Non-Domain Server Cert Requirements Enterprise vs. Standard

Is there a way to monitor a non-domain machine without having an enterprise cert server? I am using a standard CA currently and was wondering if I absolutely had to upgrade it to a Enterprise CA? We currently only need to monitor 4 off domain
servers so if we can avoid it we will.
Thanks

Hi,
Read this
http://social.technet.microsoft.com/wiki/contents/articles/2017.certificate-enrollment-for-system-center-operations-manager-agent.aspx
http://OpsMgr.ru/

Similar Messages

Log forwarding from a non-domain server certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps:
https://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx
It states that for this to work I need the following:
The collector computer should have a server authentication certificate (certificate with a server authentication purpose) in a
local computer certificate store.
And
The source machine should have a client authentication certificate (certificate with a client authentication purpose) in a
local computer certificate store.
I'm looking to use a third party certificate authority to get the 2 above client and server certs. My question is what type of certificates will I need for this to work? As there seem to be a lot of types and I am new to certs.

Hi Chard,
You can just request certificates from Computer Certificate Template. Certificate issued from Computer Certificate Template can be used for both Client and Server authentication.
Here is a related article below for you:
Certificate Templates Overview
https://technet.microsoft.com/en-us/library/cc730826(v=ws.10).aspx
In addition, if you have further query regarding certificates or CA, please refer to security forum below:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

ADD a none domain server IP into my DNS server

Hello,
since few days, we have interconnected two clients together throuth SDSL MPLS line (like VPN) so that each client can ping the server IP from each other.
For ex : client A (192.168.50.50) can ping client B (192.168.100.100). That work fine
Now I'd like to add in each DNS server the right settings in order to ping the server name instead of the IP.
As I'm not very good with DNS, I prefere ask before changing settings in it
So xould someone explain me what to do in order to do this?
Thanks in advance
Best Regards
Thierry

You mention two clients connected. Is the DNS server a separate DNS server?
Is there a DNS server at each location?
I agree with Meinolf. But you have to make sure you only use the DNS server(s) that have the record you created. If you put in another DNS, such as your ISP's DNS, then it won't work.
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

MS SQL Server 2008 R2 Enterprise Edition on Windows Server 2008 R2 Standard Edition

Hello Team,
Is there any issue/conflicts/limitationn to install MS SQL Server 2008 R2 Enterprise Edition on Windows Server 2008 R2 Standard Edition.
OR their is nothing to worry about it I guess their is memory limitation between both of them. Please suggest
Regards
Naveed Amir

Hi,
Here you can find the officially Hardware and Software Requirements for SQL Server 2008 R2:
http://msdn.microsoft.com/en-us/library/ms143506(v=sql.105).aspx
There should be NO problem as much as I know if the basic limitation fit you (as shanky mentioned).
I had (an clients still have) several servers with Windows Server 2008 R2 Standard & SQL
Server 2008 R2 Enterprise and Standard with no problem (today I have one old developing server with this exact installations work great for several years).
[Personal Site] [Blog] [Facebook]

SQL server 2008 R2 downgrade from Enterprise to standard edition

Hello,
we are going to downgrade SQL server 2008R2 from enterprise to standard for a server whose databases are not using any of the enterprise features.
Per the link http://www.mssqltips.com/sqlservertip/3079/downgrade-from-sql-server-enterprise-edition-to-standard-edition/ we had made a plan to do so.
However, we are not sure of two points:
1) Do we need to import the SSIS packages, i.e. after downgrade would all the packages vanish? Therefore what should be done for the Integeration services on this instance?
2) second would be related to reports configured. Would all the settings in reporting configuration also change? If yes what should be done while downgrading (removing the reporting services as well)
Thanks, please suggest.

Hello,
I you copy the old system databases incl ReportServer Db as described in the article then you have all SSIS packages & reports available as before.
Olaf Helper
[ Blog] [ Xing] [ MVP]

Enterprise verses Standard Edition

Hi All,
What is the difference between Oracle 10gAS Enterprise & Standard Editions?
Thanks.

From the SQL Server installation guide:
● SQL Server 2000/2005: Enterprise and Standard Edition
● SQL Server 2008: Enterprise (capture or delivery) or Standard Edition (delivery only)
● SQL Server 2008 R2: Enterprise (capture or delivery) or Standard Edition (delivery only)

Attempted to perform an unauthorized operation error while installing SQL Server 2008 R2 Enterprise edition on Windows Server 2012 R2 standard VM server

I've been trying fresh installation of SQL Server 2008 R2 enterprise on Windows Server 2012 R2 standard VM server several times for two weeks, but always get the error "Attempted to perform an unauthorized operation". At first, I attempted
to install all features, but failed several times. So I decided to try install just Database Engine service, and still fail at the SqlBrowserConfigAction_Install_ConfigNonRC_Cpu32, with the error "Attempted to perform an unauthorized operation".
I remote login to server with my admin domain account. This account is in server local Administrators group. I
1. Right-click on setup.exe file | properties | Compatibility tab | select compatibility to Windows 8.Then click OK.
2. Right-click on setup.exe file | Run as Administrator, to start the Installation Center.
I have the document of my installation steps and zip file of the installation logs, if you need to take a look.
Appreciate for any help!
ntth

Hi ntth,
"Attempted to perform an unauthorized operation"
The above error is always related to the Windows account SID mapping. I recommend you login into Windows using another Windows account which has administrative privileges and run SQL Server setup using that Windows account.
Besides, please note that we need to apply SQL Server 2008 R2 Service Pack 2 or a later update when installing SQL Server Windows Server 2012 R2. For more information, please review this
KB article.
Thanks,
Lydia Zhang
If you have any feedback on our support, please click
here.
Lydia Zhang
TechNet Community Support

Non-Domain joined clients connect to server initially but cannot connect via Launchpad

Running SBS 2011 Essentials in a small office. Running XP/Vista/7 clients. All working fine until we swapped routers. Old router died, new router was installed.
Now all domain-joined PC's connect as normal, but all NON-Domain-Joined PC's cannot access the server via the launchpad. I get the "The server appears to be offline. Do you want to sign in to offline mode?" box.
Tried removing PC from the SBS Dashboard, uninstalling the connector from the client, restarting client, and reinstalling the connector. I can install the connector (using
http://<server ip>/connect , but not http://<servername>/connect
). Connector installs but it still tells me the server is offline when trying to use dashboard or launchpad on the client.
Note: I can add a network location or Map a network drive to ther server after inputting my network password from Windows.
Any Services to check? Firewalls exceptions to ensure? Advice?
EDIT: Dashboard on Server shows Client, sometimes as online, sometimes as offline.

Sounds like name resolution issue to me.
Are all your clients set to use the IP of the Essentials Server for their primary DNS?
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Non Domain User Access to Report Server

HI Team,
I am Back with another question. These days i am working on SSRS web services as a part of that i need to provide user access to non domain users to the report manager which is residing in a virtual machine and also when i use the report service web service
URL it is asking for virtual machine's windows credentials and as per my client's requirement i should not be prompted with VM'S windows credentials.
Also, we are providing end users with a login page and this login page is connected to a separate User's database in the VM and how to register these non domain users in the report server database
and also reort manager. please help me out of this issue.
Thank you.

Hi NB515,
In Reporting Services, if we connect to Report Manager out of domain, then we need provide a domain username and password can we access to it. If you want to skip this step, you can configure anonymous access for the report server. However,anonymous access
is not recommended as it may give direct access to your report server or report projects to any one who know the URL of your Reporting Services. But in case you still want to try it, you can refer to the link below to see it:
http://blog.quasarinc.com/ssrs/sql-server-reporting-services-2012-anonymous-access/
If you have any questions, please feel free to ask.
Regards,
Charlie Liao
TechNet Community Support

Non-domain computer cannot connect to server

I have a unique issue.
I have a Windows 2008 server running Exchange 2010 (all roles on single server )
I have a Windows 7 Pro client that is not a member of the domain.
When setting up Outlook 2010 I enter user's name, email address and password. The system starts configuring, it successfully searches for [email protected] settings. It then prompts for credentials. I cannot get it to take them.
However, If I user the domain admin account I can successfully setup the domain admin email in Outlook. I just cannot do it with a standard user.
Also, I noticed that this non-domain computer can access domain member server if I provide credentials (domain\username). This does not work with this or any of my other Windows 2008 servers.
I have been fighting this with no relief in sight...
Thanks
Wayne

Let me be clear about my symptoms.
Exchange with domain joined computers autodiscover/Outlookworks fine....
DC's and exchange server all have same time/date otherwise nobody would be able to authenticate.
The problem only exists with non-domain computers (both within the network and outside of the network)
The autodiscover tests fine with exchange connectivity tester. I cannot test outlook as I have a certificate from an untrusted root that is installed manually on the non-domain computers.
The non-domain computers can connect to windows 2003 member server (with appropriate domain credentials) but not to this 2008 (or the other 2 2008 member servers)
Update- If I configure the domain administrator account on that same non-domain connected machine, it retrieves the domain admin email just fine.....

Error 18452 "Login failed. The login is from an untrusted domain and cannot be used with Windows authentication" on SQL Server 2008 R2 Enterprise Edition 64-bit SP2 clustered instance

Hi there,
I have a Windows 2008 R2 Enterprise x64 SP2 cluster which has 2 SQL Server 2008 R2 Enterprise Edition x64 SP2
instances.
A domain account "Domain\Login" is administrator on both physcial nodes and "sysadmin" on both SQL Server instances.
Currently both instances are running on same node.
While logging on to SQL Server instance 2 thru "Domain\Login" using "IP2,port2", I get error 18452 "Login failed. The login is from an untrusted domain and cannot be used with Windows authentication". This happened in the past
as well but issue resolved post insatllation of SQL Server 2008R2 SP2. This has re-occurred now. But it connects using 'SQLVirtual2\Instance2' without issue.
Same login with same rights is able to access Instance 1 on both 'SQLVirtual1\Instance1' and "IP1,port1" without any issue.
Please help resolve the issue.
Thanks,
AY

Hello,
I Confirm that I encountred the same problem when the first domain controller was dow !!
During a restarting of the first domain controller, i tried to failover my SQL Server instance to a second node, after that I will be able to authenticate SQL Server Login but Windows Login returns Error 18452 !
When the firts DC restart finishied restarting every thing was Ok !
The Question here : Why the cluster instance does'nt used the second DC ???
Best Regards
J.K

Non-Domain Print server

Hello All,
We set up a non-domain print server for our SAP integration. We have several printers all being shared. When we go to add a printer on a workstation or terminal server through add a printer and choose network we can bring up list through typing in \\servername\.
When we use windows explorer it says we can not access. How can we allow them to browse printers through windows explorer? This will be done from domain and non domain accounts.
-File and printer sharing is on
-Windows firewall is off
- Guest account is on

Hi,
à
When we use windows explorer it says we can not access.
Would you please let me know complete message that you can get?
Please follow the path: Control Panel-> Network and Sharing Center-> Change advanced sharing settings.
Please also click ‘Turn on network discovery’ and monitor the result.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

Use Wildcard SSL Cert to Monitor Non-Domain COmputers

Hello,
I was wondering if a Wildcard SSL Cert from GoDaddy or another Provider can be used to monitor Non-Domain Computer on SCOM 2012R2?
TIA,
Jim

Hi,
The Operations Manager agents support two types of authentication method, Kerberos or certificate based authentication. In order to monitor servers and clients located outside the Operations Manager’s native Active Directory domain, you will need to configure
certificate authentication using either an internal Certificate Authority or through a 3rd party Certificate Authority.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Activating Windows Server 2008 R2 Enterprise 180 Eval after Upgrade from Win2K8R2 Standard

I had a licensed instance of Windows Server 2008 R2 Standard. It is an OEM License.
I wanted to try Windows Server 2008 R2 Enterprise for 180 days without rebuilding the whole machine so I entered "DISM /online /Set-Edition:Enterprise" on the command line and now I can use the enterprise features.
The problem is that I have 30 Days to activate. When I attempt to activate, it says "Error: 0x8007232B DNS name does not exist"
How can I activate the 180 day trial?

I had a licensed instance of Windows Server 2008 R2 Standard. It is an OEM License.
I wanted to try Windows Server 2008 R2 Enterprise for 180 days without rebuilding the whole machine so I entered "DISM /online /Set-Edition:Enterprise" on the command line and now I can use the enterprise features.
The problem is that I have 30 Days to activate. When I attempt to activate, it says "Error: 0x8007232B DNS name does not exist"
How can I activate the 180 day trial?
"Error: 0x8007232B DNS name does not exist", suggests this server is now configured as a KMSclient, and it is trying to contact a KMShost to perform activation. It is not being returned any SRV records from your DNS, when it queries for _vlmcs._tcp
If you do not have a KMShost server implemented, you need to input a suitable ServerEnterprise product key.
When you purchase your ServerEnterprise license, you will be given a product key to use for this.
For this task, you can use slmgr.vbs /ipk
For your trial, you could use the method slmgr.vbs /rearm
this will only succeed 3 times, I think.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Install SCCM on non-domain-membered server!

Dear friends
in my SCCM topology ,on perimeter side , i have server which i want install Primary server to receive updates from internet and give to other side primary server (like WSUS upstream/downstream scenario),but in perimeter i don't have any active directory
infrastructure so i cant join server to domain(which is required by SCCM installation)...
how can i implement this scenario?
any help would be strongly appreciated+++

I want one of my SCCM primary server's in LAN can access to A Server (i want install primary server but i cant) in Perimeter (which i dont have AD infra) and take updates and then deploy them to LAN.
i think i can use one WSUS in the Perimeter Zone instead of Primary SCCM server!Right?

Non-Domain Server Cert Requirements Enterprise vs. Standard

Similar Messages

Maybe you are looking for