Migrating clients from NT to XP testing

Hi,
I am migrating several applications including client to windows XP plus some of these apps will be patched to latest levels. What kind of tests would someone recommend to perform to check the client apps are working ok?

Hi,
Better you have a complete test run.
Regards.

Similar Messages

Migrating Clients from SCCM 2007 to SCCM 2012 R2 via SCCM 2007 PACKAGE

I can migrate sccm clients from sccm 2007 to sccm 2012 using sccm 2007 package with sccm 2012 client?
Thanks!
Atenciosamente Julio Araujo

Thanks for help me Peter and Torsten but this documentation says:
"You cannot upgrade Configuration Manager 2007 clients to System Center 2012 Configuration Manager by using this method.
In this scenario, use automatic client upgrade, which automatically creates and deploys a package that contains the latest version of the client."
I Need migrate clients from sccm 2007 to sccm 2012 r2 and
I thought ofcreate a package in sccm 2007 with a sccm 2012 client.
Atenciosamente Julio Araujo

How to Preserve UDA when Migrating Clients from 2012 Heirarchy to 2012 R2 Heirarchy

We are preparing to migrate 2500 workstation clients from one 2012 R2 hierarchy to another. How can we preserve UDA so that we don't have to wait for it to be automatically generated? This would impact our ability to provide support.

I would say PowerShell. Use
Get-CMUserDeviceAffinity to get the information in the old environment and use
Import-CMUserDeviceAffinity to import the information in the new environment.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Migrating Clients from SCCM 2007 to SCCM 2012 R2 via GPO

Hello.
I can do the migration of customers from SCCM 2007 to SCCM 2012 via GPO?
When I'm migrating customers from SCCM 2007 to SCCM 2012 I have to keep the boundaries of SCCM 2007 or just the SCCM 2012?
Atenciosamente Julio Araujo

For migrating the clients you can use any client deployment method that's available (see for planning your strategy: (http://technet.microsoft.com/en-us/library/gg712283.aspx).
During the client migration I would also start with migrating your boundaries. The most important thing is that you have no overlapping boundaries for site assignment when you are using auto assignment.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Migrate clients from Exchange 2013 to a different Exchange 2013

Hi,
We are planning to migrate an Exchange 2013 instance to a centralized one. The question is how to deal with the Outlook OST mail files left over from the old instance and were wondering what best practices in this regard there may be.
Thanks in advance for any advice you can provide.

Hi,
Do you mean you want to migrate mailbox from one Exchange server to another Exchange server? If it is, we can directly move the whole mailbox to another mailbox server instead of Exporting/Importing a mailbox to PST file.
If you want to migrate a large number of user mailboxes, we can
specify a CSV file when you use the Exchange admin center (EAC) or the New-MigrationBatch cmdlet in the Exchange Management Shell to create a migration batch.
Here are some detailed information about mailbox moves in Exchange 2013:
http://technet.microsoft.com/en-us/library/dn170437(v=exchg.150).aspx
Move Mailbox in Exchange Server 2013
http://msexchangeteam.in/move-mailbox-in-exchange-server-2013/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please
make sure that you completely understand the risk before retrieving any suggestions from the above link.
Thanks,
Winnie Liang
TechNet Community Support

Migrating clients from one DHCP server (in forest A) to a new DHCP server (in forest B)

The scenario: clients have recently been migrated from one forest to a new forest but are currently using the DHCP server located in the old forest. The goal is to force the clients to start leasing from the new DHCP server in the new forest
as soon as possible. The users are still on the same network segment with the same address range. There is currently DNS forwarding between the two forests.

Keep in mind, during the transition, DNS for both the old forest and the new forest must have resolution setup between them, such as using Forwarding. This way with configuring DNS for DHCP clients (DHCP option 006), they'll still be able to resolve
the new forest name still using the old DNS. However, keep in mind, registration will not work until you switch over to the new forest's DNS.
As for Option 015, the Connection Specific Search Suffix, I would avoid using that until all machines have been migrated.
AD DS and DNS Server Migration: Post-Migration Tasks
http://technet.microsoft.com/en-us/library/dd392270(v=ws.10).aspx
DHCP Server Migration Guide
http://technet.microsoft.com/en-us/library/dd379535.aspx
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Migrating Clients from SMS 2003 to SCCM 2012 R2. Best method?

I have set up a new SCCM 2012 R2 server to replace our existing SMS 2003.
Our client systems (all Windows 7 SP1 x64 and x86) still have the SMS 2003 client installed but I would like to move them over to the SCCM 2012 R2 server now. I know there are several methods for installing the SCCM client (manual, push, group policy) but
none of these provide a way to uninstall the old client.
Is there a best practice or commonly used process for doing this? Should I be getting rid of the SMS client first by logon script or some other method and the pushing the SCCM client or some other way? Thank you for any advice.

More info:
Can I manage SMS 2003 clients with System Center 2012 Configuration Manageror migrate SMS 2003 sites and clients to System Center 2012 Configuration Manager?
http://technet.microsoft.com/library/gg682088.aspx#FAQ_Migration
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

IPM 10g Migration client login error

Hi all,
I am doing migration from IPM 10g to 11g.For that purpose I am using Migration client utility.
But whenever I am trying to Login into migration client from IPM 10g it is giving me following error,
Unexpected error: catch all exception (...) type.
class ATL::CComObject<class CUser>::Login
please expert help me.
Thanks in advance

Hi there,
I'm having the same error. The Oracle Imaging and Process Management Web Server was installed on my machine. When I open the URL (http://<machine_name>/IBPMWeb), I'm getting "Communications Error Error Code: -1 Mode: Connect ServerAddress: Connected: No Description: Unknown Error: -1 class ATL::CComObject::Refresh. "
Was there a solution to this?

Planning Migration from Development Server to Testing Server

Hi All,
I am doing migration from development env to testing env. I am stuck in the middle of the migration. Anyone please guide me in this situation. Its very urgent for me. I am following below steps for the planning migration
1. Create a new database on Production RDBMS Server for your planning application.
I created the new database for my planning application.
2. Configure a data source on Production Planning Server.
     I configured the new datasource on planning.
3. Create fresh planning application on Production Server and Ensure the admin is the same as your planning application on Development Server.
     I created the new planning application on production server. Its working fine with admin login.
4. Go into the database tables for the planning app on Production Server and look at table HSP_USERS; store the SID value against user 50001.
     I save the SID value against 50001 in a notepad
5. Go into the database planning system tables on Production Server and HSPSYS_APPLICATION, clear out the version field for the application you have created.
     I removed the version for the application i created
6. Stop Planning.
     I stopped the planning services
7. Restore the planning application database on Development over the one created in the first step (to the Production Server Database).
     In this steps only, i am facing diffculities.
     How to take the backup of development database? (Here, i want to the take the database backup of planning application schema or entire oracle databat in development server)
     How to restore to testing env database
Please anyone guide me in this situtation. Please......
8. Go into the HSP_USERS table and update the SID for user id 50001
9. Start planning
10. Go to planning web and you should see your application when you try and log in it should take you to a migrate screen.
11. If you are requiring to migrate users as well, you will have to make sure you create them in Shared Services and then use the updateusers utility in the planning bin directory.
Thanks,
Lakshmi

Hi Mars,
Thanks for your reply. I did the same as you specified. I used Imp instead of import, exp instead of export.
7. Restore the planning application database on Development over the one created in the first step (to the Production Server Database).
I restored the Planning dmp here
8. Go into the HSP_USERS table and update the SID for user id 50001
Here, SID remains the same after restore the backup from the development server(SID same for Development and testing Server)
9. Start planning
I started the Planning Services.
10. Go to planning web and you should see your application when you try and log in it should take you to a migrate screen
I am facing problem here.
While login into planning application, its not redirect to migrate screen. Its normally login to the application
Thanks,
Lakshmi

Migrating report from 6i to 11g

I am migrating reports from 6i to 11g.
I am calling report from form. All the reports works fine.
But in this report I have to pass parameter at runtime and report should save in pdf format at a given location.
forms & report version : 11.1.2
Database : 11g
Operating system : windows 7 professional.
Below is the code i am running.
declare
pl_name VARCHAR2(30) := 'tempdata';
pl_id ParamList;
x VARCHAR2(150);
y NUMBER;
repid REPORT_OBJECT;
v_rep VARCHAR2(100);
rep_status VARCHAR2(20);
BEGIN
repid := FIND_REPORT_OBJECT('MALWADKARCONSUMPTIONSTMTDBR1');
pl_id := Create_Parameter_List(pl_name);
Add_Parameter(pl_id,'background',TEXT_PARAMETER,'Yes');
Add_Parameter(pl_id,'PARAMFORM',TEXT_PARAMETER,'NO');
Add_Parameter(pl_id,'DESTYPE',TEXT_PARAMETER, 'FILE') ;
Add_Parameter(pl_id,'DESFORMAT',TEXT_PARAMETER, 'PDF') ;
Add_Parameter(pl_id,'VCOMPANY',TEXT_PARAMETER,:block50.COMPANYNAME);
Add_Parameter(pl_id,'VLYCOMPANY',TEXT_PARAMETER,:block50.COMPANYNAME);
Add_Parameter(pl_id,'FROMDATE',TEXT_PARAMETER,VFROMDATE); -- VFROMDATE calculated from query
Add_Parameter(pl_id,'TODATE',TEXT_PARAMETER,:BLOCK50.DOCDATE);
Add_Parameter(pl_id,'VACNAME',TEXT_PARAMETER,VACNAME); -- VACNAME calculated from query
Add_Parameter(pl_id,'DESNAME',TEXT_PARAMETER, 'D:\dbr\'||vACNAME||' '||:BLOCK50.DOCDATE||'.PDF') ;
SET_REPORT_OBJECT_PROPERTY(repid,REPORT_COMM_MODE,SYNCHRONOUS);
SET_REPORT_OBJECT_PROPERTY(repid,REPORT_EXECUTION_MODE,RUNTIME);
set_report_object_property(repid,report_filename,'D:\dbr\'||vACNAME||' '||:BLOCK50.DOCDATE||'.PDF' );
SET_REPORT_OBJECT_PROPERTY(repid,REPORT_DESTYPE,FILE);
SET_REPORT_OBJECT_PROPERTY(repid,REPORT_DESFORMAT,'PDF');
SET_REPORT_OBJECT_PROPERTY(repid,REPORT_SERVER,'rep_adminserver_paresh-pc_asinst_1');
y := LENGTH ('rep_adminserver_paresh-pc_asinst_1') + 2;
x := RUN_REPORT_OBJECT (repid, pl_id);
WEB.SHOW_DOCUMENT('http://PARESH-PC:7001/reports/rwservlet/getjobid'||SUBSTR(x, y)||'?server=rep_adminserver_paresh-pc_asinst_1&userid=scott/TIGER@ORCL');
Destroy_parameter_list('tempdata');
END;
Above code doesn't show any error but report is not generated in the provided location.
Is modification to be done in the above code?
Please suggest.
Thanks in advance.
Edited by: parapr on Oct 2, 2012 1:30 AM

Hi,
as stated before if the desname value is pointing to the client filesystem it wont create the output there because Reports Server is not running on the client, it is running on the server as this is the way it is.
If you want to save output to the client you need to use the options mentioned before.
For testing purposes only change your code as follows.
e.g
Add_Parameter(pl_id,'DESNAME',TEXT_PARAMETER, 'c:\'||vACNAME||' '||:BLOCK50.DOCDATE||'.PDF') ;
As you can see I changed the original folder name to C:\ .. (I hope your reports serve is running on a Windows machine if not then changed to /tmp). Run your form and check c:\ or /tmp and see if you see the report output there. If so,
than your code is fine the only problem is what I have already stated.
Regards, Roberto

Migration scenario from 3rd party mail server to GW12?

Hi
We need to migrate from existing e-mail server (Axigen ) to GW12.
The main concern is how to do that as quickly as possible or step by step without disrupting mail traffic and users.
Here is the situation:
In local network there is mentioned Axigen mail server serving aprox 70 users at single location.
Our official domain is hosted outside by Hosting provider where their mail server forwards all mail to our DDNS address where is ported to local mail server. Forwarding is performed discrete on user base. Each [email protected] is forwarded to [email protected]. where local server taking over.
This setting is harder to maintain because it is necessary to maintain users and aliases on outside server manually. However, this setting has some advantages. First of all, forwarding is happened immediately. If for some reason , local server is unreachable, outside server will keep on trying for two more days.
Second advantage is that we can use anti spam and virus blocking at the providers side.
Both functionality we could'nt achieve with simple global forwarding of all mail to local server.
This comment is digresion from main topic.
Outgoing mail is relayed by local server over our Internet Connection provider's SMPT host.
Local mail is delivered locally.
We maintain local DNS server too.
Most users are using POP service, while IMAP is used by few only. All users are using Thunderbird so far.
All users in the future should use full GW capabilities with regular GW client, mobile clients and so on.
GW12 server is installed and up already. It is tested locally and tested for remote sending. So, only remote receiving is not tested yet, so neither correct domain is set yet.
Present users authentication is performed by Axigen server and LDAP connection to eDir. STARTTLS is used between clients and server.
Our plan is simple to change local DNS record point to new GW server, to change NAT/routing point to new server and set correct domain for the GW server.
We expect that this will be transparent for users while they will continue to use Thunderbird (certificate mismatch will be issued by first connection and first mail sending. But we plan to warn users in advance together with instructions what to do. My phone will ring that morning many times, I am sure). Few IMAP accounts we can prepare in advance by move mail manually to local folders and back to GW server later.
Latest step should be migrate users from Thunderbird to GW client. This need to be perfomed manually at each user seat. Each Thunderbird client need to be switched to IMAP and then mail need to move to GW server.
Here is concern about old mail volume. Many users have their old mail archived in local folders by years. Some of them has quite huge amount of archived mails with heavy attachments. However old mail can be moved gradually later.
So, this is our plan. Does anybody has any suggestion, comment or wish to point some problem we didn't aware of?
Thank you.
Drazen

On 9/24/2012 3:56 AM, dzuvela wrote:
>
> Hi
> We need to migrate from existing e-mail server ('Axigen '
> (http://www.axigen.com/)) to GW12.
> The main concern is how to do that as quickly as possible or step by
> step without disrupting mail traffic and users.
>
> Here is the situation:
> In local network there is mentioned Axigen mail server serving aprox 70
> users at single location.
> Our official domain is hosted outside by Hosting provider where their
> mail server forwards all mail to our DDNS address where is ported to
> local mail server. Forwarding is performed discrete on user base. Each
> [email protected] is forwarded to [email protected]. where local
> server taking over.
>
> This setting is harder to maintain because it is necessary to
> maintain users and aliases on outside server manually. However, this
> setting has some advantages. First of all, forwarding is happened
> immediately. If for some reason , local server is unreachable, outside
> server will keep on trying for two more days.
> Second advantage is that we can use anti spam and virus blocking at the
> providers side.
> Both functionality we could'nt achieve with simple global forwarding of
> all mail to local server.
> This comment is digresion from main topic.
>
> Outgoing mail is relayed by local server over our Internet Connection
> provider's SMPT host.
> Local mail is delivered locally.
>
> We maintain local DNS server too.
>
> Most users are using POP service, while IMAP is used by few only. All
> users are using Thunderbird so far.
>
> All users in the future should use full GW capabilities with regular GW
> client, mobile clients and so on.
>
> GW12 server is installed and up already. It is tested locally and
> tested for remote sending. So, only remote receiving is not tested yet,
> so neither correct domain is set yet.
>
> Present users authentication is performed by Axigen server and LDAP
> connection to eDir. STARTTLS is used between clients and server.
>
>
> Our plan is simple to change local DNS record point to new GW server,
> to change NAT/routing point to new server and set correct domain for the
> GW server.
> We expect that this will be transparent for users while they will
> continue to use Thunderbird (certificate mismatch will be issued by
> first connection and first mail sending. But we plan to warn users in
> advance together with instructions what to do. My phone will ring that
> morning many times, I am sure). Few IMAP accounts we can
> prepare in advance by move mail manually to local folders and back to GW
> server later.
>
> Latest step should be migrate users from Thunderbird to GW client. This
> need to be perfomed manually at each user seat. Each Thunderbird client
> need to be switched to IMAP and then mail need to move to GW server.
> Here is concern about old mail volume. Many users have their old mail
> archived in local folders by years. Some of them has quite huge amount
> of archived mails with heavy attachments. However old mail can be moved
> gradually later.
>
>
> So, this is our plan. Does anybody has any suggestion, comment or wish
> to point some problem we didn't aware of?
>
> Thank you.
> Drazen
>
>
most of this sounds good. With such heavy imap/pop usage, you MIGHT
want to consider installing a temporary dedicated gwia just for that
separate from the smtp handling gwia. But that might not be necessary at
all. 70 people isn't THAT much.

Migrating Eudora from Windows to the MAC (w. latest Mavericks version)

I am planning to migrate from Windows (XP) to a new MAC. My major stumbling block in the way of this switch is migrating reliably from Eudora 7.1.0.9 paid mode to MAC Mail without losing, corrupting, etc. my mail which is now stored on my PC. Based on older threads I learned that the import facility of the MAC is not the appropriate tool to use and that Mailbox Cleaner no longer works under Mavericks. I read all related old discussions but the world changed. I am not a computer expert, just a plain old user. I do not know how I would move a backup of Eudora mail from my PC to the MAC. Do I need to have a MAC formatted DVD or stick, is it a straight copy? Do I need to use "special" directory/file structures on the MAC? Can someone who actually recently accomplished this migration without major issues help with suggestions for tools and steps to accomplish it?
I also would appreciate comments from those who know both Eudora and current MAC mail about what is that MAC Mail doesn't provide, as compared to features/functionality offered by the MAC Mail. I love the fast and selective (across all or some mailboxes) search capability of Eudora, the smart filters, great sorting capability, no limitation for mailbox, folder, message size or number, the great spell checker, support for multiple accounts, the friendly, clean user interface, message preview capability, low memory usage, smart spam filtering, etc. The list goes on. Will I find similar capabilities with MAC Mail?
Your help would be very much appreciated.
P.S. This is my first time using this forum. How do I set up Email notifications when someone answers?

I have not received any help to this question but I was able to successfully migrate from my beloved Eudora to Apple's mail. I will summarize the experience for the benefit of anyone else who needs to accomplish the same.
After some research I came across an application that claimed that can do the migration: Emailchemy. I read their manuals. As commented by others, the manual from Emailchemy is cryptic and hard to follow. There is nothing to explain how one needs to use the application when migrating from a PC to a MAC. As it turns out the product has to run on both ends, on the PC and on the MAC. Since I am not a technical user, I tried to get help from their Email based Help Desk. They do not appear to be setup to help individual users. Quoting from their replies: “you may also convert to the IMAP format and use the ImportServer -- but that's more complicated and if you're not confident of your understanding of email clients and servers, you may want to avoid it.”. “Just follow the prompts in Emailchemy and do what they say. This can be a complicated move and I recommend you ask for help with it from someone you know who may be more familiar with Mac computers. Explaining how to use the Mac and the Mac Mail app over email will be difficult.” When I tried to follow up with them they just ignored my Emails and never replied.
Luckily I also located the Aid4Mail application from Fookes Software (https://www.fookes.com). I read their excellent manual and contacted Fookes with additional questions. I got very clear and helpful answers very quickly and was reassured that the application will convert on the PC my Emails to MBOX files that can be then copied to the MAC and imported into Apple's mail. I tested the software which was very easy to run and then licensed it for 2 weeks and did the migration. All my Emails were migrated while my folder structure was preserved. The dates, and all of the header info were also preserved and all attachments were kept with their respective messages. Messages were marked unread which helped me compare the message count from Eudora with the message count (available for unread messages) in MAC Mail. Julian from Fookes Software's Help Desk even recommended using a free application for migrating my Eudora address book (Dawn). Dawn's website: http://mysite.verizon.net/zakharin/software/Dawn/
I could not be more pleased with what I got for the money ($29). I highly recommend the application and the company for their excellent support.

Issuing certificates for user and clients from different forest/domain

Hello,
at first I would like to say that I have made some researches on this forum and in the Internet overall.
I have AD Forest with ~10 sites all over the Europe, DFL and FFL is 2008 R2, right now we are migrating site by site from old domain (samba) to AD.
Last time I have deployed PKI based on offline root CA and 2 Enterprise acting as 2-node Failover Cluster.
Everything in my AD Forest is OK, I mean, autoenrollment works perfect for users and computers from my forest,
now I need to deploy a certificate (for test) to one web-based pbx server in samba domain, there are no trusts etc. Samba domain as well as AD Forest are working on the same network, with routeable subnets in each site, so there is no problem with connectivity,
What are possible way to achieve this goal? I mean to issue cert to client from different forest, so that this client is able to validate it, validate certificate chain and renew it when needed?
I have Installed and Configured CE Web Service and CE Policy Web Service. Now I have configured Enrollment Policies on my virtual machine (being part of different domain), I selected username/password authentication, I am able to request certificate, I can
see all templates which I should see, but when I try to enroll I got an error:
(translated from my language)A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider
My root CA cert is added to trusted publishers for computer and user node as well.
What could be wrong? If you have any ideas or questions, please share or ask.
Thank you in advance.

Everything is clear, I have Certificate Enrollment Web Services installed and configured,
problem is what i get from certutil - TCAInfo
================================================================
CA Name: COMPANY-HATADCS002-ISSUING-CA
Machine Name: COMPANYClustGenSvc
DS Location: CN=COMPANY-HATADCS002-ISSUING-CA,CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=COMPANY,DC=COM
Cert DN: CN=COMPANY-HATADCS002-ISSUING-CA, DC=COMPANY, DC=COM
CA Registry Validity Period: 2 Years -- 2016-03-04 12:20
NotAfter: 2019-02-14 12:44
Connecting to COMPANYClustGenSvc\COMPANY-HATADCS002-ISSUING-CA ...
Server "COMPANY-HATADCS002-ISSUING-CA" ICertRequest2 interface is alive (1078ms)
Enterprise Subordinate CA
dwFlags = CA_VERIFY_FLAGS_NT_AUTH (0x10)
dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
HCCE_LOCAL_MACHINE
CERT_CHAIN_POLICY_NT_AUTH
-------- CERT_CHAIN_CONTEXT --------
ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
ChainContext.dwRevocationFreshnessTime: 18 Days, 4 Minutes, 1 Seconds
SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
SimpleChain.dwRevocationFreshnessTime: 18 Days, 4 Minutes, 1 Seconds
CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
Issuer: CN=HATADCS001-COMPANY-ROOT-CA
NotBefore: 2014-02-14 12:34
NotAfter: 2019-02-14 12:44
Subject: CN=COMPANY-HATADCS002-ISSUING-CA, DC=COMPANY, DC=COM
Serial: 618f3506000000000002
Template: SubCA
9e1bea4ffa648e5fe3e9f8c4be3c604c49af04e9
Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
CRL 02:
Issuer: CN=HATADCS001-COMPANY-ROOT-CA
ThisUpdate: 2014-02-14 12:16
NextUpdate: 2024-02-15 00:36
d7bafb666702565cae940a389eaffef9c919f07a
Issuance[0] = 1.2.3.4.1455.67.89.5
CertContext[0][1]: dwInfoStatus=10c dwErrorStatus=0
Issuer: CN=HATADCS001-COMPANY-ROOT-CA
NotBefore: 2014-02-14 11:55
NotAfter: 2024-02-14 12:05
Subject: CN=HATADCS001-COMPANY-ROOT-CA
Serial: 18517ac8a4695aa74ec0c61b475426a8
b19b85e0e145da17fc673dfe251b0e2a3aeb05e9
Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
Issuance[0] = 1.2.3.4.1455.67.89.5
Exclude leaf cert:
5b309c67a8b47c50966088a4d701c8526072c9ac
Full chain:
413b91896ba541d252fc9801437dcfbb21d37d91
Issuer: CN=HATADCS001-COMPANY-ROOT-CA
NotBefore: 2014-02-14 12:34
NotAfter: 2019-02-14 12:44
Subject: CN=COMPANY-HATADCS002-ISSUING-CA, DC=COMPANY, DC=COM
Serial: 618f3506000000000002
Template: SubCA
9e1bea4ffa648e5fe3e9f8c4be3c604c49af04e9
A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. 0x800b0112 (-2146762478 CERT_E_UNTRUSTEDCA)
Supported Certificate Templates:
Cert Type[0]: COMPANYOnlineResponder (COMPANY Online Responder) -- No Access!
Cert Type[1]: COMPANYWebServer(SSL) (COMPANY WebServer (SSL))
Cert Type[2]: COMPANYUser(Autoenrollment) (COMPANY User (Autoenrollment))
Cert Type[3]: COMPANYKeyRecoveryAgents (COMPANY Key Recovery Agents)
Cert Type[4]: COMPANYEnrollmentAgent(Computer) (COMPANY Enrollment Agent (Computer))
Cert Type[5]: COMPANYEnrollmentAgent (COMPANY Enrollment Agent)
Cert Type[6]: COMPANYComputer(Autoenrollment) (COMPANY Computer (Autoenrollment)) -- No Access!
Validated Cert Types: 7
================================================================
COMPANYClustGenSvc\COMPANY-HATADCS002-ISSUING-CA:
Enterprise Subordinate CA
A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. 0x800b0112 (-2146762478 CERT_E_UNTRUSTEDCA)
Online
CertUtil: -TCAInfo command completed successfully.
please put some light on it because it's driving me crazy :/
Thanks in advance
one remark: certutil -tcainfo performed on CA directly is 100% OK, no errors regarding
"A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider. 0x800b0112 (-2146762478 CERT_E_UNTRUSTEDCA)"

Lync 2013- 4 FE servers-F5 HLB- migrating users from OCS-WMI error

There are 4 Lync 2013 EE FE's with an F5 HLB. 3 of the FEs are Windows 2012 R2 and one is Windows 2008 (this will be decommissioned).
Access the Lyncadmin/cscp web page works to migrate users from OCS to Lync most of the time. We noticed at times the following error message:
Move-CSLegacyUser: verify that WMI Provider is installed by running OCSWMIBC.MSI. For details, see the inner exception.
So for troubleshooting we would use the <FEname>/cscp to test each server. The 2008 and one of the 2012 servers worked fine. The other 2 2012 servers failed with that same error message.
I looked at lots of articles and made sure that all of the servers had the HKLM\System\CurrentControlSet\LSA\DisableLoopbackCheck set to 1 as well as putting the Poolname FQDN and LB VIP IP address in the HKLM\System\CurrentControlSet\LSA\MSV1_0 registry
keys. Just the pool FQDN alone was tried as well. All the servers were rebooted one at a time as well after these changes. The Pool FQDN is a DNS entry with the VIP address.
The same user account is being used when logging into the CSCP. Trying the CSCP from any server or client machine and using the <FEname>/cscp fails for the 2 servers.
I have checked the authentication methods in IIS for CSCP internal and have negotiatekerberos then NTLM listed under Windows authentication\challenge.
I am running out of resources and ideas.
Anyone?

Have you confirmed that ocswmibc.msi is installed on all the 2013 Front Ends?
"First install the Windows Management Instrumentation (WMI) Backward Compatibility interfaces package; this application is installed
by running OCSWMIBC.msi. (OCSWMIBC.msi can be found on the installation DVD in the Setup folder.)" - http://technet.microsoft.com/en-us/library/gg413025.aspx
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

Issues with upgrading client from 1.2 to 3.0

I've upgraded a bunch of Mac's ARD client from 1.2 to 3.0 using ARD 3 admin's upgrade client feature. On some, I can't Observe or Control. So far I can copy files, run reports, and see current status. I can also ssh into machines with no problems. I've run the updater a second time and no go.
All of these Macs were on 10.3.6. So sshed into them and ran all updaters and repaired permissions. Then upgraded ARD client.
Any thoughts on whats the cause of this problem and how to remedy it?
Any suggestions is appreciated.

More info after some testing.
Noticed machines that started out with base OS 10.3.1 with subsequent updates are the ones having observe/control issue. Most update progressions: 10.3.2, 10.3.3, 10.3.6 combo, 10.3.9 combo.
Machines that started out with base OS 10.3.5 are not effected after upgrading to 10.3.9.
Repaired permissions, updated binding, re-applied 10.3.9 combo update to one machine with no change.
Removed client by taking following steps - KB 108021
$ sudo rm -rf /System/Library/CoreServices/Menu\ Extras/RemoteDesktop.menu
$ sudo rm -rf /System/Library/CoreServices/RemoteManagement/
$ sudo rm -rf /System/Library/PreferencePanes/ARDPref.prefPane
$ sudo rm -rf /System/Library/StartupItems/RemoteDesktopAgent/
$ sudo rm /Library/Preferences/com.apple.ARDAgent.plist not applicable in any of my configs
$ sudo rm /Library/Preferences/com.apple.RemoteManagement.plist
Built an client installer package using ARD 3 admin and still can't Observe/Control but most other items seem to function.
I'm suspecting this has to do with base OS these machines were built on. Running out of ideas. I would like to find out whats preventing me to control machine instead of rebuilding a bunch of machine. Any input is appreciated.

Migrating clients from NT to XP testing

Similar Messages

Maybe you are looking for