosen an unsuitable setting in the field "Control without certificate", the goods receipt can be generally blocked.
This security function is generally used at electronic certificate receipt to check the accuracy of the certificate contents.

Validity Table not updating for 0IC_C03 while updating data

Hi,
1.Validity table not updating for 0IC_C03 while updating data in my BW 7.4 With HANA data base?
Key fields : 0Plant
0Calday
if you run this programe after loading data - RSDG_CUBE_VALT_MODIFY it is updating.
2. I am not getting no marker update option in non-cumulative Info cube 0ic_c03 manage tab or in DTP tabs check as per 7.4 modifications?
and 2LIS_03_BX in DTP I am getting below this option only
Can you please give me solution for this issues.
Regards
Umashankar

Hi Uma,
Please go through the below link which might be helpful.
Not able to Edit Validity Table : RSDV
Marker Update Option is available under Collapse tab of Info cube.
Thanks,
Karan

LastLogonTimeStamp Attribute Not Updated for Computer Account Over SSL-VPN

Similar Messages

Maybe you are looking for