Metadata Best Practice: Subtotals of ICP Accounts

Say I have three accounts (A, B, C) and C is the subtotal of A and B. A and B are both listed as IsICP "Y". Should my subtotal account C be listed as IsICP "Y" or "N"? Should all subotals further up the chain be IsICP "Y" or "N"?
The reason I am asking is that we had Oracle reps (very good ones I believe) set up our metadata years ago. They set all our subtotal accounts to IsICP "N". Everything was fine and great. Well, now Oracle is releasing updated versions of SmartView and we have found that anything after version 9.3.1.1 shows us a "#INVALID" intersection when looking at our subtotal account C with base Entity/ICP combos.
This data is critical to our business and any updates to SmartView will block us from viewing it.
I guess the question is, is this a bug in SV or bad metadata setup by the consultants we hired from Oracle?
Thanks

I recently set up ICP for a company (albeit without implementing plug accounts or the ICP Transactions module - the users just needed to enter ICP amounts against some entities) and I found that I needed to mark parent accounts (where ICP amounts were to be viewed) as IsICP "Y".
There could be a valid reason for not setting up parent accounts as IsICP, but I do not know what that is. Using IsICP "Y" on parent accounts worked for me.
Regards
Mike

Similar Messages

Best practice for multiple email accounts

Hello
I have set up a Mac mini server with virtual hosts. So, how is the best practice to set up email accounts for each host? I want to have emails like
[email protected]
[email protected]
and
[email protected]
[email protected]
and so on.
Should I create groups for each domain, and then user "info" and "contact" in each group. Or just add a user something like "infomysite1" and have a second short name "[email protected]"
Advices are welcome
Best regards, Magnus

If user1@domain1 and user1@domain2 are the same person then you just add the other domain to Hosting-> Local Host Aliases. Same user will get all mail for both domains.
However, I'm presuming that the user1@domain1 and user1@domain2 are two separate people (i.e., same name but different mail account). If so...
See Chapter: A Mail Service Virtual Host in Apple's Mail Services Administration PDF download at http://www.apple.com/server/macosx/resources/documentation.html
Also, see MakingVirtual_Mail_Users_in_OS_XServer.pdf from http://osx.topicdesk.com (downloads sections)
The topicdesk pdf was written for 10.5 server but I think it is still applicable to 10.6 (but follow the Apple doc just in case). However, it is good for explaining why you might want postfix-style aliases rather than the simpler Apple server-style aliases.

Best practice converting local laptop accounts to Mobile Accounts with PHD

Hi,
what is the best practice to convert local laptop users (with different UIDs than their network account) to mobile accounts? Especially when the local dir should not be synced in whole (just Documents, Library). Client and server are 10.5, network accounts are on NFS.
I tried creating the mobile account with a minimal network directory (Library etc. ) and then move the original folders into place, but this didn't work out (the sync info was overwritte somewhere ..)
Christian

I think your best bet is to copy the home folder off the laptop to the user share on the server. Then with WGM create the same user and the apply all permissions of the network user to the copied folder.
Once you have that create your settings for the PHD and then go to the laptop. There you will setup the laptop and bind it to the directory, have that user login (might want to do this on a lan, not airport) and then it will move all the data across to that laptop, and since the network user (same as the local) owns that folder everything should work. If the password is the same then OS X should fix the login and keychain password, so saved forms or email password would show up.
I did this same thing for 20 OS 10.4 client laptops. Took me a while to get all of this in place but will spare you the running around...
hope that helps

SQL 2012 service accounts best practice

I'm installing SQL Server 2012 for ConfigMgr 2012 r2 and I wonder what is the best practice for SQL service accounts.
During the installation of SQL Server, in the server configuration/Service accounts menu I'm allowed to configure following service accounts: SQL Server Agent, SQL Server Agent Database Engine, SQL Server Reporting Services, SQL Server Browser.
Do I have to create separate domain user (not admin) accounts for each service and configure service principal name (SPN) for all of them?
For example: Domain user account named SQLSA for SQL Server Agent, another domain user account
SQLADBE for SQL Server Agent Database Engine etc.

During the installation of SQL Server 2012, the user is prompted to provide service account
credentials. The default service accounts suggested vary depending on whether SQL Server
2012 is installed on a computer running Windows Vista or Windows Server 2008 or on a computer
running Windows 7 or Windows Server 2008 R2. On computers running Windows Vista
or Windows Server 2008 operating systems, the following default service accounts are used:
- NETWORK SERVICE Database Engine, SQL Server Agent, Analysis Services,
Integration Services, Reporting Services, SQL Server Distributed Replay Controller,
SQL Server Distributed Replay Client
- LOCAL SERVICE SQL Server Browser, FD Launcher (Full-Text Search)
- LOCAL SYSTEM SQL Server VSS Writer
On computers running Windows 7 or Windows Server 2008 R2 operating systems, the following
default accounts are used:
- Virtual Account or Managed Service Account Database Engine, SQL Server Agent,
Analysis Services, Integration Services, Replication Services, SQL Server Distributed
Replay Controller, SQL Server Distributed Replay Client, FD Launcher (Full-Text Search)
- LOCAL SERVICE SQL Server Browser
- LOCAL SYSTEM SQL Server VSS Writer
For Windows 7 and Windows Server 2008 R2, you can use a Managed Service Account
(MSA) or a Managed Local Account. The differences between these account types are as
follows:
- Managed Service Account (MSA) This special kind of domain account managed
by a domain controller is assigned to a single member computer and used for running
services. The MSA password is managed by the domain controller. MSAs can register
a Service Principal Name (SPN) with Active Directory. MSAs use a $ name suffix; for
example, CONTOSO\SQL-A-MSA$. You must create the MSA prior to running SQL
Server Setup if you want to use an MSA with SQL Server services.
- Virtual Accounts or Managed Local Accounts These virtual accounts can access
the network in a domain environment and are used by default for service accounts
during SQL Server 2012 setup when run on Windows 7 or Windows Server 2008 R2.
Such accounts use the NT SERVICE\<SERVICENAME>format. You don’t need to specify
a password when using virtual accounts with SQL Server 2012 because this is handled
automatically by the operating system.
You should run SQL Server services, using the minimum possible user rights, and use an
MSA or virtual account when possible. If you are manually configuring service accounts, use
separate accounts for different SQL Server services. If it is necessary to change the properties
of service accounts used for SQL Server 2012, use SQL Server tools such as SQL Server
Configuration Manager. This ensures that all necessary dependencies are
updated, which does not happen if you use only the Services console.
Although you can configure domain accounts as service accounts, this strategy requires
more effort because you must ensure that service account passwords are changed regularly.
You must also manage SPNs, which are required for Kerberos authentication.
Best regads
P.Ceglie

Is it best practice to use account lockout policy

Windows Server 2008 r2 (will be moving to 2012 r2)
since implementing account lockout policy two days ago, we've been bombarded by calls to unlock accounts. and after a few minutes, same users get their accounts locked again.
my question, since we are already using strong password policy (8 chars min, 90 days max to expire), at this day and age is it still best practice to rely on account lockout policy? keeping in mind the above flood of calls.

since implementing account lockout policy two days ago, we've been bombarded by calls to unlock accounts. and after a few minutes, same users get their accounts locked again.
my question, since we are already using strong password policy (8 chars min, 90 days max to expire), at this day and age is it still best practice to rely on account lockout policy? keeping in mind the above flood of calls.
account lockout is generally considered un-necessary if you have implemented a very strong password complexity/history policy.
There are many discussions on the topic of password/passphrase "strength", and it's important to consider the various factors involved, and, how they affect your organisation's view of "security".
I would say that 8 chars is not very strong. You should also consider if password aging/expiry is a useful control at all.
Since this forum is related to Group Policy, and, password/security is really quite a separate topic, you should consider the DS forum or the security forum, or separate research or consulting services, to get a broad understanding of the things to consider
for your particular requirements/scenario.
Other considerations include any security standards which can be useful reading to understand the nature of the topic (e.g. PCI DSS, HIPAA, FIPS, etc)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Is account lockout policy still best practice

Windows Server 2008 r2 (will be moving to 2012 r2)
since implementing account lockout policy two days ago, we've been bombarded by calls to unlock accounts. and after a few minutes, same users get their accounts locked again.
my question, since we are already using strong password policy (8 chars min, 90 days max to expire), at this day and age is it still best practice to rely on account lockout policy? keeping in mind the above flood of calls.

Just to add, I think it would have been a better idea to broadcast the planned changes organization wide before implemeting something like this.
Place to check that we usually check and possibly good to let people know:
Desktops
Extra Laptops that may not be on site
Mobile phone Exchange accounts or Office 365 hybrid ADFS accounts
WIFI profiles on laptops, iPads, other tablets, mobile phones, etc
Locked workstations that have not been logged off
Services using a user account or with old credentials - usually I see devs doing this
Mapped Drives with explicit permissions
Current running RDP/RDS sessions
Scheduled Tasks with old credentials
VPN connections
etc
Troubleshooting account lockout the Microsoft PSS way
http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-
Account Lockout and Management Tools
http://www.microsoft.com/en-us/download/details.aspx?id=18465way.aspx
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Best practice for Active Directory User Templates regarding Distribution Lists

Hello All
I am looking to implement Active Directory User templates for each department in the company to make the process of creating user accounts for new employees easier. Currently when a user is created a current user's Active directory account is copied, but
this has led to problems with new employees being added to groups which they should not be a part of.
I have attempted to implement this in the past but ran into an issue regarding Distribution Lists. I would like to set up template users with all group memberships that are needed for the department, including distribution lists. Previously I set this up
but received complaints from users who would send e-mail to distribution lists the template accounts were members of.
When sending an e-mail to the distribution list with a member template user, users received an error because the template account does not have an e-mail address.
What is the best practice regarding template user accounts as it pertains to distribution lists? It seems like I will have to create a mailbox for each template user but I can't help but feel there is a better way to avoid this problem. If a mailbox is created
for each template user, it will prevent the error messages users were receiving, but messages will simply build up in these mailboxes. I could set a rule for each one that deletes messages, but again I feel like there is a better way which I haven't thought
of.
Has anyone come up with a better method of doing this?
Thank you

You can just add arbitrary email (not a mailbox) to all your templates and it should solve the problem with errors when sending emails to distribution lists.
If you want to further simplify your user creation process you can have a look at Adaxes (consider it's a third-party app). If you want to use templates, it gives you a slightly better way to do that (http://www.adaxes.com/tutorials_WebInterfaceCustomization_AllowUsingTemplatesForUserCreation.htm)
and it also can automatically perform tasks such as mailbox creation for newly created users (http://www.adaxes.com/tutorials_AutomatingDailyTasks_AutomateExchangeMailboxesCreationForNewUsers.htm).
Alternatively you can abandon templates at all and use customizable condition-based rules to automatically perform all the needed tasks on user creation such as OU allocation, group membership assignment, mailbox creation, home folder creation, etc. based on
the factors you predefine for them.

Office Web Apps - Best Practice for App Pool Security Account?

Guys,
I am finalising my testing of Office Web Apps, and ready to move onto deploying it to my live farm.
Generally speaking, I put service applications in their own application pool.
Obviously by doing so this has an overhead on memory and processing, however generally speaking it is best practice from a security perspective when using separate accounts.
I have to create 3 new service applications in order to deploy Office Web Apps, in my test environment these are using the Default SharePoint app pool.
Should I create one application pool for all my office web apps with a fresh service account, or does it make no odds from a security perspective to run them in the default app pool?
Cheers,
Conrad
Conrad Goodman MCITP SA / MCTS: WSS3.0 + MOSS2007

i run my OWA under it's own service account (spOWA) and use only one app pool. Just remember that if you go this route, "When
you create a new application pool, you can specify a security account used by the application pool to be either a predefined Network Service account or a managed account. The account must have db_datareader, db_datawriter, and execute permissions for the content
databases and the SharePoint configuration database, and be assigned to the db_owner role for the content databases." (http://technet.microsoft.com/en-us/library/ff431687.aspx)

Manage vendor bank account in company code level - Best practice

hi,
we have on our client several company codes, and we are thinking how to manage the vendor bank accounts in company codes level or in centeral level.
our problem with company codes level is that the vendor bank accounts define in a centeral level so technically with sap standard it is not possible. if anyone can tell me that this is possible i will be very happy to know.
in centeral level our problem is with the business process because of we do not have a person (functionalism ) that can be responsible for all the company codes, basically every company shoule be responsible for her vendors
please advice what is the best practice to manage vendor bank accounts in enviroment of several company code
regards,
meir

hi Raghu,
i know that but this is not my qusition.
which company code will be responsible to enter the bank account in the vendor master data? as i say the vendor bank accounts manage in centeral level and not in company code level and this is our problem and i like to know how other companies with the same situation handle with this issue
and also after we have the bank accounts in the vendor master data what happend if for one vendor has several bank accounts one for every company code? how the payment program F110 could know automaticaly which bank account to take (i know that there is an optoin to use Partner bank type in the vendor master data, and enter this PBT when posting the invoice of the vednor, but this is not good because of we do not want the the accountant will be responsible from which bank the vendor get his money).
regards,
meir

Best Practice for Multiple iTunes and One Account?

My wife and I share our account for our iPhone Applications and Songs in iTunes.
Can someone point me to a topic that covers a best practice for multiple iTunes syncing?
I travel a lot and keep my iPhone synced to my Macbook Pro while she uses the workstation at home to sync to. We keep the addresses and contacts and calendars synced through MobileMe, however, I'm trying to find the best way of pushing applications and songs I've bought over to the other PC so they're still around while I'm traveling for her to sync with.
Thoughts?

Hi Steve,
Might be trying for solution for a long time, If i understood your question clear let me clarify you few points.
You are trying to access the bex query which is designed with the exit's in the background based on the logic and trying to call the entire dimensions and key-figures in a single connection. Then you are trying to map those data in the charts.
Steve, try to make more connections based upon the logic and split them. use the same query but split them by sales per customer group, sales per day, sales per week by making three different connections and try. You can merge the prompts from all connections.
Hope this Helps!!!
Sorry if i misunderstood your question.
--SumanT

Best Practice for legally required Chart of Account

Dear all,
our client has a global defined chart of account. Now they are going to implement the SAP template in France, Belgium and Russia. These countries have legally required chart of accounts. What is best practice to fullfill these requirements in SAP.
1) Do I use the alternative account number?
2) Isn't this field on the central level of the account master data record? How do I manage to realize the different number for Russia and for France at the same time?
Thank you very much for your help.
Best regards Timo

Hi,
the best way proofed by real life is to define new chart of accounts for the country specific accounts. Then to assign this chart of accounts as country chart of accounts in company code parameters.
Then you can use field alternative account number in company code segment of G/L accounts.
Just keep in mind that the assigment should be 1:1, i.e. one operative (global) account is assigned to one local account and one local account should be assigned to one operative account.
You can't change the alternative account number if there is balance on that account. You can just repost the balance to another account, then change alternative acccount number and then post the balance back. For some accounts its difficult to do such excercise so I use short ABAP which changes directly the field in table SKB1.
You can also define financial statement strucutre based on local chart of accounts - which is usually easier for maintennace, because you can use intervals. Just do not forget check "Alternantive accounts" in RFBILA00.
Regards,
Michal

Metadata Loads (.app) - What is best practice?

Dear All,
Our metadata scan and load duration is approximately 20 mins (full load using replace option). Business hfmadmin has suggested the option of partial dimension loads in an effort to speed up the loading process.
HFM System Admins prefer Metadata loads with replace option as there seems to less associated risk.
Using partial loads there appears to be risk to cross dimension integrity checking, changes are merged, potentially duplicating of members when moved in Hierarchy.
Are there any other risk with partial loads?
Which approach is considered best practice?

When we add new entities to our structure and load them with the merge option, they will always appear on the bottom of the structure. But when we use the replace option they will appear in the order that we want it. For us, and for the user friendlyness we always use the replace option. And for us the Metadata-load usually takes at least 35 minutes. Last time - 1.15...

Best practice in writing xmp metadata?

I know to switch off the 'automatically write to xmp metadata' feature. But, after doing this, what is the best way to ensure the xmp metadata does actually stay up to date?
My understanding is that by switching the automatic writing back on, LR goes through the whole catalogue, comparing the data in its database with the data in the xmp files, and every time it finds something different, it copies from the database to the xmp. However, there would seem to be two problems with this. i) it's extremely slow, because it's such a big job, and (b) presumably any changes made elsewhere, eg in ACR, will be overwritten.
The alternative seems to be to right click on the folder while in library mode and select "save metadata". However, for some unknown reason, this is unbelievably slow. What prompted me to write this message is that nearly an hour ago, I did this with a folder of 78 files, and it's still churning away. In that time, I've had time to log on to this forum, read a few messages, do a search to see if there is anything helpful, and then write and edit this. I don't dare try this with the folders I have with three hundred photos in!
The LR catalogue is in a partition with hardly anything else in it, on a different physical drive from LR itself. It gets defragged more frequently than the defrag utility thinks it needs to be. During metadata writing and many other operations, the CPU maxes out at 100% yet only about 75% of my 1GB memory is used.
Is there anything I can do?
I'm on an old-ish PC and am not in a position to upgrade (please - any messages just saying I need a newer computer are not going to be any help :-) ). Any other help would be appreciated.

Thanks, Mel. You just posted as I was writing the previous message!
I think you nailed it. The 78 pictures, I did by right-clicking on the folder name in the right-hand fly-out panel in library and selecting 'save metadata' (hope the choice of words here is clear!). I've just tried the ctrl-a, ctrl-s technique you describe, and it whizzed through a folder of 127 photos in no time.
So, you're right - there appears to be a bug.
One more problem - there was an error in saving to the tifs in the folder. A separate problem which I'll look at tomorrow.
Back to the other part of my original question. What is the most efficient way to keep the xmp data up-to-date? Considering that there's massive scope for human error in having to remember to save manually all the time, this can't, surely, be the best way to do it. What do people generally do, and has anyone evolved a 'best practice'?

Best Practice in Accounts Payable Processing

Guys,
Would just like to know best practice (or your practice) in Accounts Payable Invoice Processing if its 100% MIRO (3 way match PR-PO-GR) or part MIRO and part Direct Bill?
Our situation is that, the owner of our PR/PO process is the Procurement Department and all of the transaction goes to them are process through MIRO. However there are some puchases and contracts that they are not involve and they dont allow us to use PR and PO (MIRO) process since they are not involved in the negotiation. This transaction we end up paying through direct bill process (manual).
Appreciate assistance.
Thank you!

Hi,
For manual payments we implemented the approval process using workflows.
Hope this helps!
Regards.

Best practice to populate metadata of the content based on the folder

Hi,
What is the best practice to follow to automatically populate metadata of a content being checked-in based on the folder in which it is coming in?!
The folder I have may be a contribution folder or a collab project folder.
But I would like to populate the metadata of the content automatically when the content is dropped into a folder using the desktop integrator.
Thanks,
Leo

Yes Leo, that's correct, all documents inheriting the metadata of the folder and the option to propagate changes to documents and sub-folders is out-of-the-box functionality.
Just create a folder and set the metadata fields you want, then add some documents via the desktop integartion or simply via webdav (you can map ucm as a web folder in windows explorer without having to install the UCM desktop integration).. all the document should have the folder's metadata by default.
Give it a try and let me know how you go.
Regards,
Juan

Metadata Best Practice: Subtotals of ICP Accounts

Similar Messages

Maybe you are looking for