RDS terminal services users automatic logsoff
Please help or advice ; when trying to logon on RDS terminal Services on windows server
2008 r2 it automatically logsoff, it shows welcome,applying user settings, preparing desktop and logoff.
On AD environment Tab everything is the same as any other users that are working ok. here is the log
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 2014/09/16 10:12:41 AM
Event ID: 1542
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: TS.QUO.co.za
Description:
Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1542</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-09-16T08:12:41.331620700Z" />
<EventRecordID>676052</EventRecordID>
<Correlation />
<Execution ProcessID="848" ThreadID="15188" />
<Channel>Application</Channel>
<Computer>TS.QUO.co.za</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Error">The system cannot find the file specified.
</Data>
</EventData>
</Event>
Similar Messages
-
I've been tearing my hair out for a couple of days now...
I'm trying to create a mandatory profile for users logging in from hp thin clients on a 2003 server at a school.
I've set up a prototype user, then copied the proto user's NTUSER.DAT to NTUSER.MAN and renamed
NTUSER.DAT to NTUSER.DAT_unused.
At that point, logging in as the prototype user looks ok. It was my understanding that renaming NTUSER.DAT to NTUSER.MAN would make it a mandatory profile, and the user (in this case the proto user) would be unable to change it. However, in this
case the user can still modify the desktop and those modifications are preserved across logins. The NTUSER.MAN file is being updated, judging by the timestamp changes.
What am I missing?
I've tried putting the NTUSER.MAN in the user's dir on the server
(C:\Documents and Settings\ProtoUser),
in the DefaultUser, and in AllUsers.
Right now I'm getting a default, unmodifiable profile which I have no idea where it comes from.
In case it matters, the original user and directory tree from which the NTUSER.MAN I'm trying to use has been deleted, but I wouldn't think that should matter.
For example, I have the option to not show the security tab set in the group policy, but it is showing up.
The Start menu is showing as the classic start menu, and I had it set for the "new" (2 column) one.
I've got hide network places on the desktop set, but it's showing up.
Is there a way to tell where a profile is coming from?
I'm pretty confused at this point; any clarifications / tips would be much appreciated.
Related questions:
If both an NTUSER.DAT and an NTUSER.MAN exist, which is used?
If no profile is found for a user in the normal place, what happens?Hi,
Thank you for posting in Windows Server Forum.
A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users. With mandatory user profiles, a user can modify his or her desktop, but the changes are not saved when the user
logs off. The next time the user logs on, the mandatory user profile created by the administrator is downloaded. There are two types of mandatory profiles: normal mandatory profiles and super-mandatory profiles.
User profiles become mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) on the server to NTuser.man. The .man extension causes the user profile to be a read-only profile.
User profiles become super-mandatory when the folder name of the profile path ends in .man; for example, \\server\share\mandatoryprofile.man\.
More information:
Mandatory User Profiles
http://msdn.microsoft.com/en-us/library/windows/desktop/bb776895(v=vs.85).aspx
Using User Profiles in Windows Server 2003
http://technet.microsoft.com/en-us/library/cc776120(v=ws.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki -
How to change path of Users Terminal Services Profile for multiple AD users on server 2003?
Hello experts. I am working on a file server migration. All data has been migrated, I am currently working on redirecting users to the new file server. I
am able to select multiple users at once in ADUC -> right-click -> properties -> profile and here I can change the home folder and roaming profile path for each all users to point towards the new file server.
The issue I have run in to is that we have roaming profiles for terminal services users. So, there are hundreds of users that have their terminal services profile
configured in AD -> Right-click user (one at a time) -> properties -> terminal services profile. Here, the profile path is configured for each user as \\OLDserver\Profiles\%username%
and I need to change it to \\NEWserver\profiles\%username%.
I know that you can configure this path via group policy, I set up a GPO; Computer / Administrative Templates / Windows Components / Terminal Services / “Set Path
for TS Roaming Profiles” as \\NEWserver\profiles and applied this GPO to an OU containing the TS servers.
The problem is, the GPO is not working... When I log in to the TS and add a document to My Documents, it is still saving under \\OLDserver\profiles\Username.
So, the settings in AD are trumping the GPO I believe. What is the best way to accomplish my goal? Thanks in advance!> to change it to \\NEWserver\profiles\%username%.
That is "profile" in opposite to...
> add a document to My Documents, it is still saving under
> \\OLDserver\profiles\Username.
...this one which is Folder Redirection and has NOTHING to do with
server based profiles.
> So, the settings in AD are trumping the GPO I believe.
No, it isn't. When you do not enable FR and you access "Documents", you
will never see an UNC path but the local c:\users\xyz\documents folder.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :)) -
ADS+Terminal Services on a Single Physical Server running Windows Server 2008 R2
We have a Dual Processor Server (2 x Intel Xeon E5-2620v2 + 32GB RAM) running on Windows Server 2008 R2. This has ADS configured. We now wish to add a VDI Setup with NComputing Zero-Clients. We have to run Terminal Services with User RDS CAL + User
CAL for all VDI Clients.
Please confirm if we can have both the ADS & Terminal Services running on the same physical server ? Are there known issues or crashes due to this ? Or should both these run on two different servers ? Customer does not want to invest in one more server
& OS. Hence, we have to run both the services on a single physical server. Customer has just upgraded his server to a Dual Processor with 32GB RAM to accommodate both the services.
Please advice, if we can run both the ADS & TS on the same server. What is the best practice for this Solution ?
Thanks & Regards,
VR
([email protected])Hi,
After referring your comment I can say that, you can able to use ADS and Terminal service on same physical server with server 2008 R2. But installing a terminal server on an Active Directory domain controller is not recommended. I suggest that it’s not a good
practice to manage the environment in that way. If possible, then try to run on two different machines for better result and to avoid any problem. Allowing users to run programs on a domain controller could create security risks and performance issues.
If the Terminal Server role service is installed on a domain controller, the security settings of the domain controller will need to be adjusted to allow user’s remote access to the server. This remote access is controlled by the "Allow log on through Terminal
Services" user rights assignment, which can be configured by using the Group Policy Management Console (GPMC).
You can refer below link for more information.
1. Installing RD Session Host on a Domain Controller
2. Best practices for setting up Remote Desktop Licensing (Terminal Server Licensing) across Active Directory Domains/Forests or Workgroup
Hope it helps!
Regards. -
After
sql server 2012 installation, I attached my production db. Because of some reasons, i
changed sql engine account from network service user to system user by means of sql server configuration manager.
Now , there isn’t
a problem at sql server running system. But
I have doubts that
this can produce problems later. Because sql server database engine account must have privileges that listed below;
Log on as a service (SeServiceLogonRight)
Replace a process-level token (SeAssignPrimaryTokenPrivilege)
Bypass traverse checking (SeChangeNotifyPrivilege)
Adjust memory quotas for a process
(SeIncreaseQuotaPrivilege)
Permission to start SQL Writer
Permission to read the Event Log service
Permission to read the Remote Procedure Call service
While sql server installation, setup gives these
privileges to network service user automatically, but changing user by means of sql confugarition manager does not give these
privileges.
Now, system user has privileges listed below. And sql server has been running for 1,5 months without any problems.
Log on as a service (SeServiceLogonRight)
Bypass traverse checking
(SeChangeNotifyPrivilege) (Everyone user has his privileges. So i think that system user has this privilege also)
What problems can occur because of this situation? Shall i give other privileges to system user and restart sql server or not? And how can i give these privileges to system user listed below;
Replace a process-level token (
this can be set from user rights assignments)
Adjust memory quotas for a process
(this can be set from user rights assignments)
Permission to start SQL Writer (
? - give advice )
Permission to read the Event Log service (
? - give advice )
Permission to read the Remote Procedure Call service (
? - give advice )Our server is windows server 2008 r2 enterprise edition. I have looked the bunch of permissions in user rights menu that is in local security policy settings gui.
And i have seen those permissions below were not granted to system user;
Bypass traverse checking (SeChangeNotifyPrivilege)
Adjust memory quotas for a process
(SeIncreaseQuotaPrivilege)
So, briefly you say, don't panic ? -
Flash Player - Windows 2003 Terminal Services
We have terminal services users that are unable to use the Adobe Flash Player in their web browser. They keep getting the prompt that they need it. The administrator can view it even in terminal mode. I have done the user install, Add/Remove Programs option, changed the Registry keys to allow everyone read permissions and even full on the hkey classes root. It appears that new users that connect can view Flash correctly but existing users that already had profiles can't still. Any other ideas? Thanks for the help.
Did you ever get a resolution to your issue? I have the same issue
. I have tried following these steps
http://forums.adobe.com/message/2406457#2406457
but the registry keys are different for Flash Player 10. I cannot find the correct key for version 10. -
Reading AD Terminal Services attribute
Hi,
I am trying to read user profile from AD using JNDI code.Using the code I am able to read all the attributes except the terminal services attribute like TerminalServicesProfilePath. Can anyone tell me is it possible to read the value of these attributes using JNDI, if pssoible then how can we do this. Also if there is any othe way to acheive this.
TIAIf I remember correctly, there are no specific Terminal Services attributes that you can easily gain access to in Active Directory. Rather the terminal services user settings are stored in a binary blob of data stored in the userParameters attributes. (FYI, Historically this was to provide backwards compatibility for NT4 where Terminal Services, Remote Acess Services, Services for Netware and third party solutions (such as Lotus Notes) stored user settings in a NT4 domain property called userParams)
You may be able to access each Terminal Services setting in the binary blob either via a set of Terminal Services COM interfaces or from what I have read from a set of Windows Management Instrumenation (WMI) interfaces. Here is a useful link for you. http://blogs.technet.com/heyscriptingguy/archive/2008/10/23/how-can-i-edit-terminal-server-profiles-for-users-in-active-directory.aspx
BTW, You can access WMI which is the Microsoft implementation of Web Based Enterprise Management (WBEM) via Java. There is some crude sample code at http://forums.sun.com/thread.jspa?threadID=5116320 -
Terminal Services (TS) or Remote Desktop Services (RDS) scenario clarifications
Dear Support,
Question:
Do I still need to purchase RDS CALS license? or can use MSDN CALs in the Terminal Server?
Due to MSDN subscribers are End users, do not use Production Data and have to demo their developed applications to other End users group.
Scenario:
1. Use only Remote Desktop Session.
2. End users are MSDN Subscribers. (Although stated by Microsoft End users are non MSDN subscribers)
3. End users demo applications to End users.
4. End users develop their applications and have to demo to other End users group.
From MSDN link:
Client Access Licenses for Terminal Services
With an MSDN subscription, you are allowed to provide end users access to Internet demonstrations of your programs via Terminal Services (Windows Server 2003 or Windows Server 2008) or Remote Desktop Services (Windows Server 2008 R2). Up to 200 anonymous
users can simultaneously access your demonstration this way. Your demonstration must not use production data. MSDN subscribers are licensed to demonstrate their applications to end users,
but Terminal Services (TS) or Remote Desktop Services (RDS) is the only scenario where end users without an MSDN subscription can interact with the demonstration application while the software is licensed through MSDN subscriptions.
Accessing CALs
MSDN subscribers can access CALs for demonstration purposes through the
Product keys page of MSDN Subscriber Downloads. Please access the documentation resources online for assistance with the
Terminal Server activation process. If you have any questions, please visit the Microsoft
Terminal Services forum.
Mary LeeHi
Please call the licensing to be sure. In the USA (866) 230-0560 or
[email protected]
Regards, Philippe
Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it! -
Hi,
I heard some promote use of "Terminal Services(RDS)", rather than App-V application with SCCM 2012 even if you have SCCM licens. The reason you dont need to repackage\test the application on an client OS...
I don't agree and I have not Heard this Before, just that you use TS for some scenario.
Or is it more likely that "Terminal Services(RDS)", take over the applikation administration?
/SaiTechSurely this all depends on your environment. There's nothing wrong with creating RemoteApps to push to client devices. Maybe you have an environment where RDS is widely used.
Why not leverage both solutions and target App-V's at RDS servers and then create App-V based RemoteApps that users can run at home as part of a home working solution via RDWeb.
Creating apps via RDS will be an admin overhead yes but then so is creating App-V packages in SCCM.
I don't agree with the arguement re: 'you dont need to repackage\test the application on an client OS...' as
App-V allows you to run on multple O/S types.
To be honest both technologies have their pros and cons.
Cheers
Paul | sccmentor.wordpress.com -
Hi,
We are not using Lync internally. But some of my users need to attend Lync 2013 meetings. We run a Windows 2008 R2 Terminal Services/XenApp environment. Users are not allowed to install applications.
In the past, I was able to install administratively a Lync 2010 attendee client.
How do I enable my users to attend a Lync 2013 meeting?
Thanks.This is not viable. I don't know which user is going to be attending Lync meetings from suppliers or customers ahead of time and have no contacts to request a test meeting. This is a loop. How does Microsoft expect sysadmins to support their products if
the client software is not easily available.
At this point if I have a user who needs this, I will only know about it after the meeting has failed. At that point the user is not very receptive to the idea of involving his contact in troubleshooting and setting up test meetings. It's even worse if it's
an executive.
Is there any way of pre-installing the pre-requisites for attending Lync 2013 meetings?
My only choice is to inform my user community that we have no way of supporting Lync and request that they use GotoMeeting or WebEx with their contacts who try to do a Lync meeting.
I am very disappointed in Microsoft's approach with Lync 2013.
Thanks for your time. -
RE: (forte-users) Terminal Services - Win 2000
Hi
l've already installed my application 'appA' at my server 'ServerA'.
When l try to execute this application in my pc thru Terminal Server, there
were nothing displayed at my pc but when l check at on 'ServerA' , l can
see that 'appA' is running over at the 'ServerA' side. Actually, I'm new at
this Terminal Server thingy...
thanks..
-----Original Message-----
From: Jean-Paul Gabrielli [mailto:Jean-Paul.Gabriellisema.fr]
Sent: Friday, January 19, 2001 5:08 PM
To: Zulkifli Mohamad
Subject: RE: (forte-users) Terminal Services - Win 2000
hmm when you telent a machine to run a process remotely, don't expect to
have it locally :-)
j-p
-----Message d'origine-----
De: Zulkifli Mohamad [mailto:zulkifli_mohamadkonnas.com.my]
Date: vendredi 19 janvier 2001 09:19
À: forte-userslists.xpedior.com
Objet: (forte-users) Terminal Services - Win 2000
hi..
l'm trying to run forte application thru Terminal Services Client
(Win 2000) but my application only running on the server not at the client
pc. Some one can help me...
thanks.
For the archives, go to: http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. To unsubscribe, send in a new
email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.comIl suffit de mettre les BTD/BTX sur un drive réseau (net use X:
\\server\share_point),
puis d'installer des icônes pour les clients: ftexec -fi bt:x:\MyApp.
Pour que les noeuds ne s'auto-enregistrent pas, peut-être mettre un password
Ou bien définir les noeuds comme un 'groupe' et donc seul le groupe est
connu.
Si mettre le mot de passe suffit pas, et si vraiment le model node gêne,
alors il
faut un autre environment manager.
I think that to avoid install, the software could be located on a shared
drive,
and users linking to it through running 'ftexec' or directly the compiled
binaries.
For nodes not to appear in the environment as nodes, they could be defined
as members
of a model node '(which then would be in the environmnet)'
Putting a password in the environment could prevent nodes to be registered
there, but
might prevent the apps from being executed.
Cheers,
j-paul gabrielli
Sema DTS
-----Message d'origine-----
De: Thomas Felix [mailto:tfelixaxialog.fr]
Date: mardi 2 mai 2000 14:14
À: forte-userslists.xpedior.com
Objet: (forte-users)
bonjour a tous
je souhaites installer une application distribuée sur des postes clients.
Y'a t'il moyen de ne pas installer les noeuds de ces postes clients sur l'
active environnement lié au développement et si oui comment?
hi
I would like to install an application on clients workstation
Can i install this nodes in a different Active environnement than this one
that we use for the developpement ?
For the archives, go to: http://lists.xpedior.com/forte-users and use
the login: forte and the password: archive. To unsubscribe, send in a new
email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.com -
Error Creating New User Accounts when Setting Terminal Services Attribute
We have just started receiving this error when new users are being created in our domain as part of the new hire process. Does anywhere have any pointers on where to look and what to look for?
ErrorError
com.waveset.util.WavesetException: WTSQueryUserConfig() failed - Attribute: 'Terminal Services Home Directory Drive' Error: The specified user does not exist.
Is this something that would indicate that AD isn't replicating across multiple domain servers yet, and thus when it tries to set this attibute this command isn't finding the account? If that is the case is there a way to have a retry put in?May I ask what version of IDM you're running?
There's a known bug that relates to this functionality. A quick review shows it's a pretty close match (not 100%) to what you described.
Bug 20728: Setting AD 'Terminal Services Local Home Directory' to null in IdM results in WTSSetUserConfig error
It's fixed in 8.1.0.3(or later), 8.0.0.10(or later), or 7.1.1.14(or later).
For the record, the latest IDM patches can be obtained here with valid credentials:
http://sunsolve.sun.com/show.do?target=patches/zp-Software_Network-Internet_Identity_Manager
Regards,
Alex -
AD User Recon of Terminal Services Profile Attributes
I am trying to get some of the Terminal Services Profile attributes to Reconcile to OIM during the AD User Reconciliation scheduled task. Other attributes sync fine, but the Remote Manager is never called to run the Recon vbs script. Looking at the Java for the AD User Recon scheduled task, I can find the method that should be called; getBLOBAttributeValues(). Funny thing is I can't find even one call to that method in any of the java code in the xliADRecon.jar file.
OIM 9.1.0.2 BP07
AD Connector 9.1.1.4
Looup.AD.BLOBAttribute.Values is configured with the attributes to sync
Lookup.ADReconciliation.FieldMap is configured with the attributes
The Resource Object has the fields defined for Reconciliation
The Process Definition has the fields mapped to the Process form attributes
Everything seems to be in place except there is no call to the getBLOBAttributeValues() method to call the reconciliation script via the remote manager.
What am I missing?
And BTW ... Provisioning of the attributes works fine, using the RManager.
Thanks,
BillHi,
Please go through below article might helpful in your case.
How to read msTSProfilePath, msTSHomeDrive and msTSHomeDirectory properties from AD (VB.NET)
http://blogs.msdn.com/b/alejacma/archive/2010/10/13/how-to-read-mstsprofilepath-mstshomedrive-and-mstshomedirectory-properties-from-ad-vb-net.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected] -
OpsMgr Config Service stops automatically
There's a fresh installation of SCOM 2007 SP1, SQL database is configured on a separate server. The installation itself goes smoothly without any errors. After installation to RTS OpsMgr Config Service stops automatically, after restart it works for about a minute, then stops again. All the other OpsMgr services work correctly. OpsMgr Config Service and OpsMgr SDK Service are run from the same domain account with Domain Admin rights. OpsMgr Health Service is run from Local System account. Here's what I see in the logs:
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;margin-bottom:.0001pt;font-size:11.0pt;font-family:'Calibri','sans-serif';}
a:link, span.MsoHyperlink
{color:blue;text-decoration:underline;text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;text-decoration:underline;text-underline:single;}
.MsoChpDefault
{font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.Section1
{page:Section1;}
Application:
Event Type: Information
Event Source: OpsMgr Config Service
Event Category: None
Event ID: 29000
Date: 11/1/2008
Time: 3:22:33 PM
User: N/A
Computer: SS-MSK-A0005
Description:
The description for Event ID ( 29000 ) in Source ( OpsMgr Config Service ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Event Type: Error
Event Source: .NET Runtime 2.0 Error Reporting
Event Category: None
Event ID: 5000
Date: 11/1/2008
Time: 3:22:50 PM
User: N/A
Computer: SS-MSK-A0005
Description:
EventType clr20r3, P1 microsoft.mom.configservicehost, P2 6.0.4900.0, P3 47b70fb4, P4 system, P5 2.0.0.0, P6 4889de7a, P7 382a, P8 127, P9 system.argumentexception, P10 NIL.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 63 00 6c 00 72 00 32 00 c.l.r.2.
0008: 30 00 72 00 33 00 2c 00 0.r.3.,.
0010: 20 00 6d 00 69 00 63 00 .m.i.c.
0018: 72 00 6f 00 73 00 6f 00 r.o.s.o.
0020: 66 00 74 00 2e 00 6d 00 f.t...m.
0028: 6f 00 6d 00 2e 00 63 00 o.m...c.
0030: 6f 00 6e 00 66 00 69 00 o.n.f.i.
0038: 67 00 73 00 65 00 72 00 g.s.e.r.
0040: 76 00 69 00 63 00 65 00 v.i.c.e.
0048: 68 00 6f 00 73 00 74 00 h.o.s.t.
0050: 2c 00 20 00 36 00 2e 00 ,. .6...
0058: 30 00 2e 00 34 00 39 00 0...4.9.
0060: 30 00 30 00 2e 00 30 00 0.0...0.
0068: 2c 00 20 00 34 00 37 00 ,. .4.7.
0070: 62 00 37 00 30 00 66 00 b.7.0.f.
0078: 62 00 34 00 2c 00 20 00 b.4.,. .
0080: 73 00 79 00 73 00 74 00 s.y.s.t.
0088: 65 00 6d 00 2c 00 20 00 e.m.,. .
0090: 32 00 2e 00 30 00 2e 00 2...0...
0098: 30 00 2e 00 30 00 2c 00 0...0.,.
00a0: 20 00 34 00 38 00 38 00 .4.8.8.
00a8: 39 00 64 00 65 00 37 00 9.d.e.7.
00b0: 61 00 2c 00 20 00 33 00 a.,. .3.
00b8: 38 00 32 00 61 00 2c 00 8.2.a.,.
00c0: 20 00 31 00 32 00 37 00 .1.2.7.
00c8: 2c 00 20 00 73 00 79 00 ,. .s.y.
00d0: 73 00 74 00 65 00 6d 00 s.t.e.m.
00d8: 2e 00 61 00 72 00 67 00 ..a.r.g.
00e0: 75 00 6d 00 65 00 6e 00 u.m.e.n.
00e8: 74 00 65 00 78 00 63 00 t.e.x.c.
00f0: 65 00 70 00 74 00 69 00 e.p.t.i.
00f8: 6f 00 6e 00 20 00 4e 00 o.n. .N.
0100: 49 00 4c 00 0d 00 0a 00 I.L.....
Operations Manager:
Event Type: Information
Event Source: OpsMgr Connector
Event Category: None
Event ID: 21023
Date: 11/1/2008
Time: 3:31:10 PM
User: N/A
Computer: SS-MSK-A0005
Description:
OpsMgr has no configuration for management group Euroset and is requesting new configuration from the Configuration Service.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
System:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 11/1/2008
Time: 3:44:10 PM
User: N/A
Computer: SS-MSK-A0005
Description:
The OpsMgr Config Service service terminated unexpectedly. It has done this 16 time(s).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
What can the problem be here?Hi,
Since here is the forum for Exchange, we may only be expert on Exchange Monitoring by SCOM related issue. For issue on error event from SCOM 2007,we recommend you to use Newsgroup for Operation Managers 2007 to get relevant help.
http://technet.microsoft.com/en-us/opsmgr/bb839593.aspx?lc=1033
However, base on my experience, the below steps may helpful to you.
1. First please try to check whether Local System has been used as action account.You can follow the article below to change account to “Local System”.
How to Change the SDK and Config Service Accounts in Operations Manager 2007
http://technet.microsoft.com/en-us/library/cc540429.aspx
2. Then please Check Remove sub keys from
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application that refer to OpsMgr Config Service.
3. Please remove OpsMgr Config Service from “Sources” located at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application.
4. After that please add OpsMgr Config Service to “Sources” at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Operations Manager.
More related information share with you:
Account Information for Operations Manager 2007
http://technet.microsoft.com/en-us/library/bb735419.aspx
Hope it helps.
Xiu -
Harden Server 2008 R2 Terminal Services
I found an article to harden Terminal Services on Windows 2008 R2,http://technet.microsoft.com/en-us/library/cc264467.aspx, but there are a couple of things that I am not clear about.
As I am working through this in my test environment I had a couple of questions.
First with the Network Level Authentication enable I want to verify that what I did worked. I was having some weird problems with the check box grayed out so I created a GPO with the following settings under Polices\Administrative Templates\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Security:
Set client connection encryption level: Enabled High Level
Require secure RPC communication: Enabled
Require use of specific security layer for remote (RDP) connections: Enabled SSL
Require user authentication for remote connections by using Network Level Authentication: Enabled
With those items set how can I verify that NLA is working and that the communication is secured with my CA issued certificate?
The other question I have is with the Single Sign-On GPO settings. I know what the settings are based on the above mentioned article, but it does not say whether it should be applied to the clients or the server and of course a good way to test
based on the GPO application.
Thanks in advance, I just want to make sure this is done right.
EricHi Eric,
Thank you for your post in Windows Server Forum.
Can you elaborate the issue which you are facing with NLA check box grayed out?
You can try to check the connection for the local user to check whether he can bale to login the system without adding the user to NLA authentication.
In regards to the Single Sign On setting must be applied to client side, as it’s display in the article that need to do on windows vista. Please refer below article for information regarding SSO.
How to enable Single Sign-On for my Terminal Server connections
http://blogs.msdn.com/b/rds/archive/2007/04/19/how-to-enable-single-sign-on-for-my-terminal-server-connections.aspx
Hope it helps!
Thanks,
Dharmesh
Maybe you are looking for
-
Importing/ Browser Viewing Problem
I have created a new folder. It shows in the Projects Tab. I then go to my ALL PHOTOS and locate a photo that I then drag and drop in the new album. Cool. No Problem there. Then I go back to ALL PHOTOS and drag and drop a different photo into the alb
-
IWeb 08 and Aperture 3.0.3
I have been building websites for my photo classes with iWeb 08 and accessing images from my Aperture library for some time. I am now using 10.6.3, and Aperture 3.0.3 and all I see in my media panel under photos is iphoto. Is this a bug, or do I have
-
Hi everybody, I want to make a report painter in CCA. I use Library 1VK which is assigned to table CCSS. But I don't see characteristic "PRCTR - Profit center" in 1VK. Although there is "PRCTR - Profit center" in table CCSS.Why? How to add "PRCTR - P
-
Constructing Database Update DML Statements
This is a very common problem I am sure but want to know how others handle it. I am creating a web application via Servlets and JSPs. I am working with Oracle 10g. Here's the problem/question. When I present an html form to a user to update an existi
-
Hai Gurus, I am working in SAP abap .Now my PM ask me to learn EP as soon as Possible. I don't have any idea about this friends. Please give me a clear idea about this.. 1 . I dont know java programing ... ( Is this mandatory ) 2. Is it p