Managing WLAN only in a specific Ap-Group.

Hi,
I would like to schedule the enable or disable of a specific WLAN only in a specific AP-Group.
Is possible to do with a Prime?
Regards.
Mirko Severi.

I don't think that is possible, since the WLAN has to be enabled/disabled on the WLAN itself. Ifyou don't see a setting on the AP Group to do this, then there is no way PI can do this also. Here is an older doc with WCS scheduling you can still do in Classic Theme:
https://supportforums.cisco.com/document/58081/managing-wireless-lan-status-schedules-automatic-enabledisable-feature
Scott

Similar Messages

Allow only changes in specific Metadata Group

Hi,
I have users that are only created for the duplicator we are using.
I would like them to browser all items we have but cannot make changes to any of them - except one Metadata Group that I have created (in this group there are relevant status informations about duplication - as these accounts will be used by many different users I do not want them to be able to do too much..)
"duplication" is an own group with the users in there, I have also created a new Permission Set "duplicator" and assigned it to the group. But in the "Trait Permission" tab of the Permission Set it does not let me "Inherit / Permit / Forbid" for my Metadata Set?
Is there any way to solve this issue?
thanks
tobi

Tobi:
I'd start with creating a clone of the Review permission set then set Forbid to Edit Details for metadata group you'd like to restrict.

User access only to a specific page

I have create a page group with others pages.
I create a user who want to have management rights only to a specific page of the portal, and anywhere else
How can i give access only to a specific page?
thanks

Try this :
1. Edit the page
2. Click "Access" in the banner at the top of page.
3. Under "Access Settings" select "Specify Access Settings"
4. Enter the username into the "Grantee" text box
5. Select "MANAGE" from the drop down box of permission levels
6. Click "Add"
7. Click "Apply"
8. Click "Clear Cache" to activate the changes
9. Click "Ok" to return to the page.

Cisco ACS 5.3 - How to only allow specific AD groups to login

Can anyone help me figure out what I have wrong or have missing?
I've configured three specific AD groups, Admin, Storage, and HelpDesk, with their own commands sets.
This seems to be working fine, but everyone can log into everything, but they can't do anything except exit.
My goal is to not allow anyone to login that is not part of the three AD groups I have specified with the respective command sets.
All the logins hit the Admin account, even though the id in AD is not in the that AD group. I have something screwed up.

Check your authorization rules, make sure the default rule isnt set to Permit. Group Mapping is only mapping AD groups to internal ACS groups, we need to check your authorization rules to see which policies they users are hitting, you may want to reset the hit count and test to see which policy is allowing access.
Thanks,
Tarik Admani
*Please rate helpful posts*

Outlook 2010 using Windows XP - sync specific contact groups only

Hi -
I have an iPhone 4, and I sync it with specific contact groups (work and personal) in Outlook on two different PCs (work and personal) - which used to work.
I'm now usings iTunes 10.2.2.14 and it doesn't on my PC with XP which has Outlook 2010. Instead of syncing my specific folders, it tries to sync ALL of my contacts.
In iTunes, I click on Info < check the "Sync Contacts with" box < choose "Outlook < choose "Selected groups" < check the boxes for my specific folders (do not check the "Add contacts created outside of groups on this iPhone to:" box) < click apply and it starts to sync
You're asked if you want to merge or replace, I click merge, and then it asks me if I want to change my 407 contacts - that's my entire contact list! I don't want that in this computer's outlook ... I only want to sync the folders that I selected.
Note that this process does, however, work using the same iTunes version on my PC with Windows 7 and Outlook 2003.
Help! (and thank you)

Exchange 2013 doesn't support MAPI RPC, it has to use RPC over HTTPS, a.k.a., Outlook Anywhere (or POP or IMAP, which are inferior) so it sounds like everything is working as designed.
The password being rejected for Outlook Anywhere suggests that you have a configuration error. Run this command:
Get-OutlookProvider -identity EXPR | FL CertificatePrincipalName
and make sure that this matches the CN of your certificate. XP has a problem when it doesn't. You can change it with Set-OutlookProvider if need be.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Approve suppliers only for specific material groups

Dear Experts,
Current scenario: Our purchasers can buy products from all material groups from every boarded supplier. E.g. they can buy production materials from an office paper supplier.
Target scenario: The moment a purchaser buys a material that's not part of the approved material group of that specific supplier, he get's an error.
What is a practical way to achieve this?
Thanks a lot,
Steffen

Normally we maintain Source lists, which restrict the list of vendors from whom certain materials can be purchased.
Sometimes you can also create a Material group level contract, and then in the PO specify the materials from that specific material group.
but ideally you should go for source list, as it is the simplest and standard way to control approved suppliers for materials. I know its not at material group level , but still its the best option.
Last case, you can go for a development , use the BADI ME PO PROCESS CUST i think it is.

FB01N-posting reconciliation account to specific ledger group

Dear all,
I wwould like to adjust certain customer/vendor account via FB01N with specific ledger group, however, I got an error message 'FAGL_POST_SERVICE 034, Postings to ledger ZL not permitted with account type D'.
would anyone know how to solve this problem? thanks.
Rgds,
Ben

Hi Ben,
Current design is that the account type S and non-open item managed accounts are allowed for FB50L. FB50L is designed to make 'adjustment' postings depending on the requirement for period-end closing operations. Open item managed accounts (including vendor, customer..) will be processed for clearing but clearing must be done for the leading ledger and also it doesn't give an option to make clearing only for the non-leading ledger.
Kind regards, Kyoko

How to set a MessageTextInput to be Read Only for a specific row?

Hi,
In Benefits Self Service, particularly the Update Beneficiaries page, it lists all your eligible Beneficiaries including yourself. The table has the following columns displayed for each beneficiary: Beneficiary, Relationship, Social Security Number, Primary %, Contingent %, Clear. This is the page where you allocate the Primary % and the Contingent %. The Primary % and Contingent % are MessageText Input.
We have a requirement that we wouldn't want an employee to designate himself/herself as a beneficiary. However, the employee is being listed as a beneficiary along with all the other eligible beneficiaries. Oracle says it is an intended functionality to include the employee in the beneficiary. Is there a way thru Controller Object extension to set the Primary % and Contingent % as Read Only but only for the row corresponding to the employee to prevent the employee from accidentally allocating himself/herself as a beneficiary.
I know there is the SPEL functionality but this requires me to add a transient attribute to the View Object corresponding to that table. But everytime I make a change to the View Object either by adding a transient attribute or some other changes, I end up getting an error on the standard Relation attribute of that view object. The error is something like "Relation set attribute failed for View Object". I cannot get pass this error and I'm not sure what's causing this. I see other people in this forum have encountered the same problem when extending view objects but no specific solution was offered nor any clear explanation of the cause.
So I thought if there's any way this could be done thru Controller Object extension. If so, please let me know how. The challenge for me I think is finding the bean corresponding to those Message Text Input but only for a specific row in the table.
Thanks,
Ronaldo

Hi,
I also tried extending the View Object but without changing anything to the SQL so it is exactly the same as the standard view object but I still get the "Attribute set for Relation in view object BeneficiaryPeopleVO1 failed". Based from this, extending the view object whether any change has been made or not affects the standard transient Relation attribute.
Here is the standard XML definition of the View Object if anyone is curious
<ViewObject
Name="BeneficiaryPeopleVO"
BindingStyle="Oracle"
CustomQuery="true"
RowClass="oracle.apps.ben.selfservice.enrollment.server.BeneficiaryPeopleVORowImpl"
ComponentClass="oracle.apps.ben.selfservice.enrollment.server.BeneficiaryPeopleVOImpl"
MsgBundleClass="oracle.jbo.common.JboResourceBundle"
FetchMode="FETCH_AS_NEEDED"
FetchSize="10"
UseGlueCode="false" >
<SQLQuery><![CDATA[
SELECT pcr.person_id person_id,
pen.prtt_enrt_rslt_id prtt_enrt_rslt_id,
con.first_name ||' '||con.last_name || ' ' || con.suffix Beneficiary,
con.national_identifier Ssn,
sum(decode(pbn.prmry_cntngnt_cd,'PRIMY',pbn.pct_dsgd_num,0)) primary_pct,
sum(decode(pbn.prmry_cntngnt_cd,'CNTNGNT',pbn.pct_dsgd_num,0)) contingent_pct,
con.person_id bnf_person_id,
con.business_group_id,
pen.per_in_ler_id,
pbn.pl_bnf_id pl_bnf_id,
pbn.object_version_number object_version_number,
pbn.effective_start_date,
pcr.contact_type contact_type,
con.full_name beneficiary_full_name,
sum(decode(pbn.prmry_cntngnt_cd,'PRIMY',pbn.pct_dsgd_num,0)) Db_Primary_pct,
sum(decode(pbn.prmry_cntngnt_cd,'CNTNGNT',pbn.pct_dsgd_num,0)) db_contingent_pct,
DECODE(pbn.pl_bnf_id, null, 'DeleteIconDisabled', 'DeleteIconEnabled') delete_switcher,
pen.pl_id pl_id,
pen.oipl_id oipl_id,
nvl((select 'Y' from dual where (to_date(:1 , 'rrrr/mm/dd') between
          nvl(pcr.date_start,to_date(:2 , 'rrrr/mm/dd')) and
          nvl(pcr.date_end,to_date(:3 , 'rrrr/mm/dd'))) and
          (pil.lf_evt_ocrd_dt <= nvl(con.date_of_death,pil.lf_evt_ocrd_dt))), 'N') rel_exists_flag
FROM per_people_f con,
per_contact_relationships pcr,
ben_pl_bnf_f pbn,
ben_prtt_enrt_rslt_f pen,
     ben_per_in_ler pil
WHERE pcr.personal_flag = 'Y'
AND (pbn.pl_bnf_id is not null or
(to_date(:4 ,'rrrr/mm/dd') between
nvl(pcr.date_start,to_date(:5 ,'rrrr/mm/dd'))
AND nvl(pcr.date_end,to_date(:6 ,'rrrr/mm/dd'))
          and pil.lf_evt_ocrd_dt <= nvl(con.date_of_death,pil.lf_evt_ocrd_dt)))     --Bug 4297137
AND pcr.contact_person_id = con.person_id
and pen.person_id = pcr.person_id
AND pbn.bnf_person_id (+) = con.person_id
AND to_date(:7 ,'rrrr/mm/dd') between pbn.effective_start_date (+)
AND pbn.effective_end_date (+)
AND pcr.person_id = :8
and pen.prtt_enrt_rslt_id = :9
and to_date(:10 , 'rrrr/mm/dd') between con.effective_start_date and con.effective_end_date
and to_date(:11 , 'rrrr/mm/dd') between pen.effective_start_date and pen.effective_end_date
and pil.per_in_ler_id = pen.per_in_ler_id
and pil.per_in_ler_stat_cd NOT IN('VOIDD', 'BCKDT')
and pbn.prtt_enrt_rslt_id (+) = :12
and ((to_date(:13 ,'rrrr/mm/dd') between
nvl(pcr.date_start,to_date(:14 ,'rrrr/mm/dd')) and
nvl(pcr.date_end,to_date(:15 ,'rrrr/mm/dd'))) or
((pcr.date_start = (select max(pcr2.date_start)
from per_contact_relationships pcr2
where pcr2.contact_person_id = pcr.contact_person_id
and pcr2.person_id = pcr.person_id
and pcr2.personal_flag = 'Y')) and
not exists (select null
from per_contact_relationships pcr3
where pcr3.contact_person_id = pcr.contact_person_id
and pcr3.person_id = pcr.person_id
and pcr3.personal_flag = 'Y'
and to_date(:16 ,'rrrr/mm/dd') between
nvl(pcr3.date_start,to_date(:17 ,'rrrr/mm/dd'))
and nvl(pcr3.date_end,to_date(:18 ,'rrrr/mm/dd')))
and (pbn.pl_bnf_id is null or
exists (select null from ben_per_in_ler pil2
where pil2.per_in_ler_id = pbn.per_in_ler_id
and pil2.per_in_ler_stat_cd not in ('VOIDD','BCKDT')))
GROUP BY pcr.person_id,
pen.prtt_enrt_rslt_id,
con.last_name,con.first_name,con.suffix,
con.full_name,
con.national_identifier,
pcr.contact_type,
con.date_of_birth,
con.person_id,
con.business_group_id,
pen.per_in_ler_id,
pl_bnf_id,
pbn.object_version_number,
pbn.effective_start_date,
pen.pl_id,
pen.oipl_id,
          pcr.date_start,
          pcr.date_end,
          pil.lf_evt_ocrd_dt,
          con.date_of_death
union
SELECT to_number(null) person_id,
pen.prtt_enrt_rslt_id prtt_enrt_rslt_id,
con.first_name ||' '||con.last_name || ' ' || con.suffix Beneficiary,
con.national_identifier Ssn,
sum(decode(pbn.prmry_cntngnt_cd,'PRIMY',pbn.pct_dsgd_num,0)) primary_pct,
sum(decode(pbn.prmry_cntngnt_cd,'CNTNGNT',pbn.pct_dsgd_num,0)) contingent_pct,
con.person_id bnf_person_id,
con.business_group_id,
pen.per_in_ler_id,
pbn.pl_bnf_id pl_bnf_id,
pbn.object_version_number object_version_number,
pbn.effective_start_date,
'SLF' contact_type,
con.full_name beneficiary_full_name,
sum(decode(pbn.prmry_cntngnt_cd,'PRIMY',pbn.pct_dsgd_num,0)) Db_Primary_pct,
sum(decode(pbn.prmry_cntngnt_cd,'CNTNGNT',pbn.pct_dsgd_num,0)) db_contingent_pct,
DECODE(pbn.pl_bnf_id, null, 'DeleteIconDisabled', 'DeleteIconEnabled') delete_switcher,
pen.pl_id pl_id,
pen.oipl_id oipl_id,
'Y' rel_exists_flag
FROM per_people_f con,
ben_pl_bnf_f pbn,
ben_prtt_enrt_rslt_f pen,
     ben_per_in_ler pil
WHERE
pbn.bnf_person_id (+) = con.person_id
AND to_date(:19 ,'rrrr/mm/dd') between pbn.effective_start_date (+)
AND pbn.effective_end_date (+)
AND con.person_id = :20
and con.person_id = pen.person_id
and pen.prtt_enrt_rslt_id = :21
and to_date(:22 , 'rrrr/mm/dd') between con.effective_start_date and con.effective_end_date
and to_date(:23 , 'rrrr/mm/dd') between pen.effective_start_date and pen.effective_end_date
and pil.per_in_ler_id = pen.per_in_ler_id
and pil.per_in_ler_stat_cd NOT IN('VOIDD', 'BCKDT')
and (pbn.pl_bnf_id is not null or pil.lf_evt_ocrd_dt <= nvl(con.date_of_death,pil.lf_evt_ocrd_dt))     --Bug 4297137
and pbn.prtt_enrt_rslt_id (+) = :24
and (pbn.pl_bnf_id is null or
exists (select null from ben_per_in_ler pil2
where pil2.per_in_ler_id = pbn.per_in_ler_id
and pil2.per_in_ler_stat_cd not in ('VOIDD','BCKDT')))
GROUP BY pen.prtt_enrt_rslt_id,
con.last_name,con.first_name,con.suffix,
con.full_name,
con.national_identifier,
con.date_of_birth,
con.person_id,
con.business_group_id,
pen.per_in_ler_id,
pl_bnf_id,
pbn.object_version_number,
pbn.effective_start_date,
pen.pl_id,
pen.oipl_id
ORDER BY 3,14
]]></SQLQuery>
<DesignTime>
<Attr Name="_isCodegen" Value="true" />
<Attr Name="_version" Value="9.0.3.13.75" />
<Attr Name="_CodeGenFlagNew" Value="36" />
<Attr Name="_rowSuperClassName" Value="oracle.apps.fnd.framework.server.OAPlsqlViewRowImpl" />
<Attr Name="_objectSuperClassName" Value="oracle.apps.fnd.framework.server.OAPlsqlViewObjectImpl" />
</DesignTime>
<ViewAttribute
Name="PersonId"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="PERSON_ID"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="PrttEnrtRsltId"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="PRTT_ENRT_RSLT_ID"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="Beneficiary"
IsQueriable="false"
IsPersistent="false"
Precision="332"
Type="java.lang.String"
AliasName="BENEFICIARY"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="VARCHAR" >
</ViewAttribute>
<ViewAttribute
Name="Ssn"
IsQueriable="false"
IsPersistent="false"
Precision="30"
Type="java.lang.String"
AliasName="SSN"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="VARCHAR" >
</ViewAttribute>
<ViewAttribute
Name="PrimaryPct"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Type="oracle.jbo.domain.Number"
AliasName="PRIMARYPCT"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="ContingentPct"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="CONTINGENTPCT"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="BnfPersonId"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="BNFPERSONID"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="BusinessGroupId"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="BUSINESSGROUPID"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="PerInLerId"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="PERINLERID"
ColumnType="$none$"
Expression="'See the SQL...'"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="PlBnfId"
IsQueriable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="PL_BNF_ID"
ColumnType="$none$"
Expression="PL_BNF_ID"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="ObjectVersionNumber"
IsQueriable="false"
IsPersistent="false"
Precision="9"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="OBJECT_VERSION_NUMBER"
ColumnType="$none$"
Expression="OBJECT_VERSION_NUMBER"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="EffectiveStartDate"
IsQueriable="false"
IsPersistent="false"
Type="oracle.jbo.domain.Date"
AliasName="EFFECTIVE_START_DATE"
ColumnType="$none$"
Expression="EFFECTIVE_START_DATE"
SQLType="DATE" >
</ViewAttribute>
<ViewAttribute
Name="ContactType"
IsQueriable="false"
IsPersistent="false"
IsNotNull="true"
Precision="30"
Type="java.lang.String"
AliasName="CONTACT_TYPE"
ColumnType="$none$"
Expression="CONTACT_TYPE"
SQLType="VARCHAR" >
<DesignTime>
<Attr Name="_DisplaySize" Value="30" />
</DesignTime>
</ViewAttribute>
<ViewAttribute
Name="BeneficiaryFullName"
IsQueriable="false"
IsPersistent="false"
Precision="240"
Type="java.lang.String"
AliasName="BENEFICIARY_FULL_NAME"
ColumnType="$none$"
Expression="BENEFICIARY_FULL_NAME"
SQLType="VARCHAR" >
<DesignTime>
<Attr Name="_DisplaySize" Value="240" />
</DesignTime>
</ViewAttribute>
<ViewAttribute
Name="DbPrimaryPct"
IsQueriable="false"
IsPersistent="false"
Type="oracle.jbo.domain.Number"
AliasName="DB_PRIMARY_PCT"
ColumnType="$none$"
Expression="DB_PRIMARY_PCT"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="DbContingentPct"
IsQueriable="false"
IsPersistent="false"
Type="oracle.jbo.domain.Number"
AliasName="DB_CONTINGENT_PCT"
ColumnType="$none$"
Expression="DB_CONTINGENT_PCT"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="Relation"
IsQueriable="false"
IsPersistent="false"
Type="java.lang.String"
AliasName="Relation"
ColumnType="$none$"
SQLType="VARCHAR" >
</ViewAttribute>
<ViewAttribute
Name="DeleteSwitcher"
IsPersistent="false"
Precision="30"
Type="java.lang.String"
AliasName="DeleteSwitcher"
ColumnType="VARCHAR2"
Expression="DeleteSwitcher"
SQLType="VARCHAR" >
</ViewAttribute>
<ViewAttribute
Name="PlId"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="PlId"
ColumnType="VARCHAR2"
Expression="PlId"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="OiplId"
IsUpdateable="false"
IsPersistent="false"
Precision="15"
Scale="0"
Type="oracle.jbo.domain.Number"
AliasName="OiplId"
ColumnType="VARCHAR2"
Expression="OiplId"
SQLType="NUMERIC" >
</ViewAttribute>
<ViewAttribute
Name="RelExistsFlag"
IsQueriable="false"
IsPersistent="false"
Precision="30"
Type="java.lang.String"
AliasName="REL_EXISTS_FLAG"
ColumnType="VARCHAR2"
Expression="REL_EXISTS_FLAG"
SQLType="VARCHAR" >
</ViewAttribute>
</ViewObject>
Thanks,
Ronaldo

Need to display records only once for that particular group

Hi,
I have a requirement like displaying repeated records only once for that particular group.
For eg, in the emp table, I need to display repeated deptno only once for the particular group of job.
And for the above requirement I have used the below query,
SELECT empno, DECODE (LAG (job, 1) OVER (ORDER BY job), job, NULL, job),
DECODE (LAG (deptno, 1) OVER (ORDER BY deptno), deptno, NULL, deptno)
FROM emp;
Output:
EMPNO     JOB     DEPTNO
7782          10
7934     CLERK
7839     PRESIDENT
7876          20
7788
7902     ANALYST
7566     MANAGER
7844          30
7900
7654     SALESMAN
7698
But in the above output you can find that, say deptno 10 is getting displayed only once, whereas I want that deptno 10 to be checked whether it is getting repeated within the group of JOB and than hide the deptno 10 only if it is repeated within that job group. If not, deptno 10 should be displayed again.
Please help me in this.
Regards,
Shiva

Hi,
Hope the below helps.
SELECT emp_id, job, deptno,
       CASE WHEN LAG(deptno, 1) OVER (partition by job order by deptno) = deptno THEN null else deptno end
FROM empRegards
Ameya

How to export "Managed by" field of Distribution and Security groups and import with new values? (Exchange 2010, AD 2003)

My Active Directory environment is 2003 functional level and we have Exchange 2010.
I am trying to find out the best way to do a mass edit for the "Managed by" values of our security and distribution groups.
I know we can export the "managed by" field by csvde but I am not sure this is the correct way to do it. Also in the case that there are multiple users assigned to be managing a distribution group it only shows one value. Also powershell from Exchange
2010 can be used with "get-distribution" but as our AD environment is 2003 is this correct also?
Finally once the data is exported to csv can it be edited to then reimport and udpate the existing group managed by fields with new values?
Not really sure that the best way to go about this is.
Summary - We have 2003 AD with Exchange 2010 and I am trying to export a list of all our Distribution/Security groups showing the group name and managedby values so we can edit and update the
existing managedby values with new ones. In some cases we have multiple users as the owners.
Appreciate any advice on how this can be best achieved. Thank you.

Hi,
We can use the following command in Exchange 2010 to export "Managed by" field of Distribution and Security groups:
Get-DistributionGroup | Select-object Name,@{label="ManagedBy";expression={[string]::join(“;”,$_.managedby)}},Primarysmtpaddress | Export-Csv
C:\export.csv
After you changed the Managed by field in export.csv and saved it as a new file named import.csv, we can run the following command to set with new value:
Import-Csv C:\import.csv | Foreach-Object{ Set-DistributionGroup –Identity $_.Name –ManagedBy $_.ManagedBy}
Hope it works.
Thanks,
Winnie Liang
TechNet Community Support

Securing AnyConnect VPN user access via specific LDAP groups in Active Directory?

Is there a brief tutorial on how to secure AnyConnect VPN access using Active Directoty security groups?
I have AAA LDAP authentication working on my ASA5510, to authenticate users against my internal AD 2008 R2 server, but the piece I'm missing is how to lock down access to AnyConnect users ONLY if they are a member of a specific Security Group (i.e. VPNUsers) within my AD schema.

This looks fairly complete
http://www.compressedmatter.com/guides/2010/8/19/cisco-asa-ldap-authentication-authorization-for-vpn-clients.html
Sent from Cisco Technical Support iPad App

Router Access for Specific ACS Group

I want to use TACACS to control access to all our Cisco switches and routers. I have an Cisco ACS device that can be used to centrally manage engineer accounts. The ACS server is, however, also used to store our corporate users VPN accounts.
Can I limit access to the routers and switches to only users in the Engineers group on the ACS server?

Hello,
If you are using ACS 4.x, limiting access through Network Access Restrictions (NARs) might help you out:
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a0080858d3c.shtml
Let me know if this helps, or alternatively if you are using ACS 5 (in which case the scenario is a little bit different).
Regards,
Fede
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Define a Disk destination for a specific Protection group DPM 2012 R2

Hi,
I currently have a DPM 2012 R2 Server with some protection groups created. Just recently added a new disk to the storage pool. I wanted to see if I can define a specific disk to a specific protection group?
I found this command: Set-DPMDatasourceDiskAllocation and this parameter -DestinationDiskPool
But I'm not sure if that can help me out and how to use it with and existing protection group.
Can someone give me an example maybe or guide the correct way to do this? Do I need to create another disk pool and move the disk there? Is that even possible? I'm quite lost here, any ideas are appreciated.
Thanks!
Eduardo Rojas

Hi,
I don't really recommend this, but the only way to specify a physical disk (volume) to use when protecting a new data source is to use custom volumes.
Defining Custom Volumes
http://technet.microsoft.com/en-us/library/ff399012.aspx
How to Assign a Custom Volume for a Protection Group
http://technet.microsoft.com/en-us/library/bb809021.aspx
There are pros and cons to either approach, but some can be partially mitigated quite easily.
1) Using existing disk configuration – 2-disks in a hardware raid-1 – no dedicated disk for DPM.
     Pro - build in data integrity for the DPM storage pool and operating system.
     Pro – No need to buy / install / maintain additional hardware.
     Con – Using DPM Custom volumes on basic disks needs planning to get the volume sizes correct based on the retention range and data churn.
     Con – miscalculating makes it difficult to correct later because you cannot grow volumes on basic disks unless you have adjacent free space.
     Con – DPM cannot auto-grow custom volumes, so you will need to grow them manually if needed.
     How to mitigate – convert the disk to Dynamic disk so the custom volumes can be manually grown (even in discontinuous space) if you miscalculate the sizes.
2) Adding an additional disk so DPM can have its own dedicated storage pool disk.
      Pro – DPM can make the volumes automatically when adding data sources to protection.
      Pro- DPM can autogrow if necessary, so it’s more hands off.
      Con – Additional cost of hardware, installation and upkeep.
      Con – No data integrity should the DPM storage pool disk fail.
This is easily recoverable to get new disk to be used by DPM, but you will lose all backups.
Hope this helps frame the debate.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Open Posting Period only for some specific user?

Dear all,
does someone have any idea, how could a posting period in ucmon be opened only for several specific user?
Is that possible?
Many thanks.
Hallochen
Edited by: hallochen on Sep 22, 2011 2:45 PM

Depending on the requirement
May be you can open it for a specific Cons Group(assuming User has authorization for that group) which translates back to opening it for specific user only
If user needs to work on more than 1 cons groups & has authorization then a step by step approach will help
rgds
D

Select all users of specific APEX Group

Hello,
do you know how I can find all users assigned to specific User Group?
I know there is User Groups Assignments page in APEX Administration panel, but it's very weak. It shows only 500 records, and there is no search option. I also can't find APEX group view in APEX DB.
I can check all groups of any user, I don't believe I can't check all users of any group.
Regards,
Przemek

Hi Martin,
thanks a lot! I needed sth similar, but I couldn't have found right views. Thanks to you now I can:
Select GROUP_NAME, USER_NAME, FIRST_NAME, LAST_NAME from WWV_FLOW_USERS u, WWV_FLOW_GROUP_USERS g where g.USER_ID=u.USER_ID and UPPER(GROUP_NAME) like '%some_name%' order by USER_NAME
Regards,
Przemek

Managing WLAN only in a specific Ap-Group.

Similar Messages

Maybe you are looking for