Non existing local user managed to RDP to windows 2012 target machine

Hi,
It seems the exact same issue as I see it here: http://social.technet.microsoft.com/Forums/en-US/91f09a4b-350f-47f8-814b-53b29d1a6306/windows-2012-rdp-login-credentials-are-not-used-on-remoteapp-connect-dialog-box?forum=winserverTS
But I couldn't see any real/final answer.
Can I get official response from MS about this issue?
When we use the RDWeb, we use a non existing user to connect to some target 2012 machine and it actually works... it connects me to the target.
How cab I eliminate it?
Tx,
shlom

Hi,
Thank you for posting in Windows Server Forum.
For the user which you don’t want to provide the access of Remote Desktop to target machine, you can apply GPO setting for that user. Need to apply “Deny logon through Remote Desktop Service” GPO policy and add that user under that policy. You can
find the policy under below mention path.
Windows Settings/Security Settings/Local Policies/User Rights Assignments
Hope it helps!
Thanks.
Dharmesh Solanki

Similar Messages

  • Adding a domain user to the admin role within the local user management breaks all metro apps for all users!!

    Hi,
    I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
    After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
    Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
    I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines. 
    First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
    Here are my exact steps of what I did to reproduce our problem:
    Complete format of HDD in preperation for a clean install
    Clean install performed
    Set up the machine initially with a local account
    Test metro apps - all working fine
    Open control panel from the desktop, click on System, change the system to join the domain, click reboot
    Log into the system using my domain account
    Test metro apps - all working fine
    Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
    I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
    In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
    I click add and then add my domain account - also giving it administrator access
    Sign off or reboot to ensure the new security is applied
    Sign back in to the domain account
    Test metro - ALL BROKEN
    Sign out
    Sign in as local account
    Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
    So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
    Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
    could fathom was a full re install and not giving the domain user admin access to the local  machine.
    Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
    Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
    I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
    soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
    Thanks

    Hi Juke,
    Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
    I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
    your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
    in event viewer.
    Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
    information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
    Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
    Under "Applications And Services Logs" --> "Microsoft" -->  "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
    Windows.Launch contract failed with error: The app didn't start."
    If you require any further information just let me know and I will provide as much as I can.
    Thanks

  • Exchange 2013 management tools installation on windows 2012 standard edition gives error.

    Exchange 2013 management tools installation on windows 2012 standard edition gives following error.
    Does anyone observed this issue ?
    Error:
    The Exchange management tools are supported on servers running Windows Server 2012 and Windows Server 2008 R2 SP1 or later, and also on Windows 8 and Windows 7 client computers.
    For more information, visit: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.ValidOSVersionForAdminTools.aspx
    My Test lab is having
    Exchange 2013 installed (xyz.local) domain and working fine.
    Now i am installing Exchange Management tools on server which is member of (xyz.local) Domain  (base OS : Windows 2012 standard edition : Windows updated)
    Best Regards
    sameer Prabhune

    Hi Sprabhune,
    It should work.
    Did you install the tool by GUI or cmd?
    Please select "Automatically install Windows Server roles and features that are required to install Exchange Server" to have the Setup wizard install required Windows prerequisites.
    If possible, please try to install the tool on Windows 7/8 client to test.
    Exchange 2013 Prerequisites
    http://technet.microsoft.com/en-us/library/bb691354.aspx
    Frank Wang
    TechNet Community Support

  • DLU with Windows 7 x64 & Existing local user

    Hi, I have a strange bug. I have a Windows 7 x64 Enterprise SP1 that I'm trying to configure a volatile user on it. I have also configured my Windows 7 to do an auto logon with a local Windows account which is "Usager". I also modified the registry to disable CASA.The auto logon work perfectly and CASA doesn't appear either. So I have configure my DLU with the "Use the credential specified below (Always volatile)", the "Use user source password and the "Manage existing user account (if any)" options. Finally, I add to the registry the "AllowDLUWithoutNovellClient" registry key under "HKEY_LOCAL_MACHINE\\SOFTWARE\\Novell\\Authenticat ion" since I dont have the Novell client install on the computer. Now each time I log off and logon again I can see that the volatile user never applies. Why does the DLU never delete the "Usager" profile? What am I missing here? We are running here 11 SP2.
    Thanks in advance for the help!

    Shaun, after rechecking everything I made some little progress. I'm now able to make it work but not always! I just can't find a pattern to the why it works now and not later on. Sometimes I just reboot and that's it. Other time I can reboot the computers 10 times in a row it just won't work. Is there something in the logs on the workstation that I could use to make sense here?!
    Note: I'm following the guide lines in the pdf "zen11_cm_policies.pdf" on page 30 in section "3.2.3 Implementing the Dynamic Local User Policy Without the Novell Client".
    Thanks again for the help!

  • Windows 2000 user account migrate to new Windows 2012 R2 domain

    Hi all
    I have a customer using Windows 2000 domain with many user accounts and file share service.
    Now they want to use a new Windows 2012 domain without upgrade from old 2000 domain due to some hidden problem.
    Customer requested to keep user name, password, uid for existing file share access.
    May I know any tools for migrate user account from Windows 2000 domain to Windows 2012 domain?
    thx
    Q K

    Hi,
    Can you please confirm your requirement, that is you will be using a new Windows 2012 domain with only the user accounts from Windows 2000 domain. 
    If the above text matches your requirement, I would suggest you the following steps,
    1. You can use CSVDE - command line tool to export the AD user information as CSV file from  Windows 2000 domain,
    http://www.techrepublic.com/blog/data-center/simplify-admin-tasks-by-exporting-active-directory-data-with-csvde/
    2. Then, you can import the CSV file with required user attributes (domain details modified according to the target domain) to Windows 2012 domain using PowerShell as
    shown in the link given below,
    http://blogs.technet.com/b/bettertogether/archive/2011/01/09/import-bulk-users-to-active-directory.aspx
    Regards,
    Gopi
    www.jijitechnologies.com

  • How can I enable Active Directory network login while maintaining the existing local user account data?

    We have a user base of around 15 Macs that we would like to integrate into Active Directory. However, we need to maintain the existing users local account data but do not wish to have that data moved to the network. Is there an easy way to create the AD login and then move the existing account data to the new login while maintaining correct permissions?
    I've had some success logging in as root and deleting the existing account, while maintaining the home folder. Then renaming it to match the AD login account name and replacing the new and empty AD user home.  I then perform a CHOWN on that folder to give ownership to the AD account name.
    Is it this simple? I don't want to leave any loose ends.
    Thanks for any help you can provide,
    Scott

    JamesSTJ wrote:
    Oh, found it!
    And guess what? Apple wanted to charge me a one time fee of $600 to answer that question.
    It worked! thanks!
    I guess I'm cheap

  • How to disable access to Server Preferences to non-admin local users

    My apologies if this has been covered in other discussions. I am new to Mac OS X Server. I have just set it up on an iMac. I have set up a Standard user account as well as the Administrator user account. If I log in as the Standard user, I can still open Server Preferences and make changes to all the server settings (as if I had Administrator access). Is there any way to disable access to Server Preferences (and other Server Utilities) for Standard users?
    Many thanks.
    Greg

    Hi ,
    Please have a look in to this .
    EAC is now a web-based management console, you’ll need to use the ECP virtual directory URL to access the console from your web browser. In most cases the EAC’s URL will look similar to the following:
    Internal URL: https://<CASServerName>/ecp   The internal URL is used to access the EAC from within your organization’s firewall.
    External URL: https://mail.contoso.com/ecp   The external URL is used to access the EAC from outside of your organization’s firewall.
    Note : There is no virtual directory for EAC .If you want to use EAC internally or externally ,you need to use the ecp virtual directory to gain the access.
    Please reply me if you have any queries .
    Regards
    S.Nithyanandham
    Thanks S.Nithyanandham

  • BUG: SQL Developer 1.5.4 attempting to connect to non-existent local DB.

    For some time now I've been seeing SQL Developer 1.5.4 creating a "sqlnet.log" file in "sqldeveloper\sqldeveloper\bin" every time I used it. I've just done some testing and found that it is trying to connect to an XE instance on "localhost" after I close my last open connection. Here are the contents of the "sqlnet.log" file:
    Fatal NI connect error 12541, connecting to:
    (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=localhost)(PORT=1521))(CONNECT_DATA=(SID=XE)(CID=(PROGRAM=C:\Documents and Settings\ehillma\My Documents\sqldeveloper-154\sqldeveloper\sqldeveloper.exe)(HOST=LMIT-4635)(USER=ehillma))))
    VERSION INFORMATION:
         TNS for 32-bit Windows: Version 10.2.0.1.0 - Production
         Windows NT TCP/IP NT Protocol Adapter for 32-bit Windows: Version 10.2.0.1.0 - Production
    Time: 15-APR-2009 08:58:41
    Tracing not turned on.
    Tns error struct:
    ns main err code: 12541
    TNS-12541: TNS:no listener
    ns secondary err code: 12560
    nt main err code: 511
    TNS-00511: No listener
    nt secondary err code: 61
    nt OS err code: 0
    This is in SQL Developer 1.5.4, Build MAIN-5940, using Java(TM) Platform 1.5.0_17, on Windows XP SP2.
    Ed. H.

    Hi Frank
    This message means that the driver code is unable to locate a DLL to load up and use. Looking at the message I suspect that the DLL in question <jtds-dist>\SSO\ntlmauth.dll .
    There are a couple of ways of making the Java VM locate the DLL, assuming you are using windows then the easiest would be to add the directory <jtds-dist>\SSO to you path environment (replacing <jtds-dist> with the actual path to your JTDS distribution).
    Regards
    Rob Cooper

  • Microsoft security compliance manager 3.0 in windows 2012 server

    Hi All,
    I am completely new in SCM. I have assigned to verify and check why SCM is required for environment, what and how SCM works. I have downloaded SCM from
    https://www.microsoft.com/en-us/download/details.aspx?id=16776.
    After download i am able to install it in 2008 std x64 bit but my target is to install it in 2012 server x64 bit. I am not able to install it.
    It's showing do not have feature of .Net Framework 3.5 and installation is getting closed suddenly. I tried to download .Net Framework3.5 but not able to install it as showing not supported or showing alternet path. I am not holding any CD/DVD of Windows
    2012 server. Only ISO.
    Please help me.
    Thanking you in advance!
    Abhijit

    Hi,
    Thanks for your post.
    SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!
    http://blogs.technet.com/b/secguide/archive/2014/09/04/scm-baselines-for-windows-8-1-ie-11-and-server-2012-r2-are-now-live.aspx
    For more SCM related issue, i think you may ask in:
    https://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement
    Regards.
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • User Management problem after upgrade of SAP DB/Database Studio

    Hi,
    after upgrading SAP DB to 7.8.02.21 and Database Studio to the same version (this is on Windows 7 64 bit professional) I experience that starting DB Studio as a normal user fails with a message regarding not being able to execute (?) User Management. To start the program I have to run it as administrator. Once I do this it will, afterwards, work fine for a normal user, too, but only for one day (or possibly one logon to Windows 7).
    (The error message does not even contain a hint to that solution)
    In previous versions it was necessary to run DB Studio once (after installation) as an adminstrator. After that it would work all the same for normal users.
    Is there a way to fix this? The desired behaviour being the one from previous versions that after one administrator run it can be started by my normal Windows user? It's, of course, not serious and I do know a workaround, but it's a bit annoying nonetheless.
    (And yes, I do know that Windows 7 is not an officially supported platform. I'm just shyly asking).
    Best regards,
    Thomas

    Hi Thomas,
    due to the changes in the security concept in Windows 7 it's now required to be admin when you want to start or stop a service or to create 'global objects' like the shared memory files that are used to communicate between DBM-client, server and database kernel.
    Since the user management of MaxDB Studio actually is just a small MaxDB instance, the service for this must be running.
    To start the service and to create the shared memory the admin privilege is necessary on Windows 7.
    What you may do is to flag the dbstudio.exe as "execute as administrator" - that will give you a pop-up warning every time you run the program but it will work.
    I assume that is the workaround that you're already using and it's the one I use as well.
    AFAIK the colleagues in Berlin are working on a version that doesn't require a MaxDB instance for local user management - that should remove this kind of problem as well.
    regards,
    Lars

  • Dynamic Local User Issue

    When i look at snapins thru consoleone i can see that Zenwork 7.0.1 snapin is installaed.
    I have Novell Client 4.91 SP5 and Zenwork Client 7.0.173.91015 installed on the clients running WinXP Pro SP3.
    There is different of failures that happens..
    Senario 1:
    I install a Latitude D610 with a WinXP Pro SP3 original CD, from scratch. I only install the drivers for the LAN-card to get access to the network. I do not update windows updates etc.
    I install the Novell Client 4.91 SP5, after that i install Zenwork Client 7.0.173.91015. And apply some registry settings to make the novell client to use the "tab-function" and hide advanced settings etc..
    I have my eDir user "ADMIN1" with the policy package with settings to Dynamic Local User set to create a local user with name Admin, but im not using volatile user. So the local windows user Admin will be saved when logged out.
    I login once with my Admin1 user, it creates the local profile Admin from Default User (with the help of Zenworks, and the policy Dynamic Local User?). I restart the computer and login again, and the local profile Admin craches and create a new one from Default User but this local user profile is namned Admin.Computername.
    Ive tested this with atleast four other computers (different hardware) so it cant be a driver issue.
    Ive looked thru the local logs, and i cant find anything about any problem with reading the NTUSER.DAT as could be a problem to load the local profile.
    I even tested this senario when i update all windows updates etc, with two different version of the zenworks client and so on. ive been testning this for like 100 times now atleast. and same failure is happening. Ive even tested this in a virtual environment (vmware workstation).
    Senari 2:
    Like the problem descried above, in some cases it loss the connection or something with the zenwork server side and the zenwork client on the client computer... Since it does not attempt to use the settings from Dynamic Local User, becuase i got the windows login window, and i have to login to an already existing windows local account (with otherwords i cant login to the Admin-profile since i dont know the login information to this account since its created by zenworks / dynamic local user settings, and from the settings there you cant set a password, just the name and role of the windows accout that should be created)..
    And after a while i try again, and then the settings from Dynamic Local User passes by and log into the, (let me say) Zenworks created local user profile (set by Dynamic Local User settings).
    I wanna mention that all computers thats old, no reinstallation.. I can login to without problem, without any crashes of the Windows Local Profile.
    Ive succeded once without any Windows Local profile crash, rebooted this computer over and over again, and no failure. If you succed twice, it seems like its fine. But then i reinstalled this computer, just like i did to make it success. But this time it failed on the second try, and got a crashed profile....
    Its kinda old hardware to the server where i have my Zenworks, could that be the case? Could it be some timeouts?
    The concults i use to fix some problems in our environment updated zenworks from the serverside just before christmans.. Could it be any problems with some windows patch etc?
    Any help would be appreciated!
    // Jokohanho

    > installed on the clients running WinXP Pro SP3.
    <snip>
    > I restart the computer and login again, and the local
    > profile Admin craches and create a new one from Default User but this
    > local user profile is namned Admin.Computername.
    I only know of one XP SP3 issue that could cause this, but it involves a pw
    change and RP:
    "When you try to log on to a Windows XP SP3-based computer by using a
    roaming profile, the roaming profile cannot load."
    http://support.microsoft.com/kb/958058
    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)

  • Migrating Local Users to Network/Mobile Home Directories

    Hey Everyone!
    A Happy Holiday's to you all! I'm in the midst of building a new system for my new clients. They had nothing but static IP numbers and no actual servers in a 50+ Mac environment. MacBook Pros, G5's and PowerBook G4s up the yang.
    What I'm looking to do is migrate as seamlessly as possible, all of the existing local users to network users and then some of those network users will become mobile accounts. I have Open Directory authenticating properly so...
    Here's my plan:
    1) Finish creating new builds for the MacBook Pro's, the G5s, and the PowerBook G4s.
    2) Create the users in OD and assign them to groups for permissions.
    3) Drag and drop entire home directory from each computer to a shared folder on my OD Server.
    From here I want to run chown, I'm guessing, to change the user:group for the home folders I copied over so that they match the ID's created by OD. I figure when I do that, then I can simply replace the OD created home folders in my server's Users folder with the copied and permission modified home directories from each local user.
    My guess is that would be the fastest way to migrate the users to the network.
    My question is are the terminal commands I need to run on each folder in order to make this as seamless as possible?
    chown -R username:newgroupname /~path to copied local home directory
    Is that syntax right?

    The command is correct!!!
    But my quess is if you use ACL's to set the permissions you won't need to run the command on every folder
    Best Regards

  • Single server solution for RDS / TS / RDP using Windows Server 2012 R2

    Planning on setting up a small single server and  need this functionality:
    * 3 local users runnnig Windows 7 Home Premium needs to access files on the server
    * The same 3 users should also be able to connect from home (PC, Mac, iPhone) and run an application on the server. (Session-Based Remote Desktop).
    We want to use Windows Server 2012, and found out that Essentials does not support RDP, so that leaves Foundation and Standard versions.
    However, I also found out that in WS 2012 the RDP can not be on the same server as the Domain Controller, and we therefor needs to run 2 server instances on our hardware. I think this starts to look way to complicated for what we want to do, but found out
    that WS 2012 R2 allows a single server to run RDP (See TechNet article 2833839).
    So we will go for Windows Server 2012 R2, either Foundation or Standard to set up our RDP.
    So now the question: Will that solution work with our local machines running Windows 7 Home Premium, as they cannot connect to a domain? Can we set up some kind of simple file share or Workgroup to acces files locally while still keeping the RDP
    functionality on the server?
    And, will WS 2012 Foundation R2 do this as well as WS 2012 Standard R2?
    (I have been asking several locat MS representatives to find a solution to our needs, but no one seems to know how this works....of cause we could just get 2 WS 2012 Standard server instances, run one as DC and on as RDCB and upgrade all our clients to Win
    7 Pro, but we would like a solution with minimal investment in time and money)
    Rgds
    Petter

    Hi Ryan, 
    and thanks for the answer! I do not know how to do "multiple quote" in this forum so I do it this way:
    "have you considered virtualisation, as you can run multiple virtual machines under one licence. I think this would be the cheapest and most efficient use of your money. Upgrading your clients to Windows 7 pro would allow you to have domain control
    Single Sign On SSO. "
    This is the "official" solution I think: Upgrade all clients to Win 7 Pro and run two instances of Win Server 2012 Standard on the server.
    However, I was hoping to get away with something a bit more Quick & Dirty.....;-) We do not have big security issues and will have a good backup system, and I think for 3 users only, it will be more work trying to centralise administration like updating,
    backups etc, than to just go to each machine and do what is needed. 
    We are good with computers/Windows but have no Server experience. A server guy will help us get started, but I dont want him around after that, so it must be a very simple solution.
    Also, installing 2 instances of WS 2012 and upgrading all 3 clients to Win Pro, and then installing all software and settings on the clients into the new domain user accounts on these clients is quite a lot of work. So I was hoping to keep only existing local
    users on the client machines and only have some kind of file share thing going on with the server disks that we need to access. So perhaps use a Workgroup instead of a domain, if that works with the RDS setup?
    "Option 1
    2 virtual machines 1x DC and 1x RDS server."
    So, if we set up RDS this way (so we can log in remote and run our application session-based on the server), can we keep the local clients running Windows Home Premium using our current local user logins (ie no domain user accounts created on the client machines,
    as this is impossible in Home versions) and still access the server disks somehow, or is it impossible? 
    Another question is if it is stupid/a really bad solution...but I still want to know if it is possible....;-)
    "Option 2 
    2 virtual machines 1x DC and 1x RDS server.
    You can configure your RDS solution as a domain joined platform and will still be able to access resources from the local device as you can map local drives to the session host. http://www.serverintellect.com/support/techfaq/drive-rdp/
    Your users would have two sets of credentials, one for the local client and one for the domain."
    I do not want to access files over VPN or RDP, we only want to run an application on the server from remote (Session-Based Remote Desktop). However when we use the local clients we want to access files on the server, and then we access huge image and film files
    on fast RAID drives, so local network speed must be top speed. Also if possible we would like to not upgrade to Win Pro, and then joining a domain is not possible.
    "Option 3
    1x Server
    The second option would be to manually deploy the session host role and licencing role to a work group server. This would limit access to RDP only and you would loose web access functionality."
    I think this is what I was hoping for. It seems that the new R2 release of WS 2012 allows you to rund RDP and Domain Controller roles on the SAME instance of the server. That sounds nice, it limits what we need to keep track on and minimises the load on the
    server that needs to act as a very fast file server locally.
    However, can we do this and still keep file acces with only Windows Home (no domain) in the local clients (same question as above under "Option 1")?
    Rgds
    Petter

  • Identity Management for UNIX (aka Windows Services for Unix) Adding 2012 DC to a prep'd 2003 domain.

    We have been successfully using Windows Services for Unix on a 2003 domain for passwd and group maps.
    I prep'd the domain to allow a 2012 R2 server to be added and then added the IdMU role/feature on this new 2012R2 DC. Now the passwd map is still OK but the group map now shows full usernames rather than short names.
    i.e. what DID show with "ypcat group" as ...
    "infra-shared::65550:gfer,jhug,shig", now shows as
    "infra-shared::65550:Garry Ferguson,Jason Hughes,Steve Higgins"
    and so is not usable. I have had to revert to local /etc/group files on all our unix machines!!
    Help/comments would be really appreciated!
    Garry Ferguson

    Hi Gaz Ferg,
    SFU 3.5 is used to installed on windows 2003 and windows XP. SFU 3.5 cannot used on Windows 2012, that makes customer cannot user NFS and user name Mapping services on Windows
    2012.  From windows 2003 R2, NFS is a build-in component in OS, we need to add Roles/Features to use NFS.
    1. What is change in 2012R2
    IDMU component, which was used to authenticate Linux users has been removed. Now a Windows server cannot play role of NIS Master server. 
    Passwords cannot sync to the Unix Machines. Maps can not sync between Windows and Unix computers.
    2. What has not change in 2012R2
    Following methods to authenticate and map a Unix user to Window user are available:-
    Active Directory
    Active Directory Lightweight Directory Services (AD LDS)
    Username Mapping Protocol store (MS-UNMP
    Local passwd and group files
    Unmapped UNIX Username Access (UUUA) (applies to Server for NFS using AUTH_SYS only)
    You can find more information about this here –
    http://blogs.technet.com/b/filecab/archive/2012/10/09/nfs-identity-mapping-in-windows-server-2012.aspx
    http://blogs.msdn.com/b/shan/archive/2006/12/13/sfu-sua-idmu-fun-with-names.aspx
    More information:
    Install Identity Management for UNIX Components
    http://technet.microsoft.com/en-us/library/cc731178.aspx
    I’m glad to be of help to you!
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • How to Upgrade Service Manager 2012 SP1 with Windows 2008 R2 to SCSM 2012 R2 with Windows 2012 R2

    Hi,
    We are using Service Manager 2012 SP1 UR2 with Windows 2008 R2.
    I am planning to upgrade Service Manager to R2 with Windows 2012 R2. I found the steps to upgrade SCSM 2012 Sp1 to R2 but need assistance to upgrade with 2012 R2 OS.
    Please suggest how to achieve the above mentioned objective.
    Regards, Syed Fahad Ali

    Virtualization solves this problem handily, by allowing you to create a new server to run the new program on the same hardware. it also solves the related problem of moving off unsupported hardware without changing OS or application. VMware is my personal
    favorite, but Hyper-V, Xen, and VirtualBox all have similar capabilities.
    Compare the cost of work and confidence in success of a upgrade, where any of thousands or millions of uncontrolled settings could cause an issue, to the cost of work and confidence in success of installing a new OS instance and configuring a known state
    for the new environment.
    In short, upgrades should no longer be a thing. there are just too many ways they can go wrong, and it's far too easy to create a new OS with minimal expense and effort.

Maybe you are looking for