Retrieving Username of Windows login of a remote machine

I want to implement Zero Sign On in my application,for that my server needs to retrieve the Windows login information of a client machine whenever a client machine is trying to access a particular url.
System.getProperty("user.name") returns Username of server machine.Can anyone help me telling how can i retrieve windows Username of a client machine?

If you are looking to install this application a specific set of Intranet the below solution should help you without implementing things like Signed Applets or an ActiveX component.
[http://jcifs.samba.org/src/docs/ntlmhttpauth.html]
[http://kb.adobe.com/selfservice/viewContent.do?externalId=5134e564]
[http://roneiv.wordpress.com/tag/sso/]
now,if the application is to be bounded for different set of networks(domains).Usage of solutions like Signed Applets or ActiveX components to transfer information to the server would be appropriate.
REGARDS,
RaHuL

Similar Messages

  • ERROR: Could not retrieve a valid windows identity

    When I try to create PowerView reports from BISM connection file, I get error:
    <MoreInformation>
    <Source>Microsoft.ReportingServices.ProcessingCore</Source>
    <Message msrs:ErrorCode="rsErrorOpeningConnection" msrs:HelpLink="http://go.microsoft.com/fwlink/?LinkId=20476&amp;EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&amp;EvtID=rsErrorOpeningConnection&amp;ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&amp;ProdVer=11.0.3000.0"
    xmlns:msrs="http://www.microsoft.com/sql/reportingservices">Cannot create a connection to data source 'TemporaryDataSource'.</Message>
    <MoreInformation>
    <Source>Microsoft.AnalysisServices.AdomdClient</Source>
    <Message/>
    <MoreInformation>
    <Source>Microsoft.SharePoint</Source>
    <Message>Could not retrieve a valid Windows identity.</Message>
    <MoreInformation>
    <Source>mscorlib</Source>
    <Message>WTS0003: The caller is not authorized to access the service.</Message>
    </MoreInformation>
    </MoreInformation>
    </MoreInformation>
    </MoreInformation>
    From SharePoint logs: I get following exception details:
    01/02/2013 11:00:34.17            w3wp.exe (0x0828)        0x2AEC SharePoint Foundation  Claims Authentication               
    bz7l        Medium              
    SPSecurityContext: Could not retrieve a valid windows identity for username 'DOMAIN\user' with UPN 'user@domain'. UPN is required when Kerberos
    constrained delegation is used. Exception: System.ServiceModel.EndpointNotFoundException: The message could not be dispatched because the service at the endpoint address 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' is unavailable for the
    protocol of the address.    Server stack trace:      at System.ServiceModel.Channels.ConnectionUpgradeHelper.DecodeFramingFault(ClientFramingDecoder decoder, IConnection connection, Uri via, String contentType, TimeoutHelper&
    timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection
    connection, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan
    timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan
    timeout)     at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)     at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)    
    at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage
    methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
    reqMsg, IMessage retMsg)     at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String
    upn, Int32 pid)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)     at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity().               
    a1bef09b-025a-208e-cd5e-4ef6678b6d0d
    Any help on how to get this resolved would be greatly appreciated.

    Hi GuYuming
    I have already read the mentioned blog. Code mentioned there gives me the following output. 
    I have already verified that the c2WTS service is running and it's dependency 'Cryptographic services' is also running.
    Where is the root cause? How can I resolve this?
    Output of the code on the mentioned blog:
    Testing Service c2WTS
     +- Service c2WTS found
     +- Service c2WTS is running
     +- Path of service: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe
     +- Config File: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe.config
     +- Service Logon: SYSTEM\NT AUTHORITY
    ----- start of config file ----
    <?xml version="1.0"?>
    <configuration>
      <configSections>
        <section name="windowsTokenService" type="Microsoft.IdentityModel.WindowsTokenService.Configuration.WindowsTokenServiceSection, Microsoft.IdentityModel.WindowsTokenService, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
    />
      </configSections>
      <startup>
        <supportedRuntime version="v4.0" />
        <supportedRuntime version="v2.0.50727" />
      </startup>
      <windowsTokenService>
        <!--
            By default no callers are allowed to use the Windows Identity Foundation Claims To NT Token Service.
            Add the identities you wish to allow below.
          -->
        <allowedCallers>
          <clear />
          <add value="WSS_WPG" />
        </allowedCallers>
      </windowsTokenService>
    </configuration>
    -----  end of config file  ----
    Retrieving security groups/users allowed to use the service from config file
     +- WSS_WPG
    Trying to login .........
    Using current Windows Credentials
    ***** c2WTS could not provide a valid Windows Token. Reason: WTS0003: The caller is not authorized to access the service.
    Server stack trace: 
       at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
       at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
       at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
       at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
       at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
    Exception rethrown at [0]: 
       at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
       at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
       at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String upn, Int32 pid)
       at Microsoft.IdentityModel.WindowsTokenService.S4UClient.<>c__DisplayClass1.<UpnLogon>b__0(IS4UService_dup channel)
       at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)
       at c2WTSTest.Form1.button2_Click(Object sender, EventArgs e)
    Now Verifying if user DOMAIN/monish has rights on c2WTS
     +- User  DOMAIN/monish has no access to the service
    *** Analysis Complete ***
    Monish Gupta

  • AnyConnect pre Windows login connects and disconnects for some users

    Hi,
    I have Cisco VPN AnyConnect (version 3.1.0310) clients with a connectivity issue which manifests as follows:
    A user boots their Windows 7 SP1 laptop up.
    Before Windows login, the user clicks "switch user" and enters their Cisco AnyConnect credentials (this connects OK).
    Once the VPN tunnel is established a user logs into Windows.
    At this point, 1 of 2 things happen:
    1. Most users VPN connection stays connected and user GPO processing\logins work as normal
    2. For a minority of users, the VPN connection disconnects and then reconnects. The VPN disconnect and reconnect causes connectivity issues with mapped drives and Outlook (most likely due to GPO processing not applying as the VPN tunnel wasn't established at the required time).
    There are no known commanalities between problematic users - all users are in the same OU and laptops are in the same OU, so they should be getting the same AD settings. The same user can login 14 times OK, but may experience this issue on the 15th occasion.
    Within the profile xml file (stored in c:\program data\) the key "AutoConnectStart" is set to false for user controllable and default value. The XML policy settings are being applied correctly (we've checked Event ID 3010 within the Cisco AnyConnect Windows logs).
    What we have noticed from using the back end Cisco monitoring client is that users who experience connection issues, connect pre windows login OK, but once they're logged into Windows the Cisco VPN AnyConnects seems to try and re-connect, which causes the current VPN tunnel to disconnect and re-connect. This disconnect and re-connect for users seems to cause issues with logon and GPO processing.
    So far, the only rock solid way we've found of stopping this disconnect and re-connect behaviour is by configuring a system deny permission on registry key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run". This key contains an entry for Cisco AnyConnect VPN. Unfortunately setting a deny on the individual node value isn't possible and if the key is deleted or modified the system re-creates it. I'd rather avoid setting a system deny on the key for all users.
    Any advice on how troubleshoot and diagnose this problem is appreciated.
    Thanks

    I've attached some log files in case someone is particularly keen eyed at spotting issues (all data is anonymized)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58124
    10.5.128.21
    8080
    Built inbound TCP connection 123678229 for outside:172.16.12.17/58124 (172.16.12.17/58124)(LOCAL\jpk789) to inside:10.5.128.21/8080 (10.5.128.21/8080)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58122
    10.5.140.210
    443
    Teardown TCP connection 123678214 for outside:172.16.12.17/58122(LOCAL\jpk789) to inside:10.5.140.210/443 duration 0:00:00 bytes 11971 TCP Reset-O
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    51368
    10.5.141.155
    53
    Teardown UDP connection 123678191 for outside:172.16.12.17/51368(LOCAL\jpk789) to inside:10.5.141.155/53 duration 0:00:00 bytes 110
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58123
    10.5.12.182
    88
    Built inbound TCP connection 123678217 for outside:172.16.12.17/58123 (172.16.12.17/58123)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    62455
    10.5.141.155
    53
    Teardown UDP connection 123678189 for outside:172.16.12.17/62455(LOCAL\jpk789) to inside:10.5.141.155/53 duration 0:00:00 bytes 430
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58122
    10.5.140.210
    443
    Built inbound TCP connection 123678214 for outside:172.16.12.17/58122 (172.16.12.17/58122)(LOCAL\jpk789) to inside:10.5.140.210/443 (10.5.140.210/443)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    56197
    10.5.141.155
    53
    Built inbound UDP connection 123678212 for outside:172.16.12.17/56197 (172.16.12.17/56197)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58121
    10.5.12.179
    389
    Built inbound TCP connection 123678196 for outside:172.16.12.17/58121 (172.16.12.17/58121)(LOCAL\jpk789) to inside:10.5.12.179/389 (10.5.12.179/389)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    58120
    10.5.12.199
    80
    Built inbound TCP connection 123678195 for outside:172.16.12.17/58120 (172.16.12.17/58120)(LOCAL\jpk789) to inside:10.5.12.199/80 (10.5.12.199/80)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    51368
    10.5.141.155
    53
    Built inbound UDP connection 123678191 for outside:172.16.12.17/51368 (172.16.12.17/51368)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    62458
    10.5.12.182
    389
    Built inbound UDP connection 123678190 for outside:172.16.12.17/62458 (172.16.12.17/62458)(LOCAL\jpk789) to inside:10.5.12.182/389 (10.5.12.182/389)
    6
    Oct 30 2013
    10:19:31
    172.16.12.17
    62455
    10.5.141.155
    53
    Built inbound UDP connection 123678189 for outside:172.16.12.17/62455 (172.16.12.17/62455)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:19:30
    IPSEC: An inbound remote access SA (SPI= 0x67ED9B28) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    6
    Oct 30 2013
    10:19:30
    IPSEC: An outbound remote access SA (SPI= 0x9C00507E) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    6
    Oct 30 2013
    10:19:30
    Group User IP <75.12.34.56> AnyConnect session resumed connection from IP <75.12.34.56>.
    5
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 SA UP. Reason: New Connection Established
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x7041 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x7040 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703f could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703e could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703d could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703c could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:19:30
    Local:80.21.182.245:4500 Remote:75.12.34.56:62457 Username:jpk789 Warning Configuration Payload request for attribute 0x703b could not be processed. Error: Unknown/Unsupported Attribute
    6
    Oct 30 2013
    10:19:18
    172.16.12.17
    64287
    10.5.12.182
    445
    Teardown TCP connection 123673186 for outside:172.16.12.17/64287(LOCAL\jpk789) to inside:10.5.12.182/445 duration 0:02:01 bytes 14605 Tunnel has been torn down
    6
    Oct 30 2013
    10:19:17
    172.16.12.17
    64278
    10.5.141.144
    445
    Teardown TCP connection 123672510 for outside:172.16.12.17/64278(LOCAL\jpk789) to inside:10.5.141.144/445 duration 0:02:15 bytes 9237 Tunnel has been torn down
    6
    Oct 30 2013
    10:19:14
    172.16.12.17
    64273
    10.5.140.231
    445
    Teardown TCP connection 123672368 for outside:172.16.12.17/64273(LOCAL\jpk789) to inside:10.5.140.231/445 duration 0:02:16 bytes 7297 Tunnel has been torn down
    6
    Oct 30 2013
    10:19:04
    172.16.12.17
    54449
    10.5.141.155
    389
    Teardown UDP connection 123672541 for outside:172.16.12.17/54449(LOCAL\jpk789) to inside:10.5.141.155/389 duration 0:02:01 bytes 366
    6
    Oct 30 2013
    10:19:04
    172.16.12.17
    137
    10.5.141.155
    137
    Teardown UDP connection 123672421 for outside:172.16.12.17/137(LOCAL\jpk789) to inside:10.5.141.155/137 duration 0:02:04 bytes 486
    6
    Oct 30 2013
    10:19:00
    172.16.12.17
    138
    10.5.141.155
    138
    Teardown UDP connection 123672424 for outside:172.16.12.17/138(LOCAL\jpk789) to inside:10.5.141.155/138 duration 0:02:01 bytes 177
    6
    Oct 30 2013
    10:18:58
    172.16.12.17
    63666
    10.5.141.155
    389
    Teardown UDP connection 123672316 for outside:172.16.12.17/63666(LOCAL\jpk789) to inside:10.5.141.155/389 duration 0:02:01 bytes 366
    6
    Oct 30 2013
    10:18:58
    172.16.12.17
    53105
    10.5.141.155
    389
    Teardown UDP connection 123672300 for outside:172.16.12.17/53105(LOCAL\jpk789) to inside:10.5.141.155/389 duration 0:02:01 bytes 366
    6
    Oct 30 2013
    10:18:47
    172.16.12.17
    61715
    10.5.12.182
    389
    Teardown UDP connection 123671945 for outside:172.16.12.17/61715(LOCAL\jpk789) to inside:10.5.12.182/389 duration 0:02:01 bytes 312
    6
    Oct 30 2013
    10:18:43
    172.16.12.17
    54262
    10.5.12.179
    389
    Teardown UDP connection 123671801 for outside:172.16.12.17/54262(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 355
    6
    Oct 30 2013
    10:18:42
    172.16.12.17
    57911
    10.5.141.156
    389
    Teardown UDP connection 123671777 for outside:172.16.12.17/57911(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:01 bytes 365
    6
    Oct 30 2013
    10:18:40
    172.16.12.17
    123
    10.5.12.182
    123
    Teardown UDP connection 123671670 for outside:172.16.12.17/123(LOCAL\jpk789) to inside:10.5.12.182/123 duration 0:02:01 bytes 136
    6
    Oct 30 2013
    10:18:40
    172.16.12.17
    58107
    10.5.12.179
    389
    Teardown UDP connection 123671639 for outside:172.16.12.17/58107(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:40
    172.16.12.17
    58825
    10.5.12.179
    389
    Teardown UDP connection 123671633 for outside:172.16.12.17/58825(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:02 bytes 355
    6
    Oct 30 2013
    10:18:39
    172.16.12.17
    60424
    10.5.141.156
    389
    Teardown UDP connection 123671611 for outside:172.16.12.17/60424(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:01 bytes 365
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    56635
    10.5.141.156
    389
    Teardown UDP connection 123671566 for outside:172.16.12.17/56635(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:01 bytes 365
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    61204
    10.5.12.179
    389
    Teardown UDP connection 123671558 for outside:172.16.12.17/61204(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 355
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    50615
    10.5.12.179
    389
    Teardown UDP connection 123671545 for outside:172.16.12.17/50615(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 355
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    57940
    10.5.141.154
    389
    Teardown UDP connection 123671537 for outside:172.16.12.17/57940(LOCAL\jpk789) to inside:10.5.141.154/389 duration 0:02:02 bytes 313
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    57939
    10.5.141.156
    389
    Teardown UDP connection 123671536 for outside:172.16.12.17/57939(LOCAL\jpk789) to inside:10.5.141.156/389 duration 0:02:02 bytes 366
    6
    Oct 30 2013
    10:18:38
    172.16.12.17
    64495
    10.5.12.182
    389
    Teardown UDP connection 123671532 for outside:172.16.12.17/64495(LOCAL\jpk789) to inside:10.5.12.182/389 duration 0:02:02 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    62965
    10.5.12.182
    389
    Teardown UDP connection 123671521 for outside:172.16.12.17/62965(LOCAL\jpk789) to inside:10.5.12.182/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    54994
    10.5.12.179
    389
    Teardown UDP connection 123671514 for outside:172.16.12.17/54994(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    54993
    10.5.12.179
    389
    Teardown UDP connection 123671513 for outside:172.16.12.17/54993(LOCAL\jpk789) to inside:10.5.12.179/389 duration 0:02:01 bytes 356
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    63390
    10.34.140.104
    389
    Teardown UDP connection 123671483 for outside:172.16.12.17/63390(LOCAL\jpk789) to inside:10.34.140.104/389 duration 0:02:01 bytes 385
    6
    Oct 30 2013
    10:18:37
    172.16.12.17
    63389
    10.33.140.104
    389
    Teardown UDP connection 123671482 for outside:172.16.12.17/63389(LOCAL\jpk789) to inside:10.33.140.104/389 duration 0:02:01 bytes 384
    6
    Oct 30 2013
    10:18:10
    IPSEC: An inbound remote access SA (SPI= 0x5650EE30) between 75.12.34.56 and 80.21.182.245 (user= jpk789) has been deleted.
    6
    Oct 30 2013
    10:18:10
    IPSEC: An outbound remote access SA (SPI= 0x42DBDD66) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been deleted.
    6
    Oct 30 2013
    10:18:10
    Group User IP <75.12.34.56> AnyConnect session lost connection. Waiting to resume.
    5
    Oct 30 2013
    10:18:10
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 SA DOWN. Reason: peer lost
    6
    Oct 30 2013
    10:17:42
    172.16.12.17
    64250
    10.5.141.186
    445
    Teardown TCP connection 123671908 for outside:172.16.12.17/64250(LOCAL\jpk789) to inside:10.5.141.186/445 duration 0:00:57 bytes 454851 TCP Reset-I
    6
    Oct 30 2013
    10:17:20
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123673268 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:17:19
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123673244 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:17:18
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123673218 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63060
    10.5.141.155
    53
    Built inbound UDP connection 123671551 for outside:172.16.12.17/63060 (172.16.12.17/63060)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63010
    10.5.12.182
    88
    Built inbound TCP connection 123671549 for outside:172.16.12.17/63010 (172.16.12.17/63010)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63009
    10.5.12.182
    88
    Built inbound TCP connection 123671548 for outside:172.16.12.17/63009 (172.16.12.17/63009)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63008
    10.5.141.156
    389
    Built inbound TCP connection 123671546 for outside:172.16.12.17/63008 (172.16.12.17/63008)(LOCAL\jpk789) to inside:10.5.141.156/389 (10.5.141.156/389)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    50615
    10.5.12.179
    389
    Built inbound UDP connection 123671545 for outside:172.16.12.17/50615 (172.16.12.17/50615)(LOCAL\jpk789) to inside:10.5.12.179/389 (10.5.12.179/389)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    63007
    10.5.12.182
    88
    Built inbound TCP connection 123671544 for outside:172.16.12.17/63007 (172.16.12.17/63007)(LOCAL\jpk789) to inside:10.5.12.182/88 (10.5.12.182/88)
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    55425
    10.5.141.155
    53
    Teardown UDP connection 123671487 for outside:172.16.12.17/55425(LOCAL\jpk789) to inside:10.5.141.155/53 duration 0:00:00 bytes 164
    6
    Oct 30 2013
    10:16:36
    172.16.12.17
    50614
    10.5.141.155
    53
    Built inbound UDP connection 123671543 for outside:172.16.12.17/50614 (172.16.12.17/50614)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    56263
    10.5.141.156
    53
    Built inbound UDP connection 123671461 for outside:172.16.12.17/56263 (172.16.12.17/56263)(LOCAL\jpk789) to inside:10.5.141.156/53 (10.5.141.156/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    60708
    10.5.141.155
    53
    Built inbound UDP connection 123671460 for outside:172.16.12.17/60708 (172.16.12.17/60708)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    56982
    10.5.141.156
    53
    Built inbound UDP connection 123671459 for outside:172.16.12.17/56982 (172.16.12.17/56982)(LOCAL\jpk789) to inside:10.5.141.156/53 (10.5.141.156/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    64548
    10.5.141.155
    53
    Built inbound UDP connection 123671458 for outside:172.16.12.17/64548 (172.16.12.17/64548)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    60827
    10.5.141.156
    53
    Built inbound UDP connection 123671457 for outside:172.16.12.17/60827 (172.16.12.17/60827)(LOCAL\jpk789) to inside:10.5.141.156/53 (10.5.141.156/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    64207
    10.5.141.155
    53
    Built inbound UDP connection 123671453 for outside:172.16.12.17/64207 (172.16.12.17/64207)(LOCAL\jpk789) to inside:10.5.141.155/53 (10.5.141.155/53)
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123671443 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123671442 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:35
    172.16.12.17
    137
    172.16.13.255
    137
    Teardown UDP connection 123671441 for outside:172.16.12.17/137(LOCAL\jpk789) to outside:172.16.13.255/137 duration 0:00:00 bytes 0
    6
    Oct 30 2013
    10:16:34
    IPSEC: An inbound remote access SA (SPI= 0x5650EE30) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    6
    Oct 30 2013
    10:16:34
    IPSEC: An outbound remote access SA (SPI= 0x42DBDD66) between 80.21.182.245 and 75.12.34.56 (user= jpk789) has been created.
    5
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 SA UP. Reason: New Connection Established
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x7041 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x7040 could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703f could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703e could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703d could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703c could not be processed. Error: Unknown/Unsupported Attribute
    4
    Oct 30 2013
    10:16:34
    Local:80.21.182.245:4500 Remote:75.12.34.56:57103 Username:jpk789 Warning Configuration Payload request for attribute 0x703b could not be processed. Error: Unknown/Unsupported Attribute
    6
    Oct 30 2013
    10:16:34
    Group User IP <75.12.34.56> AnyConnect parent session started.
    6
    Oct 30 2013
    10:16:34
    DAP: User jpk789, Addr 75.12.34.56, Connection AnyConnect: The following DAP records were selected for this connection: ContosoPolicy
    6
    Oct 30 2013
    10:16:34
    AAA transaction status ACCEPT : user = jpk789
    6
    Oct 30 2013
    10:16:34
    AAA retrieved default group policy (DfltGrpPolicy) for user = jpk789
    6
    Oct 30 2013
    10:16:34
    AAA retrieved user specific group policy (useGroup1s.Grp) for user = jpk789
    6
    Oct 30 2013
    10:16:34
    AAA group policy for user jpk789 is being set to useGroup1s.Grp;
    6
    Oct 30 2013
    10:16:34
    AAA user authentication Successful : server = 192.168.7.4 : user = jpk789

  • Claims debacle (error) with Term Store: "Could not retrieve a valid windows identity" for all sites in a particular web app.

    When I pull up the Term store in CA or any MySite collection, it works.
    When I do so in any other site collection (HNSCs, incidentally), It doesn't return any term stores.
    My ULS log immediately before and after the "/_vti_bin/taxonomyinternalservice.json/CheckPermission" POST on termstore .aspx triggers the WCF call:
    Claims Authentication af30y Verbose Claims Windows Sign-In: Successfully signed-in the the user 'contoso\domainUser' for request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
    Claims Authentication af30q Verbose Updating header 'LOGON_USER' with value '0#.w|contoso\domainUser' for the request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
    Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|contoso\domainUser, ClaimsCount=77
    Logging Correlation Data xmnv Medium Site=/
    Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://CONTOSOFE3:32843/00e6d55691824965ac223f1d1cfae6d2/MetadataWebService.svc' Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:590e916c-c89a-4f89-9819-a82c97fabcaa'
    Claims Authentication bz7l Medium SPSecurityContext: Could not retrieve a valid windows identity for username 'contoso\domainUser' with UPN '[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access the service. at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity) at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid) at SyncInvokeUpnLogon(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..
    Claims Authentication g220 Unexpected No windows identity for contoso\domainUser.
    The "The caller is not authorized to access the service." message seems pertinent.
    Both web apps are using only NTLM auth.
    The url for both web apps ends in the same contoso.com domain. 
    I get the same errors no matter what account I use, including the install account.
    Things I've tried:
    Deleting and building a new HNSC root web app and site. Error happens in all sites in all web apps except the PBSC hosting MySites.
    Giving the root site app pool identity full control of the metadata service app (even though the MySite identitiy doesn't have it)
    Giving the root site app pool identity full permissions on the metadata service app.
    Comparing database and web app config permissions between dev (where everything works perfectly) and prod (where it does not).
    Made sure IIS auth settings on both sites are identical
    Both sites are using the same SSL certificate (though the call to the web service appears to be http)
    Reprovisioned the metadata service app with a new database and new app pool identity.
    Made sure C2WT is running. Tried it with the service stopped as well.
    Web.configs are identical between working and non-working apps.
    I'm stumped but still Googling. I'm hoping to avoid having to call Micrososft. Any help would be appreciated!
    UPDATE:
    Interestingly, when I restored the web application from backup (via CA), I ended up with 3 identical "Windows Authentication" authentication providers assigned to the problem web app. Since there was more than one, I was directed to the provider-chooser
    page when visiting the site. Upon choosing 1 of the 3, I was authenticated, and *poof*, no more authentication errors and the term store loaded term sets as expected.
    Of course, 3 providers was not an ideal state, so I grabbed the one that worked (#1) via get-spauthenticationprovider, and assigned it to the web app via set-spwebapplication, and my problem returned.
    I am currently updating the farm to SP1 from June 2013 CU. Fingers crossed.
    Update:
    The update to SP1 went smoothly, but did not resolve the issue. Also related (I believe) are the random authentication errors when trying to upload images to some libraries, and 401-errors on the accessdenied.aspx page itself.
    Update:
    The problem is resolved, seemingly after making 4 changes. I'm trying to narrow down which change was the cure, if any:
    I installed SP1 on all 6 servers, rebooted and upgraded. This appeared to have no effect.
    Removed an old login from SQL that no longer existed in AD because of this ULS error:
    System.Runtime.InteropServices.COMException: The user or group contoso\svc_xxxxxxxxx' is unknown., StackTrace:    at Microsoft.SharePoint.Utilities.SPUtility.GetFullNameFromLoginEx(String loginName, Boolean&
    bIsDL)
    This login was the identity of the application pool that used to run the web app in question.
    This login was the schema owner of a schema named after itself on every SharePoint database so I changed the schema owner to dbo but left the schema attached.
    The problem may have surfaced initially when the app pool identity was changed in CA, but went unnoticed?
    Note that the web app had been deleted and recreated many times with a new identity and pool to no avail, but the URL remained the same throughout each attempted fix. Relevant?
    Grasping at straws, I changed the app pool identity for this web app to the same one that runs the MySite web app pool as per this only slightly related problem: http://www.planetsharepoint.org/m/preview.php?id=372&rid=34764&author=Vlad+Catrinescu
    I changed the authentication method from NTLM to Negotiate.
    I am rolling back #3 and #4 to see if the issue resurfaces.
    Update:
    It doesn't appear to have been the NTLM/Negotiate setting. Web app is currently set to NTLM and all is well. No strange accessdenies, and term Store is still manageable from all sites.
    Update: Sorry for the delay. I am administering 6 farms these days. Will update as soon as the final phase of rollbacks happens.
    I think I can. I think I can.

    maybe that web app was accidentally created with classic auth?
    here's an example of how to create claims based, with classic, and then "doing 2013" claims
    #Create the example web application, as mentioned above, either with gui, and pick later, or
    New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
    5050
    -databaseName$contentDB-securesocketslayer
    #If doing for 2013
    New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
    5050
    -AuthenticationProvider(new-spauthenticationprovider)
    -databaseName$contentDB-secureSocketsLayer

  • Windows Login Name and Password

    Hi,
    I am developing an application, which requires the windows login name for greeting and password for validating and granting privileges.
    Could someone please give me the pseudo code for getting the windows login name and password.
    Thanks,
    Mitra.

    I'll try to validate some other parameter instead of
    password. The password will be stored but it will be
    encrypted.Bad Thing (TM). Never store passwords.
    When we are able to get the UserName using
    JavaScript, why can't we get it using Java.I told you how to get it. And what does Javascript have to do with anything? Just because you can drive through a very narrow alley with your bicycle, you should be able to do the same with a truck? Javascript and Java are not related in any way.

  • Login into a remote host and test one ip whether its pinging or not.

    Hello Friends
    I need to login into a remote host. From that remote host i need to test one ip that whether its is pinging or not.
    For that i have written one code snippet its working fine when that ip is pinging.
    But it is hanging when that ip is not pinging properly.
    I could not read the output while not pinging.
    For making telnet connection to the remote host, i am using jcsh.jar
    Any body know the solution for that please help me.see below my code.
    /* -*-mode:java; c-basic-offset:2; indent-tabs-mode:nil -*- */
    import com.jcraft.jsch.*;
    import java.awt.*;
    import javax.swing.*;
    import java.io.*;
    public class Exec{
      public static void main(String[] arg){
        try{
          JSch jsch=new JSch(); 
          String temp = "";
          String host=null;
          if(arg.length>0){
            host=arg[0];
          else{
            host=JOptionPane.showInputDialog("Enter username@hostname",System.getProperty("user.name")+"@localhost");
          String user=host.substring(0, host.indexOf('@'));
          host=host.substring(host.indexOf('@')+1);
          Session session=jsch.getSession(user, host, 22);
          // username and password will be given via UserInfo interface.
          UserInfo ui=new MyUserInfo();
          session.setUserInfo(ui);
          session.connect();
          String command=JOptionPane.showInputDialog("Enter command",
                                                     "ping ");
          Channel channel=session.openChannel("exec");
          ((ChannelExec)channel).setCommand(command);
          channel.setInputStream(null);
          ((ChannelExec)channel).setErrStream(System.err);
          BufferedWriter stdOut = new BufferedWriter(new OutputStreamWriter(channel.getOutputStream()));
          channel.connect();
          int count = 0;
          int count1 = 0;
          while(true) {
          if((temp = stdInput.readLine()) != null || (temp = stdInput.readLine()).compareTo("") != 0 ) {
               System.out.println("NOT NULL OUTPUT");
               while ((temp = stdInput.readLine()) != null) {
               System.out.println(">"+temp);
                if(temp.indexOf("64 bytes from") == 0) {
                   if(count++ > 4)
                        System.out.println("Ping Okay");
                        channel.disconnect();
                        break;
            try{Thread.sleep(1000);}catch(Exception ee){}
          else
               System.out.println(">"+temp);
               count1++;
               if(count1>10)
                    System.out.println("Ping is not okay.");
                    break;
               else {
                    System.out.println("Trying...");
    //                continue;
               try{Thread.sleep(1000);}catch(Exception ee){}
          if(channel.isClosed()){
              System.out.println("exit-status: "+channel.getExitStatus());
              break;
          channel.disconnect();
          session.disconnect();
        catch(Exception e){
          System.out.println(e);
      public static class MyUserInfo implements UserInfo, UIKeyboardInteractive{
        public String getPassword(){ return passwd; }
        public boolean promptYesNo(String str){
          Object[] options={ "yes", "no" };
          int foo=JOptionPane.showOptionDialog(null,
                 str,
                 "Warning",
                 JOptionPane.DEFAULT_OPTION,
                 JOptionPane.WARNING_MESSAGE,
                 null, options, options[0]);
           return foo==0;
        String passwd;
        JTextField passwordField=(JTextField)new JPasswordField(20);
        public String getPassphrase(){ return null; }
        public boolean promptPassphrase(String message){ return true; }
        public boolean promptPassword(String message){
          Object[] ob={passwordField};
          int result=
            JOptionPane.showConfirmDialog(null, ob, message,
                                          JOptionPane.OK_CANCEL_OPTION);
          if(result==JOptionPane.OK_OPTION){
             passwd=passwordField.getText();
            return true;
          else{
            return false;
        public void showMessage(String message){
          JOptionPane.showMessageDialog(null, message);
        final GridBagConstraints gbc =
          new GridBagConstraints(0,0,1,1,1,1,
                                 GridBagConstraints.NORTHWEST,
                                 GridBagConstraints.NONE,
                                 new Insets(0,0,0,0),0,0);
        private Container panel;
        public String[] promptKeyboardInteractive(String destination,
                                                  String name,
                                                  String instruction,
                                                  String[] prompt,
                                                  boolean[] echo){
          panel = new JPanel();
          panel.setLayout(new GridBagLayout());
          gbc.weightx = 1.0;
          gbc.gridwidth = GridBagConstraints.REMAINDER;
          gbc.gridx = 0;
          panel.add(new JLabel(instruction), gbc);
          gbc.gridy++;
          gbc.gridwidth = GridBagConstraints.RELATIVE;
          JTextField[] texts=new JTextField[prompt.length];
          for(int i=0; i<prompt.length; i++){
            gbc.fill = GridBagConstraints.NONE;
            gbc.gridx = 0;
            gbc.weightx = 1;
            panel.add(new JLabel(prompt),gbc);
    gbc.gridx = 1;
    gbc.fill = GridBagConstraints.HORIZONTAL;
    gbc.weighty = 1;
    if(echo[i]){
    texts[i]=new JTextField(20);
    else{
    texts[i]=new JPasswordField(20);
    panel.add(texts[i], gbc);
    gbc.gridy++;
    if(JOptionPane.showConfirmDialog(null, panel,
    destination+": "+name,
    JOptionPane.OK_CANCEL_OPTION,
    JOptionPane.QUESTION_MESSAGE)
    ==JOptionPane.OK_OPTION){
    String[] response=new String[prompt.length];
    for(int i=0; i<prompt.length; i++){
    response[i]=texts[i].getText();
         return response;
    else{
    return null; // cancel

    Do a Google search for "java ftp client". There are some existing packages that you can use.

  • Could not retrieve a valid windows identity - access is denied

    Background:
    We have a reporting solution based on SQL Server 2012 SP1 running on Server 2008 R2. Users access the solution through SharePoint 2013. We have several hundred users and all is well with the exception of 2 users.
    Problem:
    When these 2 users try and open a SSRS report they receive an error. The entry is the SharePoint log reads:
    SPSecurityContext.WindowsIdentity: Could not retrieve a valid
    windows identity for NTName='domain\username', UPN='[email protected]'.
    UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.Security.SecurityAccessDeniedException: Access is denied.
    Other details (thoughts):
    We are confident that Kerberos and C2WTS are set up and working correctly (we have a couple of hundred users working).
    We suspect it may be Active Directory related but can find nothing that sets the users apart from everyone else.
    Has anyone any suggestions to resolve this?

    Hi Robin,
    If you have a One Way Transitive Trust setup between the domain, where the Windows Services reside, and the other domain where the users reside. Then please refer to the link below and set two-way trusts:
    http://blogs.msdn.com/b/psssql/archive/2012/08/20/sharepoint-adventures-reporting-services-claims-and-one-way-trusts.aspx
    If not, then some users could access Excel Services while others could not, the issue might be caused by credentials. Please refer to the link below:
    http://blogs.msdn.com/b/rodneyviana/archive/2011/07/19/troubleshooting-claims-to-windows-nt-token-service-c2wts-in-sharepoint-2010-may-be-difficult-if-you-don-t-know-where-to-start.aspx
    Please try narrowing down the issue and test if only internal machine works. More information about the error message:
    http://blogs.msdn.com/b/andrasg/archive/2010/05/04/setting-up-sharepoint-2010-excel-services-to-get-external-data.aspx
    Regards,
    Rebecca Tu
    TechNet Community Support

  • How to use current windows login credientials to login other machines

    Is there any way that i might use to RDP the serves using currently windows login credentials automatically ? Currently i am using smartcard for logging windows in the environment.

    Hi,
    After referring your comment, I can understand that you want to use same RDP credential which you are using with smartcard credential. 
    As per my research, here I am sorry to inform you that if you are using Remote Desktop Services with smart card logon, you cannot delegate default and saved credentials. Other than that if you don’t use smartcard then you can able to save credential and can
    enable SSO for terminal server connection.
    More information:
    1.  How to enable Single Sign-On for my Terminal Server connections
    2.  Smart Card Group Policy and Registry Settings
    Hope it helps!
    Thanks,
    Dharmesh

  • How to connect sharepoint online using client object model and authentictae against window login

    Iam developing A console application where in need to connect to sharepoint online and authenticate against window login can u please suggest me the code

    Hi,
    There is couple of helper method to check and validate the SPO credentials in the same solution.
    string userName = GetUserName();
    SecureString pwd = GetPassword();
    /* End Program if no Credentials */
    if (string.IsNullOrEmpty(userName) || (pwd == null))
    return;
    // Open connection to Office365 tenant
    ClientContext cc = new ClientContext(siteUrl);
    cc.AuthenticationMode = ClientAuthenticationMode.Default;
    cc.Credentials = new SharePointOnlineCredentials(userName, pwd);
    if you give incorrect user name or password it will throws an exception in the console.
    Murugesa Pandian.,SharePoint 2010 MCPD | MCTS|Configure

  • Corrupt Windows Login - Whereabouts templates Forms Central

    Hi,
    I have had to have my Windows login re created as had some sort of corruption.
    All of my programme files are still present but all of my saved templates have disappeared.
    Does anyone know a way to retrieve these? Presuming they dont default to a desktop save?
    Also what are the file extensions?
    All of my templates were not quite up to date so i only have old FCDT files
    Thanks in advance

    Hi,
    FCDT file extension is .fcdt, so try to look for them see if that helps.
    Perry

  • Need to Clarify: Reset Windows Login Password can hack to CSS data?

    Dear ThinkPad fans
    Until now, we both know that we can find many ways to pass over and reset Windows Login Screen. So my question is if they can use tools to reset my Windows Login Passwords, can they use reseted pass phrases to discover my CSS data?
    Any can clarify to me? Thank a lot.
    Using: ThinkPad W500 - Windows 7 Ultimate 64 bit.

    Welcome to the community.
    I don't think you'll get much discussion on this topic as any techinical info might be used for nefarious purposes. Anything posted remotely useful for those purposes might also be at risk of moderation per the Community guidelines here:
    http://forums.lenovo.com/t5/Welcome-FAQs/Lenovo-Co​mmunity-Participation-Rules/m-p/1
    Specifically:
     No posts shall include instructions or directions intended to subvert security measures, including passwords, locking mechanisms, fingerprint scans, etc, or to subvert safety measures. Nor shall any posts provide descriptions to the location of, nor direct links to content related to these topics.
    Regards.
    English Community   Deutsche Community   Comunidad en Español   Русскоязычное Сообщество
    Community Resources: Participation Rules • Images in posts • Search (Advanced) • Private Messaging
    PM requests for individual support are not answered. If a post solves your issue, please mark it so.
    X1C3 Helix X220 X301 X200T T61p T60p Y3P • T520 T420 T510 T400 R400 T61 Y2P Y13
    I am not a Lenovo employee.

  • Windows Server 2008R2 running Remote Desktop Services reports printer process does not exist when installing PDF printer

     Windows Server 2008R2 running Remote Desktop Services reports printer process does not exist when installing PDF printer, And when Installing network printers from the domain controller it reports it cannot connect to printer.  I can ping all
    network devices. I can connect to the internet.
    On boot I get a netlogon 5719 error followed by service control manager errors 7023,7001 and a group policy error 1129.
    Clients can connect to the remote application and RDP operates to connect to the server internally and externally.
    The domain controller is another server 2008r2 box. I have scoured the internet but have not found any solutions that work yet.

    Hi,
    After referring to your post, it can be identified that the issue which you are facing is mostly due to some network issue in your environment. Please recheck your network connection issue between computer and domain controller. 
    Can you able to ping with IP address and also with fully qualified name of a domain controller in the users' and computers' domain. If it fails states that name resolution issue with computer and domain controller. Are you using MS DHCP Relay agent then there’s
    available Hotfix for the particular Event ID. Please go through this KB 2459530 to fix the error event ID.
    As per the net logon error 5719 which you are facing states that the client component of Netlogon was unable to locate a DC for the domain it was trying to perform an operation against. Below is one of the reason. If this is being logged on a DC and the event
    refers to the DC's own domain, something might be preventing the client component of Netlogon from starting a network session (to itself or to another DC in the domain). The following event 7001 & 7023 states start & stop operation service. Please
    go through beneath article for more details.
    1.  Event ID 5719 is logged when you start a computer
    2.  Netlogon 5719 and the Disappearing Domain [Controller]
    3.  Event ID 1129 — Microsoft-Windows-GroupPolicy
    Hope it helps!
    Regards.

  • 2 windows logins,  2 ipods - sync specific ipod with userid ?

    I use 2 different userids for my wife and son on our Dell desktop which uses Windows XP. They each have ipods with very different playlists under their userids. The problem is that my wife leaves her ipod connected to the usb port to charge it. If my son signs onto his userid and opens iTunes, it syncs his playlist to her iPod which is plugged in. Is there a way to associate the serial # of the iPod with a specific windows login so that it does not do the sync ?

    Hey marcshap,
    If the iPod is set to autosync to her user ID, then before it can be synced to another user ID logged in, it is likely someone is clicking yes to a prompt about "iPod is linked to another iTunes Library".
    See the section about Automatic mode in this article for more information.
    You also might want to consider Manual mode, see this article
    Hope this helps,
    Generik
    PowerMac G4/Dell Precision WS 370, XP Pro   Mac OS X (10.4.7)  

  • Firefox lost my profile. My husband's profile seems to have overridden my own even on my Windows login.

    Firefox 3.6.3 lost my profile. My husband's profile has overridden mine even on my Windows login. I cannot even log in to sites on my Windows profile because the cookies are gone and the sites refuse to recognize me. I am running Windows Vista.Please help.

    Do the two of you share a vista account? If not, then it should still work if you log in to your account. Firefox keeps profiles separate per windows account.
    If the two of you ''do'' share a Vista account, then go to '''Help > Troubleshooting Information''', and click on '''Open Containing Folder'''. That should open the current profile folder in windows explorer. Move one folder up to see if there are other profile folders in existence. See [[Managing Profiles]]

  • How could I turn off the Command Key to Windows Key mapping in Remote Desktop for Mac 8

    I'd like to be able to turn the Command key->Windows key mapping off.  In this new app, whenever I use the Command key to initiate a Mac-side function, it registers a press of the Windows key within the Remote Desktop session.  Speaking only
    for myself, I use the Command Key for quite a lot of Mac operations, while my need and expectation for a Windows key press is zero.

    I'd like to be able to turn the Command key->Windows key mapping off.  In this new app, whenever I use the Command key to initiate a Mac-side function, it registers a press of the Windows key within the Remote Desktop session.  Speaking
    only for myself, I use the Command Key for quite a lot of Mac operations, while my need and expectation for a Windows key press is zero.
    Agreed. Cannot stop it by disabling the "Windows" key (from within Windows 7). Every time I Cmd-Tab to change apps, the Start Menu pops up,
    and persists, overlaying other app windows. Much more than annoying.
    Also, there is no Clipboard Sharing, apparently. Love typing in long binary strings into the Registry.

Maybe you are looking for