Server Shares for SOX audit

Would someone be able to assist in setting this script up for a multi domain environment?  Thank you.
$computers = Get-Content $loc\list.txt;
function Get-AllSharePermissions
param (
[parameter(Mandatory=$true,ValueFromPipeline=$true)]
[string]$computername
$ShareSec = Get-WmiObject -Class Win32_LogicalShareSecuritySetting -ComputerName $computername
$myCol = @()
foreach ($ShareS in $ShareSec)
$SecurityDescriptor = $ShareS.GetSecurityDescriptor()
ForEach ($DACL in $SecurityDescriptor.Descriptor.DACL)
$myObj = “” | select Computername, Name, Domain, ID, AccessMask, AceType
$myObj.Computername = $Computername
$myObj.Name = $ShareS.Name
$myObj.Domain = $DACL.Trustee.Domain
$myObj.ID = $DACL.Trustee.Name
Switch ($DACL.AccessMask)
2032127 {$AccessMask = “FullControl”}
1179785 {$AccessMask = “Read”}
1180063 {$AccessMask = “Read, Write”}
1179817 {$AccessMask = “ReadAndExecute”}
-1610612736 {$AccessMask = “ReadAndExecuteExtended”}
1245631 {$AccessMask = “ReadAndExecute, Modify, Write”}
1180095 {$AccessMask = “ReadAndExecute, Write”}
268435456 {$AccessMask = “FullControl (Sub Only)”}
default {$AccessMask = $DACL.AccessMask}
$myObj.AccessMask = $AccessMask
Switch ($DACL.AceType)
0 {$AceType = “Allow”}
1 {$AceType = “Deny”}
2 {$AceType = “Audit”}
$myObj.AceType = $AceType
Clear-Variable AccessMask -ErrorAction SilentlyContinue
Clear-Variable AceType -ErrorAction SilentlyContinue
$myCol += $myObj
Return $myCol
foreach($computer in $computers) {$computer | Get-AllSharePermissions | Export-Csv “$loc\1.csv” -Append -NoTypeInformation -force}

This does seem to work now. Although, how can I sort the out put as before:
$myObj = “” |
select Computername,
Name, Domain, ID,
AccessMask, AceType
I recommend taking time to learn PowerShell before just blasting along with no idea.
Get-Content
$loc\list.txt
|
    Get-AllSharePermissions
|   
     select
Computername,
Name, Domain,ID,
AccessMask,
AceType  |  
     Export-Csv
“$loc\1.csv”
-Append
-NoTypeInformation
¯\_(ツ)_/¯

Similar Messages

  • Print "Confidential" mark on all docs (required for SOX audit)

    Hi All.
    Problem: In order to comply with Sarbanes-Oxley Act I need to implement possibility to print "Confidential" mark for any user chosen document (on every page).
    Partially this was implemented by setting footnote in SAP printer driver. But this isn't usable all the time (especially with ALV-lists).
    There are 3 SAP notes:
    895029 - Let MIC report output watermark
    371854 - SAP Query: Printing in the SAP List Viewer (ALV)
    756650 - Footer in the print dialog
    But first one is about standard header. Second one looks is what I need, but it also does not cover all documents. Third is for future releases.
    I found that there is special Sarbanes-Oxley Compliance Software for SAP ERP. And I wonder if it covers also print issue:
    680615 - Installing SAP CM SOA Release 1.0
    Best solution would be to have a checkbox, which user can check while printing confidential documents.
    I do not believe that nobody faced with the same problem while preparing to SOX audit. Is there a standard solution?
    Thanks to all.
    Message was edited by:
            Andrei Balashchanka

    If someone interested here is SAPs reply for my problem:
    "Setting a footline for printing in the ALV lists is not possible.
    However as a workaround you are able to design the areas above and
    below the ALV output with various elements. In your business case (if I
    understood your business requirements correctly) you need to output a
    text/a mark at the top/at the bottom of every printed page -> in order
    to implement this you would have to implement handling for either the
    TOP_OF_PAGE or the END_OF_PAGE events as in ALV the page headers and
    footers are events.
    If ALV determines that there is a page break when generating the
    printout, the END_OF_PAGE or TOP_OF_PAGE event is triggered. ALV checks
    whether a design object is defined for this event and inserts at the
    correct position e.g. when you use the event print_end_of_page to output
    text with the WRITE statement during print output. The text is inserted
    at the end of each page. During print output, the ALV Grid Control goes
    to the list output of the classic ALV. In the print preview (classic
    ALV), the text for this event is not displayed. Demo program
    BCALV_GRID_01 in development class SLIS illustrates how the
    print_end_of_page is used. To allow output at the end of each page, you
    must reserve several lines for these pages. To do this, use field
    reservelns of a structure of type lvc_s_prnt and pass this structure
    with method set_table_for_first_display.
    For an overview see also the documentation for the events of class
    CL_GUI_ALV_GRID."

  • Support for SQL Server 2014 for CMS + Audit Repository?

    We are currently on BusinessObjects 4.1 SP01 Patch 6 on Windows Server 2008 using SQL Server 2008 R2 for our CMS and Audit repository databases.  Is there any information out in regard to when SQL Server 2014 will be supported for the CMS and Audit repositories?
    According to the Product Availability Matrix shown in the screenshot below SQL Server 2012 is supported, right?  One of our DBAs claims there isn't that much of a difference between SQL Server 2012 and 2014, but I am not willing to try it if it isn't officially supported.
    Thanks,
    Noel

    Denis Konovalov  Henry Banks   James Rapp  Toby Johnston
    Need your attention here.

  • Issue with multiple application installation and server share

    Hi,
    SCCM 2007 SP2 R3 ICP2
    All servers W2K8R2
    I am having an issue with software installs.  When using a variable for multiple applciation installs, I get access errors when the applications go to install.  It appears to be a multiple connection issue, but I can't figure out why.
    I am using server shares for my DPs.  The proper permissions are set.  The servers (DP) are W2K8R2.  I think it has to do with the way R2 handles the conenctions.  I want to know if this is a known issue or if anyone has come accross
    it.
    I am going to post in the software distribution forum as well, but thought this would be a config question.

    Hi! I'm waking up this dead thread but I've got a *very* similar problem!
    I've got a SCCM 2007 SP2 R3 installation on Win2008.  All clients are in the same ConfigMgr-site. Multiple package deploy in the same site-boundary as the CM-server works excellent. (We've got  three DPs in the same site-boundary as the
    CM-server itself.)
    Now, we have a new site-boundary with it's own Protected DP where multiple package deploy fails
    but the same packages, being run from the task-sequnce works! So then the client can download, install and run the packages from the proteced DP just fine. All "single" packages install fine before the "Multiple Appliaction"-step.
    I've tripple checked that we're running the same packages when we're installing Multiple Packages as we do in the Task-Sequence. And
    the same Task-sequence with the Multiple Package installation step
    works fine in our site-boundary where the ConfigMgr-server is installed.
    Here's the log from a client trying to access and install one of three packages through the the Install Multiple Packages task-sequence step.
    <![LOG[Policy SMS10000-CEN000BD-25FE0E9B downloaded successfully]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="dsutils.cpp:597"><br/><![LOG[SMS PackageID = CEN000BD]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="dsutils.cpp:247"><br/><![LOG[Source version = 2]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="dsutils.cpp:296"><br/><![LOG[SMS Program Name = RESTORE]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="dsutils.cpp:317"><br/><![LOG[::CompressBuffer(65536,-1)]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmzlib.cpp:695"><br/><![LOG[Compression (zlib) succeeded: original size 26608, compressed size 3254.]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmzlib.cpp:484"><br/><![LOG[Policy for CEN000BD:"RESTORE" successfully stored in environment]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="dsutils.cpp:331"><br/><![LOG[Downloaded policies successfully]LOG]!><time="16:01:20.905+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="dsutils.cpp:725"><br/><![LOG[Installing pkg 'CEN000BD', program 'BACKUP']LOG]!><time="16:01:20.921+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="dsinstaller.cpp:290"><br/><![LOG[Resolving content for SMS Package CEN000BD]LOG]!><time="16:01:20.921+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="dsutils.cpp:768"><br/><![LOG[Getting local network information.]LOG]!><time="16:01:20.921+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="resolvesource.cpp:1846"><br/><![LOG[GetAdaptersAddressess entry point is supported.]LOG]!><time="16:01:20.921+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmiputil.cpp:118"><br/><![LOG[DhcpGetOriginalSubnetMask entry point is supported.]LOG]!><time="16:01:20.937+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmiputil.cpp:181"><br/><![LOG[Adapter {B3FC51BA-75F3-4C93-98D3-72ECE4B7A6A2} is DHCP enabled. Checking quarantine status.]LOG]!><time="16:01:21.124+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmiputil.cpp:509"><br/><![LOG[Adapter {B3FC51BA-75F3-4C93-98D3-72ECE4B7A6A2} has 1 IPv4 address(es).]LOG]!><time="16:01:21.124+-60" date="12-12-2011" component="InstallSoftware" context="" type="2" thread="3040" file="ccmiputil.cpp:540"><br/><![LOG[Executing content location request for CEN000BD:2 as GUID:87F78866-5FCB-43FE-A2F7-07DA7F6863DF]LOG]!><time="16:01:21.124+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="resolvesource.cpp:1852"><br/><![LOG[Initializing CLibSMSMessageHeader with authenticator]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:1103"><br/><![LOG[Sending RequestContentLocations]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:3367"><br/><![LOG[Messaging Auth Using V4 Mode]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="libsmsmessaging.cpp:1400"><br/><![LOG[Formatted header:]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:1500"><br/><![LOG[<Msg SchemaVersion="1.1" ReplyCompression="zlib"><ID/><SourceID>GUID:87F78866-5FCB-43FE-A2F7-07DA7F6863DF</SourceID><SourceHost/><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:OSD</ReplyTo><Priority>3</Priority><Timeout>3600</Timeout><SentTime>2011-12-12T15:01:21Z</SentTime><Protocol>http</Protocol><Body Type="ByteRange" Offset="0" Length="618"/><Hooks><Hook2 Name="clientauth"><Property Name="Token"><![CDATA[CCMClientID: BBA60FFE-10D3-42AA-88BF-CBAC68CA4BB4<br/>CCMClientIDSignature: 3F5C9150307B32713AB75C2BD3431AFCB0816854881F6450868D120ABA7FC4424EF3407E6BD2531E32EBF4A89D92440D3BD9E68078A8BB5B899905A765C4AC28B1D837A0D58EB02C55048B1BA97BF0319B02276D87846F4748C2FBAA887C8921989CB07E15BD6685BFC84792B1C9E91EE140DA03BA01FBBF7F6EF824F5FFAF15<br/>CCMClientTimestamp: 2011-12-12T22:02:17Z<br/>CCMClientTimestampSignature: 4E28E6E6EEF71EB4A6FDE54155100F67610556C0E5F81DF82B6AB03608C1745485D65AB09F195D384903AB60DD9993118FCECCC3C9E85F5A9C0CB6E949A5F8DF305B7A5E64E0D98973AF12E034E468B6E7CC03FE23DC3DEB686CBA63FADD895F61D7034504C018F6F20561F40B47BC20509423C2385032A3AA6866F266409F1E]]></Property></Hook2></Hooks><Payload Type="inline"/><TargetHost/><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><CorrelationID/></Msg><br/>]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:1501"><br/><![LOG[CLibSMSMessageWinHttpTransport::Send: URL: STOSCCM02.INTERNT.SVT.SE:443  CCM_POST /ccm_system_AltAuth/request]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:7446"><br/><![LOG[In SSL, but with no client cert]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:7596"><br/><![LOG[In SSL, but with no media cert]LOG]!><time="16:01:21.295+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:7602"><br/><![LOG[The request has succeeded. 200 OK]LOG]!><time="16:01:21.342+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="libsmsmessaging.cpp:7734"><br/><![LOG[Decompressing reply body.]LOG]!><time="16:01:21.342+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="libsmsmessaging.cpp:2395"><br/><![LOG[::DecompressBuffer(65536)]LOG]!><time="16:01:21.342+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmzlib.cpp:735"><br/><![LOG[Filtering Content Locations.]LOG]!><time="16:01:21.342+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="resolvesource.cpp:1883"><![LOG[Decompression (zlib) succeeded: original size 522, uncompressed size 2128.]LOG]!><time="16:01:21.342+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="ccmzlib.cpp:646"><![LOG[ Adding \\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD\ to Local DP list.]LOG]!><time="16:01:21.342+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="resolvesource.cpp:1938">
    <br/><br/><![LOG[Found 0 DPs in subnet, 1 DPs in local site, 0 DPs in remote location and 0 Multicast DPs]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="resolvesource.cpp:1974">
    <![LOG[Shuffling HTTP local DP list.]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="resolvesource.cpp:2012">
    <![LOG[Shuffling Local DP list.]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="resolvesource.cpp:2087">
    <![LOG[Attempting to connect to \\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD\]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="resolvesource.cpp:2151">
    <![LOG[Deleting any existing network connections to "\\vaxcmdp01.domain.com\*".]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:407">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:01:34.974+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:01:37.985+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:01:42.711+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:01:45.721+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:01:50.400+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:01:53.411+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:01:58.090+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:02:01.100+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:02:05.780+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:02:08.790+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:02:13.469+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:02:16.480+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:02:21.174+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:02:24.185+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:02:28.911+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:02:31.921+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:02:36.600+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[Attempting to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD".]LOG]!><time="16:02:39.611+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:501">
    <![LOG[Retrying download...]LOG]!><time="16:02:44.290+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="tsconnection.cpp:508">
    <![LOG[dwErr, HRESULT=800704c3 (e:\nts_sms_fre\sms\framework\tscore\tsconnection.cpp,517)]LOG]!><time="16:02:47.300+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="tsconnection.cpp:517">
    <![LOG[Failed to connect to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000BD" (1219)]LOG]!><time="16:02:47.300+-60" date="12-12-2011" component="InstallSoftware" context="" type="3" thread="3040" file="tsconnection.cpp:517">
    <![LOG[!slistSMBPaths.empty(), HRESULT=80040103 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,2163)]LOG]!><time="16:02:47.300+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="resolvesource.cpp:2163">
    <![LOG[TS::Utility::GetContentLocations( pszPackageId, L"", lSourceVersion, m_sSiteCode, m_sManagementPoint, &m_oHttpTransport, sClientID, TRUE, sNetworkAccessAccount, sNetworkAccessPassword, TRUE, TRUE, slistSMBPaths, slistHttpPaths ), HRESULT=80040103 (e:\nts_sms_fre\sms\client\osdeployment\installsoftware\dsutils.cpp,843)]LOG]!><time="16:02:47.300+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="3040" file="dsutils.cpp:843">
    <![LOG[Content location request for CEN000BD:2 failed, hr=0x80040103]LOG]!><time="16:02:47.300+-60" date="12-12-2011" component="InstallSoftware" context="" type="3" thread="3040" file="dsutils.cpp:843">
    While installing a single package from the same DP (VAXCMDP01) looks like this:
    ![LOG[PackageID = 'CEN000D1']LOG]!><time="15:29:13.401+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="main.cpp:332">
    <![LOG[BaseVar = '', ContinueOnError='']LOG]!><time="15:29:13.401+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="main.cpp:333">
    <![LOG[SwdAction = '0002']LOG]!><time="15:29:13.401+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="main.cpp:334">
    <![LOG[GetExecRequestMgrInterface successful]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="installsoftware.cpp:218">
    <![LOG[Retrieving value from TSEnv for '_SMSTSPolicyCEN000D1_Install']LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="installsoftware.cpp:85">
    <![LOG[::DecompressBuffer(65536)]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="ccmzlib.cpp:735">
    <![LOG[Decompression (zlib) succeeded: original size 2844, uncompressed size 22640.]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="ccmzlib.cpp:646">
    <![LOG[ADV_AdvertisementID=CEN20022]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="installsoftware.cpp:1119">
    <![LOG[PKG_PSF_ContainsSourceFiles=TRUE]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="installsoftware.cpp:1138">
    <![LOG[::DecompressBuffer(65536)]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="ccmzlib.cpp:735">
    <![LOG[Decompression (zlib) succeeded: original size 12, uncompressed size 4.]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="ccmzlib.cpp:646">
    <![LOG[SoftDist paused cookie = 16271]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="installsoftware.cpp:181">
    <![LOG[Found the location for the package _SMSTSCEN000D1. The location is on \\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1\]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="resolvesource.cpp:3146">
    <![LOG[nPos != CCM::Utility::String::npos, HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,253)]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="0" thread="2768" file="resolvesource.cpp:253">
    <![LOG[Creating a connection to \\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1\ with default account]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="resolvesource.cpp:2243">
    <![LOG[Connection request for "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1"]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="tsconnection.cpp:208">
    <![LOG[No credentials available for connecting to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1". See whether the share has already been connected.]LOG]!><time="15:29:13.417+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="tsconnection.cpp:233">
    <![LOG[Connecting to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1"]LOG]!><time="15:29:13.510+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="tsconnection.cpp:268">
    <![LOG[Successfully connected to "\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1"]LOG]!><time="15:29:13.588+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="tsconnection.cpp:287">
    <![LOG[SMS PkgID 'CEN000D1' resolved to location '\\vaxcmdp01.domain.com\SMS_DP$\SMSPKG\CEN000D1\']LOG]!><time="15:29:13.635+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="2768" file="installsoftware.cpp:145">
     Notice that it never checks for DPs in the same way as the multiple package install:
    <![LOG[Found 0 DPs in subnet, 1 DPs in local site, 0 DPs in remote location and 0 Multicast DPs]LOG]!><time="16:01:21.389+-60" date="12-12-2011" component="InstallSoftware" context="" type="1" thread="3040" file="resolvesource.cpp:1974">
    I know that the TS checks package dependencies before executing the TS. That's not possible with Multiple packages since they are variable dependant. I think this is somehow related although it doesn't explain why my client can't authenticate properly.
    The Network Access Account is a member of Domain Users and Domain Users have Read Access on the share and on the folder of the VAXCMDP01 DP - which should be identically configured to our other DPs closest to our ConfigMgr Server.
    Any ideas?
    Kind regards,
    Mathias

  • Security solution with Identity server for SOX compliance

    Hi all,
    Has anybody used Identity Server as security solution to achieve SOX compliance? i want to know general view, opinions , experiance of ppl while implementing such solution.
    Just a little background of SOX: It is Created by US Congress in the wake of corporate scandals like Enron in 2001 and 2002.it is an attempts to tighten controls over corporate financial reporting and transparency.
    I am basically interested in implementing security solutions using Identity server for SOX compliance. Section 404 of this act deals with internal controls, which essentially requires organizations to provide following facilities -
    1. User Identification, authorization and access
    2. User control of user accounts
    3. Central identification and access rights/permissions management
    4. Violation and security activity report
    Has anybody developed such solution? What are your general experiance, problems , issues etc? Please share your view....

    Just too quick to draw conclusion: See below FAQ
    If you are not in the same AS container, let me know. Jerry
    Copy from J2EE agent FAQ
    Question - Is it possible to install a J2EE 2.1agent and Identity Server on the same instance of the application server ?
    Installing the IS60SP1/IS61 server and J2EE 2.1 policy agent on the sameninstance of Application server is not a supported configuration. We do support the 21 J2EE agent and IS installed on different instances of the application server. So, users can install theJ2EE 2.1 agent on a one instance of the application server and install IS on a different instance of the apps server.

  • SL server share mounting not working for 10.7.4 Mac Mini

    I'm running about seven Macs on a network with a 10.6.8 Mac Mini server.
    The older Macs (PPCs and 10.4.11) mount the share immediately.
    Newer Macs recently have had a problem.
    My 10.6.8 MBP can mount the share, from a dock icon, but it can take minutes.
    Another Mac Mini (10.7.4) now refuses to mount the share manually. It can't make contact with the server share. I've tried via Ethernet and WiFi. It just hangs with Connect to Server.
    And yet, it has no problem with the iCal server running on the server.
    Another older MB and 10.6.8, mounts the share immediately.
    Has anyone had newer hardware with 10.7.4 develop server connection problems?

    Hi iToaster,
    These were all good tips, and I tried or investigated them.
    As it turns out, I noticed my SL Mac server needed a Java and securtiy update.
    After installing, mount time on my Lion and SL client Macs was near normal, not minutes. (Again, my older Macs had mounted the server share quickly and normally, when the newer ones did not.)
    My suspicion is that a modern OS sensed that the Java and security updates were not in place and took extra time to check the share mount in some manner.
    Thank you for your time, experitse and ideas, iToaster!

  • Mac user prompted for password for Mac server shares at every login

    I have a client that uses Mac machines.  The server is also Mac server. 
    The machines are not in a domain/realm, so each machine has its own user database including the server.
    The user connects to a share on the server, where she is set up with the same user name and password as on her local Mac for convenience.
    When you connect to the share the first time, you are prompted to provide the credentials, and you can select to save this password in Keychain.  We selected YES, remember this password in my Keychain.
    However, at every login, she has to provide credentials to connect to the share again.
    Any ideas why keychain is not remembering this login so that she can re-connect to the share (it is set as a Login Item) seamlessly?
    Thank you,
    Sandra

    Unix shortnames can be viewed/set on the client computers by opening system preferences, going to users & groups, Right-Clicking on a user, and opening the "Advanced Options..." pane.  In the field that says "Account Name:" is the UNIX shortname that the system assigned o that user when their account was originally created.
    DO NOT CHANGE THE USER'S SHORTNAME HERE.  All kinds of bad things will happen.  Once it is established (as your original post suggests), you don't want to change it.
    What you can do is on your server, in the users & groups sharing preferences, establish server  accounts for your users that have identical shortnames to the ones they already have assigned on their individual macs.

  • Controlling SIDADM access per SOX audit compliance

    Hello....
    We are going through our first SAP ERP implementation and had few questions about the SIDADM user and audit.  We are running the SAP system in a Windows server with Oracle Database.  SIDADM user is currently shared by the basis team to maintain the SAP servers.  The basis team logs into the server using the SIDADM account to start/stop the SAP system, run any command based utilities (i.e. sappfpar or tp) when needed and creating/executing batch scripts for backups/exports/etc.  However, since the password for this user is shared by the whole team, we are concerned about SOX audit compliance.
    1.  How does other customers on Windows environment control the SIDADM account to satisfy audit requirements?  Audit doesn't normally allow shared accounts on SAP servers.  When someone directly logs into the SAP server with SIDADM, we can't trace who logged on and made changes to the system.
    2.  If the password for SIDADM is not shared by the basis team, how does the basis team maintain the SAP servers (i.e. start/stop instance)?
    3.  Can the SAP systems be maintained by individual users without using SIDADM?  If so, how?
    We are looking for recommendations on how to control the super users in the SAP environments (SIDADM, DB users, etc) to satisfy SOX audit requirements. 
    Thanks for all your help.  Any recommendations will be appreciated~~
    Janet

    For info:
    SOX (Sarbanes Oxley Act, in particular Section 404) is a high level auditable requirement.
    BASIS activities are lower down and are subject to some slack in the actual implementation of the interpretation.
    The SAP administration (BASIS) area comes under its own audit(s) of particular variations, all of which are usually underneath SOX or another higher level requirement.
    Regards
    Ashley

  • Disconnecting from external display changes background, disconnect server shares, inactivates desktop icons.

    I have a user working on a MacBook Pro, Lion OS X 10.8.2, connected to an external display. When disconnecting from the external display the background picture changes, he can’t open documents saved to desktop, and the connection to the server shares is lost.  Rebooting does not resolve the issue while it is disconnected from the external display.  If he reconnects the MacBook back to the external monitor sometimes he has to reboot to get everything back to normal.  It almost seems like it is logging him into a different account or profile or something like that (please excuse my messy terminology as most of our users are still using PCs).  However if you look at what account is logged in, it is still the same account that he logged in with that morning.  The Mac is not authenticating to the network, just connecting to server shares.  Has anyone experienced this issue before and if so is there a fix for it?

    The Mac has a long history of assuming that ANY adapter still present means the display is still present -- you need to remove the adapter as well as the cable, if present.
    So my theory articulated above is that the disconnect is not registered correctly. This would mean that the second display is still seen as present. You could check this by invoking:
    System Preferences > Displays ...
    and looking for the Arrange pane (shown above) which is ONLY present when multiple displays are attached. More detailed information can be found in About this Mac  > ( More info ) Graphics & Displays ...
    ... specifically the NAME of each attached display is shown or an indication (no display connected):
    ATI Radeon HD 4870:
      Chipset Model:          ATI Radeon HD 4870
      Type:          GPU
      Bus:          PCIe
      Slot:          Slot-1
      PCIe Lane Width:          x16
      VRAM (Total):          512 MB
      Vendor:          ATI (0x1002)
      Device ID:          0x9440
      Revision ID:          0x0000
      ROM Revision:          113-B7710C-176
      EFI Driver Version:          01.00.318
      Displays:
    Cinema HD:
      Resolution:          2560 x 1600
      Pixel Depth:          32-Bit Color (ARGB8888)
      Display Serial Number:          CY8360UFXMP
      Main Display:          Yes
      Mirror:          Off
      Online:          Yes
      Rotation:          Supported
    Display Connector:
      Status:          No Display Connected

  • Server 2012 R2 SMB - The process cannot access the file '\\server\share\test.txt' because it is being used by another process.

    Hi,
    We are having issues with Server 2012 R2 SMB shares.
    We try to write some changes to a file, but we first create a temporary backup in case the write fails. After the backup is created we write the changes to the file and then we get an error:
    The process cannot access the file '\\server\share\test.txt' because it is being used by another process.
    It looks like the backup process keeps the original file in use.
    The problem doesn't always occur the first time, but almost everytime after 2 or 3 changes. I have provided some code below to reproduce the problem, you can run this in a loop to reproduce.
    The problem is that once the error arises, the file remains 'in use' for a while, so you cannot retry but have to wait at least several minutes. 
    I've already used Process Explorer to analyze, but there are no open file handles. 
    To reproduce the problem: create two Server 2012 R2 machines and run the below code from one server accessing an SMB share on the other server.
    Below is the code I use for testing, if you reproduce the scenario, I'm sure you get the same error.
    We are not looking for an alternative way to solve this, but wonder if this is a bug that needs to be reported?
    Anybody seen this behavior before or know what's causing it?
    The code:
    string file =
    @"\\server\share\test.txt";
    if (File.Exists(file))
    File.Copy(file, file +
    ".bak", true);
    File.WriteAllText(file,
    "Testje",
    Encoding.UTF8);
    The error:
     System.IO.IOException: The process cannot access the file '\\server\share\test.txt' because it is being used by another process.

    Hi,
    There is someone else having the same issue with yours. You could try code in the article below:
    “The process cannot access the file because it is being used by another process”
    http://blogs.msdn.com/b/shawncao/archive/2010/06/04/the-process-cannot-access-the-file-because-it-is-being-used-by-another-process.aspx
    If you wonder the root cause of the issue, the .NET Framework Class Libraries forum can help.
    Best Regards,
    Mandy 
    If you have any feedback on our support, please click
    here .
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Flat file connection: The file name "\server\share\path\file.txt" specified in the connection was not valid

    I'm trying to execute a SSIS package via SQL agent with a flat file source - however it fails with Code: 0xC001401E The file name "\server\share\path\file.txt" specified in the connection was not valid.
    It appears that the problem is with the rights of the user that's running the package (it's a proxy account). If I use a higher-privelege account (domain admin) to run the package it completes successfully. But this is not a long-term solution, and I can't
    see a reason why the user doesn't have rights to the file. The effective permissions of the file and parent folder both give the user full control. The user has full control over the share as well. The user can access the file (copy, etc) outside the SSIS
    package.
    Running the package manually via DTExec gives me the same error - I've tried 32 and 64bit versions with the same result. But running as a domain admin works correctly every time.
    I feel like I've been beating my head against a brick wall on this one... Is there some sort of magic permissions, file or otherwise, that are required to use a flat file target in an SSIS package?

    Hi Rossco150,
    I have tried to reproduce the issue in my test environment (Windows Server 2012 R2 + SQL Server 2008 R2), however, everything goes well with the permission settings as you mentioned. In my test, the permissions of the folders are set as follows:
    \\ServerName\Temp  --- Read
    \\ServerName\Temp\Source  --- No access
    \\ServerName\Temp\Source\Flat Files --- Full control
    I suspect that your permission settings on the folders are not absolutely as you said above. Could you double check the permission settings on each level of the folder hierarchy? In addition, check the “Execute as user” information from job history to make
    sure the job was running in the proxy security context indeed. Which version of SSIS are you using? If possible, I suggest that you install the latest Service Pack for you SQL Server or even install the latest CU patch. 
    Regards,
    Mike Yin
    If you have any feedback on our support, please click
    here
    Mike Yin
    TechNet Community Support

  • Windows 7 Client 'sees' an old version of windows 2012 server share

    Hi All,
    I have a problem which seems to be a common theme looking at other threads. Here's the overview of the problem:-
    I have multiple windows 7 clients and a windows 8.1 client within a 2008 Server in a domain.
    I also have a Windows 2012R2 Server which is not joined to the domain. There is a Share on the 2012R2 which has the Caching Option turned off. Everyone full control on Share & File permissions.
    One of the Windows 7 machines in Explorer when it looks at
    \\2012server\share sees an old version of the folder. It seems that SMB 2 chaching is working too well. Not even pressing F5 or clicking View, Refresh updates windows explorer.
    It took a reboot to get the workstation to see the up to date contents of the share on the 2012 server.
    We don't seem to have that behaviour with that client against the 2008 server.
    I have seen this behaviour on another machine un-related to us at another location which was in a workgroup with a 2012 server and no domain.
    Questions:-
    Is there some sort of problem with Windows 7 workstations working against 2012 Servers in a non-domain setting or is it just Windows 7 against 2012 servers period?
    I understand that Windows 7 utilises SMB1 & SMB2. SMB2 introduced caching. If the server has turned off the share cache option should the client cache the contents of the share or the information about the files & folders & 'file not found'
    information?
    I want to open a file handle to a file on a network share so I can read and write data to it. But I also want to know that when I look at the folder to open the file I'm actually looking at the live version of the folder and files in the folder and
    not a cached version of the folder. If it's a cached version the file might be there already but I won't see it.
    Is there an API call that tells the client to get a fresh view of the server share so I can be absolutely sure that when I look for a file on the server I'm getting the correct answer and not one from cache.
    I first posted the question with the same subject "Windows 7 Client 'sees' an old version of windows 2012 server share" in the Windows 7 Networking Fourm
    https://social.technet.microsoft.com/Forums/en-US/23bf3627-987b-4c27-8062-85a284a2cda4/windows-7-client-sees-an-old-version-of-windows-2012-server-share?forum=w7itpronetworking and it was suggested I repost in here. Please do take the time to read
    the thread which will save time with suggestions that have already been covered.
    As the computers that can be affected by this problem are not mine I cannot enforce or guarantee that any of my 'client base' will apply any hotfixes. I will also not have the ability to tweak registry settings as I can't guarantee Admin Access.
    It seems that we need to go back to SMB1 as all the tweaks to SMB since those days have introduced problems with the basic requirement of sharing files from a share on a server for Read/Write purposes. I have tried turning a network back to SMB1 and that
    has resolved a lot of the issues but then I found a post/MS blog that states not to leave the network on SMB1
    The Caching option of the share had already been turned off. Surely Windows clients should not cache any information about the share but I think that is not the case.
    Thanks is advance
    Robert

    Hi Shaon,
    Thanks for looking into this.
    If this is a known issue, why isn't the hotfix rolled into a general windows update if this is a known problem? However this doesn't just affect domain joined workstations.
    Surely it's basic functionality for a networked computer to access files and folders on a network file server. It's what networks were invented for at the end of the day.
    I am unable to apply hotfixes to these computers that are having the problem due to the fact they are not mine but my customers.
    At one of my customers sites I disabled SMB2 from the server and network clients as well as disabling the network adapter power saving option. This seemed to resolve the issues that I saw on one client that seemed to be 30 minutes behind the rest of
    the network.  The hotfix you link to states that it is for Domain joined computers. At my customer site the PC's are not in a domain at all, just a workgroup with workstations and a 2012r2 server. Will the hotfix be applicable to non-domain machines?
    Also many clients seemed to loose the file handle to an open file on the server. I'll get them to turn SMB2 back on at some point after I send out some updates but all the problems I see seem to be caused by the caching functions in SMB2. SMB1 is good and
    stable. It's SMB2 that seems to be causing the problems as it was designed from the ground up for caching.
    Has this networking issue been resolved in Windows 8, 8.1 and 10?
    As I am unable to apply a hotfix to 1000's of PC's that are not mine, is there an API call or something where I can get the windows client to stop lying and get me the current state of a folder on the server?
    Will Turning off ClientSideCaching fix the issue? HKLM\SYSTEM\CurrentControlSet\Services\MrxSmb\Parameters\
    CSCEnabled
    Or will every machine need to be tuned individually according to the following guide:-
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/7bd9978c-69b4-42bf-90cd-fc7541ccb663/forum-faq-troubleshooting-network-file-copy-slowness?forum=winserverPN ?
    Robert

  • How to track changes in a hyperion application for SOX control?

    Hello all,
    We have been working on identifying the best way on how to track changes in a hyperion application in regards to the SOX control.
    The following areas have been identified as the main areas of an application where the changes are to be tracked:
    Monthly data load from ODI
    Calculation of data
    Metadats change
    Formula edit
    Changes to reports
    Changes to security
    Can anybody please suggest the best ways to do this? Has anyone experienced this issue before?
    Somebody suggested that there is hyperion auditing available.
    Is there any other software that is available that can do this or just documenting the changes would be the best option?
    Please suggest. Toyr response would be appreciated.
    Thanks.

    Shared Services allows the auditing of provisioning and life-cycle management activities to track changes to security objects and the artifacts that are exported or imported using Lifecycle Management Utility.
    For Shared Services auditing, refer Page 129 of http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security.pdf
    Planning Administrators can select aspects of the application for change tracking. For example, you can track changes to metadata, such as when users change a member property or add a currency. You can also track changes in data forms, business rules, workflow, users, access permissions, and so on.
    For Planning auditing, refer Page 56 of http://download.oracle.com/docs/cd/E12825_01/epm.111/hp_admin.pdf
    HTH-
    Jasmine.

  • Replication issues: Operations Master shows ERROR and attempting to connect to server shares gets "the target account name is incorrect"

    I think this should be easily resolved, but I need some guidance.
    I have a client with 2 Server 2003 R2 x64 DCs: BORIS & NATASHA. Last year I upgraded both of them from x86 to x64 one at a time, allowing replication to occur between the upgrades. BORIS is the FSMO roles holder as it is currently the production server,
    while NATASHA is a backup DC. One thing that puzzles me though is that if I look at the NS record in DNS on the SOA tab, it says NATASHA is the Primary server.
    While doing some routine maintenance I noticed an error in the File Replication Service events about a 'Tombstone' situation (Event ID 2042). I looked at article cc757610 in the Technet Library and opted for remedy #3 as I did not want to demote NATASHA
    and I got confused looking at the help about using "repadmin /removelingeringobjects". I have no idea how to determine which DC has the good copy of the directory.
    Now, in running "repadmin /showrepl" I get
    "DC=CPA,DC=local
        Default-First-Site-Name\BORIS via RPC
            DC object GUID: 0267a090-1890-40e2-9a15-ea928cabd425
            Last attempt @ 2012-12-27 08:28:55 failed, result -2146893022 (0x80090322):
                The target principal name is incorrect.
            1179 consecutive failure(s).        Last success @ 2012-12-21 23:30:15." <-- THIS IS WEIRD SINCE THIS IS THE DATE THAT I DISCOVERED THE TOMBSTONE EVENT AND MADE THE REGISTRY CHANGE
    (I THINK).
    When I try to look at the FSMO roles on NATASHA, it shows ERROR for RID, PDC & Infrastructure and says "The current Operations Master is offline. The role cannot be transferred." The other issue I'm having is that client PCs are intermittently having
    trouble reconnecting to necessary server shares.
    TIA
    Wayne S. CompTIA A+ CompTIA Network+ Microsoft MCP

    Hello Sandesh,
    I spent a lot of time trying to understand using NETDOM to reset machine account passwords (don't understand it yet), but I see that you're saying that won't work anyway.
    I'm not really sure how to tell which DC is the broken one, but I'm assuming it's BORIS since that's the one users are unable to connect to. Since it is the FSMO role holder and GC I want to make sure I understand the steps correctly:
    1.Use dcpromo to forcefully demote BORIS
    2.Do metadata cleanup on NATASHA (using ntdsutil?)
    3.Promote BORIS again to DC
    Should I leave NATASHA as the FSMO role holder and GC? BORIS is the better (more resources/faster processor) machine and it's the file server. Or should the better machine be the FSMO role holder and GC as well as the file server. NATASHA is meant to be
    a backup in case BORIS dies.
    Thanks,
    Wayne S. CompTIA A+ CompTIA Network+ Microsoft MCP www.InfoTek831.com
    Hi,
    The step you are performing is correct but you also need to seize the FSMO role on other DC if BORIS is FSMO role holder and configure authorative time server role.You can later move the famo role to  BORIS server the choice is your however if you are
    moveing the role then you need configure authorative time server on BORIS server.
    Configuring the time service on the PDC Emulator FSMO role holder
    http://msmvps.com/blogs/acefekay/archive/2009/09/18/configuring-the-windows-time-service-for-windows-server.aspx
    Domain Replication has exceeded the tombstone lifetime
    http://pmeijden.wordpress.com/2011/01/12/domain-replication-has-exceeded-the-tombstone-lifetime/
    Forcefull removal of DC:
    http://support.microsoft.com/kb/332199
    How to transfer or seize FSMO roles
    http://sandeshdubey.wordpress.com/2011/10/07/how-to-transfer-or-seize-fsmo-roles/
    Metadata Cleanup of a Domain controller
    http://sandeshdubey.wordpress.com/2011/10/12/metadata-cleanup-of-a-domain-controller/
    Once both server is online check the health of DC by running dcdiag /q and repadmin /replsum.Ensure that DNS/GC role is configured on both DC's
    Hope this helps
    Best Regards,
    Sandesh Dubey.
    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator |
    My Blog
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Configuring Failover Cluster Server Share as a Distribution Point

    Hello and thanks for this helpful forum!
    I am trying to configure a server share as a Distribution Point and am running into problems.  I am running SCCM R2 on Server 2008.  I am trying to use a clustered share coming from 2008 R2 Failover Cluster.
    I have been trying to get this working for the better part of 2 days now, and I have successfully created a Distribution Point to another 2008 Server (non-R2) by simply using the site system (not the server share).
    When I try to use the server share option, I keep receiving an error with Message ID 4701 stating that the SMS Site System Status Summarizer cannot access storage object
    \\servername\sharename$ on site system
    \\servername\sharename$
    The operating system reported error 2147942467: The network name cannot be found.
    The server share is defined as a site system as
    \\servername\sharename$
    I am trying to create a "Packages" directory under it, so I'm using the option "Share the distribution folder" under the Data Access tab of the Package.
    In addition, I have given local admin rights to the site server on both nodes of the cluster.  I have given the site server modify rights to the share and NTFS permissions.  I have given Authenticated Users Read access to the share and NTFS.
    As I mentioned, I can take another server and define a Site System as a DP and everything will work properly.  I am still missing something though regarding using a Server Share.
    Thanks so much in advance for your assistance.

    Hi,
    No DP on NLBs:
    http://technet.microsoft.com/en-us/library/bb735883.aspx
    Yes, but that is NOT a failover file cluster. Is there a workaround? It seems silly to have to stand up an additional server for this. It also seems odd that the forthcoming version of SCCM would not have some support for failover clustering which was a HUGE
    improvement over the previous clustering solutions from MS.Jeffrey S. Patton Assistant Director of IT School of Engineering Computing Services University of Kansas 1520 West 15th Street Lawrence, KS. 66045-7621

Maybe you are looking for

  • How can I add multiple email addresses to Address Book?

    How can I add multiple email addresses to Address Book? Can it be done from an .xlsx file?

  • Apps do not download

    Tried to download apps from App store, icon just says it is waiting.

  • Alternative to select-options..

    Hi All, I am using select-option for a char field having length 50 char. But as per the std it takes only 45 chars. But I want all the 50 char. Is there any alternative to select-option other than parameter? Thanx. USL

  • I need HELP on finding in the Archives Adobe Air.

    I have a Macintosh running OSX ver. 10.5.8. I need an Adobe Air to run on it. Can you tell me what ver. of Adobe Air from the Archives I use????? Thank You in advance for any help!!!! Art Bentley...

  • BDC Error Processing

    hi all while uploading large amount of data thru BDC session mtd if an error occurs while the process how to know how much of the records are inserted into the database . Is there any specific function to do so. Please tell me how to do this.