Windows 2012 R2 ADRMS domain controller version and Non-domain-joined Mac Client with outlook 2011

Hi,
What is the AD version for Windows 2012R2 ADRMS? Is it possible to have Windows 2003 R2 DC with Windows 2012R2 ADRMS?
Any installation guide Non-domain-joined Mac Client with outlook 2011?
What is the SQL version for Windows 2012R2 ADRMS?
Please advise. Thanks.
Kelvin Teang

Hi Kelvin -
There is no RMS Client for Macs. That functionality is actually provided through the Office for Mac application (this is different compared to the PC). Domain-joined clients will autodiscover the RMS server and should be able to create and consume
protected content. Non-domain-joined clients cannot automatically discover their RMS server. In this scenario, prepare a protected document or email from a domain-joined machine and send it to your non-domain-joined users. They will open
the document or email up and the URLs contained in the publishing license of the document will direct them to the correct RMS server.
I hope that helps!
Micah LaNasa
Synergy Advisors
synergyadvisors.biz

Similar Messages

What is the best practice and Microsoft best recommended procedure of placing "FSMO Roles on Primary Domain Controller (PDC) and Additional Domain Controller (ADC)"??

Hi,
I have Windows Server 2008 Enterprise and have
2 Domain Controllers in my Company:
Primary Domain Controller (PDC)
Additional Domain Controller (ADC)
My (PDC) was down due to Hardware failure, but somehow I got a chance to get it up and transferred
(5) FSMO Roles from (PDC) to (ADC).
Now my (PDC) is rectified and UP with same configurations and settings. (I did not install new OS or Domain Controller in existing PDC Server).
Finally I want it to move back the (FSMO Roles) from
(ADC) to (PDC) to get UP and operational my (PDC) as Primary.
(Before Disaster my PDC had 5 FSMO Roles).
Here I want to know the best practice and Microsoft best recommended procedure for the placement of “FSMO Roles both on (PDC) and (ADC)” ?
In case if Primary (DC) fails then automatically other Additional (DC) should take care without any problem in live environment.
Example like (FSMO Roles Distribution between both Servers) should be……. ???
Primary Domain Controller (PDC) Should contains:????
Schema Master
Domain Naming Master
Additional Domain Controller (ADC) Should contains:????
RID
PDC Emulator
Infrastructure Master
Please let me know the best practice and Microsoft best recommended procedure for the placement of “FSMO Roles.
I will be waiting for your valuable comments.
Regards,
Muhammad Daud

Here I want to know the best practice
and Microsoft best recommended procedure for the placement of “FSMO Roles both on (PDC) and (ADC)” ?
There is a good article I would like to share with you:http://oreilly.com/pub/a/windows/2004/06/15/fsmo.html
For me, I do not really see a need to have FSMO roles on multiple servers in your case. I would recommend making it simple and have a single DC holding all the FSMO roles.
In case if
Primary (DC) fails then automatically other Additional (DC) should take care without any problem in live environment.
No. This is not true. Each FSMO role is unique and if a DC fails, FSMO roles will not be automatically transferred.
There is two approaches that can be followed when an FSMO roles holder is down:
If the DC can be recovered quickly then I would recommend taking no action
If the DC will be down for a long time or cannot be recovered then I would recommend that you size FSMO roles and do a metadata cleanup
Attention! For (2) the old FSMO holder should never be up and online again if the FSMO roles were sized. Otherwise, your AD may be facing huge impacts and side effects.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

Windows Domain Controller certificate for non domain clients

Hi,
Is it possible that we can export windows domain certificate and use it for non domain computers without joining domain, so that they can communicate each others without joining domain controller?
Regards

Hi,
Is it possible that we can export windows domain certificate and use it for non domain computers without joining domain, so that they can communicate each others without joining domain controller?
Not sure that what you want to achieve here.
However, yes, it is possible to export certificates (with private keys) from domain machines then import them to non-domain machines, and some certificates can even function well based on key usages. Please note that Domain Controller certificates are only
meaningful to Domain Controllers. Possession of domain certificates doesn’t indicate machines are part of domain.
Without joining a machine to a domain (or without a trust), the machine is always treated as untrusted by the domain members no matter what kind of certificates it holds.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

New 2012 server in a mixed 2003 and 2008 domain (in process of upgrading)

We are replacing a Windows Server 2003 machine which crashed and is gone, with a Windows Server 2012 Standard machine. The old 2003 Server was a domain controller running along side one other 2003 server (which is getting replaced next) and
3 Windows Server 2008 R2 Standard x64 domain controllers which up and running. When trying to add the Windows Server 2012 Standard server as a domain controller to an existing domain, we are getting the following error:
Verification of replica failed. The forest functional level is Windows 2000. To install a Windows Server 2012 domain or domain controller, the forest functional level must be at Windows Server 2003 or higher.
However, the domain was already brought up to at least the 2003 level when we added the current live 2008 domain controller (Windows Server 2008) several years ago. When I now try to run Adprep on the Windows Server 2008 (adprep from the 2008
install CD) I get the following responses:
Command: adprep /forestprep
Response: Forest-wide information has already been updated. [Status/Consequence] Adprep did not attempt to rerun this operation.
Command: adprep /domainprep /gpprep
Response: Domain-wide information has already been updated. [Status/Consequence] Adprep did not attempt to rerun this operation.
I have gone to Active Directory Domains and Trusts on all of the other servers and each one is at a Windows Server 2003 Functional level and states that I can not raise the level because I have AD Dc's that are not running the appropriate version of
windows. And I get that due to the remaining 2003 server, but none are at Server 2000 level.
So it seems we have a conflict where the 2012 server thinks the domain is at the Windows 2000 level. Is there any way around this, or a way to find out where the conflict is coming from?
Thank you
Kevin C

Please proceed like the following:
Run netdom query fsmo to identify the current FSMO holders. It seems that the old DC was holding FSMO roles. If this is the case then seize them to another DC: https://support.microsoft.com/en-us/kb/255504
Do a metadata cleanup to remove the old DC reference: Use dsa.msc
and then remove the old DC computer account. Also, use dssite.msc
and remove the NTDS settings of the old DC then remove its references over there
After doing this, check again and try to raise the DFL and FFL. Do not forget to check that your DCs and AD replication are in healthy state using
dcdiag and repadmin commands.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

A question and out CA 'domain controller' templates, and kerbros/KDC in general

Hello All
Can someone please help me with the following question. This may be two questions (so if you think I have to post separately please let me know).
I was reading an MS article called "Active Directory Domain Controllers and Certificate auto-enrolment" which was very helpful but through up some questions too.
for example the article talks about a 'template' called 'Directory E-mail Replication' what is this? in other words we have all heard of MS Exchange for corporate email, but the name of this template seems to suggest 'Domain Controllers' send e-mails to
reach other? (over and above their normal AD replication) or is this template used for sending AD replication data via SMTP rather than RPC (which is something I have never heard of). Can someone please explain the purpose of this template, thanks very much.
Also I want to understand the relationship (if any) between these Domain Controller PKI templates and Kerberos in general (can someone point me to a white paper of good blog article)
For example my understanding at the moment if Kerberos is basically a 'symmetric' key encryption system where by the KDC (Key Distribution Center) take care of administering all these symmetric key pairs, is this basic premise
correct?
I understand (at a very basic level) to concept of Kerberos TGT and TST (ticket granting ticket and ticket service ticket) and the fact the client cannot read the contents of either of these (rather the KDC is the trust anchor and deals with all the encryption
and description of the keys to provide/proof identity authentication, and the client simply presents these tickets)
Hopefully the above is correct (or on the right lines), what I do not understand is how this (Kerberos/KDC) relates to DC's and their 'Domain Controller' templates or how these Domain Controllers use the certificates generated from these templates for encryption
(I presume to encrypt the AD sync traffic, but isn't this done via Kerberos).
Also AD CA is optional component therefore my logic suggests there should be no relation to these Domain Controller templates and Kerberos
As you can see I have some fundermental gaps in my knowleague and would really appreciate someone helping me out here
Thanks very much
AAnotherUser__
AAnotherUser__

Re the template Directory E-mail Replication.
Yes, you are right - these are only used for (optional) AD replication via SMTP, and yes this is rather uncommon. I have only encountered this type of replication in a few environments with very specific - and historically grown - firewall and trust requirements.
Re Kerberos and certificates:
My favorite white paper is this:
Windows Vista Smart Card Infrastructure. See especially the details of how Kerberos is used with smart cards as depicted in Figure 16 and the text below.
When users use smartcards to logon to their computers they authenticate to DCs and DCs authenticate to them. So DCs also need certificates.
See
RFC 4556 for details of how public key cryptography is used to protect the Kerberos protocol.
So in summary certificates are used for authentication and encryption.
You are right that otherwise - if you don't use smart card logon for users - DC certificates are optional and not needed to do default Kerberos authentication.
Another reason DC certificates are often deployed is for allowing LDAP browsers and other management tools to connect to AD via LDAPs.
Elke

Enter the forest and it locks me out of entering the domain controller or any child domains

Using Windows Server 2008 R2 SP1, no matter if I use the Graphical User Interface (GUI) or the Answer Method to enter the forest and it locks me out of entering the domain controller or any child domains.
Is there a remedy to this?

Hi Philo,
Would you please tell us that how did you try to enter the forest?
Are you able to run dcpromo to add domain controllers or create child domain?
Best Regards,
Amy

Please help us, after we installing the flash player is said that the plug-in version is not installed and i need Flash Player for my windows 7 Professional 64-bit Japanese version and Internet explorer 10

Please help us, after we installing the flash player is said that the plug-in version is not installed and i need Flash Player for my windows 7 Professional 64-bit Japanese version and Internet explorer 10

Hello,
There are two versions of Flash Player for Windows: ActiveX for Internet Explorer and Plug-in for non-IE browsers. It appear you may have installed the one for non-IE browsers. Please use the links below to download and install:
Flash Player ActiveX (Internet Explorer
Flash Player Plug-in (All other browsers)
Maria

I just paid for and downloaded the wrong version of Adobe Acrobat X Pro. I downloaded the Microsoft version and I have a Mac running OX Yosemite. How do I get a credit for what I ordered and then reorder the correct Mac version of Adobe Acrobat X Pro

I just paid for and downloaded the wrong version of Adobe Acrobat X Pro. I downloaded the Microsoft version and I have a Mac running OX Yosemite. How do I get a credit for what I ordered and then reorder the correct Mac version of Adobe Acrobat X Pro

If you ordered Acrobat via subscription, then you can use either Windows or Mac version. Just download/install the Mac version, then activate it with your Adobe ID.
If you purchased the perpetual license, then you need to Contact Customer Care bu chat or phone.

Unable to find domain controller for the specified domain. Please explicitly specify the domain controller.

Im getting error "Unable to find domain controller for the specified domain. Please explicitly specify the domain controller." when I try to create an AD connection for my User Profile Service. The entire sharepoint environment is installed
on one server. That server has everyting on it, AD, SQL, Sharepoint, and its the domain controller. I cant figure out why this will not identify?Trevor Fielder

Hi,
Did you get this error when clicking on the Populate Containers button?
If yes, please make sure that you have provide the domain credentials in the account name and password
boxes below when entering the domain information. The account must be granted the replicating directory changes permission on the domain.
You can refer to this blog:
http://www.harbar.net/articles/sp2010ups.aspx
Xue-Mei Chang

Hi i downloaded windows on my macbook pro without bootcamp and it deleted the mac portion of my laptop and i downloaded os x but my laptop started off with os x lion and i want os x lion back on my laptop what do i do

hi i downloaded windows on my macbook pro without bootcamp and it deleted the mac portion of my laptop and i downloaded os x but my laptop started off with os x lion and i want os x lion back on my laptop what do i do now?

timothymac123 wrote:
and i downloaded os x but my laptop started off with os x lion and i want os x lion back on my laptop what do i do now?
I'm confused. Are you saying that your mac came with an older version of OS X, but you want to be able to use OS X Lion, which you downloaded from the App store? If this is not the case, what do you mean by "I downloaded os x but my laptop started off with os x lion and i want os x lion back"? Specifically, what do you mean by "I downloaded OS X" if your mac came with Lion?

Search Example Code inside for Versioned and non-Versioned Documents

These may be of use to someone...
File names:
AttributeSearch.java
AttributeContentSearch.java
The AttributeSearch application will search for documents (both versioned and non-versioned) with a file name containing "txt", residing in the user "system"'s home directory.
The AttributeContentSearch application will search for documents (both versioned and non-versioned) with a file name containing "txt", and document content containing the word "hello", residing in the user "system"'s home directory.

import oracle.ifs.beans.LibraryService;
import oracle.ifs.beans.LibrarySession;
import oracle.ifs.common.CleartextCredential;
import oracle.ifs.common.ConnectOptions;
import oracle.ifs.common.IfsException;
import java.util.Locale;
import oracle.ifs.beans.DirectoryUser;
import oracle.ifs.beans.PrimaryUserProfile;
import oracle.ifs.beans.PublicObject;
import oracle.ifs.beans.Document;
import oracle.ifs.beans.Folder;
import oracle.ifs.beans.ContentObject;
import oracle.ifs.beans.Search;
// SEARCH RESULT
import oracle.ifs.beans.SearchResultObject;
// CONTENT + ATTRIBUTE SEARCH
import oracle.ifs.search.ContextSearchSpecification;
// SELECT, FROM
import oracle.ifs.search.SearchClassSpecification;
// ORDER BY
import oracle.ifs.search.SearchSortSpecification;
// WHERE
import oracle.ifs.search.SearchClause;
import oracle.ifs.search.SearchQualification;
import oracle.ifs.search.JoinQualification;
import oracle.ifs.search.FolderRestrictQualification;
import oracle.ifs.search.AttributeQualification;
import oracle.ifs.search.ContextQualification;
public class AttributeContentSearch
public static void main(String args[])
try {
LibraryService ifsService = new LibraryService();
System.out.println("Oracle iFS Version " + ifsService.getVersionString());
CleartextCredential credentials = new CleartextCredential("system","manager");
ConnectOptions options = new ConnectOptions();
options.setLocale(Locale.getDefault());
options.setServiceName("ServerManager");
options.setServicePassword("ifssys");
LibrarySession ifsSession = ifsService.connect(credentials,options);
DirectoryUser thisUser = ifsSession.getUser();
System.out.println("Connected as \"" + thisUser.getDistinguishedName() + (thisUser.isAdminEnabled() ? "\" (admin enabled)" : "\""));
PrimaryUserProfile userProfile = thisUser.getPrimaryUserProfile();
SearchResultObject[] sro = runSearch (ifsSession,"hello");
if (sro != null)
for (int i = 0; i < sro.length; i++)
System.out.print (((PublicObject)sro.getLibraryObject()).getName());
System.out.println (" (" + ((PublicObject)sro[i].getLibraryObject()).getId() + ")");
} catch (IfsException e)
public static SearchResultObject [] runSearch( LibrarySession ifsSession, String searchCriteria) throws IfsException
ContextSearchSpecification ss = null;
SearchClassSpecification scs = new SearchClassSpecification();
SearchSortSpecification sss = new SearchSortSpecification();
SearchQualification sc = null;
ss = new ContextSearchSpecification();
ss.setContextClassname(ContentObject.CLASS_NAME);
scs.addSearchClass( PublicObject.CLASS_NAME );
scs.addSearchClass( Document.CLASS_NAME );
scs.addSearchClass( ContentObject.CLASS_NAME );
scs.addResultClass( Document.CLASS_NAME );
sss.add( Document.CLASS_NAME, "NAME", true );
sc = buildSearchClause( ifsSession, searchCriteria);
ss.setSearchClassSpecification( scs );
ss.setSearchQualification( sc );
ss.setSearchSortSpecification( sss );
Search s = new Search( ifsSession, ss );
s.open();
SearchResultObject [] sro = s.getItems();
s.close();
return sro;
public static SearchQualification buildSearchClause( LibrarySession ifsSession, String searchCriteria ) throws IfsException
Folder f = ifsSession.getUser().getPrimaryUserProfile().getHomeFolder();
FolderRestrictQualification frq = new FolderRestrictQualification();
frq.setStartFolder( f );
frq.setSearchClassname(PublicObject.CLASS_NAME);
AttributeQualification aq = new AttributeQualification();
aq.setAttribute(Document.CLASS_NAME, PublicObject.NAME_ATTRIBUTE);
aq.setOperatorType(AttributeQualification.LIKE);
aq.setValue("%txt%");
ContextQualification cq = new ContextQualification();
cq.setQuery(searchCriteria);
cq.setName("Test0");
JoinQualification jq1 = new JoinQualification();
jq1.setLeftAttribute ( Document.CLASS_NAME, Document.CONTENTOBJECT_ATTRIBUTE );
jq1.setRightAttribute( ContentObject.CLASS_NAME, null);
JoinQualification jq = new JoinQualificatio n();
jq.setLeftAttribute ( PublicObject.CLASS_NAME, PublicObject.RESOLVEDPUBLICOBJECT_ATTRIBUTE );
jq.setRightAttribute( Document.CLASS_NAME, null);
SearchClause sc;
sc = new SearchClause(jq, jq1, SearchClause.AND);
sc = new SearchClause(sc, cq, SearchClause.AND);
sc = new SearchClause(sc, frq, SearchClause.AND);
sc = new SearchClause(sc, aq, SearchClause.AND);
return sc;
null

Adobe Acrobat (latest version) and installed on my mac. It worked momentarily and then disappeared from my machine. Any help please?

I purchased Adobe Acrobat (latest version) and installed on my mac.
It worked momentarily and then disappeared from my machine. The mac software is OS X 10.8.2
I have tried to redownload but the Adobe site says the program is installed.
Any help please?
Geoff

Hi everyone,
I deleted Adobe Reader and cleared the Internet dat files and reinstalled Acrobat and it worked.
Geoff

I bought cs6 (student version) and installed into one Mac. Now I got the second Mac, how can I download CS6 to it?

I bought cs6 (student version) and installed into one Mac. Now I got the second Mac, how can I download CS6 to it?

You can get cs6 from here, it just needs your serial number when you install it.
Download CS6 products

TS4118 Ever since I got the iphone 5 my phone/icloud calender and contacts will not remain synced with Outlook. I am constantly having to sign in and sign out and unlink and re link to Outlook.

Ever since I got the iphone 5 my phone/icloud calender and contacts will not remain synced with Outlook. I am constantly having to sign in and sign out and unlink and re link to Outlook. this creates multiple categories of contacts and calenders and I have no idea which is syncing with my phone, ipad, outlook. Help. thanks.

Sounds like the Outlook plugin isn't working properly. You could try a couple of things:
Go to Start>Control Panel>Add/Remove Programs, uninstall iCloud, the download and install the iCloud contol panel for Windows again from here: http://support.apple.com/kb/DL1455. Then sign back into your iCloud account and check your syncing settings again.
Uninstall iTunes and all of its components as by following this guide exactly: Windows XP or Windows Vista/7, then reinstall iTunes. You must follow this guide exactly or it will not be successful. (Uninstalling iTunes will only remove the application; it will not touch your iTunes library or data.) This will replace the Outlook plugin.
Then try your calendar again and see if it will sync properly now.

I have Outlook 2011 installed on my Mac Pro, but I can not install it icloud. I can only get through imail, iCal and Address Book in Mac native anyone know teach me how to work with Outlook 2011 icloud? thank you

I have Outlook 2011 installed on my Mac Pro, but I can not install it icloud. I can only get through imail, iCal and Address Book in Mac native anyone know teach me how to work with Outlook 2011 icloud? thank you

"iCloud requires iOS 5 on iPhone 3GS or later, iPod touch (3rd and 4th generation), iPad, or iPad 2; a Mac computer with OS X Lion; or a PC with Windows Vista or Windows 7 (Outlook 2007 or 2010 or an up-to-date browser is required for accessing email, contacts, and calendars). Some features require a Wi-Fi connection. Some features are not available in all countries. Access to some services is limited to 10 devices."
From here > http://www.apple.com/icloud/

Windows 2012 R2 ADRMS domain controller version and Non-domain-joined Mac Client with outlook 2011

Similar Messages

Maybe you are looking for