Use of saved credentials

I know I can Get-Credential and use the object for things like creating a scheduled task, or using Invoke-Command on another machine.
And I know I believe I can save that Credential to file for later use as well.
But, is there any way to run an arbitrary cmdlet using that saved credential? Say a Copy-Item? I have a series of things I want to do in the context of the saved credential, and others that need to happen in the user context, and I would like to have the
script running in user context simply wrap a series of commands in that credential. The other approach I am considering is a scheduled task, but that is a bit of a kludge compared to just wrapping what I need in the credential, if that is possible.
Gordon

That "can only be decrypted by the same user" is a limitation (and feature) of the Data Protection API, which ConvertTo-SecureString / ConvertFrom-SecureString use under the hood, by default. You can encrypt data in such a way that it can be shared;
the trick is protecting your encryption keys.
I've recently published a module for just this purpose, which leverages RSA certificates to enable sharing (and to take care of key management):
http://gallery.technet.microsoft.com/Share-encrypted-data-2f91fd3f . Prior to writing that module, I published several examples of different encryption techniques in
PowerShell:
http://gallery.technet.microsoft.com/PowerShell-Encryption-45709b87 . (The newer ProtectedData module is really just a more general purpose, user-friendly wrapper around the techniques used in examples 4 and 5.)

Similar Messages

Useful Script to manage saved credentials on windows XP

Hello,
I have the following issue,.
In my environment it is the necessity to remove cached credentials from stored user names and passwords in windows XP OS. There is a hassle to do this manually on all XP computers.
To Automate this process I need a right and useful script to run on all machines to delete the saved credentials.
CMDKEY.exe is the exact solution for me but it don't work on Windows XP machines.
Can you suggest me any other - more helpful script supported for Windows XP..?
For example: to delete cached credentials..
Thanks in advance,

I agree with Bill, but you can use the WS2003 version of cmdkey on XP if you absolutely have to.
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Farm Remote App 2012 R : Your system administrator does not allow the use of default credentials to log on to Work Resources

Hi
Here is the situation:
I have a Farm with 3 servers W2012R2 in a Domain
Server1                           Server 2
Server3
RDSession Host            RDSession Host
RDSession Host
Connection Broker        Connection Broker (Passive)
RD Web Access
2 DNS Alias : - poc.mydomain.local (Use for the RD Web Access and points to Server1
                  -poccb.mydomain.local (Use for the Connection Broker and points to Server1)
I have setup the Connection broker in HA with Server2 as Passive Server : DNS Round Robin poccb.mydomain.local (Server1)
The certificate Manager has generated 2 CA certificates :
- 1 for the RD Web Acc (poc.mydomain.local
-1 for Connection Broker SSO and for publishing
I have created 1 Group Policy for these 3 servers and 1 GP for my client Windows 7 SP1.
Server GPO :
Computer/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security
Always prompt for password upon connection=Disabled
Require use of specific security layer for remote (RDP) connections : SSL (TLS 1.0)
Set client connection encryption level : High Level
Client GPO
Computer/Administrative Templates/System/Credentials Delegation = Allow delegating default credentials (Concatenate OS defaults with input above)
TERMSRV/POCCB.mydomain.local
I use no Gateway and in my collection,I have activated SSL (Like in my Server GPO)
I have now problem with SSO.
Connection with remote desktop client with server name = poccb.mydomain.local
Your system administrator does not allow you the use of default credentials to log on to the remote computer poccb.mydomain.local because its identity is not fully verified
If in my client GPO I add the physical name of the 3 servers, it works :
TERMSRV/Server1
TERMSRV/Server2
TERMSRV/Server3
Open RDP Files with server name = poccb.mydomain.local
if my connection broker connects me on Server1 , no problem
But If I arrive on Server2 & Server 3=
Your system administrator does not allow the use of default credentials to log on to Work Resources
I have searched on internet. No result for " to log on to Work Resources"
Any idea ? Thanks for your help

Hi,
Thank you for posting in Windows Server Forum.
Firstly check that, your user is using domain\username to enter the credential in the dialog box.
Now for a try, you can edit .rdp file with notepad and just place “enablecredsspsupport:i:0” line in it, save it an launch to check whether you are facing same issue.
As you are using windows 7 then upgrade to RDP 8.1. Also as you have already enter the FQDN name of server under “Allow delegating default credentials”. For a try please enable and configure for all the remaining settings as follow and check the result.
Start / Run / gpedit.msc / Computer Configuration / Administrative Templates / System / Credentials Delegation, and make sure you have the following four options enabled and configured:
Allow Delegating Default Credentials with NTLM-only Server Authentication
Allow Delegating Default Credentials
Allow Delegating Saved Credentials
Allow Delegating Saved Credentials with NTLM-only Server Authentication
Finally, open a command prompt and use “gpupdate /force” command to apply the policy directly.
More information:
Remote desktop credentials did not work
Hope it helps!
Thanks.
Dharmesh Solanki

How can i stop firefox from asking "Choose A Network Connection" when i'm offline and using my saved pages

How can i stop Firefox from asking "Choose A Network Connection" when i'm offline and using my saved pages
i use Firefox 22.0 on windows 7
it's about one week that it ask for "Network Connections" when i'm offline and disconnected from the internet even when i don't open a save page and just opening Firefox with a blank page
Image of the Error:
http://home.sums.ac.ir/~rowshansh/firefox.png
http://www.sums.ac.ir/~rowshansh/firefox.png

Did you check the network setting?
Sounds that you have set to connect automatically when a connection is not available.
*http://kb.mozillazine.org/Autoconnect
*http://kb.mozillazine.org/Browser_attempts_to_connect_when_already_connected

User Exit OR Badi for MK01 transaction (used for saving vendor amster data)

Hi All,
I have a requirement where I have to call my workflow, when we create the Vendor using my custom transaction (ZMK01, which is a copy of standard transaction MK01).
For Workflow triggering I am using FM 'SAP_WAPI_CREATE_EVENT' in the user exit 'EXIT_SAPMF02K_001' but this is only for checking the data on saving Vendor Master.
So I want to use FM 'SAP_WAPI_CREATE_EVENT' at right place. For that , I need User-Exit or BADI which is used for saving vendor master data.
Could anyone please help me to find out the user exit or BADI for save event of vendor master data using transaction MK01.
Looking forward to your advise and thanks in advance.
Best Regards,
Mamta

Hi ,
I forgot to activiate the project linked with User exit 'EXIT_SAPMF02K_001' .
so problem is solved now
Thanks,
Mamta

REDIRECT JDBC URL WHEN USING DYNAMIC JDBC CREDENTIALS SO NOT HARDCODED

I have taken over an application that uses row-level security and ADF (using
dynamic JDBC Credentials). I have been able to set the internal_connection to
a JDBCDatasource, but cannot set the Connection Type in the Oracle Business
Component Configuration to a JDBCDatasource. When I do, I receive errors that
tables are not found. When I set the value back to a JDBC URL, everything
works fine again.
I am looking for a solution where the userid and password are not hardcoded in
the BC4J.xcfg or a way to redirect this information, as we change our system
passwords every nighty days. Otherwise, I will have to redeploy the
application every nighty days.
I did not create this application, but I am sure that you could simply follow
the "How to Support Dynamic JDBC Credentials" article. From that point, you
will probably be where I am, where I have the internal_connection set to a
JDBCDataSource and working properly, but cannot set the Connection Type to
anything where the userid and password will not be hardcoded or cause failure.
I wanted to let you know that I have
found the updated How to Support Dynamic JDBC Credentials
(http://www.oracle.com/technology/products/jdev/howtos/bc4j/howto_dynamic_jdbc.h
tml) and was going to run through the "Advanced: Supporting Dynamic JDBC URLs",
but once I was done keying in
env.remove(ConnectionStrategy.DB_CONNECT_STRING_PROPERTY); I received a
depreciation message on the DB_CONNECT_STRING_PROPERTY. (Note: I am coding in
JDeveloper 10.1.3, so this may be depreciated as of then, but the ADF Libraries
for JDeveloper 10.1.3 are on our Oracle 10gAS 10.1.2 server.)
I thought maybe this would resolve my issue, but I can't be sure as the
deprecation message leads me to believe that this solution may not be viable in
the future.
UPDATE
=======
The article you are referencing is definitely an older version.
There is a newer article for 10g at:
http://www.oracle.com/technology/products/jdev/howtos/10g/dynamicjdbchowto.html
Please see if that helps.
I have already reviewed this article.
In fact, I have reviewed many versions of this document. I have not seen one
created yet for 10.1.3 though (especially without JSF as our 10.1.2 AS server
will not support it). I need to find an example or documentation that shows
how we can keep from having the JDBC URL stored in the BC4J.xcfg or a way to
use dynamic JDBC credentials with a JDBCDataSource. We do not want to store
the userid and password in the application, rather, we would like to setup
something that can be configurable from the application server.
I think we need to use the dynamic JDBC credentials because we are using the
row-level security, where we setup a database context for the user and only
allow certain records of a database table to be returned to the browser based
on that context.
Might there be a way to still use the JDBCDataSource?

I understand that the user provides the userid and password and that these values are setup using the Configuration class.
However, when I am to deploy the ADF Business Module with my application, I have to specify either a JDBC URL or a JDBC DataSource in the Oracle Business Component Configuration.
When I use JDBC DataSource, the code does not work properly, almost like the user's credentials are not used for the connection (I get errors like table or view does not exist).
When I use the JDBC URL, the bc4j.xcfg stores a reference in the JDBCName attribute to a ConnectionDefinition in the same file. It is in this tag of the bc4j.xcfg where the userid, sid, and password (encrypted) is stored and used when retrieving the initial context of the ADF business components.
It is these values that I want to have stored else where so that the application does not have to be redeployed in order for the password (or sid, or other connection information) to be change.

I built an ad using layers saved it and then converted it to a jpeg. Now when I go into elements 11 to do anything else it will not allow to copy and paste to create a new layer. What am I missing?

I built an ad using layers saved it and then converted it to a jpeg. Now when I go into elements 11 to do anything else it will not allow to copy and paste to create a new layer. What am I missing?

You know that you lost the layers when you saved it as a jpeg, right? But you're saying you can't add layers to the jpeg now when it's open in the editor? Go to Image>mode and be sure it's RGB, for starters. Are all the commands in the Layer menu grayed out?

Database access using LDAP (AD) credentials

I am looking for any information about how to allow users access to a database and underlying applications that rely on DB authentication methods, to be able to access without specifying username/password credentials.
I know that OP$ accounts can be used in which case a user does not need to specify username/password credentials... but last I checked on this I thought there were security concerns related to this and this approach was not generally recommended.
We want users to be able to access databases and applications without login since they have already authenticated to the network using their credentials as authenticated via AD... So my quesrion is...
Is there a way that credentials can be passed from AD/OID using network login credentials of users to allow access to the database and applications? Is there a way to have an Oracle database talk directly to an AD LDAP solution or is it required that you implement OID and SSO?
I hope that makes sense.... Bottom line is we want to not require username/password authentication to every Oracle database application for users. We would like a way to use their AD credentials....
Is this possible?
Or can it only be accomplished with an OID/SSO inplemenetation?
Or is this essentially OPS$ accounts? are there security concerns with ops$ accounts.
Thanks.

This can be achieved by means of an enterprise user.
You may want to read this HowTo Document: How to set up Enterprise User Security.
~ Madrid

Using SQL Server credentials with Secure Store Target Application for Data Connection in Dashboard Designer

[Using SharePoint 2013 Enterprise SP1]
I would like to use SQL Server credentials in a Secure Store Target Application, and
this page makes it look like it's possible but when I attempt to use the new Target Application ID as authentication for a Data Connection in Dashboard Designer, I get a generic "Unable to access data source" with no error logged in SQL Server
logs.
I am able to use a Target Application with AD credentials to access the SQL db without a problem. Suggestions?

Hi,
1. Make sure that the credential is set to
Secure Store Target Application. Navigate to the Central Administration. Click on the
Application Management. Click on the Manage Service Applications. Click on the
Secure Store Service Application. Select the application ID and from the ECB menu click on the
Set Credentials. Enter the Credential Owner, Windows User Name and the
Windows Password.
2. Make sure that in the Dashboard Designer “Use a stored account” is selected in the “Authentication” and the proper application ID is mentioned.
Please refer to the link below for more information:
http://www.c-sharpcorner.com/Blogs/14527/unable-to-access-data-source-the-secure-store-target-applic.aspx
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

How to have Infopath form use Sharepoint Domain credentials

I have built a for in infopath which is published to a library on Sharepoint 2013. This form is filled out by certain users and when its completed it gets moved into a subfolder. We then provide a link to a client who has a domain account with restricted
access to just this folder of sharepoint. They can view this form and any others we put in this folder.
The form has 2 views. The first is the view our staff sees when filling it out. There are some hidden sections in there for us that the client does not need to see. So there is a second view which is read only and I have taken away the option for them to
switch views so they can't go back to our internal view.
What I would like to happen is that the form can somehow detect by the domain login info from sharepoint, what user is opening the form and switch views based on that. What I can't figure out how to do it to have the form pull domain credentials from the
sharepoint site and use those a a variable when opening the form to set the view.
I believe I am on the right path what trying to setup a data connection but I am just missing something. I found this great guide http://www.pointgowin.com/seethepoint/Lists/Posts/Post.aspx?ID=55 but now when I open the form I get a warning stating "You
do not have permissions to access a SharePoint list that contains data required for this form to function correctly." Also I still can't seem to pull the username.
Can someone help me out? Point me in the right direction? Thanks.

Hi,
According to your post, my understanding is that you wanted to have Infopath form use Sharepoint Domain credentials.
When you use Claims-based authentication, your user name is prefaced by “0#.w|”. So for example, if your user name is SuesDomain\jdoe then your Claims-based user token will be, without
the quotes: “0#.w|SuesDomain\jdoe”
InfoPath can’t handle that, or more specifically, the UserProfile.asmx method GetUserProfileByName method can’t handle that. InfoPath tries to pass in your Claims-based user token instead
of your domain\User Name.
You have an authentication problem where the currently logged in user is not allowed to hit the web service, so you get an Access Denied 401 authentication error
To resolve the issue, you can refer to the great blog:
SharePoint 2013, InfoPath and Claims – GetUserProfileByName
More information:
InfoPath over Claims Authentication (SharePoint 2010 & 2013)
SharePoint 2013 Business Connectivity Services Search and Profile PageMetroStar Systems Blog
Thanks,
Linda Li
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Linda Li
TechNet Community Support

Use of host credentials.

Hi,
Please can u educate me on the above named subject.Anytime i want to perform an action that requires the use of host credentials e.g.performing recovery or importing data,it brings out an unspecified error thereafter stopping the enterprise manager from working. Thanks.

Hi,
Any time you need to perform an operation over the OS, the OEM will request the Host Credentials (OS Username and password/e.g. user: Oracle, Password: xxxxx) to execute your request because when you connected to the web console you only enter the DB Username and password not the OS ones. That mean the OEM don't have the information necessary to connect to the OS to write something to disk, or execute something over the OS (Backup, recover,etc).
If you are using linux/windows the hostname credentials should be the user who has installed the oracle 10g database software, if Windosw the user you are using need to be member of the ora_dba group and have Local Security privilege 'Log on as a batch job'.
What you need to do is go to start----> Programs----> admin tools----> Local security policy --->local policies ---> user rights assignments
In the list to your right, look for 'Log on as a batch job', double click and add the same OS local user you using to access OEM web to the group.I hope this answer your question. You can always say to the OEM to save your OS username and password, this way you are not going to be asked all the time.
Cheers,
Francisco Munoz Alvarez
http://www.oraclenz.com

BADI used when saving a prospect - CRM

Hello Experts,
I have recently started ABAP development in CRM and I am stuck at one place.
I am looking for a BADI that is used when saving a prospect. I need to add a check and retrieve some info from some parameter tables and assign them to the prospect.
For this, i need to identify the BADI i have to use. Could you please show me where to start to find the BADI? Or do you have a transaction code from which i can search for the BADI.
Thanks for the help
Regards,
Thyaga

Hi,
as I wrote you previously I think that the problem is the BADI you've implemented.
I did what you require with badi CRM_BP_UIU_SAVE with a code similar to this
if gv_access_header->alive( ) eq abap_true.
Place your coding here which shall be executed during the save event.
    data:
    lr_relation             type ref to             cl_crm_bol_entity,
    lv_bo                   type ref to             if_bol_bo_property_access,
    zaccount_group          type                    string,
    zbp_category            type                    string,
    lr_relation_header_obj type ref to             cl_crm_bol_entity,
    zbp_group               type                    string,
    zbp_groupc(30)          type                    c,
    zbp_guid                type                    string,
    zbp_number              type                    string,
    zbp_numberc             type                    bapibus1006_head-bpartner.
lr_relation_header_obj ?= gv_access_header.
    if lr_relation_header_obj is bound .
      lv_bo ?= lr_relation_header_obj.
      zbp_group = lv_bo->get_property_as_string( 'BP_GROUP' ).
      zbp_category = lv_bo->get_property_as_string( 'BP_CATEGORY' ).
      zbp_guid = lv_bo->get_property_as_string( 'BP_GUID' ).
      zbp_number = lv_bo->get_property_as_string( 'BP_NUMBER' ).
    endif.
if zbp_category = '1' .
   elseif zbp_category = '2' .
data: lt_sales_areas type crmt_bus_sales_area_t,
            lv_sales_areas type line of crmt_bus_sales_area_t,
            lv_partner_guid type bu_partner_guid,
            zagente         type string.
      data: dest            type string,
            zvalore         type zvaldef,
            zvkorg          type vkorg,
            zzbukrs         type bukrs,
            zsales_org      type crmt_sales_org,
            zzsalesorg      type crmt_r3_sales_org ,
            zzwerks         type werks_d,
            ztdatiorg       type crmt_bus_set0140,
            zaccgroup       type string,
            zaugrp          type string,
            zzaugrp         type bu_augrp.
      data: l_data          type crmt_bus_set0140,
            l_datax         type crmt_bus_set0140x .
      data: zir_mess_cont type ref to cl_crm_genil_global_mess_cont.
      data lr_core type ref to cl_crm_bol_core.
      call function 'Z_RFCDEST'
        importing
          zdest = dest.
      lv_partner_guid = zbp_guid.
call function 'CRM_BUPA_FRG0010_GET_VALIDLIST'
        exporting
          iv_partner_guid = lv_partner_guid
        importing
          et_sales_areas = lt_sales_areas.
      loop at lt_sales_areas into lv_sales_areas.
        zsales_org = lv_sales_areas-sales_org.
      endloop.
      if lv_sales_areas is initial.
gestisco messaggio di errore
        create object zir_mess_cont.
        zir_mess_cont->reset( ).
        lr_core = cl_crm_bol_core=>get_instance( ).
        lr_core->start_up( 'ALL' ).
        zir_mess_cont = lr_core->get_global_message_cont( ).
        call method zir_mess_cont->add_message
          exporting
            iv_msg_type       = 'E'
            iv_msg_id         = 'Z_BP'
            iv_msg_number     = '002'
            iv_show_only_once = abap_true.
        exit.
in case of error, system is not saving.

SIA restarts when the user logins using his SAP Credentials

Hi
I have recently installed BO Enterprise XI 3.1 SP2 (FixPack 2.7) and SAP IK 3.1 SP2 FixPack 2.7.
and have done the initial configuration for SAP Authentications.
And when I try to access InfoView using my SAP Credentials.
it gives this error
"Account information not recognized: All the servers with CMS AUNSSDCBODV01.production.transfieldservices.com:6400, cluster @AUNSSDCBODV01.production.transfieldservices.com:6400, kind cms which host service null, are down or disabled"
and I find these errors in the Windows Event Viewer.
"Server Intelligence Agent: server AUNSSDCBODV01.CentralManagementServer stopped unexpectedly."
and this error
Server Intelligence Agent: server AUNSSDCBODV01.CentralManagementServer is considered failed because it has stopped 5 time(s) within 60 minute(s). Please restart this server.
can somebody help me resolving this issue.
regards
Biju Kumar

KB 1455254 - After installation of SAP integration kit SP2 CMS crashes upon login with secSAPR3 users. I ran into this issue because the customer had not installed the proper SAP client on the BOE server(s) rather just places some dll instead. SP2 requires an SAP client installed and that should resolve the CMS crashing. Grab the newest version from the SMP portal.
I edited in the KB, contrary to other beliefs the product is tested with the SAP client installed post SP2. If you do not want to install the client and choose to install individual files (like in the KB) this can be considered an unsupported environment and may cause your CMS to crash.
Regards,
Tim

Can use use photos saved in Aperture 2.1.1 in the new Aperture, can use use photos saved in Aperture 2.1.1 in the new Aperture

can use use photos saved in Aperture 2.1.1 in the new Aperture, can use use photos saved in Aperture 2.1.1 in the new Aperture.
Does anyone out there no if you can merge the libraries? I have two hard drives full of photos saved in the Aperture 2.1.1 library, I have never needed to upgrade. I bought a Mac desktop and purchased the new aperture. When I plug the hard drive in and try to use the other ones from the earlier version, the computer says files are incomplatible..
Can anyone help?

When AP 3.0 was released, Apple added a new rendering engine and the local adjustment brushes. Upgrading at that time required that the library be upgraded also to use the new features. Users had the option of upgrading the library database (and internal support files) only, or to opt for updating all images to allow use of the local adjustment features (brushes) on those images.
There have been additional updates that required the library to be updated also (AP 3.1, 3.2, 3.3 and 3.4 if memory serves). There may have been a couple of additional ones, but those 3.x updates added key features.
I suspect you may need to update your current library to AP 2.1.4 > make a copy for backup > upgrade library to AP 3. You may be able to upgrade directly from 2.1.4 to 3.4.1, but I am not sure since I went from 2.1.4 to 3.0.
If you have OS X 10.8.2 on the new machine, I am not sure if AP 2.1.4 can be run (hopefully others can answer that one). Merging and exporting projects as a library were one of the features in AP 3, so you must have a library at that level to do that type of procedure.
Here is a link to the update features and you will see some recommendations at the bottom for upgrading the libraries for use with AP 3.
Sorry, forgot the add the link:
http://support.apple.com/kb/TS2518
Message was edited by: CorkyO2 to add link to release notes

HT5622 When I tried to use my saved credit card, I made an error & it didn't work. Now, although the error is corrected, I keep getting a message that the card is declined. Can I fix this, or will the error time out?

When I tried to use my saved credit card, I made an error & it didn't work. Now, although the error is corrected, I keep getting a message that the card is declined. Can I fix this, or will the error time out?

Hello KGDJ,
Thanks for using Apple Support Communities.
When there is a mismatch between the iTunes Store's records and your credit card company's records, you will receive an error message
For more information on this, take a look at:
iTunes Store: My credit card's security code or zip code does not match my bank's records
http://support.apple.com/kb/ts1646
If the issue persists, contact your credit card company and verify that they and any company they use to process credit card authorizations have the correct information on file.
Best of luck,
Mario

Use of saved credentials

Similar Messages

Maybe you are looking for