Segmenting Contacts Best Practices

What is the recommended way to segment my database so I can keep a certain group of contacts away from the rest of the automation that's running in my Eloqua instance? This separate segment is going to be a part of an email drip campaign and I don't want them to get mixed into the other email campaigns that I have running for our lead prospecting and newsletters. In addition to keeping these contacts out of other email campaigns I also don't want them syncing to Salesforce. If one of the contacts does convert on another asset on our website then I'd like to update that contact to be in the main segment. My CRM sync feeders shouldn't pick up on these contacts, so I think that part is fine. What I'm wondering about is the best way to segment my database on an ongoing basis. The new contacts for this segment are likely going to be added to Eloqua via an API; I'm still working with my developer on how that is going to work.
- Adam

You have lots of options for segmenting your contacts and preventing various things from happening to them.
You can add these contacts to a shared list, and manage the segment by managing the shared list. This would be an easy and natural way to do it - whenever these contacts are added to the system, either by upload or by the API, just add them to the shared list. Then when you create other campaigns, just exclude this shared list from your segments. To remove them from the shared list if they convert through another offer, you could add a "remove from shared contact list" form processing step to your other forms, so if anyone on the list fills out one of those forms, they are removed.
You could do essentially the same thing by using a custom contact field. The advantage there is that it makes it more obvious who these contacts are (because they're marked on the actual contact record, so you'll be able to see if they are in this segment by just looking at their field values, for example in an exported CSV file). The disadvantage is that it uses one of your contact field allotment.
You could manage it through email group subscription - that is, you could subscribe these contacts to a particular email group, and unsubscribe them from all of the others. That way it doesn't matter if they end up in your other campaigns, they won't get those emails anyway. If they convert through another offer anyway, you could toggle all of their group subscriptions (unsub them from their original group and subscribe them to all the others) in form processing steps. The advantage here is that you don't have to worry about excluding them from campaign segments, as they will be excluded from the emails automatically. However, I think this would be the most trouble to manage and I'm not sure how you would use it to control synch to Salesforce.

Similar Messages

Best Practice for Droid Gmail Contacts with Exchange ActiveSync?

Hi, folks. After going through an Address Book nightmare this past summer, I am attempting to once again get my Contacts straight and clean. I have just started a new job and want to bring my now clean Gmail contacts over to Exchange. The challenge is creating duplicate contacts, then defining a go-forward strategy for creating NEW contacts so that they reside in both Gmail and Exchange without duplication. Right now, my Droid is master and everything is fine. However, once I port those contacts from Gmail onto my laptop, all hell breaks loose... Does Verizon have a Best Practice finally documented for this? This past summer I spoke with no less than 5 different Customer Support reps and got 3 different answers... This is not an uncommon problem...

In parallel to this post, I called Verizon for Technical Support assistance. Seems no progress has been made. My issue this past summer were likely a result of extremely poor quality products from Microsoft, which included Microsoft CRM, Microsoft Lync (new phone system they are touting which is horrible), and Exchange. As a go-forward strategy, I have exported all Gmail contacts to CSV for Outlook and have imported them to Exchange. All looks good. I am turning off phone visibility of Gmail contacts and will create all new contacts in Exchange.

Best practice for getting all Activities for a Contact

Hello,
I am new to the Eloqua API and am wondering what is the best practice for downloading a list of all activities for a given contact.
Thanks

Hi Mike,
For activities in general, Bulk 2.0 Activity Exports will be the best way to go. Docs are here: http://docs.oracle.com/cloud/latest/marketingcs_gs/OMCBB/index.html
But it can be a complex process to wrap your head around if you're new to the Eloqua API. So if you're in a pinch and don't care about the association of those activities to campaigns, and only need to pull activities for a few contacts, you can resort to using REST API calls.
The activity calls are visible (from Firebug or Chrome console) if you open any contact record and navigate to the "Activity Log" tab. If you have it set to all activities, it will fire off a dozen or more calls or you can choose an individual one from the picklist to inspect that call in more detail.
Best regards,
Bojan

What is the Account and Contact workflow or best practice?

I'm just learning the use of the web services. I have written something to upload my customers into accounts using the web services. I need to now include a contact for each account. I'm trying to understand the workflow. It looks like I need to first call the web service to create the account, then call a separate web service to create the contact and include the account's ID with the contact to that they are linked, is this correct?
Is there a place I can go to find the "best practices" for work flows?
Can I automatically create the contact within my call to create the account in the web service?
Thanks,

Probably a poor choice of words. Sorry.
So basically, I have gotten further, but I just noticed related problem.
I'm using the WebServices(WS) 1.0. I insert an account, then, on a separate WS call, I insert my contacts for the account. I include the AccountID, and a user defined key from the Account when creating the Contact.
When I look at my Contact on the CRMOD web page, it shows the appropriate links back to the Account. But when I look at my Account on the CRMOD web page, it shows no Contacts.
So when I say workflow or Best Practice, I was hoping for guidance on how to properly write my code to accomplish all of the necessary steps. As in this is how you insert an account with a contact(s) and it updates the appropriate IDs so that it shows up properly on the CRMOD web pages.
Based on the above, it looks like I need to, as the next step, take the ContactID and update the Account with it so that their is a bi-directional link.
I'm thinking there is a better way in doing this.
Here is my psuedocode:
AccountInsert()
AccountID = NewAcctRec
ContactInsert(NewAcctRec)
ContactID = NewContRec
AccountUpdate(NewContRec)
Thanks,

Best practices for customer segmentation

Hi all
I am looking for the best practices documentation for customer segmentation, but I cannot find it anywhere in the Service Marketplace.
Could anybody please direct me to where the documentation is? Points will be awarded
Thanks
Joaquin

Found it! It is here:
http://help.sap.com/bp_crmv340/CRM_DE/index.htm

Best Practice to save the contacts in the Database

Hi everybody,
I´m looking for some tips about the data in the Database. I would like to know what are the best practices saving a record. For example, I want to save the First Name, Second Name and the Last Name in the DB, How can I save them, I mean, the first letter in Uppercase, or all the record in lowercase.
Ig, Austin Martin or austin martin
What are the best way or best practice to do that??
Can someone tell me? I would appreciate it, thx.
Fabián Carrillo
Siebel CRM Consultant

Hi!
Not quite sure what you're after here. Generally, store the data in the way it's going to be presented - sentence case in the examples you've given.
If you're thinking along the lines of case sensitivity in querying within Siebel, then take a look at the Case Insensitivity Wizard in Siebel Bookshelf:
http://download.oracle.com/docs/cd/E14004_01/books/UPG/UPG_DB_Upg_Util10.html
Regards,
mroshaw

Best-practice for Catalog Views ? :|

Hello community,
A best practice question:
The situtation: I have several product categories (110), several items in those categories (4000) and 300 end-users. I would like to know which is the best practice for segment the catalog. I mean, some users should only see categories 10,20 & 30. Other users only category 80, etc. The problem is how can I implement this ?
My first idea is:
1. Create 110 Procurement Catalogs (1 for every prod.category). Each catalog should contain only its product category.
2. Assign in my Org Model, in a user-level all the "catalogs" that the user should access.
Do you have any idea in order to improve this ?
Saludos desde Mexico,
Diego

Hi,
Your way of doing will work, but you'll get maintenance issues (to many catalogs, and catalog link to maintain for each user).
The other way is to built your views in CCM, and assign these views to the users, either on the roles (PFCG) or on the user (SU01). The problem is that with CCM 1.0 this is limitated, cause you'll have to assign one by one the items to each view (no dynamic or mass processes), it has been enhanced in CCM 2.0.
My advice:
-Challenge your customer about views, and try to limit the number of views, with for example strategic and non strategic
-With CCM 1.0 stick to the procurement catalogs, or implement BADIs to assign items to the views (I experienced it, it works, but is quite difficult), but with a limitated number of views
Good luck.
Vadim

Best practice to move things between various environments in SharePoint 2013

Hi All SharePoint Gurus!! - I was using SP deployment wizard to move Sites/lists/libraries/items etc. using SP Deployment Wizard (spdeploymentwizard.codeplex.com) in SP 2010. We just upgraded to SP 2013. I have few Lists and Libraries that I need to push
into the Staging 2013 and Production 2013 environment from Development 2013 environment. SP Deployment Wizard is throwing error right from the startup. I checked SP 2013 provides granular backups but is restricted to Lists/Library level. Could anybody
let me know if SP Deployment Wizard works for 2013? I love that tool. Also, Whats the best practice to move things between various environments?
Regards,
Khushi
Khushi

Hi Khushi,
I want to let you know that we built
SharePoint Migration tool
MetaVis Migrator that can copy and migrate to and from on-premise or hosted SharePoint sites. The tool can copy entire
sites with sub-site hierarchies, content types, fields, lists, list views, documents, items with attachments, look and feel elements, permissions, groups and other objects - all together on at any level of granularity (for
example, just lists or just list views or selected items). The tool preserves created / modified properties, all metadata and versions. It looks like Windows Explorer with copy/paste and drag-n-drop functions so it is easy to learn. It does not require any
server side installations so you can do everything using your computer or any other server. The tool can copy the complete sites or just individual lists or even selected items. The tool also supports incremental or delta copy based on the previous migrations.
The tool also includes Pre-Migration Analysis that helps to identify customizations.
Free trial is available:
http://www.metavistech.com . Feel free to contact us.
Good luck with your migration project,
Mark

IPhone Best Practices - A Work In Progress

Hello all. I've been tasked with introducing my coworkers into the inner workings of the iPhone, and there are a good number of pointers that I find myself saying over and over again. I'd like to share my best practices with everyone, as well as collect more pointers and opinions from the community at large.
Care and Handling:
First - wash your hands, often. Now I know we all do this often anyway, but I'd like to point out that a healthy amount of hand washing will really go a long way to keep your iPhone screen smudge free. The worst offender, unfortunately, is doughnuts. A small layer of sugar will render that area un-tappable, without any real indication that it has done so. If you are frantically tapping the screen on the iPod button and nothing is happening, clean your phone before you do a hard reset.
Second - Pockets. Keeping your phone in your front pocket is natural and what most of us do. In these summer months, however, keeping your phone in a sweaty front pocket can do a good deal to the dirt level of the screen. If you find yourself cleaning your phone constantly, try a belt clip.
Lastly - Battery Life. Your iPhone's battery life is in your hands, literally. Being aware of your power consumption and planning accordingly is going to be infinitely more important that the battery's native charge-holding ability. This goes especially for the day of purchase - as tempting as it may be to open the box and activate, immediately running around the house watching YouTube, it is best to let the phone charge for 12 hours before use. Charging the phone every night is an absolute must, skipping a day will kill the battery life as your ride the bottom edge the following day. Most of us have access to a USB port while we're at work, best idea will be to plug in your phone when you sit down at your desk.
iPod:
Large Libraries: In the opening weekend, I got many complaints that you cannot manually manage your music. There is a workaround that has made me change the way I work with all of my iPods: the iPhone specific playlist. Simply create a playlist with all of the music you wish to put on your phone and sync that one playlist. This also helps with sync time - you have a start sync and an end sync, not a constant sync all throughout your music management, slowing your computer down in the process.
TV Shows: I watch a lot of MST3K, which I have organized into iTunes as TV shows, split into seasons, the works. The problem that has arisen, therefore, is the one of selective synchronization - you cannot specifically select the TV show you want to sync to the device, instead getting the choices to sync all, unwatched, or latest shows. This is problematic when each show is 700MB large. Here's the work around - select all of the episodes of a specific show and right click, selecting "Mark as Not New", removing all of the little blue dots from the episodes. Select the one, three, or five episodes, and right click them, selecting "Mark as New", then sync the last one, three, or five unwatched episodes. The shows you selected will sync.
iPhoto:
Many users are complaining that iPhoto opens whenever the phone is connected. This is not a preference of the phone, but rather iPhoto. Remember when you first launched iPhoto and it asked you if you wanted to use iPhoto whenever your camera was attached? iPhoto is detecting that your phone is a camera and launching, just as you told it to do.
Mail:
POP accounts - too many unread messages: When first adding a POP account, all of the messages downloaded to the phone arrive as unread. Tapping a message, tapping back, and then tapping the next message can get tedious. Here's the workaround - tap the small down arrow to the upper right hand side of the screen, watching closely to the number next to Inbox. When that number goes down by one, tap the arrow again. If that number hasn't gone down yet, wait a sec, and do not try to tap tap tap tap tap, you'll flood the input queue and crash Mail.
Syncing Mail accounts - All too often people blame the iPhone when their mail does not work. A perfect test is sync you accounts from Mail. If they work in mail, they'll work on the phone, if they are unreliable in Mail, they will also be unreliable on the phone. The Mail client on the iPhone is just as powerful as any other mail client in terms of how it connects to mail servers, if you are having problems you need to check your settings before blaming the hardware. If you prefer to leave your install of Mail.app alone, create a new user account on your Mac, set up all of the accounts you want there, and use iTunes to sync that data to the phone. Make sure to remove that portion of sync from your actual user account's instance of iTunes, however, or it will all sync back.
This message has not been downloaded from the server: This message has snagged a couple users, but upon investigation, these users have filled their iPhones to the absolute brim with music and video. It hasn't been downloaded from the server because there is no space to download to - this also applies to the Camera application dumping to the Home screen. Because there is no space, it can't add any new data. Make some room, then be patient as the mail client gets to that message in cleanup (often a sync or reboot will clear it up).
Safari:
Safari and iPod: Many users have reported iPod stopping in the middle of browsing, often pouting and pursing their lips crying, "This is terrible, I can't even browse the web and listen to music at the same time?". I then check their phone, and lo and behold they have upwards of eight separate pages open at the same time. This device (like every other computer out there) has a finite amount of memory, each page taking up a significant portion depending on how busy the page is. I've routinely gotten through entire albums while browsing through Safari, but I've got one page open in total, and it's usually mostly text. Keep it to one or two pages open and iPod will run forever if you let it.
Web Apps: "This web app is terrible, it keeps booting me to Home!" When was your last reboot? How many other pages are open? In the same vein as Safari and iPod, Web Apps need a good deal of breathing room - give it to them. Close down other pages, stop iPod, or even reboot. Give the app a clean slate and it will perform, every time. iPhoneRemote users will attest to this.
iCal:
Multiple Calendars - Default Calendar: When adding a new appointment, it adds to the default calendar. Appointments can't be shunted to the correct calendar until after sync anyway, so create an "iPhone" calendar and make that the default. Because it's in that calendar, you'll know enough to move it to the appropriate calendar after sync.
Please feel free to add your own best practices, and ask questions, too.

is there any application you can get for the iphone to enlarge text and phone numbers ?
If included with an email or on a website, yes with no application needed.
If you are referring to the text size for your iPhone's contact list, no.
can you insert a phone number from your contact list into a text message ?
No.
i cant seem to figure it out, does the alarm clock work if you turn off the phone at night,
No - powered off with the iPhone means powered off. Any phone that provides for this is not powered off - it is in deep sleep or deep standby mode, which the iPhone does not support. If you don't want your phone ringing or don't want to receive SMS at night but you want to use the iPhone's alarm feature as a wake-up alarm, you can turn on Airplane Mode before going to bed, which will also conserve the battery if your iPhone is not plugged in at night.
can you send a multi media text message ?
No.

Best practices of having a different external/internal domain

In the midst of migrating from a joint Windows/Mac server environment to a completely Apple one. Previously, DNS was hosted on the Windows machine using the companyname.local internal domain. When we set up the Apple server, our Apple contact created a new internal domain, called companyname.ltd. (Supposedly there was some conflict in having a 10.5 server be part of a .local domain - either way it was no worries either way.) Companyname.net is our website.
The goal now is to have the Leopard server run everything - DNS, Kerio mailserver, website, the works. In setting up the DNS on the Mac server this go around, we were advised to just use companyname.net as the internal domain name instead of .ltd or .local or something like that. I happen to like having a separate local domain just for clarity's sake - users know if they are internal/external, but supposedly the Kerio setup would respond much better to just the one companyname.net.
So after all that - what's the best practice of what I should do? Is it ok to have companyname.net be the local domain, even when companyname.net is also the address to our external website? Or should the local domain be something different from that public URL? Or does it really not matter one way or the other? I've been running companyname.net as the local domain for a week or so now with pretty much no issues, I'd just hate to hit a point where something breaks long term because of an initial setup mixup.
Thanks in advance for any advice you all can offer!

Part of this is personal preference, but there are some technical elements to it, too.
You may find that your decision is swayed by the number of mobile users in your network. If your internal machines are all stationary then it doesn't matter if they're configured for companyname.local (or any other internal-only domain), but if you're a mobile user (e.g. on a laptop that you take to/from work/home/clients/starbucks, etc.) then you'll find it a huge PITA to have to reconfigure things like your mail client to get mail from mail.companyname.local when you're in the office but mail.companyname.net when you're outside.
For this reason we opted to use the same domain name internally as well as externally. Everyone can set their mail client (and other apps) to use one hostname and DNS controls where they go - e.g. if they're in the office or on VPN, the office DNS server hands out the internal address of the mail server, but if they're remote they get the public address.
For the most part, users don't know the difference - most of them wouldn't know how to tell anyway - and using one domain name puts the onus on the network administrator to make sure it's correct which IMHO certainly raises the chance of it working correctly when compared to hoping/expecting/praying that all company employees understand your network and know which server name to use when.
Now one of the downsides of this is that you need to maintain two copies of your companyname.net domain zone data - one for the internal view and one for external (but that's not much more effort than maintaining companyname.net and companyname.local) and make sure you edit the right one.
It also means you cannot use Apple's Server Admin to manage your DNS on a single machine - Server Admin only understands one view (either internal or external, but not both at the same time). If you have two DNS servers (one for public use and one for internal-only use) then that's not so much of an issue.
Of course, you can always drive DNS manually by editing the zone files directly.

OS X Server 3.0 new setup -- best practices?

Alright, here's what I'm after.
I'm setting up a completely new OS X Server 3.0 environment. It's on a fairly new (1.5 year old) Mac Mini, plenty of RAM and disk space, etc. This server will ONLY be used interally. It will have a private IP address such as 192.168.1.205 which will be outside of my DHCP server's range (192.168.1.10 to .199) to prevent any IP conflicts.
I am using Apple's Thuderbolt-to-Ethernet dongle for the primary network connection. The built-in NIC will be used strictly for a direct iSCSI connection to a brand new Drobo b800i storage device.
This machine will provide the following services, rougly in order of importance:
1. A Time Machine backup server for about 50 Macs running Maverics.
1a. Those networked Macs will authenticate individually to this computer for the Time Machine service
1b. This Server will get it's directory information from my primary server via LDAP/Open Directory
2. Caching server for the same network of computers
3. Serve a NetInstall image which is used to set up new computers when a new employee arrives
4. Maybe calendaring and contacts service, still considering that as a possibility
Can anyone tell me the recommended "best practices" for setting this up from scratch? I've done it twice so far and have faced problems each time. My most frequent problem, once it's set up and running, is with Time Machine Server. With nearly 100 percent consistency, when I get Time Machine Server set up and running, I can't administer it. After a few days, I'll try to look at it via the Server app. About half the time, there'll be the expected green dot by "Time Machine" indicating it is running and other times it won't be there. Regardless, when I click on Time Machine, I almost always get a blank screen simply saying "Loading." On rare occasion I'll get this:
Error Reading Settings
Service functionality and administration may be affected.
Click Continue to administer this service.
Code: 0
Either way, sometimes if I wait long enough, I'll be able to see the Time Machine server setup, but not every time. When I am able to see it, I'll have usability for a few minutes and then it kicks back to "Loading."
I do see this apparently relevant entry in the logs as seen by Console.app (happens every time I see the Loading screen):
servermgrd: [71811] error in getAndLockContext: flock(servermgr_timemachine) FATAL time out
servermgrd: [71811] process will force-quit to avoid deadlock
com.apple.launchd: (com.apple.servermgrd[72081]) Exited with code: 1
If I fire up Terminal and run "sudo serveradmin fullstatus timemachine" it'll take as long as a minute or more and finally come back with:
timemachine:command = "getState"
timemachine:state = "RUNNING"
I've tried to do some digging on these issues and have been greeted with almost nothing to go on. I've seen some rumblings about DNS settings, and here's what that looks like:
sudo changeip -checkhostname
Primary address = 192.168.1.205
Current HostName = Time-Machine-Server.local
The DNS hostname is not available, please repair DNS and re-run this tool.
dirserv:success = "success"
If DNS is a problem, I'm at a loss how to fix it. I'm not going to have a hostname because this isn't on a public network.
I have similar issues with Caching, NetInstall, etc.
So clearly I'm doing something wrong. I'm not upgrading, again, this is an entirely clean install. I'm about ready to blow it away and start fresh again, but before I do, I'd greatly appreciate any insight from others on some "best practices" or an ordered list on the best way to get this thing up and running smoothy and reliably.

Everything in OS X is dependant on proper DNS. You probably should start there. It is the first service you should be configuring and it is the most important to keep right. Don't configure any services until you have DNS straight. In OS X, DNS really stands for Do Not Skip.
This may be your toughest decision. Decide what name you want the machine to be. You have two choices.
1: Buy a valid domain name and use it on your LAN devices. You may not have a need now for use externally, but in the future when you use VPN, Profile Manager, or Web Services, at least you are prepared. This method is called split horizon DNS. Example would be apple.com. Internally you may name the server tm.apple.com. Then you may alias to it vpn.apple.com. Externally, users can access the service via vpn.apple.com but tm.apple.com remains a private address only.
2: Create an invalid private domain name. This will never route on the web so if you decide to host content for internal/external use, you may run into trouble, especially with services that require SSL certificates. Examples might be ringsmuth.int or andy.priv. These type of domains are non-routable and can result in issues of trust when communicating with other servers, but it is possible.
Once you have the name sorted out, you need to configure DNS. If you are on a network with other servers, just have the DNS admin create an A and PTR record for you. If this is your only server, then you need to configure and start the DNS service on Mavericks. The DNS service is the best Apple has ever created. A ton of power in a compact tool. For your needs, you likely need to just hit the + button and fill out the New Device record. Use a fully qualified host name in the first field and the IP address of your server (LAN address). You did use a fixed IP address and disabled the wireless card, right?
Once you have DNS working, then you can start configuring your other services. Time Machine should be pretty simple. A share point will be created automatically for you. But before you get here, I would encourage starting Open Directory. Don't do that until DNS is right and you pass the sudo changeip -checkhostname test.
R-
Apple Consultants Network
Apple Professional Services
Author, "Mavericks Server – Foundation Services" :: Exclusively in the iBooks Store

Looking for Some Examples / Best Practices on User Profile Customization in RDS 2012 R2

We're currently running RDS on Windows 2008 R2. We're controlling user's Desktops largely with Group Policy. We're using Folder Redirection to configure their Start Menus as well.
We've installed a Server 2012 R2 RDS box and all the applications that users will need. Should we follow the same customization steps for 2012 R2 that we used in 2012 R2? I would love to see some articles on someone who has customized a user profile/Desktop
in 2012 R2 to see what's possible.
Orange County District Attorney

Hi Sandy,
Here are some related articles below for you:
Easier User Data Management with User Profile Disks in Windows Server 2012
http://blogs.msdn.com/b/rds/archive/2012/11/13/easier-user-data-management-with-user-profile-disks-in-windows-server-2012.aspx
User Profile Best Practices
http://social.technet.microsoft.com/wiki/contents/articles/15871.user-profile-best-practices.aspx
Since you want to customize user profile, here is another blog for you:
Customizing Default users profile using CopyProfile
http://blogs.technet.com/b/askcore/archive/2010/07/28/customizing-default-users-profile-using-copyprofile.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Best practice for external but secure access to internal data?

We need external customers/vendors/partners to access some of our company data (view/add/edit). It’s not so easy as to segment out those databases/tables/records from other existing (and put separate database(s) in the DMZ where our server is). Our
current solution is to have a 1433 hole from web server into our database server. The user credentials are not in any sort of web.config but rather compiled in our DLLs, and that SQL login has read/write access to a very limited number of databases.
Our security group says this is still not secure, but how else are we to do it? Even if a web service, there still has to be a hole in somewhere. Any standard best practice for this?
Thanks.

Security is mainly about mitigation rather than 100% secure, "We have unknown unknowns". The component needs to talk to SQL Server. You could continue to use http to talk to SQL Server, perhaps even get SOAP Transactions working but personally
I'd have more worries about using such a 'less trodden' path since that is exactly the areas where more security problems are discovered. I don't know about your specific design issues so there might be even more ways to mitigate the risk but in general you're
using a DMZ as a decent way to mitigate risk. I would recommend asking your security team what they'd deem acceptable.
http://pauliom.wordpress.com

Best Practice about enabling RD

After running the Best Practice Analyser i've been getting the error that the "server should be configured to allow remote desktop connections"
See http://technet.microsoft.com/nl-nl/library/ff646929(v=ws.10).aspx
I've got a GPO which enables RDC for me and works fine. If I go to Remote Settings on the specified server it's cleary enabled.
Still the error kept popping up, only after I disabled the GPO and falling back to the default (local) off setting and enabling it manually, the error is gone. After this I can again apply the GPO without any errors.
So the error is gone now, but I'm still curious why this happened. I should be able to configure stuff through GPO's right? Am I missing something here?
Thanks in advance,

Hi,
Thank you for posting in Windows Server Forum.
The setting which you have configured are all correct, {for information: need GPO setting “Allow logon through Remote Desktop Services” under User Rights assignment must be enabled}. From description seems the GPO setting is not applied\configured
properly and this issue happens. Just be sure to update the GPO once you perform the steps.
Just for reference you can go through following article.
Securing Remote Desktop for System Administrators
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Best practice for RDGW placement in RDS 2012 R2 deployment

Hi,
I have been setting up a RDS 2012 R2 farm deployment and the time has come for setting up the RDGW servers. I have a farm with 4 SH servers, 2 WA servers, 2 CB servers and 1 LS.
Farm works great for LAN and VPN users.
Now i want to add two domain joined RDGW servers.
The question is; I've read a lot on technet and different sites about how to set the thing up, but no one mentions any best practices for where to place them.
Should i:
- set up WAP in my DMZ with ADFS in LAN, then place the RDGW in the LAN and reverse proxy in
- place RDGW in the DMZ, opening all those required ports into the LAN
- place the RDGW in the LAN, then port forward port 443 into it from internet
Any help is greatly appreciated.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights

Hi,
The deployment is totally depends on your & company requirements as many things to taken care such as Hardware, Network, Security and other related stuff. Personally to setup RD Gateway server I would not prefer you to select 1st option. But as per my research,
for best result you can use option 2 (To place RDG server in DMZ and then allowed the required ports). Because by doing so outside network can’t directly connect to your internal server and it’s difficult to break the network by any attackers. A perimeter
network (DMZ) is a small network that is set up separately from an organization's private network and the Internet. In a network, the hosts most vulnerable to attack are those that provide services to users outside of the LAN, such as e-mail, web, RD Gateway,
RD Web Access and DNS servers. Because of the increased potential of these hosts being compromised, they are placed into their own sub-network called a perimeter network in order to protect the rest of the network if an intruder were to succeed. You can refer
beneath article for more information.
RD Gateway deployment in a perimeter network & Firewall rules
http://blogs.msdn.com/b/rds/archive/2009/07/31/rd-gateway-deployment-in-a-perimeter-network-firewall-rules.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Segmenting Contacts Best Practices

Similar Messages

Maybe you are looking for