Remote HFM Users

We have business partners in California who use our HFM system. Our servers are in North Carolina. Right now they are using VPN and Terminal Services to connect to HFM. They are suffering from slow response. What are Oracle's recommendations for improving performance when supporting remote users?
Thanks.
Terri
Message was edited by:
user609812

Hi Terri,
Not from Oracle perspective but have you compared Frame Relay response with VPN. I would suggest it will give better performance

Similar Messages

  • Routing issue for remote vpn user and spoke

    Hi all,
    i have configure VPN (see attached file)
    before upgrading ASA from 8.3 to 8.4,  SPOKES was able to communicate between them and  also remote VPN users was able to access spoke site.
    after upgrade  ASA HUB, neither spoke-to-spoke  nor remoteuser---to---spoke cannot communicate
    here is NAT exemption configuration on ASA HUB.  only this ASA have been upgrade. nothing have been done on other site
    object network 172.17.8.0
    subnet 172.17.8.0 255.255.255.0
    object network 10.100.96.0
    subnet 10.100.96.0 255.255.240.0
    object network VPN-SUBNET
    subnet 172.20.1.0 255.255.255.0
    nat (outside,outside) source static 172.17.8.0 172.17.8.0 destination static 10.100.96.0 10.100.96.0
    nat (outside,outside) source static 10.100.96.0 10.100.96.0 destination static 172.17.8.0 172.17.8.0
    nat (outside,outside) source static VPN-SUBNET VPN-SUBNET destination static 10.100.96.0 10.100.96.0
    nat (outside,outside) source static VPN-SUBNET VPN-SUBNET destination static 172.17.8.0 172.17.8.0
    same-security traffic permit intra-interface
    same-security traffic permit inter-interface
    Please do you know what can be the problem ?
    thanks so much for your help

    Since you are not NATing any of those traffic and it's a u-turn traffic, pls remove those 4 NAT statements. They are not required at all.
    Pls "clear xlate" after removing it and let us know how it goes.

  • Remote Desktop Service Manager - configure permissions for Remote Desktop Users to Send Message, Disconnect, Logoff

    Hello, dear colleagues.
    We are using Windows Server 2012 R2 as Remote Desktop Server. Also use Windows Server 2008 R2 with Remote Desktop Service Manager to control RDS user sessions (Send Message, Disconnect, Logoff, Query Info). 
    Send Message, Disconnect, Logoff options works only for users in Administrators group.
    I can't to configure permissions for Remote Desktop Users, specific user or AD group. 
    To set permissions I'm running RDS Host Configuration on Windows Server 2008 R2 and connect to Windows Server 2012 R2. Then double-click
    RDP-Tcp, Security tab, add specific user account , AD group or configure
    advanced permissions
    for Remote Desktop Users.  
    But, as I sad above, these options works only for users in Administrators group. How to make it work for Remote Desktop Users or specific user, AD group?
    Thanks.
    P.S. If move specific user from Remote Desktop Users group to Administrators group on
    Windows Server 2012 R2 - it works. 

    Hi,
    You can prevent administrators from changing the permissions for a connection by applying the
    Do not allow local administrators to customize permissions Group Policy setting. 
    This Group Policy setting is located in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
    Apart there is one command with which you can set the permission for that check the related
    article. Additionally checkthis
    thread for more detail.
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Select Grant on local Table to the Remote Oracle User

    How Can we Give a SELECT Grant on a Specific Table to the Remote Oracle User.

    IIRC, the remote user accesses local objects via a schema on the local database. That suggests you need to grant SELECT on the local table to the local schema that the remote user connects by.

  • Shared Services User Reports - for HFM Users

    Does anyone have some good material or knowledge they can share with me today regarding the following Shared Services topics?
    1. What might cause a run of the Users By Group report to fail? After about 15 mins bombs out and receive the following error: "User not found with identity = ntlm:SID=S-1-5-21-787380144-986785343-375376054-10174?USER(-2147216700). Then gives much more detail on error.
    2. How to remove users that appear under admin role but not in default?
    3. For audit (TODAY), ideally should produce a report of HFM users – including dates (when added, when security /provisioning was changed for them) – is there a report or combo of reports that will provide this information?
    Any help or a point in the right direction is hugely appreciated.
    Thank you!

    Ok - just some pointers, so use as suits.
    1: this looks like it is not seeing your AD/NTLM user. You see a similar SID if in Properties of any file share where the connection to the domain is not available, or the user no longer exists. Remember, if a user ID in NTLM or AD has been changed, Shared Services does not recognise this, and stores the original SID, so you need to remove and reprovision the user.
    2. The cleanest INHO is to do a CSS Import/Export and 'clean' the file. RTFM :)
    3. There are some reports in Shared Services, but see if this is of use - especially the Security Matrix, (http://www.epmmaestro.com/dnn/Products/EPMWebSymphony/tabid/56/Default.aspx)
    Good luck

  • Cisco ASA disable command line interface (CLI) vor VPN Remote Access users

    Hi,
    I have local database for a couple of VPN Remote Access users on our Cisco ASA 5510 firewall. When adding users i asigned them the privilege leve 0. Is it possible to completly disable CLI for theses users as they will only be using VPN Remote Access and do not need to access the appliance cli.
    Thanks in advance.
    Kind Regards,
    Marco

    Hi,
    We will need to use the vpn-filter or the ssh command to block ssh from the vpn pool.
    Regards,
    Vivek

  • Windows 2008 R2 Standard Remote Desktop Users cannot Connect

    I have a windows 2008 R2 Standard Terminal Server and some users aren't able to connect even though they are in groups that are in Remote Desktop Users on the local computer.  I checked the local security policy setting "Allow log on through Remote
    Desktop Services" and I see that Remote Desktop Users is a member of this group.  Inside of Remote Desktop Users we have DOMAIN\Domain Users and DOMAIN\Terminal Users.  Most of our users are in both groups, but there are still some people that
    aren't able to connect via Remote Desktop to this computer.  There are no users in "Deny logon through Terminal Services."
    Thanks!

    Hi,
    Thank you for posting in Windows Server Forum.
    Is it happens to all users or any particular group of users?
    Please check by creating new user add them to “Remote Desktop Users” group and then see whether that test user can remote desktop to the server.
    It also might happens that you may be limited in number of users or some connection issue or may be firewall setting issue. Please go through beneath article for information.
    Remote Desktop disconnected or can’t connect to remote computer or to Remote Desktop server (Terminal Server) that is running Windows Server 2008 R2
    http://support.microsoft.com/kb/2477176
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • Can't change search options in Outlook 2007 on Windows Server 2008R2 Remote Desktop Users

    One of my users is trying to change search options in Outlook 2007.
    But he can't change the search options.
    He is working with Outlook 2007 on Remote Desktop Services 2008 r2.
    We doen't use cache mode on terminal server.
    Any sugesstion how we can enabling search options for remote desktop  users ?

    Hi Roel,
    Thank you for posting in Windows Server Forum.
    To customize Instant Search options by using Group Policy 
    - In Group Policy, load the Office Outlook 2007 template (Outlk12.adm).
    - To customize how results are displayed, under
    User Configuration\Administrative Templates\Microsoft Office Outlook 2007\Tools | Options\Preferences\Search Options, double-click the setting that you want to set. For example, double-click Turn off wordwheel.
    - Click Enabled. For hit highlighting color, choose a color from the Background Color drop-down list.
    - Click OK.
    More information.
    Configure Instant Search options in Outlook 2007
    http://technet.microsoft.com/en-in/library/cc178983(v=office.12).aspx
    In addition, perform below steps to edit the registry key and check.
    Step 1: Open the Registry Editor application.
    Step 2: In the Registry Editor, click the Edit menu and select Find. Type PreventIndexingOutlook in the search field and click Find Next.
    Step 3: Right click PreventIndexingOutlook and select Modify. Change its Value data to
    0 and click OK.
    Step 4: Search again by clicking the Edit menu and select Find. Type SetupCompletedSuccessfully in the search field and click Find Next. Locate this key.
    Step 5: Right click the SetupCompletedSuccessfully key and select Modify. Change its Value Data to 0 and click OK.
    Step 6: Restart your computer and you will now be able to perform advanced searches in Microsoft Outlook.
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    TechNet Community Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Remote desktop users lost overnight on windows server 2008 R2

    We set up a group in active directory to allow certain users access to this Virtual Machine.
    I am able to go into the the remote Users of the VM and add this group from active directory.
    Every Morning i have to re-add this group as it has gone at some point. There is nothing i can see that would cause this.
    Would anyone have any suggestions?
    Thank you,

    Hi,
    According to your description, it seems that the domain Users added in the remote desktop users group disappeared after the reboot, right? What are the operating systems of the clients and server?
    In addition, you can try to add domain users to the Remote Desktop Users Group via Group Policy to see if the issue persists. For more detailed information, please refer to the link below:
    How to add "Domain Users/Group" to Remote Desktop Users group on Servers using
    Group Policy ?
    Best regards,
    Susie

  • How to programmatically manage Remote Desktop Users?

    Hi,
    I want to know if it esists a method to programmatically set/get the Remote Desktop Users list, such as add/remove an user and so on.
    Thank you all in advance
    Best Regards
    Antonino

    Hi,
    first of all, I want to thank you for reply. But, what I'm looking for is to programmatically view the list of the users for the Remote Desktop Control. With Remote Desktop Control I mean the way I let some other users over the network to operate with my own desktop in Windows XP (that is what you find in system->properties->remote desktop->advanced...and so on).
    Antonino

  • UCSManager (v.2.0(1s)) - Locales and Remotely Authenticated Users (AD)

    Hello,
    We recently added LDAP authentication to our UCS Manager (v2.0(1s)) and the binding of roles works and users are able to login using their AD accounts.  However, I was wondering if anyone knows how to assign a locale to a remotely authenticated user.  The option seems greyed out on my end.  There are a handful of people that only need to see their single blade and we don't want them to see the rest of our servers.
    Thanks,

    No they weren't part of those groups.  I see where I went wrong: the mappings I made didn't include the locale, only the roles section.
    However, I noticed another issue.  Anyone that is in the base OU and below is allowed access to UCS Manager.  Even if they are NOT apart of a UCS mapping, they get read-only access and see everything.  Is there a way to deny all access unless a user is specifically apart of a group in AD that is mapped to a role in UCS Manager?
    Lets say I have a blade on chassis 1 slot 6.  I want a user in AD to only see and have access to that blade.  Nothing else.  Is that possible?
    Thank you in advance for any help.

  • SNMP notify and remote SNMPv3 users

    I've run into some problems trying to get SNMPv3 informs to work.
    Currently I am working with this simplified (by removing views and ACLs) config:
    snmp-server engineID remote XX.XX.XX.XX XXXXXXXXXXXXX
    snmp-server group foobar v3 priv
    snmp-server user foo foobar remote XX.XX.XX.XX auth sha XXXXXXXXXX priv aes 128 XXXXXXXXXXXX
    snmp-server manager enable
    snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
    snmp-server enable traps config
    snmp-server enable traps mac-notification change move threshold
    snmp-server enable traps errdisable
    snmp-server host XX.XX.XX.XX informs version 3 priv foo vlancreate vlandelete port-security envmon power-ethernet config syslog mac-notification vlan-membership errdisable snmp
    ...not sure if the traps lines are even needed.  I made sure to enter the snmp user after the remote engineid.
    Anyway, problem number 1 is that with this configuration I always get no attempts to send informs:
    SNMP Manager-role output packets
        0 Get-request PDUs
        0 Get-next PDUs
        0 Get-bulk PDUs
        0 Set-request PDUs
        0 Inform-request PDUs
        0 Timeouts
        0 Drops
    SNMP Manager-role input packets
        0 Inform request PDUs
        0 Trap PDUs
        0 Response PDUs
        0 Responses with errors
    SNMP informs: enabled
        Informs in flight 0/25 (current/max)
        Logging to XX.XX.XX.XX
            0 sent, 0 in-flight, 0 retries, 0 failed, 0 dropped
    SNMP agent enabled
    Problem number 2 is that whenever I reboot the switch, the remote user definitions disappear.  This happens on two different platforms/IOS versions (3560 12.2(55)SE5 and 2960 15.0(2)SE4) otherwise I'd chalk it up to a regression.  It also happens no matter how much I try to downgrade the auth/priv level -- even to v2c user definitions.  Before the reboot the users are listed as stored in nonvolatile, just like all the local users.
    Can anyone spot any missing components from this config?  Has anyone else seen the lost snmp user entries behavior?

    Yay... finally figured out a workaround for this one.  If you add a local snmp user with the same name and parameters as the remote SNMP user, then everything suddenly works.  A clue if you are having this problem is that when you list snmp users after adding the remote user, it does not show a Group-name for the user.  After adding the local user, it shows a Group-name, informs get sent (using the remote user/engineID no less!) and the switch remembers both users after a reboot.
    So the correction to the above configuration is:
    snmp-server engineID remote XX.XX.XX.XX XXXXXXXXXXXXX
    snmp-server group foobar v3 priv
    snmp-server user foo foobar remote XX.XX.XX.XX auth sha XXXXXXXXXX priv aes 128 XXXXXXXXXXXX
    snmp-server user foo foobar auth sha XXXXXXXXXXX priv aes 128 XXXXXXXXXXXXX
    snmp-server manager enable
    snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
    snmp-server enable traps config
    snmp-server enable traps mac-notification change move threshold
    snmp-server enable traps errdisable
    snmp-server  host XX.XX.XX.XX informs version 3 priv foo vlancreate vlandelete  port-security envmon power-ethernet config syslog mac-notification  vlan-membership errdisable snmp
    Probably more people haven't noticed this problem because they configure the local user first before they realize they need to configure a remote user after consulting the docs, and do not delete the local user.

  • 2008 R2 Server Crashes when remoting a user

    When we remote a user on our 2008 R2 (Enterprise W/SP1) server it causes the server to crash, not just an application.

    Hi,
    Thank you for posting in Windows Server Forum.
    Please try following Hotfix to verify the result.
    Applications or services that start multiple Remote Desktop Services sessions crash in Windows 7 or in Windows Server 2008 R2
    http://support.microsoft.com/kb/2617687
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    TechNet Community Support

  • My remote Desktop Users service is disabled

    Dear all,
    i need your help i have a windows server 2008 and when i restart i get my "allow users remote desktop" disabled and when i change it and then restart i get it disabled again i suspected there is a GPO that is doing that but when i run the gpresult i did
    not get any GPO changing the local group policy then i suspected that there is a start up script that is doing changes to the registry but still not
    i really what to know whats making this policy disabled
    thank you  

    Hi,
    Please try to use rsop.msc to see the following policy setting configured correctly:
    For details:
    Allow users to connect remotely using remote desktop Services
    ===========================================
    1.  Computer Configuration ->Policies ->Administrative Templates ->Windows Components ->remote desktop Services ->remote desktop Session Host ->Connections ->Allow users to connect remotely using Remote Desktop Services
    Restrict Group
    ==========
    1. Computer Configuration -> Policies -> Windows Settings -> Security Settings
    2. Right-click Restricted Groups, and then click Add Group.
    3. Click Browse, add Remote Desktop Users, click Ok.
    4. Add the members  what you want.
    Allow log on through Terminal Services(RDS on DC)
    ==========================
    Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> Allow log on through Terminal Services
    Hope this helps!
    Best Regards
    Elytis Cheng
    Please remember to click “Mark as Answer” on the post that
    Elytis Cheng
    TechNet Community Support

  • Remote Target User?

    Hi,
    Szenario:
    Server A: 10gDB with OWB10gR2 -Repos
    Server B: 10gDB with the target-schema "DWH" (without OWB)
    how can i create a remote target user "DWH" (B) in the OWB-Repos on A?
    (referencing to the "Remote Server Scenario" in the OWB Architektur dokumentation)
    If i try to create a new target-user via Repos Assistent or Design-Security i´m always in the context of the A
    Thanks
    jwehner

    Hi,
    target users are added to the runtime repository only. Since there is no repository on B, there is no need to define target users on B.
    If the repository on A only serves as a design repository, there is no need for target users either.
    If you had a runtime repository on B, you would have to add the target users there. In this case, you would be able to use the OWB runtime infrastructure to execute PL/SQL Mappings, for example.
    You probably have your reasons for not having a runtime repository on B, I guess.
    Regards,
    Carsten.

Maybe you are looking for