RDS Gateway 2012, RemoteApp Displays "A Revocation check could not be performed for the Certificate" via RDWEB

I have searched through the forums and there are a number of posts that are similar but all the checks they list seem to not apply to this one.
My current setup is as follows
All Servers are 2012 R2
1 x DC server
1 x RDS Gateway server with RDS Web installed
1 x Session Host Server
Certificate supplied by godaddy with 5 names. (included is the name of the RDS Gateway/Web server in the certificate, the internal name of the session host server is not included as the internal names are differnet to the external)
My tests are as follows
Navigating to the RDSWEB page from a machine inside the same network (windows 7 sp1) but not on the same domain is fine no errors and logging in and launching any published application is fine with no errors.
However logging in on another machine that is external from the network (windows 7 sp1) is ok up to the point of launching any of the published apps I get the error about ""A Revocation check could not be performed for the Certificate". this
prompts twice but does allow you to continue and login and use the app till the next time. If I view the certificate from the warning message all appears to be ok with all certs in the chain.
I have imported the root and intermediate certs to each of the gateway/rdsweb server and session host server into the computer cert store just to be on the safe side. This has not helped, I have also run the following command from both windows 7 machines
with no errors on either
certutil -f –urlfetch -verify c:\export.cer
I cant seem to see where this is failing and I am beginning to think there is something wrong with godaddy cert itself somehow.
If I skip rdsweb and just use MSTSC with the gateway server settings then I can login to any machine on the network with no errors so this is only related to launching published apps on the 2012 R2 RDWEB or session host servers.
Any help appreciated

Hi,
1. Please make sure the client PCs have mstsc.exe (6.3.9600) installed.
2. If you are seeing a name mismatch error, you can set the published name via this cmdlet:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
To be clear, the above cmdlet changes the name that shows up next to Remote computer on the prompt you see when launching a RemoteApp.  You should have a DNS A record on your internal network pointing to the private ip address of your RDCB server. 
Additionally, in RD Gateway Manager, Properties of your RD RAP, Network Resource tab, you should select Allow users to connect to any network resource or if you choose to use RD Gateway Managed group you will need to add all of the appropriate names to the
group.
For example, when launching a RemoteApp you would see something like Remote computer: rdcb.domain.com and Gateway server: gateway.domain.com .  Both of these names need to be on your GoDaddy certificate.
Please verify the above and reply back so that we may assist you further if needed.  It is possible you have an issue with the revocation check but I would like you to make sure that the above is in place first.
Thanks.
-TP
Thanks for the response.
To be clear I am only seeing a name mismatch and revocation error if I assign a self signed cert to the session host as advised earlier in the thread by "Dharmesh Solanki", if I remove this and assign the 3rd party certificate I then
just get the revocation error , I have already ran the powershell to change the FQDN's but this has not resolved the issue although the RDP connection details now match the external url for RDWEB when looking at one of the remoteapp files. The workspace
ID still shows an internal name though inside this same file. 
RD Gateway is already set to connect any resource, when connecting using remote app both names (RDCB/RDGateway) show as being correct and are contained within the same UCC certificate. I also already have a DNS entry for the Connection broker pointing to
the internal ip.
Do you know if the I need the internal name of the session host servers contained within the same UCC certificate seeing as they are different fqdn's than what I am using for external access ? I resigned the UCC certificate and included the internal name
of the session host server to see if this would help but for some reason I am still seeing the revocation error. I will check on a windows 8 client pc this evening to see if this gets any further as the majority of the testing has been done on windows 7 sp1
client pc's
Thanks

Similar Messages

  • SCCM 2012 SP1 - OS Deployment - hash could not be matched for the downloded content

    I've got a newly deployed SCCM 2012 SP1 running on Windows Server 2012. The W2K12 runs as vm on ESX 5.1. I'm having very odd issues with OS deployment. The TS keeps failing when processing SCCM client installation - it downloads the package but then it fails
    straight away with the 80091007 - hash values couldn't be matched error - some extract from smsts.log attached below. It's very consistent, it happens every time - it downloads and applies the image fine straight after that it bombs out.
    What is very interesting is that it works perfectly fine when I deploy vms (on the same or different host) - the issue seems to be be only affecting physical machines (laptops desktops). This might suggest some network issues (vSwitch with Cisco switches) but
    the config on the switch is very simple and this shouldn't be the case.
    I had a few virtualised SCCM 2007 installations (ESX 5 and 4) and it always worked with no problems.
    I tried to recreate the package (changing source directory), turn binary differential replication on and off, copy the content of the package to the dist point or not copy. Push client installation (or other package deployments) work fine
    When I tried to deploy with no download - sometimes it works but most of the time I'd get the files/folder corrupt error (can't remember the No)
    This is starting to drive me crazy - There are some significant changes in the way SCCM 2012 is validating package integrity (like Content Lib folder) but the consistency of this problem is just very odd.
    Anyone has any clues?
    thanks
     - Downloaded file from http://GTKVMGMT05.GTK.LOC...m?/x64/wic_x64_enu.exe to C:\_SMSTaskSequence\Packages\GTK0000C\x64/wic_x64_enu.exe 
     - Download done setting progress bar to 100
    VerifyContentHash: Hash algorithm is 32780
    c:\_smstasksequence\packages\GTK0000c\i386 is a directory. Setting directory security
    c:\_smstasksequence\packages\GTK0000c\x64 is a directory. Setting directory security
     - Hash could not be matched for the downloded content. Original ContentHash = 5EF3A189C48F3469440A83026EC8ECD36EAD6EAF3B5D35663F8201BDE175413C, Downloaded ContentHash = FA4516EDD2D7907F8FA472A3E1B717DF2DD4A0976CD4CEAE11045EE62EC8C661
    0L == TS::Utility::VerifyPackageHash(pszContentID, sDestination), HRESULT=80091007 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,2999)
     - DownloadContentAndVerifyHash(pszPackageID, L"SMSPackage", saHttpContentSources, saSMBContentSources, saMulticastContentSources, sDestination, dwFlags, L"", 0, dwPackageFlags, pszUserName, pszUserPassword ), HRESULT=80091007 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,3106)
     - DownloadContentLocally(pszSource, sSourceDirectory, dwFlags, hUserToken, pszUserName, pszUserPassword), HRESULT=80091007 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,3331)
    ResolveSource(pszSource, sSourceDirectory, dwFlags, 0, 0, 0), HRESULT=80091007 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,3221)
    TS::Utility::ResolveSource(sClientPackageID, sClientPackagePath), HRESULT=80091007 (e:\nts_sccm_release\sms\client\osdeployment\osdgina\basesetuphook.cpp,1655)
     - Failed to resolve package source "GTK0000C"
     - Exiting ConfigureEx: 0x80091007
     - BaseSetupHook::configure(sWindowsDir), HRESULT=80091007 (e:\nts_sccm_release\sms\client\osdeployment\osdgina\osdsetuphook.cpp,292)
     - Failed to configure OSD setup hook (0x80091007)
     - Failed to configure OSD setup hook (0x80091007)

    is this the only indication of a problem in your smsts.log file ? did you apply the
    authenticode hotfix or have you
    downloaded the SP1 media after that hotfix was applied ?
    Step by Step Configuration Manager Guides >
    2012 Guides |
    2007 Guides | I'm on Twitter > ncbrady

  • Backend checks could not be performed. Inform system admin

    Hello SAP Experts,
    We have encountered the error Backend checks could not be performed. Inform system admin in a lot of POs in SRM. We are using SRM 7 and SP12.
    Before the error occured, the WBS elements were not maintained in SRM but the POs were created since our SHC has automatic approval.
    Currently, the WBS elements are now in SRM but the POs are stucked with the error Backend checks could not be performed. Inform system admin.
    We have informed the Basis team if there are any issues in the RFC connections but there is no error.
    The only POs affected were the ones wherein the WBS element was not maintained before but is now maintained in SRM.
    Regards,
    Romeo

    Hi Chandra,
    Please check the Purchasing Organization and Purchasing Group in PO if they are not populated then this error is triggered. Please also check the user settings whether Purchasing organization information is maintained or not.
    Regards,
    Ravi G

  • Errors with SharePoint Security Token Service: "The revocation function was unable to check revocation for the certificate"

    I'm getting these errors in the eventlog and ULS, "An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root
    Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS CERTIFICATE THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate."
    The errors point to the SharePoint Security Token Service as the issue ("The revocation function was unable to check revocation for the certificate") reported back by the Topology service.  This is apparent when executing a search, accessing
    the managed metadata service, issuing SPSite commands in Powershell, or anything that needs to run through the "SharePoint Web Services" site.  I've looked at the certificate assigned to that site and everything appears to be in order. 
    It would seem to me to be either an incorrect endpoint configuration (internally cached perhaps?) or related to security access for the configuration database (in order to validate the certificate root).
    What I’ve tried so far:
    I’ve been all over the certificate settings, both in the server store, and within SharePoint Token Service config.  Both appear to be configured correctly such that the root CAs can be validated.
    Re-entered the passwords for the application pool domain accounts to eliminate these as a potential cause.  I’ve also verified the service accounts reporting the error, do have access to the configuration database.
    Re-provisioned the STS service to see if that might clear out any cached issues and validated everything else according to this
    MS Tech note.
    So far nothing has worked.  Is there anything else I could be looking at that I've missed? (Full eventlog detail below)
    Log Name:      Application
    Source:        Microsoft-SharePoint Products-SharePoint Foundation
    Date:          2/20/2015 11:19:41 AM
    Event ID:      8311
    Task Category: Topology
    Level:         Error
    Keywords:      
    User:          <SP SERVICE ACCOUNT>
    Computer:      <SHAREPOINTSERVER>
    Description:
    An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS
    CERT THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
        <EventID>8311</EventID>
        <Version>14</Version>
        <Level>2</Level>
        <Task>13</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2015-02-20T17:19:41.213852500Z" />
        <EventRecordID>1611121</EventRecordID>
        <Correlation />
        <Execution ProcessID="10212" ThreadID="10328" />
        <Channel>Application</Channel>
        <Computer><SHAREPOINTSERVER></Computer>
        <Security UserID="<SP SERVICE ACCOUNT>" />
      </System>
      <EventData>
        <Data Name="string0">CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string1">CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string2"><STS CERT THUMBPRINT></Data>
        <Data Name="string3">RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    </Data>
      </EventData>
    </Event>

    Hi Darren,
    This problem seems to occur when an administrator deletes the local trust relationship of the farm from the Security section of the Central Administration website
    In order to resolve this problem, the local trust relationship has to be created. This can be done by running the following PowerShell commands
    $rootCert = (Get-SPCertificateAuthority).RootCertificate
    New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert
    After running the above commands, perform an IISReset on all servers in the farm.
    More information:
    http://support.microsoft.com/kb/2545744
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • Exchange 2010 - The certificate status could not be determined because the revocation check failed.

    I have tried everything I have found online to get my DigiCert to work.
    I have exported the cert and imported it into my child domains and they look perfect.
    It is just my parent domain having issues.
    netsh winhttp show proxy
    does show my correct proxy server for http and https and port 8080
    I have tried name, FQDN and IP address.
    In the Bypass-list I have tried none, *.domain.com, and a list of all domains and child domains in my forest.
    I have flushed the cache
    certutil -urlcache crl delete
    certutil -urlcache ocsp delete
    and rebooted the Exchange 2010 (Windows 2008 R2) server
    No matter what, I still see in my Server Configuration for the parent domain's DigiCert cert the message
    The certificate status could not be determined because the revocation check failed.
    with a red X on the left hand icon.  Again, Child domains all say "The certificate is valid for Exchange Server usage."
    Note: In spite of having the red X, I was able to assign via EMS the services.
    Webmail works fine.  Outlook Anywhere fails... I suspect it is due to my red X problem.
    Suggestions?
    Thanks in Advance
    Jim.
    Jim.

    I have contacted DigiCert and they said the cert is working per their utility, hence the problem is outside the scope of their support.
    I have followed, several times, http://support.microsoft.com/kb/979694
    http://www.digicert.com/help/  reports all is well.
    The DigiCertUtil.exe reports all is well and happy.
    I have run
    netsh winhttp set proxy proxy-server="http=myproxy:8080;https=myproxy:8080" bypass-list="*.mydomain.com"
    Current WinHTTP proxy settings:
        Proxy Server(s) :  http=myproxy:8080;https=myproxy:8080
        Bypass List     :  *.mydomain.com
    I have flushed the cache using the commands
    certutil -urlcache crl delete
    certutil -urlcache ocsp delete
     I still see in my Server Configuration for the parent domain's DigiCert cert the message
    "The certificate status could not be determined because the revocation check failed."
    with a red X on the left hand certificate icon. 
    To verify the cert via command line:
    certutil -verify -urlfetch c:\mail_domain_com.cer
    LoadCert(Cert) returned ASN1 bad tag value met. 0x8009310b (ASN: 267)
    CertUtil: -verify command FAILED: 0x8009310b (ASN: 267)
    CertUtil: ASN1 bad tag value met.
    I suspect this is why I cannot get Outlook Anywhere to connect.
    Child domains show a happy certificate icon. Parent domain does not.
    Still scratching my head.
    Thanks all!
    Jim.

  • Calling Card Problem: "Disconnected. Could not acquire credentials. The Rescue Gateway..."

    Surely I cannot be the only LogMeInRescue customer experiencing the following issue with their Calling Cards failing to allow them to connect to their client computers.  Ever since July of 2014, I experience this problem multiple times a week when trying to connect to client's computers who have had my Calling Card pre-installed on their computer. THE ERROR MESSAGEThe Calling Card displays the following message on the client's computer after they click on the Connect button:"Disconnected. Could not acquire credentials. The Rescue Gateway has refused the connection with the following message: Channel does not exist. It may have been recently deleted or modified." Here is a Screenshot that I posted on my website: http://www.pcgraphix.com/generator/assets/callingcard-disconnected_couldnotacquire.gif WHY THIS IS A MAJOR PROBLEM FOR ME-I have my calling card installed on HUNDREDS of computers and any delays in getting connected to a client computer costs me $.   This has been a particularly major problem from me as I support people with very limited computer skills. The simple task of instructing them to go to logmein123.com and entering a 6 digit pin can LITERALLY take 15-30 minutes of my unbillable time! This can occur several times a day resulting in me me eating 1-2 hours of my time just trying to get connected to a client's computer! WHAT I HAVE DONE-I have called LogMeIn Tech support multiple times but they just seem to blow me off.  When I first began calling support back in August 2014, they claimed they had never seen the problem.  So I had them remote into computers that showed this calling card error.  They gathered information and told me they would look into it.  Well, 7 months later I still have this same recurring problem and they've never gotten back to me.  So I continue to call them and complain.  Recently, they finally admitted that it is a recognized issue but only affects a very small number of their customers and that they don't yet have a solution.  So I'm reaching out to the community to see if anyone else is experiencing this problem. WHAT I HAVE EXPERIENCED/OBSERVED-I've been using LogMeIn Rescue since 2006 without any issues until July 2014. I believe the problem began on 7/16/14 when I generated a new calling card msi file (note that I have since generated new calling card msi files but the issue continues).  About a month later (Aug 2014), I had experienced enough calling card issues that I began calling Logmein support for help. -This calling card issue occurs randomly and with different clients and with different Windows versions.  -Once the problem occurs, the only fix is to completely uninstall my calling card from my client's computer and then re-installing the calling card using the msi file that I generated from my LogMeIn Rescue admin panel.  Simply re-installing the calling card doesn't fix the problem...it must first be uninstalled and then re-installed. -The calling card can work fine on a client's computer on one day but then a day later it can fail to connect. -Some client's haven't experienced this problem at all.  Some client's have experienced this problem on multiple occassions requiring that I do an uninstall/reinstall. -The issue has NEVER occurred when I first install my calling card.  -I have noticed that if the calling card checks for and installs an update, the issue will often times occur. Therefore I believe it has something to do with the update that LogMeIn automatically pushes to the calling card.  I instruct my clients to hit cancel if an update is available BUT oftens times they have already installed it. -I have generated new calling card msi files from my admin interface but this hasn't prevented the issue from occurring -

    Glad to hear from someone else having this same problem!  Supposedly there are a just a handful of us having this problem so I fear that LogMeIn developers aren't putting alot of effort into resolving this issue.   I got hit first thing this morning on my first remote of the day with this assinine error message.  It has happened several times in the past on this same customer's computer. It will work fine just after re-installing the calling card but then a week or so down the road it will fail again when I try to remote in.   So **bleep** aggravating.  So tired of eating hours every week walking customers through alternative ways of getting connected.  When I say to customer, "ok, go to www.logmein123.com" and they reply "how do I do that" and I tell them to open their internet browser and all I get is dead silence....I know I'm about to eat more unbillable time! Bill

  • SCCM 2012 - sms_notificaiton_server install fails, bgbisapi.msi could not be installed

    Hi,
    installed a SCCM 2012 R2 Primary site on a 2012 R2 server on the D: drive. Everything seemed to go well, however i am am now encountering issues with the SMS_NOTIFICATION_SERVER in that the site component manager is unable to install it. The status message
    viewer informs me that, "Site Component Manager failed to install this component, because the Microsoft Installer File for this component (bgbisapi.msi) could not install."
    When i check the Bgbsetup.log, i see the following lines: 
    <01/19/15 14:46:27> CTool::RegisterComPlusService: Failed to unregister D:\Program Files\Microsoft Configuration Manager\bin\x64\microsoft.configurationmanager.bgbserverchannel.dll with .Net Fx 4.0
    <01/19/15 14:46:27> CTool::RegisterComPlusService: run command line: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe" /extlb /tlb:"D:\Program Files\SMS_CCM\microsoft.configurationmanager.bgbserverchannel.tlb" "D:\Program
    Files\Microsoft Configuration Manager\bin\x64\microsoft.configurationmanager.bgbserverchannel.dll"
    <01/19/15 14:46:30> CTool::RegisterComPlusService: Failed to register D:\Program Files\Microsoft Configuration Manager\bin\x64\microsoft.configurationmanager.bgbserverchannel.dll with .Net Fx 4.0
    <01/19/15 14:46:30> Cannot register BGB server channel DLL D:\Program Files\Microsoft Configuration Manager\bin\x64\microsoft.configurationmanager.bgbserverchannel.dll. Installation cannot continue.
    <01/19/15 14:46:30> Fatal MSI Error - bgbisapi.msi could not be installed.
    Having done a bit of reading, it seems a few other people have come accross this issue before:
    https://rikkoss.wordpress.com/2013/12/11/tip-do-not-change-the-default-installation-location-for-configmgr-2012/
    http://www.windows-noob.com/forums/index.php?/topic/7401-sms-notification-server-failed-critical-sccm-sp1-sql-2012-sp1/
    The solution for these folks seems to be to edit 2 files in the .Net folder,InstallUtil.exe.config and Regsvc.exe.config,
    and insert the following code:
    <runtime>
    <loadFromRemoteSources enabled=”true”/>
    </runtime>
    However, this hasn't worked for me and i'm still getting stuck with the same error messages. Since i'd really like to avoid reinstalling SCCM on the C: drive, can anyone suggest any possible solutions to this issue? 

    The MPsetup.log has this:
    <01/20/15 16:28:11>         ======== Completed Installation of Pre Reqs for Role SMSMP ========
    <01/20/15 16:28:11> Installing the SMSMP
    <01/20/15 16:28:11> Passed OS version check.
    <01/20/15 16:28:11> IIS Service is installed.
    <01/20/15 16:28:11> No versions of SMSMP are installed.  Installing new SMSMP.
    <01/20/15 16:28:11> Enabling MSI logging.  mp.msi will log to D:\Program Files\Microsoft Configuration Manager\logs\mpMSI.log
    <01/20/15 16:28:11> Installing D:\Program Files\Microsoft Configuration Manager\bin\x64\mp.msi CCMINSTALLDIR="D:\Program Files\SMS_CCM" CCMSERVERDATAROOT="D:\Program Files\Microsoft Configuration Manager" USESMSPORTS=TRUE SMSPORTS=80
    USESMSSSLPORTS=TRUE SMSSSLPORTS=443 USESMSSSL=TRUE SMSSSLSTATE=0 CCMENABLELOGGING=TRUE CCMLOGLEVEL=1 CCMLOGMAXSIZE=1000000 CCMLOGMAXHISTORY=1
    <01/20/15 16:28:12> mp.msi exited with return code: 1603
    <01/20/15 16:28:12> Backing up D:\Program Files\Microsoft Configuration Manager\logs\mpMSI.log to D:\Program Files\Microsoft Configuration Manager\logs\mpMSI.log.LastError
    <01/20/15 16:28:12> Fatal MSI Error - mp.msi could not be installed.
    and the MPmsi.log has this:
    MSI (s) (B0:E0) [16:37:14:660]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI23F6.tmp, Entrypoint: CcmRegisterPerfCounters
    [16:37:14] @@ERR:25001
    Internal Error 25001. 80070057
    MSI (s) (B0!F8) [16:37:14:676]: Product: BGB http proxy -- Internal Error 25001. 80070057
    CustomAction CcmRegisterPerfCounters returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
    Had a go at removing the MP, disabled the UAC and reinstalling the MP. Same result unfortunately...The server is temporarily housed in a block GPO OU so group policy shouldn't be an issue. Thanks for all the help so far!

  • 2012 R2 Fax Server -- "The Message could not be sent. The wait operation timed out."

    I receive the following error on a newly installed 2012 R2 fax server when sending from the Windows Fax and Scan console:
     "The Message could not be sent.  The wait operation timed out."
    The test fax that fails only contains text that I type into the body.  However, if I add an attachment, the fax is successful.
    Any ideas??

    Hi,
    Would you please let me confirm whether install any third-party application on the Windows Server 2012 R2?
    Please perform a clean boot to eliminate software conflicts and monitor the result. Please also check if you install all necessary updates on the server.
    Meanwhile, please run
    sfc /scannow command to scan all protected system files and check if find issues.
    Please also refer to following article and check if can help you.
    Troubleshooting Your Fax Server
    By the way, there is a similar thread. Please also refer to following thread and check if can help you.
    Windows
    Fax and scan (Windows 8)
    Hope this helps.
    Best regards,
    Justin Gu

  • RBA GATP check is not getting invoked for Sales Order

    Hi Everyone,
    RBA GATP check is not getting invoked for Sales order.
    I maintained the configuration settings for 'Rules-Based Availability Check', APO general settings (check mode, check instruction), carried out integrated rule maintenance, Rule determination for the combination of order type & product, associated the check mode to product master. Also maintained all the settings in ECC towards Req class, Req type, checking control etc.
    However, sales order is not invoking RBA Check though it is showing up the 'Rule' icon in the screen. Also, in the APO Availability check in Sales order when I click onto 'check instruction', I get the checking mode that pertains to RBA for business event 'A' (Sales order). Though I have not maintained any stock for the main material for which I have the sales order, yet system is confirming any quantity that I put in.
    I would expect that system would propose the same material in an alternate location where we have stock through RBA.
    Request you to share ideas on this.
    Regards,
    Avijit Dutta

    Hi Avijit,
    You should used No Checking Horizon in Checking instructions and also Check your rule control settings.
    What you have defined in 1st and 2nd steps. Check whether product substitution is carried out or Location Substitution.
    Thanks,
    Bala.

  • Display burn in - Apple does not want to replace the LCD

    Recently my iMac 24” LCD display began to have “screen burn ins“ or image persistence on the LCD. I have done extensive online research about the issue, I tried setting my screensaver to pure white and running the apple screensaver to resolve the issue. I did not use my computer any more extensively than any of my other macs, so the image burn in came as a surprise to me this early in the Mac’s life span. I understand that the issue exists, and would not surprise me if my computer was several years old and it was never turned off. I will have to argue that the “screen burn in” happened too early for my iMac.
    I took my iMac to an Apple store and waited to speak with a Genius and have a diagnosis. After the Genius ran his diagnosis he said that I am out of warranty, however he agreed with me that it was too early for something like this to happen. He proposed that my LCD screen would be replaced, and said that he would give me a break and make a “one time warranty exception and not charge me for the new LCD and replacement based on the circumstance.” The genius placed an order for an LCD panel for my iMac, printed out the work order and shook my hand, I was extremely grateful thanked the Genius for making such an exception.
    After leaving my iMac in the store for repairs for 5 days, with excitement and anticipation I picked up my iMac which was claimed to be “fixed”. I got home opened up the box and plugged in the iMac and the first thing that I noticed was a dead pixel that I recognized from the old LCD, what are the odds of the new display having a dead pixel in the exact same spot? I called back to the apple store with my repair number at hand and confirmed that my LCD was never replaced.
    I thought to myself, maybe they fixed it, but just to be safe I used the computer until I noticed nothing changed the “burn in issue” is still here. So I created a background image in photoshop to purposely leave on for an hour as proof of the problem. I called back to the apple store early in the morning and talked with the technical center, the girl on the phone said “I remember your mac” I thought we had it fixed. I asked to make sure that the LCD that was ordered for the sole purpose of fixing the burn in issue which I had was still at the store, it was confirmed that it was.
    I came by the apple store and a different Genius looked at my computer, saw the excessive burn in. He ran the “Flurry” Screen saver, which helped remove the current burn in but was still not fully removed. He then told me that they would not replace the LCD, and that I should set my screen saver to every 5 minutes and lower the brightness to reduce the load on the screen. I argued that even if I can get rid of the problem after running the screensaver for at least an hour, the burn in just keeps coming back, and fast too.
    I came home setup the screensaver settings and began using my machine, not using it for even more than an hour I saw the burn ins from the store and some new ones that came from my doc, and finder window and shadow lines distorting the entire screen, almost making it look like mud lines.
    I took a few pictures with a DSL camera at the highest resolution, but I am not sure if this shows enough to really show:
    Doc burned in:
    #1 http://dl.dropbox.com/u/1477936/apple/DSC_0751.jpg (need to make it 100% to see)
    #2 http://dl.dropbox.com/u/1477936/apple/DSC_0754.jpg (need to make it 100% to see)
    Does any one know what I should do now?

    Welcome to the Apple Discussions!
    I think that regardless that this was a different Genius, the Apple Store has made a commitment to you to repair the iMac out of warranty and should honor this commitment. I would go back to the Apple Store and speak directly to the Store Manager with your original paperwork in hand for the repair that was not completed.
    Should you not receive satisfaction from the Store Manager then I would call Apple Care and immediately ask to have your call escalated to a Customer Care representative. Explain the issue to the rep and ask for their assistance in receiving the repair commitment originally made to you by the Apple Store.
    Have all necessary paperwork for the committed repair at hand during your phone conversation. Take notes. Get the name and the position of each person to whom you speak. Speak firmly but politely. Do not get angry or make any threats. The minute you mention a lawyer or any other such threat the conversation will be over and Apple will fall back on the fact the Mac is out of warranty and any opportunity of getting a repair will likely be gone.
    Dah•veed

  • I am getting the following error when I open my Safari Browser.the proceedure entry point sqlite3_wal_ check point could not be located in the dynamic link library SQLITE3.DLL

    I am getting the following error when I open my Safari Browser.the proceedure entry point sqlite3_wal_ check point could not be located in the dynamic link library SQLITE3.DLL

    Try going back to a restore point >  System Restore - Microsoft Windows

  • Using Hyper-V 2012 r2, connecting to the console results in: A certification authority could not be contacted for authentication.

    I'm having some trouble with authentication to guests from my Hyper-V console.
    If I try to connect from the Hyper-V Manager to the console of any guest, I get the error:
    "A certification authority could not be contacted for authentication. If you are using a Remote Desktop Gateway with a smart card, try connecting to the remote computer using a password. For assistance, contact your system administrator or technical support."
    I'm not using an RDG and smart card.
    I have 2 virtual networks. The first is Production, the second is Isolated. Production has 2 NICs attached to the Production LAN, the second has 2 NICs in our DMZ. The host is a member server of the production domain. I can use MSTSC from the LAN or the DMZ
    to gain access to each Guest and the Host.
    The issues start if I try "Connect" from Hyper-V Manager in an attempt to use the console of any Guest. Each attempt fails with the above error. If I use an incorrect password, I get a different error: "The credentials that were used to connect
    to {Server FQDN} did not work. Please enter new credentials."
    Taking a look at the the event logs, I can see the session successfully authenticating to the Guest (4776 Credential validation and 4624 Logon), and the fact I get a different error if I enter an incorrect password show I get some way along the line. However
    if I take a look at the logs on the Host, however I get:
    An account failed to log on.
        Subject:
            Security ID:        NULL SID
            Account Name:        -
            Account Domain:        -
            Logon ID:        0x0    
        Logon Type:            3
        Account For Which Logon Failed:
            Security ID:        NULL SID
            Account Name:        
            Account Domain:        
        Failure Information:
            Failure Reason:        An Error occured during Logon.
            Status:            0xC000006D
            Sub Status:        0xC000005E
        Process Information:
            Caller Process ID:    0x0
            Caller Process Name:    -
        Network Information:
            Workstation Name:    -
            Source Network Address:    -
            Source Port:        -
        Detailed Authentication Information:
            Logon Process:        Kerberos
            Authentication Package:    Kerberos
            Transited Services:    -
            Package Name (NTLM only):    -
            Key Length:        0
        This event is generated when a logon request fails. It is generated on the computer where access was attempted.
        The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
        The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
        The Process Information fields indicate which account and process on the system requested the logon.
        The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
        The authentication information fields provide detailed information about this specific logon request.
            - Transited services indicate which intermediate services have participated in this logon request.
            - Package name indicates which sub-protocol was used among the NTLM protocols.
            - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
    Which looks to me like a blank authentication request is being sent? (I've not deleted any machine/domain names, they're just not present)
    Any suggestions? Do you think I'm barking up the wrong tree?
    Thoughts and comments gratefully received

    Hi,
    What’s your guest system platform, base on my experience that must be the not supported guest system issue, the generation 2 vm only support the Windows 8 or 8.1 platform.
    The related KB:
    Generation 2 Virtual Machine Overview
    http://technet.microsoft.com/en-us/library/dn282285.aspx
    Hope this hleps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • How to check the usage of ram and cpu Performance for the particular application like sqlserver ,ms word

    how to check the usage of ram and cpu  Performance for the particular application like sqlserver ,ms word
    ranki

    Hi,
    You can use Performance Monitor and add the required counters.
    Check the below Technet article on Performance Monitor.
    http://technet.microsoft.com/en-us/library/cc749249.aspx
    Below are the steps to monitor the process in Performance Monitor.
    - Go to the Performance Monitor. 
    - Right-click on the graph and select "Add Counters".
    - In the "Available counters" list, open the "Process" section by clicking on the down arrow next to it. Select "% Processor Time" (and any other counter you want).
    - In the "Instances of selected object" list, select the process you want to track. Then click on "Add >>" button. Click on OK.
    Regards,
    Jack
    www.jijitechnologies.com

  • I just purchased a Canon 7D Mark II, new DellXPS and the Lightroom 5.2.  The Lighthouse is not openinging the 7DMark II but does open the older 7D that I imported.  I checked the Abode update page and do not see one for the 7D Mark II.  Please say it is t

    I just purchased a Canon 7D Mark II, new DellXPS and the Lightroom 5.2.  The Lighthouse is not openinging the 7DMark II but does open the older 7D that I imported.  I checked the Abode update page and do not see one for the 7D Mark II.  Please say it is there - if not when.  I am "on hold till its done.  Thanks.

    Update to the current release, which is Lightroom 5.7.1. You can do this from the Lightroom help menu and choosing updates.

  • CRM_ORDER A 017 - An authorization check could not be executed

    Hello Experts,
    I am using FM CRM_ORDER_MAINTAIN in order to create an Activity, and all works well, when I set up some test data within SAP.
    However when I attempt to execute this from WEB UI, I get the error message CRM_ORDER A 017 - An authorization check could not be executed.
    A Colleague of mine changed his Authorisation to SAP_ALL and SAP_NEW, and he still got the same error. Which kind of makes me think its not a simple auth issue, also I use the same user to create on-line and also via testing on SAP.
    But the WEB UI keeps giving me this error.
    I would be grateful if anyone who has come across this could pass on their knowledge of how to overcome it.
    Cheers
    Gary

    Apologies, I found the answer myself, straight after I posted this message, isn;t that always the way.
    Turns out I wasn't being passed the process_type as expected and thus it raised the no_authority error. Which is what caused the initial confusion. But got there in the end

Maybe you are looking for

  • Xp_logininfo Installation problem

    Hello gurus, I'm facing the same problem as described in this link: Re: xp_logininfo "Installation problem on windows 2003 with Sql 2005" the error I get is similiar: <i>The below message comes from executing the command master..xp_logininfo '<domain

  • EBP 3.0. Restrict Create PO in backend

    Dear SRM gurus, We use EBP 3.0, backend R/3 (4.7 enterprise). We have configuration inplace where a PO is created in the backend, per requirements.  However, for one particular vendor, we need to have a minimum price limit set for automatic PO creati

  • Gray box for logo generating pdf from fm book

    Greetings, I have a large FrameMaker book that I've generated pdfs from a million times. We cleaned up our logo, so I dropped it in and tried to generate the usual pdf. a gray box resulted for the logo only. all other artwork displayed fine. i tried

  • [SOLVED]Wine and dotnet20

    Hi all, im new user of archlinux and linux and im trying to install some win apps, i have now running wow+cataclysm, Diablo 3 and ultima online all work smooth but i need a razor client to play ultima online http://www.runuo.com/home/ but this need .

  • Black viewer after upgrading color to 1.0.4

    i worked with color with a fresh install from fcp-studio 2 installer-discs. everything worked fine in color, i could see frames work with it and so on... because of an fpc-project-file i updated the whole fcp-studio to current version, after this upd