Planning for global service from different domain

Hi....
This is JEWEL from Bangladesh. I am very new in TechNet forum, so my advance apology if I have any improper language representation.
I am working in a telecommunication company which on of the operating companies of largest Asian telco. company. Under this Asian telco. group there other telecom operators around Asia region with having different-isolated domain and Microsoft services (AD,
Exchange, SharePoint, Lync, ADRMS etc.) in each. Now the group wants enrich the communication beyond the barrier of separated architecture while considering small scale change in solution. For example, we want to have global address book in each operator around
Asia and also want have the office communication among each other telco. of the group (MS Lync), want to have document/library management through SharePoint service etc.
I need help how to plan and move ahead for seamless and successful roll-out/deployment of the above requirement.
Thanks with regards,
Jewel

Following are some of the general suggestions which should give you some clues
> we want to have global address book in each operator around Asia
http://forums.msexchange.org/m_1800433276/mpage_1/key_/tm.htm
> also want have the office communication among each other telco. of the group (MS Lync)
http://social.technet.microsoft.com/Forums/lync/en-US/c2df50fa-6d96-4ef7-be29-ba259d7e301a/2domains2forests-2seperate-lync-servers-federation-and-edge-switch-question
> want to have document/library management through SharePoint service etc.
http://social.technet.microsoft.com/Forums/sharepoint/en-US/20ab9c73-ab38-47d0-a791-8f9004fbe1a4/move-sharepoint-farm-servers-to-another-ad-domain
For Exchange, Lync and Sharepoint, there are dedicated forums... please post your application specific question there
Lync 2010 and OCS - Planning and Deployment: http://social.technet.microsoft.com/Forums/lync/en-US/home?forum=ocsplanningdeployment
SharePoint 2010 - General Discussions and Questions: http://social.technet.microsoft.com/Forums/sharepoint/en-US/home?forum=sharepointgeneralprevious
Exchange 2010 Setup, Deployment, Updates, and Migration: http://social.technet.microsoft.com/Forums/exchange/en-US/home?forum=exchangesvrdeploylegacy
Regards, Santosh
I do not represent the organisation I work for, all the opinions expressed here, are my own and posted AS IS.

Similar Messages

How to grant access to sharepoint for the user from different Domain

Hi All
I need to grant access to user from different domain.
Where I can able to view the users in people picker (different domain).
Thanks in Advance.
Raj

Hi
Trevor Seward
Sorry to disturb
you again.
I am trying to restrict user from search from other domain, say we have domain A and Domain B, where I am trying to restrict all the user from domain B (Search users)for a site collection. I have found couple of stsadmin command to do so. but none
of them works. Below are the commands I have tried
STSADM.exe -o setproperty -pn peoplepicker-searchadforests -pv "domain:<Name>.domain" -url "http://Site URL"
stsadm -o setproperty -pn peoplepicker-searchadcustomquery -pv “(canonicalName=<Name>.domain*)” -url "Site URL"
we have two way trust.
Can you suggest any solution.
Thanks
Raj

Planning for Mobile Service Pack Upgrade from 2007 SP2 to SP6

Hello Mobile Gurus,
We are planning for upgrading mobile from 2007 SP2 to SP6. Can anyone of you guess a time line for achieving this?
I mean, how long will it take in dev env to upgrade commstation, mrs, mdw etc. apart from upgrading the field laptops?
thanks

Hello Mahesh
had missed 5th point. ie Rollout to the client laptops . the amount of time it takes will be based on the kind of customization and kind of issues that you face in your application . etc.
Repostiroy upgrade from n to n+1 release will take approx 1-2 hours (with out additinal language) and it is correct.
I have given you the rough estimates so that you will get a fair idea how much time it is going to take.
Best Regards
Shankar

Ssrs security access for users on a different domain

Hi
We are using ssrs 2008 r2 and have added a new domain to our network as we are working with another company.
Our original domain was say "DomainA" which can access all our reports, how do we give access to the new domain "DomainB" access to our reports?
We are unable to add DomainB users to our AD security groups so I have created a windows groups called SSRS_DomainB_Users and given them access to our parent folder and also added them into site settings as a system user.
What is the best way to deal with this?
Users in DomainB will eventually be added to DomainA and DomainB will then be deleted.
One of the users I am testing with gets an error message :
User 'Domain name/user' does not have the required permissions. Verify that sufficient permissions have been granted and Windows User Account Control (UAC) restrictions have been addressed.
Thanks

Hi Nasa1999,
According to your description, you want your reports can be accessed by user from different domain. Right?
In this scenario, we should do Internet Deployment for your reports so that users from different domain can access the reports. Please the articles below:
Planning for Extranet or Internet Deployment
Using Reporting Services in an Internet/Extranet Environment
SQL Server 2008 Reporting Services
for Internet deployment
Reference:
SSRS reports
global access
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Mapping users coming from different domain in AD

HI,
We have configured vintela SSO which is working.Now we are trying to add another domain but it has been unsuccessful.
We have imported the users coming from other domain in CMC->AD, and UseFDQNDirectoryForServers parameter in registry.
The issue is our complex krb5.ini errors as "cannot find kdc for realm" for the user account coming from the other domain.The existing domain kinit is successful.
Please help in resolving this issue!!! We need to have users coming from different domain to use vintela SSO.
Thank you.

well you're mixing things up a bit.
The usefqdnfordirectoryservers is used to map in groups. If the groups show up as well as the users that piece should be complete.
the krb5.ini is for logging in users manually, it must conatin the KDC for every domain that may contain users that need to log into BO. It also must have a KDC or capath entry to define all the parent domains as well (even if they do not have members that need to login. This is how the krb5 is used to verify transitive trusts. Then all users that are not in the default domain must logon as username@ DNSDOMAIN.COM where the DNS domain is entered in all caps aqnd represents the FQDN of theidomain the users bewlong to. Now if not logging in manually this should be a big problem.
So for SSO (vintela anyway) this process is automatic, although you may want to configure vintela with site information so it doesn't randomly use all your DC's Site can be set following the steps at the end of business objects note 1261835 (complete and vintela only editions).
In order for vintela to work properly the value entered in CMC > Authentication > Windows AD > service principal name must = an SPN thet was created on the account that is running the SIA/CMS
Regards,
Tim

How to design EDW for source systems from different Time-Zones

How to design EDW for source systems from different Time-Zones?
Suppose IT landscape has a global BW in New York, and source systems in americas, europe and asia, then how the time-zones effect on time related things like delta selections on date or timestamp etc.

As you said BW is global in NY, your source system must be global too. People from various locations can connect to same source system and thus timestamps for delta is always maintained as 1 single time. We have same scenario in our project. Our R/3 system is used by users in US and Europe. So we run deltas twice in day to make sure we got deltas from both locations.
If scenarios was such that all locations connect to separate R/3 system, then obviously you have multiple queues. That is unique delta queue for each source system so deltas will be pulled as per data in respective queues.
Abhijit

Displaying image from different domain in an applet

can anybody tell how to load & display an image from a different domain. the image is being generated dynamically on that server so that i cannot save it.

You should sign your applet to be able to do it.Isn't that normally only necessary for Security
relevant procedures, like locally reading and writing
(saving) files? ( -> So, is that also true (sec.
rel.) for "donwloading" from "different domain"
(URL)? )Yes, it is a security violation. Maybe arguably not as bad as local file system access, but it could still be a problem. The main problem would be turning an unsigned applet (therefore from an unknown source) into a DOS application which starts pounding on all sorts of other servers, including the local host.
As to the problem, you could have a servlet on your host which gets the image from the other host for you. The servlet could be very generic with the applet passing all the info needed to get the file for it.

Loading modules from different domain

when I load modules from the same location where is main application, everything is fine. But when modules are loaded from different adrress i got following error:
TypeError: Error #1009: Cannot access a property or method of a null object reference.
          at mx.utils::LoaderUtil$/isRSLLoaded()[E:\dev\4.5.1\frameworks\projects\framework\src\mx\uti ls\LoaderUtil.as:525]
          at mx.utils::LoaderUtil$/http://www.adobe.com/2006/flex/mx/internal::processRequiredRSLs()[E:\dev\4.5.1\frameworks\projects\framework\src\mx\utils\LoaderUtil.as:259]
          at mx.core::FlexModuleFactory/getRSLInfo()[E:\dev\4.5.1\frameworks\projects\framework\src\mx \core\FlexModuleFactory.as:582]
          at mx.core::FlexModuleFactory/update()[E:\dev\4.5.1\frameworks\projects\framework\src\mx\cor e\FlexModuleFactory.as:470]
          at mx.core::FlexModuleFactory/moduleInitHandler()[E:\dev\4.5.1\frameworks\projects\framework \src\mx\core\FlexModuleFactory.as:819]
any ideas what might be wrong?
thanks for any help in advance

This is a link to testing application:
http://michalnpe.homeip.net:55001/bin-release/LoadModuleApp.html
you can see source code of this app.
Let's say we want to run module from different domain.
so insert following address for crossdomain.xml and module (into TextInput in the applicataion above) .
http://a2s.pl/crossdomain.xml
http://www.a2s.pl/npe/softmgr/Michal/wymiana/TestModule.swf
here is the code that loads the module:
protected function loadModule(event:MouseEvent):void
                                        testloader.url = moduleAddress.text;
                                        //testloader.loadModule();
                              public function setup():void { // run before loading modules
                                        Security.allowDomain("*");
                                        Security.loadPolicyFile(crossdomain.text);
                                        var request:URLRequest = new URLRequest(crossdomain.text);
                                        var loader:URLLoader = new URLLoader();
                                        loader.load(request);

Is it necessary to create a Billing Plan for the Service Contracts

Hi All,
Is it necessary to create a billing plan for the service contracts.
My requirement.
In CRM 7.0, we created a service contract. For the item in that service contract there is a Billing Plan tab.
In that tab we have the dates for Period, Billing Date etc.
Now our requirement is to get the Billing Date quarterly. For this we created date rules and date profiles and assigned these date profiles to header and item level transactions.
And we are able to see the date rules under the drop down of the billing date.
I copied the standard date rule BILL004 to ZBILL004.
But when we changed to our date rule it is not changing to quarterly date.
Can you please let me know what are the configurations to be done for this.
Is the billing plan has to be created for this kind of scenario.
Thanks in advance
Thanks and Regards,
Raghu

Hi
On OK button's action you can Destroy the window and navigate to Page1.
Go through this link for more details and a step by step guide for creation of pop ups and dialog boxes
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/903fed0d-7be4-2a10-cd96-9136707374e1?quicklink=index&overridelayout=true
Hope it works
Regards
Suresh

Display problem from different domain

Hi
I am not able to make my display(DISPLAY variable). When I m exporting the display variable from the same domain as the linux box is present. It is working fine but when I trying to export the DISPLAY variable from different domain and use the GUI. it is throwing error. Please help. Also I am able to ping from my window machine to Sun Solaris
operating system: sun solaris 9 (5.9).
Error Message:
(gnome-calculator:5511): Gtk-WARNING **: cannot open display:
Can anybody tell me how and what all we need to check to configure DISPLAY.
I mean the software required and firewall configuration.

I trying to export the DISPLAY variable from different domain and use the GUI.Different domain or different network?
I am able to ping from my window machine to Sun SolarisPing means nothing in this case because:
1. ICMP =! TCP
2. You need to have allowed connection from Solaris to your local machine (port 6000) and ping is not capable to check that.
3. You need to check this on/from server (Solaris)
Or you can use X11Forwarding so you don't need to allow connection as mentioned above.
I mean the software requiredDo you mean client SW or what?

Unable to load swf from different domain through html wrapper in Chrom

Hi All,
I am trying a embed a swf from different domain. My html wrapper was in one domain and swf was in another domain. I have embedded the swf into the html wrapper. When i run the html file it is loading the swf in firefox and working fine. But when i try to run the same html in chrom or IE the swf is aborted. I have crossdomain.xml file in both the servers which is also allowing both the domains. I was not able to figure out the issue. Can anybody help on this.
regards,
Jayagopal.

Are you getting any errors or warnings?

Grant access to users from different Domains

Hi,
Recently my company was merged with another. All users from my company are setup in our Domain (DomainA). Sharepoint is able to see the users in this domain and grant access to the users as well. When the merger happened, we created a Group (Test - Sharepoint)
in our AD to add groups from other companie's domain:DomainB, totally different Forest. There is a two way trust setup between these domains. The group Test-Sharepoint is "domain local" and it is able to see the groups/users from other domain: DomainB.
The other users are now able to access our sharepoint environment once access is granted to DomainA\Test-Sharepoint.
Problem came when we applied Audience targetting around few web parts. The users from DomainB who are added as object in DomainA\Test-Sharepoint (group in DomainA) are not able to see the web parts that have audience targeting for this group. Someone
suggested that AD groups should be Global or Universal but that is not our case. Most of the groups in our AD are domain local and SP is able to see the users within it.
Please suggest how we can resolve audience targeting issue?
Regards, Kapil ***Please mark answer as Helpful or Answered after consideration***

My apologies, yes that is correct you'll have to use Domain Local in this case. http://technet.microsoft.com/en-us/library/cc755692(v=WS.10).aspx
Actually what you'll need to do is not use Groups in your domain at all, as the users are Foreign Security Principals. Instead, use a group in the trusted domain, or attributes of the users you intend to target directly.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Monitoting services from different location then I have SCOM 2012 R2

Hello
I am interested in the ability to monitor services (particularly
in the Exchange OWA) from a different
location than I have placed SCOM
server. I environment of
different networks and branches. I don´t want to pay for
GSM (Global Service Monitor)I there some kind of "probe" or
simplified SCOM? I do not have
the opportunity to take in every branch of
such a great performance on SCOM, connnectivity speed between branches is not problem.
thanks a lot

Thomas,
there is no need for a fileshare. You could let the ps1 below run natively in a SCOM PowerShell worklow and it will provide the data in so called property bags:
param(
$monitorComputer,
$monitorURL
Invoke-Command -ComputerName $monitorComputer -ArgumentList $monitorURL {
$result = Invoke-WebRequest -URI $monitorURL
Return $result
# Return the values from CMDLET
$bag.AddValue("Workflow Computer",(hostname))
$bag.AddValue("Monitoring Computer",$monitorComputer)
$bag.AddValue("Monitor URL",$monitorURL)
$bag.AddValue("Status Code",$result.StatusCode)
$bag.AddValue("Status Description",$result.StatusDescription)
$bag
You could now create your own MP running a PowerShell monitor.
Or you can implement the following solution to being able to use the wizard:
http://blogs.msdn.com/b/wei_out_there_with_system_center/archive/2013/10/03/opsmgr-using-wizards-to-create-powershell-based-monitors.aspx
Cheers,
Patrick
Please remember to click “Mark as Answer” on the post that helped you.
Patrick Seidl (System Center and Private Cloud)
Website: http://www.syliance.com
Blog: http://www.systemcenterrocks.com

Getting "Origin is not allowed" When Trying to Invoke RESTful Service from Another Domain

I am having problems trying to invoke my RESTful web service from a different domain. I'm well aware of the normal restrictions of cross-site / cross-domain scripting but in Oracle documentation it says that all origins are allowed by default when creating a RESTful service without using authentication.
I have created a very simple service and am trying to invoke it using jQuery.Ajax calls from a different domain and I am getting XMLHttpRequest cannot load http://address_to_my_web_service. Origin http://calling_from_address is not allowed by Access-Control-Allow-Origin.
I understand that using JSONP instead of JSON is actually the best practice around cross-site scripting but it appears as though APEX does not support JSONP because with JSONP, there are URI parameters added to the base request (callback).
I am stuck and would greatly appreciate any help.
I'm starting to wonder if this could be a bug because Oracle documentation says all origins should be allowed when using a service that does not require authentication. I also tried to force the origin to be allowed by typing it in and also using the wildcard '*' and it still did not work.
Thanks,
Mark Williamson
EDIT: It is now working after adding a URI prefix to my web service module.

The SSL handshake works differently to a browser as it is making the connections automatically.
The browser asks every time if you want to trust an expired certificate, and it also recommends not to. Its impractical to manually check every service call to say do you trust the certificate so the functionality doesn't exist. I doubt any integration product does this. Therefore there isn't a option to ignore the certificate if it has expired.
This makes sence as the certificate is untrustworthy. The whole idea around SSL is trusting the site you are communicating with, all parties need to be trusted. This stops hackers from replicating their site and intercepting data.
If the administrator of the remote site is not willing to renew the certificate, are they really interested in SSL. I suggest they expose a non SSL service.
cheers
James

Calling a BSP from different domain

Hi.
I have a problem calling a bsp application. I am using bsp app. system for a logon screen(this is whats causing the problem.) SAP is in the domain company<b>as</b>.com and the calling application is in the domain company.com.
The logon screen is displayed but when users try to logon the logon screen just gets displayed again. I have found out this is because of the different domains and the cookie mysapsso2.
When calling the same url from my machine everything works fine. Also if I try to bypass the system and logon directly to the bsp application (default.do) it works. The reason Im using the system app. is to enable the users to change their passwords according to the rules in R/3.
Does this make sense and does anyone have some ideas how to fix my problem?
Regards
Jon

There is a pretty simple answer here - it just doesn't work. This has to do with how the browser stores and sends cookies. Cookies are only allowed to be passed within the same domain. This a protection that keeps a bad website from reading the content of cookies from other websites (potentially gaining sensitive information).
There isn't too much that SAP can do about this since this is a mechanism enforced directly by the browser.

Planning for global service from different domain

Similar Messages

Maybe you are looking for