Trust Relationship between PC and Domain broken\failed after System Restore

We are currently faced with a problem that every time we do a System Restore on our Windows 7 workstation, upon login attempt, we an login failed because the Trust Relationship between PC and Domain is broken. 
As solution: we have to log in as a local admin,  remove the workstation account from the domain, then re-add the workstation back to the domain.
Does anybody know if there is a hotfix for this or how we can bypass having to remove and re-add the workstation to the domain in order to login?

Have you checked on when the computer last checked in and changed the computer account password with the domain?  When a computer changes it's password, Active Directory will store only the current password and it does not expire.  The workstation
will store both the current password and the previous password.  This for cases when you may restore Active Directory to a point before the computer password change.  
To handle this, the workstation will try it's current password, then it's previous.
If you're restoring the workstation to a previous point in time, you may be rolling the stored passwords back too far for Active Directory to accept.  I would only imagine this to be the case a handful of times if you're going back 1-2 days.
Are you experiencing 100% failure?

Similar Messages

  • Getting Error The trust relationship between the primary domain and the trusted domain failed in SharePoint 2010

    Hi,
    SharePoint 2010 Backup has been taken from production and restored through Semantic Tool in one of the server.The wepapplication of which the backup was taken is working fine.
    But the problem is that the SharePoint is not working correctly.We cannot create any new webapplication ,cannot navigate to the ServiceApplications.aspx page it shows error.Even the Search and UserProfile Services of the existing Web Application is not working.Checking
    the SharePoint Logs I found out the below exception
    11/30/2011 12:14:53.78  WebAnalyticsService.exe (0x06D4)         0x2D24 SharePoint Foundation          Database                     
     8u1d High     Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15' 
    11/30/2011 12:14:53.78  WebAnalyticsService.exe (0x06D4)         0x2D24 SharePoint Foundation          Topology                     
     2myf Medium   Enabling the configuration filesystem and memory caches. 
    11/30/2011 12:14:53.79  WebAnalyticsService.exe (0x06D4)         0x12AC SharePoint Foundation          Database                     
     8u1d High     Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15' 
    11/30/2011 12:14:53.79  WebAnalyticsService.exe (0x06D4)         0x12AC SharePoint Foundation          Topology                     
     2myf Medium   Enabling the configuration filesystem and memory caches. 
    11/30/2011 12:14:55.54  mssearch.exe (0x0864)                    0x2B24 SharePoint Server Search       Propagation Manager          
     fo2s Medium   [3b3-c-0 An] aborting all propagation tasks and propagation-owned transactions after waiting 300 seconds (0 indexes)  [indexpropagator.cxx:1607]  d:\office\source\search\native\ytrip\tripoli\propagation\indexpropagator.cxx 
    11/30/2011 12:14:55.99  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     75dz High     The SPPersistedObject with
    Name User Profile Service Application, Id 9577a6aa-33ec-498e-b198-56651b53bf27, Parent 13e1ef7d-40c2-4bcb-906c-a080866ca9bd failed to initialize with the following error: System.SystemException: The trust relationship between the primary domain and the trusted
    domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection
    sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()    
    at Microsoft.SharePoint.Administration.SPAcl`1.Add(String princip... 
    11/30/2011 12:14:55.99* OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     75dz High     ...alName, String displayName, Byte[] securityIdentifier, T grantRightsMask, T denyRightsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)    
    at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider
    persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state) 
    11/30/2011 12:14:56.00  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Topology                     
     8xqx High     Exception in RefreshCache. Exception message :The trust relationship between the primary domain and the trusted domain failed.   
    11/30/2011 12:14:56.00  OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Timer                        
     2n2p Monitorable The following error occured while trying to initialize the timer: System.SystemException: The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection
    sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
    targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, Byte[] securityIdentifier, T grantRightsMask,
    T denyRightsMask)     at Microsoft.SharePoint.Administrati... 
    11/30/2011 12:14:56.00* OWSTIMER.EXE (0x1DF4)                    0x1994 SharePoint Foundation          Timer                        
     2n2p Monitorable ...on.SPAcl`1..ctor(String persistedAcl)     at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()    
    at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid
    id, Guid parentId, Guid type, String name, SPObjectStatus status, Byte[] versionBuffer, String xml)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(SqlDataReader dr)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.RefreshCache(Int64
    currentVe...
    Please guide me on the above issue ,this will be of great help
    Thanks.

    I have same error. Verified for trust , ports , cleaned up cache.. nothing has helped. 
    The problem is caused by User profile Synch Service:
    UserProfileProperty_WCFLogging :: ProfilePropertyService.GetProfileProperties Exception: System.SystemException:
    The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids,
    Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
    targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, SPIdentifierType identifierType, Byte[]
    identifier, T grantRightsMask, T denyRigh...        
    08/23/2014 13:00:20.96*        w3wp.exe (0x2204)                      
            0x293C        SharePoint Portal Server              User Profiles                
            eh0u        Unexpected        ...tsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)    
    at Microsoft.Office.Server.Administration.UserProfileApplication.get_SerializedAdministratorAcl()     at Microsoft.Office.Server.Administration.UserProfileApplication.GetProperties()     at Microsoft.Office.Server.UserProfiles.ProfilePropertyService.GetProfileProperties()
    Please let me know if you any solution found for this?
    Regards,
    Kunal  

  • 2-way Trust Relationship between Windows and Mac Domain

    Hi guys I hope someone can help me.
    Just a quick explanation of what I am trying to do.
    I have an Xserve running OSX 10.5.8 server, which is the OD Master. On that server I’m running Kerio mail server. I have a Microsoft 2003 server running AD.
    The problem is I need to run BlackBerry Enterprise on the Windows server as the BlackBerry need active directory to work.
    Since I have both system already running, I do not want to destroy my open directory just to get the BlackBerry working.
    So what I have tried to do is create a 2-way Trust Relationship between the 2 domains, so the BlackBerry server will talk to the Kerio mail server.
    The trust relationship appears to create fine from the Windows server side, but I’m not able to retrieve LDAP information from the open directory server.
    The creation from the OSX server starts fine automated but then I had to finish it manually.
    Has anyone else here created a 2-way trust relationship between Windows and Mac’s before? Any help on how you did it would be appreciated. Thanks

    Have you checked on when the computer last checked in and changed the computer account password with the domain?  When a computer changes it's password, Active Directory will store only the current password and it does not expire.  The workstation
    will store both the current password and the previous password.  This for cases when you may restore Active Directory to a point before the computer password change.  
    To handle this, the workstation will try it's current password, then it's previous.
    If you're restoring the workstation to a previous point in time, you may be rolling the stored passwords back too far for Active Directory to accept.  I would only imagine this to be the case a handful of times if you're going back 1-2 days.
    Are you experiencing 100% failure?

  • DisplayLin​k Fails After System Restore

    I recently posted that my WIFI failed and after much frustration did a system recovery via the hidden partion.  WIFI is all good now, yeah!
    But, my Kensington Displaylink (K33926US) fails to function, although it did previously.  Kensington support had me try different drivers and none were successful.  They finally said that the problem was the computer and I needed to update my graphics display driver.!? 
    I know this is a software issue since the dock worked a few days ago prior to the recovery.  After my last experience I'm very reluctant to do the wrong thing.  Plus Kensington did not fill me with confidence.
    I'm running NVIDIA 8.17.12.5912 dated 7/26/2010 on a Qosmio X-505-Q894 with Win 7, X64 and SP1.
    Any help or ideas are greatly appreciated!

    I have no idea what Kensington Displaylink is or how important it is to you.  However, I did find a display driver for you to try.  It has the same version number but with a later release date, 8/11/10, which normally indicates some kind of change was made after 7/26/10. You can download it from HERE.  Good Luck!!  I hope it solves your problem.
    C.B.
    C.B.
    Toshiba Sat. C75D-B7260 Win 8.1 64 Bit--Toshiba Sat. L775D-S7132 Win 7 HP SP1 64 Bit and Win 10 PRO Technical Preview--Toshiba Sat. L305-S5921 Win Vista SP2 32 Bit

  • JAAS between WLS (untrusted) domains - ServerIdentity failed validation

    I'm trying to create a proxy/delegate class that can be used by clients to
    transparently access a server.
    The class should be usable from clients within WLS containers and from
    regular java apps.
    Using JNDI authentication everything works fine.
    Using JAAS I'm having a problem when my client is a EJB app in an untrusted
    WLS domain. When the login is requested the following error is occuring:
    <ServerIdentity failed validation, downgrading to anonymous.>
    I want to be able to do a JAAS login to a non-trusted domain. I'm assuming
    that the server is trying to pass the subject who is logged into the current
    container, and my call to LoginContext.login()
    Any thoughts?
    //Example of code
    loginContext = new LoginContext("ServiceSecurity", new
    FW_SimpleCallbackHandler(pUser, pPassword, pUrl));
    loginContext.login();
    Subject subject = loginContext.getSubject();
    serviceHome = (ServiceHome)weblogic.security.Security.runAs( subject,
    new PrivilegedExceptionAction() {
    public Object run() throws Exception{
    //JNDI lookup
    //Create session bean instance
    weblogic.security.Security.runAs( subject,
    new PrivilegedExceptionAction() {
    public Object run() throws Exception{
    //do operation on instance

    Then I'd start talking to BEA support to see if they even know how to do
    this.
    Without the trust relationship I'm not sure if you can achieve what you
    want.
    Dejan
    Mark Fine wrote:
    This is exactly what I am doing.
    Implicitly there is a security context within the session bean (the user
    logs in via the web app and context is propagated). I obtain a LoginContext
    to the other server and call the method within that context.
    It doesn't work because it is implicitly passing the security context of the
    session bean and failing due to lack of trust.
    //Example of code
    loginContext = new LoginContext("ServiceSecurity", new
    FW_SimpleCallbackHandler(pUser, pPassword, pUrl));
    loginContext.login();
    Subject subject = loginContext.getSubject();
    serviceHome = (ServiceHome)weblogic.security.Security.runAs( subject,
    new PrivilegedExceptionAction() {
    public Object run() throws Exception{
    //JNDI lookup
    //Create session bean instance
    weblogic.security.Security.runAs( subject,
    new PrivilegedExceptionAction() {
    public Object run() throws Exception{
    //do operation on instance
    "Deyan D. Bektchiev" <[email protected]> wrote in message
    news:[email protected]...
    In that case you should be able to get the two different Subjects from
    the two different domains (return a different url from the URLCallback
    when you login with JAAS), and afterwards use
    weblogic.security.Security.doAs(...);
    with the correct Subject for the appropriate server when you access the
    servers.
    HTH,
    --dejan
    Mark Fine wrote:
    Thanks, but i think the content was miscommunicated. Everything works
    fine
    when the domains are "trusted". I want to know how to have "untrusted"
    domains talk to each other through explicit logins.
    ie. imagine an application on a domain in a finance department. What if
    they are trusted against other domains and can't / don't want to
    establish
    trust with your domain. They just need access to one particular service
    you
    expose.
    Thanks,
    m
    "Deyan D. Bektchiev" <[email protected]> wrote in message
    news:[email protected]...
    Hi Mark,
    You should first establish a trust relationship between your Weblogic
    servers:
    http://e-docs.bea.com/wls/docs70/secmanage/domain.html#1171534
    Then you can use JAAS to authenticate and get valid Subjects for the two
    users.
    --dejan
    Mark Fine wrote:
    I'm trying to create a proxy/delegate class that can be used by clients
    to
    transparently access a server.
    The class should be usable from clients within WLS containers and from
    regular java apps.
    Using JNDI authentication everything works fine.
    Using JAAS I'm having a problem when my client is a EJB app in an
    untrusted
    WLS domain. When the login is requested the following error is
    occuring:
    <ServerIdentity failed validation, downgrading to anonymous.>
    I want to be able to do a JAAS login to a non-trusted domain. I'm
    assuming
    that the server is trying to pass the subject who is logged into the
    current
    container, and my call to LoginContext.login()
    Any thoughts?
    //Example of code
    loginContext = new LoginContext("ServiceSecurity", new
    FW_SimpleCallbackHandler(pUser, pPassword, pUrl));
    loginContext.login();
    Subject subject = loginContext.getSubject();
    serviceHome = (ServiceHome)weblogic.security.Security.runAs( subject,
    new PrivilegedExceptionAction() {
    public Object run() throws Exception{
    //JNDI lookup
    //Create session bean instance
    weblogic.security.Security.runAs( subject,
    new PrivilegedExceptionAction() {
    public Object run() throws Exception{
    //do operation on instance

  • WSUS Sync is not working Sync failed: UssCommunicationError: WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. --- System.Security.Authentication.AuthenticationException: The remote

    I know there are loads of posts with same issue and most of them were related to proxy and connectivity .
    This was case for me as well (few months back). Now the same error is back. But I've confirmed that FW ports and proxy are fine this time around.
    server is configured on http port 80 
    ERROR
    Sync failed: UssCommunicationError: WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid
    according to the validation procedure.~~at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request). Source: Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WSyncAction.WSyncAction.SyncWSUS
    I've checked proxy server connectivity. I'm able browse following site from WSUS server
    http://catalog.update.microsoft.com/v7/site/Home.aspx?sku=wsus&version=3.2.7600.226&protocol=1.8
    I did telnet proxy server on the particular port (8080) and that is also fine.
    I've doubt on certificates, any idea which are the certificates which we need to look? And if certificate is expired then (my guess) we won't be able open the above mentioned windows update catalog site?
    Any tips appreciated !
    Anoop C Nair (My Blog www.AnoopCNair.com)
    - Twitter @anoopmannur -
    FaceBook Forum For SCCM

    Hi Lawrence ! - Many thanks for looking into this thread and replying. Appreciate your help.
    Your reply  ("SSL is enabled/configured, and the certificate being used is invalid
    (or the cert does not exist or cannot be obtained), or the SSL connection could not be established.") is very helpful.
    I've already tested CONTENT DOWNLOAD and it's working fine. WSUS Sync was also working fine for years with proxy server configured on port (8080) and WSUS server on port 80.
    My Guess (this is my best guess ;)) is this something to do with Firewall or Proxy side configuration rather than WSUS. However, I'm not finding a way to prove this to proxy/firewall team. From their perspective all the required port communication open and
    proxy server is also reachable. More over we're able to access internet (Microsoft Update Catalog site) over same port (8080).
    Any other hints where I can prove them it's a sure shot problem from their side.
    Thanks again !!
    Anoop C Nair (My Blog www.AnoopCNair.com)
    - Twitter @anoopmannur -
    FaceBook Forum For SCCM

  • OTL - Table Relationship between Timecard and Workflow

    Hi All,
    Our employees work multiple projects and charge their time thru OTL to each of individual project as appropriate every pay period. Each project has it's own project manager. When an employee sumbits his timecard for approval the workflow routes an approval notification to EACH project manager. Every project manager must approve the employee's timecard before the "overall" timecard status is APPROVED.
    For example, an employee works on four diffent projects - each project has a different PM. When the employee submits his timecard for approval an approval notification is sent to all four PMs. However, more than occasionally at least one of the PMs doesn't approve the timecard in a timely fashion so the employee's timecard is "hung up" waiting for approval.
    I need to write a query in which I specifiy both an employee and particular pay period, and the query returns for the employee/pay peirod EACH Project Name, the PM for the respective project, and whether or not the the PM has approved the employee's time for the respective PM's project in the specified pay period.
    Unfortunately I don't really know where to start. I don't know if there is an HXC or group of HXC tables that would allow me to report on the individual project manager's 'status' (i.e., has a PM approved his project in the employee's timecard)...or do I need to allow include some workflow tables such as (maybe ?) wf_notifications ? And if I need to include some WF tables can someone help me understand where the relationship between timecard and WF is definded/stored (in other words, for a particular timecard how can I query a WF table - for example, wf_notifications - and find all the respective notifications associated with that particular timecard ?
    I hope my question is clear, but please advise if you have any questions. Thanks in advance for the help !!
    Jeff

    Hi Jeff,
    Did you ever get an answer on this question, as I have similar issues.
    One question you may be able to answer - Do all approvals on the project side need to be done for ANY project information to pull into Project Accounting, or as each Project Manager approves their portion does it pull in to PA?
    Thanks very much!!
    Lori

  • Separate document no. for SD revision document and detagging relationship between invoice and SD document no.

    HI,
    Country specific settings for India - Business transactions enables SD revision vide table TE872_SDCTRL_IND.
    Whenever SD revision takes place system issue similar document no. as that of invoice and tagged it with XBLNR as per standard process.
    Now issue that if that invoice is reversed, subsequent SD also gets reversed.
    So business requires to have separate document no. for SD revision document and detagged relationship between invoice and SD document no.
    I have explored event R507, 0010, 0060 and R436 but couldn't find input structure where such separate document can be assigned.
    So can you provide hint which can assist in issue resolution?
    Regards,
    Paresh

    Check this thread, if this helps.
    [url] Link between MKPF table and EKKO or RBKP table [url]
    I've done this as well earlier to create a custom document flow for archived documents where from the EBELN i've found all the related documents. Hope this helps.

  • Could I build 1:N relationship between CMP and BMP?

    Hi, as subject, Could I build 1:N relationship between CMP and BMP?
    Thanks a lot!
    a13519

    Container managed relationships only apply to CMP beans. You can look at the DTD in appendix B of the EJB spec or chapter 10 where they make this distinction.

  • Difference/relationship between XML and XSD

    Hi All,
    Correct me if i am wrong,
    When we create a source and a target datatype in IR automatically objects will be created in XSD.
    The same way it does when we create message type.
    In message mapping, We map source and target message type and when we test with sample data, we can view source and target in xml
    My question is what is the difference/relationship between XML and XSD ?
    Thanks,
    ss

    Hi,
    XML (Extensible Markup Language) is a W3C initiative that allows information and services to be encoded with meaningful structure and semantics that computers and humans can understand. XML is great for information exchange, and can easily be extended to include user-specified and industry-specified tags.
    Whereas
    An XML Schema Definition (XSD) is an instance of an XML schema written in the XML Schema language. An XSD defines a type of XML document in terms of constraints upon what elements and attributes may appear, their relationship to each other, what types of data may be in them, and other things. It can be used with validation software in order to ascertain whether a particular XML document is of that type, and to produce a Post-Schema Validation Infoset.
    I hope this clarifies.
    Regards.
    Praveen

  • What is rfc of creating relationship between ibase and partner?

    I need bapi or rfc for assign a partner to ibase.
         create relationship between ibase and parten.
    pls.

    Hi
    check this link
    Re: BAPI for creating IBASE structure
    Regards
    Pavan

  • Many to many relationships between Fact and Dimension

    Hi All,
    I have to solve two kind of many to many relationships between Fact and Dimension.
    1. Many to Many relationship between Fact and Dimension, using a bridge table, with FKs in fact and dimension to bridge table’s PK.
    2. Many to Many relationship between Fact and Dimension, using a bridge table, and an intersection table, with FK in fact to bridge table, and 2 FKs in intersection table to Dimension and to bridge table.
    I need help on implementing (how the mapping has to look like) them in OWB 9.2.0.2.8.
    Thanks,
    Aurelian Cojocaru

    Aurelian,
    Unfortunately, you cannot implement this in the dimensional model. You would have to use relational tables and relationships between those in order to implement your scenario.
    Thanks,
    Mark.

  • Employee relationship between BP and org.BP missing

    Hello,
    I am getting few error in SRM when trying to order a shopping cart. After checking the user and BP through USERS_GEN i am getting this error.
    "Employee relationship between BP and org.BP missing". Could anyone help me in this.
    Thanks,
    Pijush

    Hi Pijush
    Please let us know are you create the new EBP purchasing org copying from any other existing  EBP purchase org, if yes, could you please delete the new EBP org assignment and create the new EBP org by using the Create icon and select u201CIs Line Supervisor ofu201D option. It will be resolve your issue.
    Thanks
    Sada

  • Relationship between db_flashback_retention_target and fast_recovery_area

    Hi to all
    I was doing a test on Flashback Database on my Oracle 11gR2 and I would like to seek clarifications on the relationship between db_flashback_retention_target and fast_recovery_area. Here are my current settings below:
    SQL> show parameter db_flashback_retention
    NAME TYPE VALUE
    db_flashback_retention_target integer 60
    SQL> show parameter recovery_file_dest
    NAME TYPE VALUE
    db_recovery_file_dest string L:\app\amosleeyp\fast_recovery
    _area
    db_recovery_file_dest_size big integer 20G
    Here come the question. I know that the db_flashback_retention_target parameter specifies the upper limit (in minutes) on how far back in time the database may be flashed back. I did a testing and below is the sequence of events.
    DELETE FROM SCOTT.EMP WHERE ename = 'KING'; -- *12:13pm*
    FLASHBACK DATABASE TO TIME = "TO_DATE('2013-03-25 12:12:00','YYYY-MM-DD HH24:MI:SS')"; -- *1:30pm*
    Select count(*) from SCOTT.EMP where ename='KING'; -- *1:31pm*
    COUNT(*)
    1
    From this simple test, I was able to flashback database to more than 60minutes ago despite my retention window being set at 60minutes. Is this due to the reason that I have a huge db_recovery_file_dest_size of 20G? Thus, I am able to go back in time for more than 60minutes? Thanks for the sharing.

    Hi,
    So do you mean that the retention target can be at about 59,60,61minutes or more depending on the fast_recovery_area space? So it actually fluctuates ~ ?No it does not fluctuate. fast_recovery_area is just a storage area for multipurpose use for backup, backup copy, archived redo logs and flashback logs etc, so don't confuse it with flashback retention.
    flashback retention time is the time which Oracle will always ensure you the flashback of database. If set to 60 minutes, it means you will certainly be able to flashback your database atleast 60 minutes.
    If your fast recovery area is free, Oracle will not delete flashback logs (and you might be able to flashback to even several days if flashback logs have not been deleted from fast recovery area). It will only delete flashback logs if fast recovery area has small space left in it.
    Only when I set the guaranteed restore points , then it will always store at 60 minutes?See following for this concept
    http://docs.oracle.com/cd/E11882_01/backup.112/e10642/flashdb.htm#autoId8
    Salman

  • Relationship between JCE and JSSE providers.

    Howdy,
    I need clarification about the relationships between JCE and JSSE providers.
    Do JSSE providers function independantly of JCE providers. If a JCE provider supplies a specific encryption algorithim, is it used in the JSSE?
    Or are only the JSSE provider encryption algorithims used ?
    Jim Cotsios

    In JSSE 1.0.x, and JSSE in J2SE 1.4 beta 2
    and earlier, the
    JSSE and JCE are completely separate entities.
    The JSSE doe not use any of the JCE algorithms.
    All necessary algorithms are provided either
    in the JSSE jar file, or by obtaining them
    from the J2SE itself with the appropriate
    getInstance().

Maybe you are looking for