Publishing App Controller (2012 SP1) to Internet Located Users via TMG2010

Hi All,
I'm trying to publish a demo environment hosted on our internal App Controller via TMG, to some colleagues working from home via non domain joined PC's.
I've configured a publishing rule on TMG 2010 that allows my remote user to login. They connect using a name like
https://vmm.company.com and this all works fine. But if they try to initiate a connection to the Hyper-V Guest machines Console they get a DNS error
Virtual Machine Manager failed to connect to the virtual machine because the hostname (xxx.yyy.com) could not be resolved by Domain Name System
Looking at the URL although it is using the vmm.company.com, in the path xxx.internal.com is being used and this is the internal Hyper-V Host machines internal FQDN.
So I thought i'd be clever and use link translation in the rule, so that the TMG replaces any traces of xxx.internal.com with vmm.company.com, now I don't get the DNS error any more but I get a socket error, asking me to check my firewall.
Sure enough I check the logs in TMG and there are access denied entries on that port, coming from external to the TMG's perimeter IP address
So I create an access rule to allow 2179 from external to the ip address, and a non web server publishing rule for the internal Hyper-v host listening on 2179, but I now get this error in the TMG logs, access is initially allowed
A connection was abortively closed after one of the peers sent an RST packet
the same Socket Error is received on the client.
Anyone ever done anything like this, or have a clue what i'm doing wrong?
Cheers
Darren

Hi Darren,
To show the console of a virtual machine it is necessary to create a connection from the client computer to the Hyper-V server. An alternative to opening a port on your Hyper-V servers to the Internet is to publish App Controller as a RemoteApp. In this
situation, colleagues working from home will connect to the Remote Desktop Gateway and App Controller will be running on the gateway. When a console connection is made the connection is then from the Gateway to the Hyper-V server.
You could also consider the Remote Console feature in System Center 2012 R2
http://technet.microsoft.com/en-us/library/dn469415.aspx. This feature is designed to allow console connections from clients that are outside of the corporate network.
Kind Regards
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

Similar Messages

Virtual Machine Manager lost the connection to the virtual machine App Controller 2012 R2

Hello there,
we have the following error message on our App Controller 2012 R2. When we connect to the machine the console will not start.
See KB2288932 http://support.microsoft.com/kb/2288932
and
https://social.technet.microsoft.com/Forums/en-US/1664700e-4cb7-4b36-b2b7-37d46d11ec00/missing-store-my-credentials-radio-button-in-app-controller-2012-sp1-means-kb2288932-no-use-and?forum=appcontroller
We do not see a radio button, and we do not want to modify the local policies on all client machines.
Any ideas?
Thanks in advance

Hi Marcus,
I'm not aware of any solution other than the one listed in the thread you referenced.
Regards
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

App Controller 2012 R2 - SPF 2012 R2 - Account problems

Hi,
I'm trying to connect from App Controller 2012 R2 to Service Provider Foundation 2012 R2 and receive an error below:
I have logged in as domain administrator @ domain1.com (DOMAIN1\Administrator) and the SPF server is located in another AD Domain. A tenant has been created a certificates have been set up.
Any ideas how to troubleshoot? I can't find anything with that error.

Hi Supra_79,
That error makes me think that App Controller can't access an Azure subscription. Do you have multiple Azure subscriptions that you've added to App Controller?
Errors accessing VMM servers typically come back with a "StatusCode" entry in the error message.
On the Overview page in App Controller, under the Private Clouds heading on the left, what do you see?
You should see:
2 Virtual Machine Manager servers
X Virtual Machine Manager clouds
Where X is a number other than 0. If you are seeing 0, then App Controller won't be showing any of your VMM VMs as it can only show VMs that are running in a cloud. You will need to create a cloud in the VMM console and add the VMs to the cloud before
they can be managed within App Controller.
Kind Regards,
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

Missing Linux images in App Controller 2012 R2

When selecting Images during the deployment of a Virtual Machine the Linux based images (Suse Linux & OpenLogic CentOS) are greyed out. All other Windows based images are available for selection.
what is the reason those Linux images are unavailable and how can those be made available?
Using App Controller 2012 R2

The answer to my own question:
App controller 2012 R2 is at the moment not able to deploy Linux images to Windows Azure!
See my post http://up2v.nl/2014/01/17/app-controller-2012-r2-unable-to-deploy-linux-images/

App Controller 2012 R2, cannot open multiple console windows at the same time

Hi All
I have just moved from SCVMM 2012 SP1 and AppController 2012 SP1 to the 2012 R2 versions. In the previous version my users were able login to app controller, select the virtual machine that they wanted to connect to and click on the console button (or right
click and select console) and this would open in a new tab in IE, they could do this for multiple VM's and could have multiple tabs in IE so that they could switch between them easily.
However, since the upgrade, they can now open only one console tab. each time they click on a new VM and select console, it will open in the same IE tab. Meaning that switching between console sessions on multiple machines has become a lot harder.
I've checked all the obvious IE options, and multiple machines/users, so this seems to be a setting in Silverlight or in IIS somewhere that has changed. I've had a good search around (bing/google) but can't find anything. Has anyone got any suggestions
on how we can get back to the old multiple consoles in there own tab scenario?
Cheers
Darren

Hi Arne411,
Thank you for sharing the frustration you're experiencing due to this bug.
There are a few options:
If you have Premier support you can open a support case and make a Request for Hotfix (RFH). If an RFH is accepted then you may get the fix prior to its public release. This process also helps us to better understand the issue, number of people affected
and can increase the priority of producing a fix.
Provide users access to the VMM Administrator Console. As a member of the Application Administrator (Self-service user) role they will have the same capabilities for accessing VMM managed VMs that they do with App Controller.
Consider moving to the Windows Azure Pack as the web portal. This has the benefit of being HTML based and provides console access through the RDP client.
Kind Regards
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

Using VM Console via App Controller issues

Hi,
We are using self signed certificate for App Controller. We have deployed set of VM's in cloud.
When a new user from different domain or non domain users logs in to app controller,every time he opens the VM via console it asks for credentials, and shows the certificate is not trusted. When the user installs the certificate ,he gets connection lost
to VM. Because of this many users are not able to access the VM's via app controller. is there any fix to this? This problem varies from users some can access, some cant. 98% of the people cant access.

This is apparently by design. See my question and Microsoft answer here:
http://social.technet.microsoft.com/Forums/en-US/1664700e-4cb7-4b36-b2b7-37d46d11ec00/missing-quotstore-my-credentialsquot-radio-button-in-app-controller-2012-sp1-means-kb2288932-no?forum=appcontroller

Error in connecting App Controller to SCVMM 2012 R2

Hello All,
I have recently installed App Controller 2012 R2 on a new VM. We are already using SCVMM 2012 R2 with Update Rollup 4.
I'm logged-in on the App Controller website with the service account of App Controller/SCVMM.
Now when I'm trying to connect App Controller to SCVMM server, it gives the following error:
"Category: Critical
Description: Connection attempt to the target system failed.
Details: Category: Critical
Message: 553–RegistryInvalidValue
Description: The type or name syntax of the registry key value IndigoTcpPort under Software\Microsoft\Microsoft System Center Virtual Machine Manager Administrator Console\Settings is incorrect."
I'm correctly entering the complete FQDN of my VMM management server, and the default port: 8100.
Need help please.
Thank you.
Regards
Hasan Bin Hasib

Hi Hasan,
I haven't seen this issue before, but the following post provides information on checking the registry value:
https://wmoore.wordpress.com/2014/04/11/appcontroller-2012-r2-vmm-registration-error/
The usual caveats about editing the registry apply, including make a backup first.
Regards
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

App Controller Deploy VM error message

When we use App Controller 2012 R2 to copy VM from on premise to Azure, the following message appears:
Error:
    StatusCode: Microsoft.SystemCenter.CloudManager.Providers.ProviderException
    Error: Azure Provider requires the following headers: Azure SubscriptionId, API Certificate, password, and the certificate thumbprint.
However, the job is complete and everything works. we could start the VM and do the operation.
so we are wondering why this message appears? the following are the complete job log:
Job Id: b02c6345-1fc7-4678-85a0-bf0e52082178
Job: Deploy Windows Azure Virtual Machine
Target: azuremove2
Status: Failed
Sub status: Uploading VT2K12-2014-01-29T04:06:26.vhd: 100%
Duration: 03 hrs 40 mins 01 secs
Owner: IEC\azureadmin
Location: Brian_Inventec_WinAzure
Job ID from connection: 1bdb2315-ffba-48ae-8778-c735ac6c7e10
Start Time: 1/29/2014 12:06:26 PM
End Time: 1/29/2014 3:46:27 PM
Cloud Location:
https://iet-appc/api/cloudsystems/management.core.windows.net/clouds/6ac36f32-fdf3-4947-873a-841ce6133e5d
Target location:
https://iet-appc/api/cloudsystems/management.core.windows.net/clouds/6ac36f32-fdf3-4947-873a-841ce6133e5d/hostedservices/azuremove/deployments/Production
Command Parameters (8):
    DNS name: azuremove
    Deployment environment: Production
    Virtual Machine Name: azuremove2
    Instance Size: Medium
    OS disk storage blob:
https://azuremove.blob.core.windows.net/vhds/VT2K12-2014-01-29T04:06:26.vhd
    OS disk source location:
file://iet-vmma.iec.inventec/StoredVM/StoredVms/demo2/VT2K12.vhd#LibraryVHDEndpoint=%5c%5cIET-VMMa.iec.inventec%5cStoredVM%5cStoredVms%5cdemo2%5cVT2K12.vhd&Issuer=https%3a%2f%2fiet-appc%2fapi%2fcloudsystems%2fiet-vmma.iec.inventec&Audience=https%3a%2f%2fiet-appc%2fapi&ExpiresOn=1390968986&HMACSHA256=NXZmQDbc06V4gIX1L3lVhzTdtXGBImzrXVrbKI8WVSE%3d
    Overwrite existing files: True
    Deployment name: deploy

Can you create the same VM from VMM directly ?
Regards, Samir Farhat Infrastructure and Virtualization Consultant || Virtualization, Cloud, Azure ? Follow and Ask here https://buildwindows.wordpress.com

Can we Manage SCVMM Virtual Machine using App Controller

Hi All,
Today I have configured one APP controller 2012 R2, already I have a SCVMM 2012 R2 environment which is managing 10 Standalone Hyper-V Host with 50 VM's.
Question: Is that Possible to Manage the VM's (not part of cloud) in App COntroller, If yes kindly suggest the steps to configure

Hi all,
I have created one Clod container, by chance can I move the VM's belongs to Hyper-V contained to CLoud container and Manger it thro AC.

App Controller - SSO - Unknown user displayed on page

I installed App controller on the VMM server (R2). Everything seems to be ok.
Enabled SSO, now app controller does not know who the user is even though login is successful.
It reads "Hi, Unknown user", instead of the user name
Did I miss something in the config? The user name is correct when SSO is disabled.

figured it out, same problem as with VMM...service user needs read all properties delegation in AD..

SCOM 2012 SP1 - DNS Resolution failure alert

Hi,
Our customers are receiving bogus DNS resolution failure alerts though the site is rendering fine from the watcher node.Nslookup shows the name resolves after first or 2nd timeout and this behavior is expected in some of our internal name space that have a
long resolution path.Is SCOM perform an nslookup first?What is the default DNS resolution time SCOM use? I'm trying to set higher threshold for DNS Resolution time in custom monitor to mitigate this.Users doesn't want to disable the DNS resolution monitor
and looking for a permanent fix.This issue has been going on a while in our environment. Any help would be much appreciated. Our SCOM is 2012 sp1 CU4.
C:\Users\admin>nslookup xxxx
Server: abc.contosso.com
Address: 10.4.5.6
Non-authoritative answer:
DNS request timed out.
timeout was 2 seconds.
Name: abc.xyz.contosso.com
Address: 10.2.3.4
Aliases: abc.xyx.contosso.com
Thanks,

Thanks.As a temporary mitigation, I have disabled the DNS Resolution Failure Monitor for the url to stop the false alert and it worked so far but it started again and this time it alerted for the error code failure.It appears DNS resolution failure is the
culprit .Any insight why error code failure monitor is additionally checking for DNS resolution failures? The DNS Resolution Failure monitor is already in disabled state.Any way we can disable this DNS checks without disable error code failure monitor?
Error Code Failure health explorer,
Base Page (show/hide details)
HTTP Status Code
0
Unreachable
false
Error Code
2147954407
DNS Resolution Failure
true
DNS Resolution Time (seconds)
0
TCP Connect Time (seconds)
0
Time To First Byte (seconds)
0
Time To Last Byte (seconds)
0
Redirect Time (seconds)
0
Download Time (seconds)
0
Total Response Time (seconds)
0
Content Size (bytes)
0
Secure Failure Code
0

CM 2012 SP1 equivalent of App-V Publishing Server

Good morning everyone.
I'm trying to virtualize Adobe Flash 10.3 for IE. That's beside the point but I wanted to mention my ultimate goal.
Sparing you all the App-V stuff I have to go through there's one obstacle that is hindering me at this point.
I've converted completely to CM 2012 SP1 for my App-V deployment functions but find myself needing to specify our main CM server as the "AppVPublishingServer". The ultimate goal here is to set the virtual app attribute of "IsPublishedGlobally"
to TRUE. This is normally done with a PoSH command "Set-AppVpublishingserver", manipulating the Global parameters.
Do any of you know how to configure this attrib through CM, or, how to declare the CM server as a Publishing Server (in App-V's eyes)?
Thanks very much.
IAmStrings

I am not sure about deployment, but I know for content the publishing server is the ConfigMgr cache. I know this was the case with 4.6, but not sure what has changed in 5.0.
We never had to specify the publishing server when we sequenced or deployed our packages with ConfigMgr.
Daniel Ratliff | http://www.PotentEngineer.com
This will depend how you publish the package (stream or download). If downloaded the package will reside in the cache but if streamed only the xml files will.
Ultimately the ConfigMgr client will handle and nothing will need to be specified.
Cheers
Paul | sccmentor.wordpress.com

Declaring an SCCM 2012 SP1 server as the "Publishing Server" for App-V 5 SP2

Good morning everyone.
I'm trying to virtualize Adobe Flash 10.3 for IE. That's beside the point but I wanted to mention my ultimate goal.
Sparing you all the App-V stuff I have to go through there's one obstacle that is hindering me at this point.
I've converted completely to CM 2012 SP1 for my App-V deployment functions but find myself needing to specify our main CM server as the "AppVPublishingServer". The ultimate goal here is to set the virtual app attribute of "IsPublishedGlobally"
to TRUE. I need to refer to the Publishing Server's URL in order to use the PoSH command "Set-AppVpublishingserver" to manipulate the "Global" parameters.
Do any of you know how to configure this attrib through CM, or, how to declare the CM server as a Publishing Server (in App-V's eyes)?
Thanks very much.
IAmStrings

Hello,
If using SCCM and the App-V 5 integration, you can never configure a publishing server.
Read this whitepaper for the full-story;
http://blogs.technet.com/b/virtualvibes/archive/2013/04/22/sccm-2012-sp1-and-app-v-5-0-documentation.aspx
It contains step-by-step instructions on howto use the integration.
Nicke Källén | The Knack| Twitter:
@Znackattack

Customizing the App Controller Gui (SCVMM 2012 R2)

Hi everybody and thank you in advance for assisting! I also thank google and the Microsoft Forums for the amount of bandwidth I've burned through searching for solutions to this, lol.
I am trying to see if there is a way to customize the app controller gui as far as:
Remove from the left column: Clouds, Services, Library
Remove from the overview: Public Clouds, Hosting Service Providers, Common Tasks, System Center Blogs, Recent Forum Posts
Remove the links provided and add my own under: Online Help
I looked through the "C:\Program Files\Microsoft System Center 2012 R2\App Controller\wwwroot" directory, and edited some of the xml based files, but didn't really see any change in the site.
I did the same in the api directory "C:\Program Files\Microsoft System Center 2012 R2\App Controller\api"
as well with no luck.
Any ideas would be greatly appreciated. I have also attached a picture of what the ideal gui would look like.
Thanks again in advance!

Hi HG-Wes,
App Controller is a Silverlight application so all of the UI is defined in the .xap files.
There is no easy/supported way to make modifications to the App Controller UI.
If your focus is just on virtual machines, which is what it looks like from the screenshot, you may want to consider using the Windows Azure Pack for Windows Server which is an HTML based portal and therefore easier to customize.
Kind Regards,
Richard
This posting is provided "AS IS" with no warranties, and confers no rights.

App-V 5 Virtual Environments in SCCM 2012 SP1

I am attempting to use SCCM 2012 SP1 to Deploy App-V v5 Applications. So far deploying applications to user groups (like I did with 4.6) seem to work well. The only issue that I am having is deploying Virtual Environments (the new way of
"dynamic sequencing). My problem is that on the client side, the App Connection Groups are not being populated. What can I do to fix this? The applications are deployed to a user group collection and not a machine collection. From
what I have found this is possible but it is not working for me. Anything to help is GREATLY appreciated!!
Brian

Since no one has answer this post, I recommend opening a support case with CSS as they can work with you to solve this problem.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Publishing App Controller (2012 SP1) to Internet Located Users via TMG2010

Similar Messages

Maybe you are looking for