LMS 4.0 Default Credential Set Policy

Hello,
I would like to assign to all hosts in the subnet 192.168.252.0/24 and 192.168.254.0/24 a dedicated credential set named set01. I created a default credential set policy configuration
IPRange#192.168.254.*#Set1
IPRange#192.168.252.*#Set1
right after the discovery process i run a device credential verification job. where only the read community is OK. So I assume the policy isn't working. Is there any prerequisites for deploying credential policy sets?
thanks in advanced
Alex

Credential sets are only applied to devices when they are added to DCR. If they were already in DCR, you have to go to Inventory > Add / Import / Manage Devices to forcibly change the credentials to those in the credential set.

Similar Messages

Windows 2012 R2 default domain controllers policy set to enforced

Hi Guys,
So I've migrated my domain from Windows 2003 R2 over to Windows 2012 R2 and so far everything is running ok. Had a few problems relating to orphaned DC's but have cleared this up now. However, i'm now trying to get to grips with using group policy. When
i migrated, the old policy settings seemed to have come across and things seem to be still locked down ok, in relation to certain OUs. I run a network at our local college so i have a student container which applies a lock-down policy. All these GPOs where
previously setup by someone else.
I setup a test network at home before i did the said migration and am now comparing some group policy settings, namely the default ones, and i have noticed that default domain controllers policy has been set to enforced on my newly migrated domain. At home
on my test server i see it is not enforced by default and am wondering why this is? I have been reading up but i can't find anything that tells me it should be enforced but wary to disable this setting. The students return on Monday so i don't want to mess
it up at this stage.
One thing that i did find odd is when i first opened up the GPO's, i was prompted with a message which stated that the policies in the sysvol folder where not consistent with the ones in AD so i followed its recommendation to update.
Any advise you guys have on this would be greatly appreciated.
David

> So I've migrated my domain from Windows 2003 R2 over to Windows 2012 R2
> and so far everything is running ok.
This does NOT touch any GPOs, so your GPOs are not "migrated" or
something like that - they are still what they were before.
> enforced on my newly migrated domain. At home on my test server i see it
> is not enforced by default and am wondering why this is?
"A sever misunderstanding of how group policy inheritance and link order
works" is the closest reason I see for this. The DDCP is linked to
"Domain Controllers", and as long as you do not create subordinate OUs
there (which I've never seen) and block inheritance on them, there's no
reason to enforce.
To add my experience from the field: When I see enforced GPOs, in most
cases this enforcement is not required. People simply use it because
they do not understand "link order".
> One thing that i did find odd is when i first opened up the GPO's, i was
> prompted with a message which stated that the policies in the sysvol
> folder where not consistent with the ones in AD so i followed its
> recommendation to update.
That's fairly ok and nothing to hassle about.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

What impact do changes to the CUCM "Default Credential Policy" have?

Hi all,
We have been asked to make an update to the 'Default Credential Policy' on CUCM 6.1. The update is easy enough to carry out: User Management > Credential Policy > Default Credential Policy.
However, Cisco documentation isn't too clear as to what accounts this will impact. As best i can tell any changes made here will impact any 'new' Application or SuperUser (etc) accounts that are created *after* the policy is updated. Existing application accounts won't get impacted and would require a Bulk Upload to change them. Does that sound correct?
I'm also a little unsure if changes to this policy will impact the 'administrator' account that we created when we installed CUCM, or any of the normal 'phone' user accounts that our many IP phone users have (i presume not, but again Cisco documentation doesn't seem too hot on precisely what gets impacted by changes to this policy).
Screenshot below of the GUI screen i am referring to.
Thoughts appreciated.
Many thanks!

Quick bump. We've read a few links that suggest User and Application User passwords etc would be impacted. However, they don't mention the main Administrator account, nor if we would need to use Bulk Upload to change existing User and Application User settings after chaning the Default Policy settings:
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/7_1_2/ccmcfg/b08crpdf.html#wp1064073
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/6_1_1/ccmcfg/b08crpol.html#wp1030222
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/6_1_1/ccmcfg/b08crpdf.html#wp1055303
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_configuration_example09186a0080a57c4c.shtml
Ironically, a Google search for "CUCM Default Credential Policy" now lists this post as the fifth most significant one when trying those search terms doh!
Any thoughts appreciated.
Thanks

Uninstall IE and set another web browser such as Chrome and FireFox as default using Group Policy

Hi there,
Please can anyone instruct me on how to uninstall IE and set another web browser such as Chrome and FireFox as default using Group Policy. Your help would be much appreciated.
Kind regards,
RocknRollTim
P.S. I was redirected by a forum user off the Microsoft Community forum.

IE can't be uninstalled. It's part of the operating system and cannot be removed. You can hide the icon but the engine is still on the machine and still must be updated.
This is a topic best suited for a Group policy forum.
https://social.technet.microsoft.com/Forums/en
US/home?forum=winserverGP
Step one is to install the Chrome ADMX templates - see the link below for more detais:
Configuring Google Chrome via Group Policy | Jack Stromberg:
http://jackstromberg.com/2013/08/configuring-google-chrome-via-group-policy/
Of the two browsers, my personal preference is Chrome over Firefox. Firefox's add in model is too prone to developer insecurity.
My blog
Thanks Justin Gu for marking this as the proposed answer.
Thank you,
RocknRollTim

Can't edit default domain controllers policy on windows 8 or server 2012

I have found that I can't edit the "Default Domain Controllers Policy" from a Windows 8 or Server 2012 machine. I can edit and save changes fine from a Windows 7 machine. The domain controllers are running Windows 2012 Standard upgraded
from Windows 2008 R2. Is there a security setting I am missing?

Posting the resolution from the other thread. Hope it helps!
I just accidentally resolved this issue today. I added the GPMC to a 2008 R2 server so I could make a needed firewall
change within the Windows Firewall with Advanced Security section of the Default Domain Controllers GPO (I enabled the Remote Event Log management rule for the Domain profile). About an hour later, I forgot I was using my Windows 8 machine and I went
to edit the Default Domain Controllers GPO and opened for edit without a problem. I can now edit it from Windows 8 and from Windows Server 2012. Until now, I was using a Windows 7 VM to make the edits, so in my case the problem was resolved by
editing the GPO once from a 2008 R2 machine.

Exchange 2010 Room Calendar Permissions are too permissive when Default is set to None.

Help! Room Calendar permissions are too permissive when Default is set to None.
We are a brand new Exchange 2010 shop, and have setup several conference rooms. Many of them are restricted to specific groups to book via In-Policy Requests using Resource Booking Attendant. The Room Calendar permissions for most
rooms shows only two options for the Default access: None and Full Details. Default is set to None, yet if someone opens the room calendar in Outlook (& they are not part of the In-Policy restrictions) they are able to see the full meeting details
(even open the meeting for full details). How is this possible when by default they should not have any access as it is set to None? Some rooms would not be a problem for clients to see the details, but some rooms like Executive rooms need to be
locked down so that others cannot see the room details - None.
I also found this, although it did not make a difference. If I create an Outlook profile for the room and login as the room calendar in Outlook, go to File, Options, Calendar, Resource Scheduling, Set Permissions I get different default options:
None, "Free/Busy time", "Free/Busy time, subject, location" and Full Details. Why do I have more options in this view rather than the Room Calendar Permissions? I looked at two rooms and both Default options were set to "Free/Busy
time", so I changed these settings to None. Still the clients can view the full room calendar details. What are we missing to get the room calendar locked down so it is not displaying details to everyone?

Only the default groups and Exchange Admins have Full Access to these items, so that is not the issue.
-MailboxFolderPermission 1RP07AWest:\Calendar cmdlet and it shows the same access I see when I open the calendar in Outlook and view the Permissions as shown below - Default is set to None.
As I stated in my last reply the only thing that finally forced it to be blocked is changing the Resource Scheduling permissions under Options > Calendar for that room mailbox. If I have to do that for each room calendar, it's going to
take considerable time to change each one. Is there a cmdlet to allow me to access and change that setting as well?
RunspaceId   : ea4ebc26-1d22-4a7d-b115-1b609099bae3
FolderName   : Calendar
User         : Default
AccessRights : {None}
Identity     : Default
IsValid      : True
ObjectState : New
RunspaceId   : ea4ebc26-1d22-4a7d-b115-1b609099bae3
FolderName   : Calendar
User         : Anonymous
AccessRights : {None}
Identity     : Anonymous
IsValid      : True
ObjectState : New

Multiple-node WebCenter Spaces config with default file-based policy

hi,
My customer will use web center 11g on multiple linux server, I noticed there is a comment in wc doc like this:
=========================================
The default file-based policy store can only be used for single-node WebCenter Spaces configurations. For multi-node configurations, you must reassociate the policy and credential store with an external LDAP-based store (such as Oracle Internet Directory) as described in Section 23.4, "Configuring the Policy and Credential Store."
The policy store can be configured to use Oracle Internet Directory 11gR1 and 10.1.4.3, and OVD 11gR1 with the Local Store Adapter (LSA).
The identity store can be configured to use the following LDAP servers:
Oracle Internet Directory (OID) 11gR1 and 10.1.4.3
Oracle Virtual Directory (OVD) 11gR1 and 10.1.4
Sun iPlanet version 4.1.3
Active Directory shipped as part of Windows 2000
Open LDAP version 2.0.7
Novell NDS version 8.5.1
========================================
My customer only has AD, they don't have budget to buy oid at this time, according to the statement "The policy store can be configured to use Oracle Internet Directory 11gR1 and 10.1.4.3, and OVD 11gR1 with the Local Store Adapter (LSA).", does that mean the wc policy store can not use other ldap such as ad in multiple-node wc configuration?
If performance is not an issue, can I use default file-based policy store in this case?
If it's impossible for the customer to buy oid at this time, what's the possible solution?
Thanks a lot!
Regards

You can configure directly with AD.
Basically your WebLogic server needs to be configured to talk to AD. You can configure an Identity provider in Weblogic server which uses AD as LDAP.
This should work in multi-node environment.
Also, i do not see any reason why file based jazn-data should not work.
Best solution from my perspective if Weblogic AD configuration does not work:
Create and manage your users and roles in Weblogic embedded LDAP. All you have to change in your application is the realm to the name of weblogic realm(default is myrealm) and while deploying make sure you uncheck the create users and roles.
Regards,
Venkat

Reboot domain controller changes audit policy on Default Domain Controller Policy

This has been happening for a long time no matter whether my DCs were running Windows Server 2003 or, as they are now, are running Windows Server 2012 R2. It happens on DCs in one particular site, but the policy change it causes is domain-wide.
I have 2 DCs at that site, every time one of them is rebooted, the following policy is turned off, from Success and Failure to No auditing:
Default Domain Controllers Policy - Computer Configuration - Policies - Windows Settings - Security Settings - Local Policies/Audit Policy.
I have monitoring application relying on this policy being turned on, and if it's off, it's being reported. The monitoring application knows the change, but it doesn't know how the change was made.
All my DCs are running Windows Server 2012 R2, DFL 2008 R2.
Thanks and regards.

Hi,
>>I have 2 DCs at that site, every time one of them is rebooted, the following policy is turned off, from Success and Failure to No auditing:
Did we try to run command gpresult/h report.html with admin privileges to collect group policy result report to check how the policy setting was applied after rebooting? Besides, we can also try to run command
auditpol /get / category:* from an elevated command prompt to check what audit settings are applied.
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Default domain Group Policy

Hello,
In my new company, I noticed that the default domain controllers policy has been (largely) modified.
I thought it was a best practice to keep it clean (In case of restore).
So I would like to create a new GPOs for my DCs to move some of those settings out of the default domain policy.
For example, "Add workstations to domain". If I want to create a new policy for this particular setting, what kind of rules am I supposed to follow to make sure that my new setting will be applied before the default DC policy ?
Is the GPO Link order enough ?
Thank you

Hi,
Just a confirmation, did you mean that want to overwrite some settings in the
Default Domain Controllers Policy?
Within each domain, site, and OU, the
Link Order controls the order in which GPOs are applied. If several GPOs are linked to an organizational unit, their processing is in the order that is specified by the administrator, on the
Linked Group Policy Objects tab for the organizational unit in GPMC. The GPO with the lowest
Link Order is processed last, and therefore has the highest precedence. Since Default Domain Controllers Policy is linked to the Domain Controllers organizational unit, you can create a new GPO and link it to this Domain Controllers organizational
unit, then control thier order of them via Link Order.
If anything I misunderstand or any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu

Changing the application wide default focus traversal policy

Hi,
I have a Swing application built using JDK1.3 where there lots of screens (frames, dialogs with complex screens - panels, tables, tabbed panes etc), in some screens layouts have been used and in other screens instead of any layout, absolute positions and sizes of the controls have been specified.
In some screens setNextFocusableComponent() methods for some components have been called at some other places default focus traversal is used. (which I think is the order in which the components are placed and their postions etc). Focus traversal in each screen works fine.
Now I have to migrate to JDK1.4. Problem now is that after migrating to JDK1.4.2, focus traversal has become a headache. In some screens there is no focus traversal and in some there is it is not what I wanted.
So I thought to replace applicaiton wide default focus traversal policy and I did the following:
///////// Replace default focus traversal policy
java.awt.KeyboardFocusManager.getCurrentKeyboardFocusManager().setDefaultFocusTraversalPolicy(new java.awt.ContainerOrderFocusTraversalPolicy());
But there is no change in the behaviour.
Then I tried following:
///////// Replace default focus traversal policy
java.awt.KeyboardFocusManager.getCurrentKeyboardFocusManager().setDefaultFocusTraversalPolicy(new java.awt.DefaultFocusTraversalPolicy());
I did all this in the main() method of the application before anything else just to ensure that all the components get added after this policy has been set. But no luck.
Does someone has any idea what is the problem here ? I do not want to define my own focus traversal policy for each screen that I use (because thats lot of codes).
Thanks

not that hard if you only have the one focus cycle ( > 1 cycle and it gets a bit harder, sometimes stranger)
import javax.swing.*;
import java.awt.*;
class Testing
int focusNumber = 0;
public void buildGUI()
    JTextField[] tf = new JTextField[10];
    JPanel p = new JPanel(new GridLayout(5,2));
    for(int x = 0, y = tf.length; x < y; x++)
      tf[x] = new JTextField(5);
      p.add(tf[x]);
    final JTextField[] focusList = new JTextField[]{tf[1],tf[0],tf[3],tf[2],tf[5],tf[4],tf[7],tf[6],tf[9],tf[8]};
    JFrame f = new JFrame();
    f.setFocusTraversalPolicy(new FocusTraversalPolicy(){
      public Component getComponentAfter(Container focusCycleRoot,Component aComponent)
        focusNumber = (focusNumber+1) % focusList.length;
        return focusList[focusNumber];
      public Component getComponentBefore(Container focusCycleRoot,Component aComponent)
        focusNumber = (focusList.length+focusNumber-1) % focusList.length;
        return focusList[focusNumber];
      public Component getDefaultComponent(Container focusCycleRoot){return focusList[0];}
      public Component getLastComponent(Container focusCycleRoot){return focusList[focusList.length-1];}
      public Component getFirstComponent(Container focusCycleRoot){return focusList[0];}
    f.getContentPane().add(p);
    f.pack();
    f.setLocationRelativeTo(null);
    f.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
    f.setVisible(true);
public static void main(String[] args)
    SwingUtilities.invokeLater(new Runnable(){
      public void run(){
        new Testing().buildGUI();
}

Oracle Inventory: How to change default category set of items

Hi,
We have a requirement where we need to change the default category set of functional area inventory in oracle as we are importing new items into inventory whihc need to be assigned to a new default category set.There is an existing default categpory set for this area.
As far as i understand once a default category has been set up and an item has been defined, the only way to change the default category set for a given functional area is to update all items with the new default category set before updating the default category set/functional area relationship.
How exactly do we update the defaul category set for an existing item and change it to a new one. Since we have close to 15K items what is the best way to do this.Is there ay API available?
Thanks in Advance
AM

Hi Helios,
Thanks a lot for your response
The fix given in this document is to allign all the exisitng items to a category set (purchasing in this case). This is exactly what my doubt is. How to assign 15k items to a different category set. If i am able to allign these items i can change the default category of the functional area.
Thnaks
AM
PS: i am using 11.5.10.2

List View Web Part - Default Chrome Setting

In our environment, the "Default" chrome setting does not display the title or the border on our list view pages. We have tried Oslo and Seattle master pages and neither displays this to the end user. We do see the title in Edit mode, but
not once the page is saved. If we switch it to Title Only, it does display.
Is this the correct behavior? If so, is there an easy way to change the chrome setting to "Title Only" for the list view web parts in one particular web application when a view is created?

That is the default behavior. normally, the listview web part is on a page where the title of the library is displayed on the page, which would make it redundant to display it in the web part only. I don't know any way to change this behavior
by default when creating a new view.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Default User setting at Dashboard level

Hi SAP Users,
i want default dashboard user setting & all users will only see my setting
Is it possible to have default user setting for dashboard?
Regards
Ravindra

In the administration mode, you can update the current configuration settings/layout (right-click on the UI group you want to update, can be a dashboard, a field...) and save them as the default (standard) settings.
Please try with the administration url I provided you with, and let me know if it helps.
http://server:port/irj/portal?sap/bc/webdynpro/sap/cprojects?sap-config-mode='X'
Matthias

Preview Default Print Setting "Fit to Page" Problem

Preview.app in Snow Leopard has removed the option to print without scaling, and recreating this behaviour with the remaining options is quite complex and requires 4 extra steps.
Steps to Reproduce:
1. Open a document in Preview.app, such as a PDF, of a known paper size.
2. Select 'File' > 'Print…'
3. Change the paper size to one where the default scale value with the default 'Scale to Fit:' 'Print Entire Image' is not 100%. This step is often unnecessary, as many documents will require reduction to include margins, even if the paper sizes match.
4. Select 'Scale:'
5. Select the scale % value.
6. Delete the scale value.
7. Input '100' in the scale value box using the keyboard.
8. Press tab to avoid radar #7256827.
9. Click 'Print'
Expected Results:
Click on a single option to print at 100%, if by chance that wasn't the default option. This would have been one step.
Actual Results:
Does what it says. Steps 4 through 8 are necessary to print at 100% in most cases.
Regression:
This behaviour was as expected in OS X 10.5.x and previous versions, or we wouldn't be having this discussion.
Notes:
Printing at 100% is the only scaling that is common enough to warrant a button to make it an easy one to get to. Preview.app itself even has an 'Actual Size' toolbar button, but has removed this function for printing.
Graphic designers (and other professionals) or specific applications (such as printing on pre-cut or pre-printed paper, labels, or DVDs) can commonly require printing at 100%, and using PDF to distribute documents makes Preview.app the most logical choice for many printing jobs.
Having something other than 100% as a default can cause expensive media to be ruined by a mis-scaled printout, unless these 4 (+1) steps are followed every time.
Most other apps, including Safari, Mail.app and TextEdit default to no scaling, making Preview.app an exception.
I am an architect and this is really annoying!
Does anyone know a workaround?

Sorry no workaround as yet...
I too am now sick of the amount of expensive paper I have wasted due to the Preview app default print setting of 'Scale to fit'.
- No option to print at 100%, you have to manually input this information.
- No way to change this default in preferences, you can change the opening viewing size of a doc to 100% though.
- Doesn't remember the previous settings if you decide to reopen the doc and print another copy.
I also found that if I attempted to print an A4 doc with bleed and crop marks, it would set the default paper size to A4 and the annoying scale to fit would be set to 83%. If I then changed the scale by typing in 100% but don't hit enter for fear of the print starting and then simply use the drop down to change the paper to A3 and then change the orientation and then hit enter it ignores that you have changed the scale and prints your doc at 83% on A3 - Brilliant!
It's a shame to say that I will be going back to acrobat for pdfs!
If you can't put a 100% scale radio button on the print dialogue box either allow people to change the default in prefs or even better allow the presets to control paper size and scale of printing!

Setting up LDAP for authentication to portal:default property set named "ldap

Hi
I am trying to implement the LDAP authentication to WebLogic Portal .Iam went
thru the docmentation ( http://edocs.bea.com/wlp/docs40/p13ndev/users.htm#1131824).It
mentions using the default property set named "ldap" and deploying ldapprofile.jar.My
quenstion is:
-Is there a way to look into the property using EBCC
- Apart from deploying,configuring the ldapprofile.jar,do I have to do any additional
steps in order to make my portal(say,stockportal) authenticate users from LDAP?
-If a create my own portal,should I create a similar "ldap" property set?If so,how.
Any suggestions/help is appreciated.Thanks
- Mike

Thanks Dave.
"David Anderson" <[email protected]> wrote:
You should be able to view the property set for LDAP through the EBCC
if you
have the propertysetws.jar installed in your Portal domain. This provides
the ability for the EBCC to retrieve property set information from your
server.
Dave
"mike" <[email protected]> wrote in message
news:[email protected]...
Hi Adrian
Thank you for the pointers.Much appreciate it.However,one questionstill
persists.
What is the significance of the property set "ldap" mentioned in the
document(http://edocs.bea.com/wlp/docs40/p13ndev/users.htm#1131824).Where
does this property set feature vis-a-vis setting up LDAP securityrealm;does it
mater prior to/after the setting up as mentioned in the document pointeryou just
gave .
Is it sufficinet that i follow the procedure to set up the LDAP oris
there more
to post setting,like creating a property set (similar to "ldap" orcloning
it)
apaprt frpom deploying ldapprofile.jar.
Thanks.
- Mike
"Adrian Fletcher" <[email protected]> wrote:
Mike,
The documentation that covers LDAP authentication is listed under
Weblogic
Server rather than Weblogic Portal.
See Configuring the LDAP Security Realm in Managing Security
(http://e-docs.bea.com/wls/docs61////adminguide/cnfgsec.html#1071872)
Also take a look at the FAQ - Why can't I boot WebLogic Server whenusing
the LDAP Security Realm?
(http://e-docs.bea.com/wls/docs61//faq/security.html#25833)
Hope this helps,
Sincerely,
Adrian.
Adrian Fletcher.
Senior Software Engineer,
BEA Systems, Inc.
Boulder, CO.
email: [email protected]
"mike" <[email protected]> wrote in message
news:[email protected]...
Hi
I am trying to implement the LDAP authentication to WebLogic Portal.Iam
went
thru the docmentation
http://edocs.bea.com/wlp/docs40/p13ndev/users.htm#1131824).It
mentions using the default property set named "ldap" and deployingldapprofile.jar.My
quenstion is:
-Is there a way to look into the property using EBCC
- Apart from deploying,configuring the ldapprofile.jar,do I have
to
do any
additional
steps in order to make my portal(say,stockportal) authenticate usersfrom
LDAP?
-If a create my own portal,should I create a similar "ldap" propertyset?If so,how.
Any suggestions/help is appreciated.Thanks
- Mike

LMS 4.0 Default Credential Set Policy

Similar Messages

Maybe you are looking for