Windows Identity Foundation no more available? No Dynamicy CRM working?

Hi,
I am testing Windows 10 TP. I tried to configure Dynamics CRM but it crashes with the exception: "Could not load file or assembly Microsoft.IdentityModel".
The Internet says that I have to install the Feature "Windows Identity Foundation", but this is not listed under Windows 10 TP Features.
Any suggestions?
Regards
Thomas

If installing .NET 4.5 doesn't work, then there is no way to install this functionality. Someone mentioned a workaround, which is to copy the DLL files from a Windows 8.1 install to the Windows 10 install, but there's nothing built in
right now.
The WIF libraries were moved into the base install of .NET 4.5, that's why I suggested installing .NET 4.5 and seeing what happens. If that doesn't work, then either 1) you'll need to wait until Microsoft updates Win 10 with the ability to install
this feature, or 2) copy the DLLs from a Windows 8.1 install of WIF.
Hope that helps!

Similar Messages

Unable to install Windows Identity Foundation on Windows 7

Following installtion guide titled "Setting Up the Development Environment for SharePoint 2010 on Windows Vista, Windows 7, and Windows Server 2008".
I am installing SharePoint Foundation 2010 on Windows 7 Enterprise 64 Bit. Following the guide above, I was able to install all of the prerequisites except for the two hotfixes: KB976462 and KB974405. Ater some research I believe KB976462 is
to be installed after KB974405 so I am troubleshooting this item before. I've downloaded the MSU file (Windows6.1-KB974405-x64.msu) and during the installtion for KB974405 it reports that the installation failed. When I go into the Windows
Update history and check the details for that update attempt it indicates Error Code 80070643. This seems to be a generic failure so I'm having trouble with solving it.
I've searched as best as I could for the solution but the solutions for others I've seen online didn't work for me. I've double checked the prerequisites for the hotfix and have IIS 7.5 as well as .NET Framework 3.5 SP1. I used the .NET
Framework Setup Verification Tool and did not see any issues. The other potention issue I saw was that in the Windows Update screen it says that "Some settings are managed by your system administrator" and automatic updates are turned
off. However, I was given a username and password that has local admin rights and that's what I was able to use to install all of the other items in the guide. Therefore I don't think that would be the issue. I'm really stuck and not sure
at all how to proceed at this point.
When I tried installing SPF 2010 dispite that error, during the wizard I recieved the error "Failed to load dependency Microsoft.IdentityModel of assembly Microsoft.SharePoint". Based on that I saw that KB974405 couldn't be ignored.
Edit: Please see complete error log below.

Below is the complete error log of the installation attempt:
2014-04-20 17:21:49:458 3308 9e8 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) ===========
2014-04-20 17:21:49:458 3308 9e8 Misc   = Process: C:\windows\system32\wusa.exe
2014-04-20 17:21:49:458 3308 9e8 Misc   = Module: C:\Windows\system32\wuapi.dll
2014-04-20 17:21:49:457 3308 9e8 COMAPI ----------- COMAPI: IUpdateServiceManager::AddScanPackageService -----------
2014-04-20 17:21:49:459 3308 9e8 COMAPI   - ServiceName = Windows Update Standalone Installer
2014-04-20 17:21:49:459 3308 9e8 COMAPI   - ScanFileLocation = C:\31ee30e9c2a50686553b\wsusscan.cab
2014-04-20 17:21:49:464 576 7bc Misc Validating signature for C:\windows\SoftwareDistribution\ScanFile\758e58e0-c318-45ba-b6ae-e6b311555e5c\Source.cab:
2014-04-20 17:21:49:473 576 7bc Misc Microsoft signed: Yes
2014-04-20 17:21:49:479 576 7bc DtaStor Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
2014-04-20 17:21:49:480 3308 9e8 COMAPI   - Added scan package service, ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:49:480 3308 9e8 COMAPI -------------
2014-04-20 17:21:49:480 3308 9e8 COMAPI -- START -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:49:480 3308 9e8 COMAPI ---------
2014-04-20 17:21:49:486 576 2484 Agent *************
2014-04-20 17:21:49:486 576 2484 Agent ** START ** Agent: Finding updates [CallerId = wusa]
2014-04-20 17:21:49:486 576 2484 Agent *********
2014-04-20 17:21:49:486 576 2484 Agent   * Online = Yes; Ignore download priority = No
2014-04-20 17:21:49:486 576 2484 Agent   * Criteria = "DeploymentAction='Installation'"
2014-04-20 17:21:49:486 3308 9e8 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:49:486 576 2484 Agent   * ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:49:486 576 2484 Agent   * Search Scope = {Machine}
2014-04-20 17:21:49:606 576 2484 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2014-04-20 17:21:49:606 576 2484 PT   + Offline serviceId = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:21:49:606 576 2484 PT WARNING: Cached cookie has expired or new PID is available
2014-04-20 17:21:50:227 576 2484 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2014-04-20 17:21:50:227 576 2484 PT   + Offline serviceId = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:21:50:303 576 2484 Agent   * Added update {B78C39B2-C915-4F8C-9780-23F71C14A560}.501 to search result
2014-04-20 17:21:50:303 576 2484 Agent   * Found 1 updates and 62 categories in search; evaluated appl. rules of 129 out of 415 deployed entities
2014-04-20 17:21:50:304 576 2484 Agent *********
2014-04-20 17:21:50:304 576 2484 Agent ** END ** Agent: Finding updates [CallerId = wusa]
2014-04-20 17:21:50:304 576 2484 Agent *************
2014-04-20 17:21:50:305 3308 21ec COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:50:307 3308 21ec COMAPI   - Updates found = 1
2014-04-20 17:21:50:307 3308 21ec COMAPI ---------
2014-04-20 17:21:50:307 3308 21ec COMAPI -- END -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:50:307 3308 21ec COMAPI -------------
2014-04-20 17:21:52:602 576 7bc DnldMgr *********** DnldMgr: Copy update to cache [UpdateId = {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501] ***********
2014-04-20 17:21:52:602 576 7bc DnldMgr Asking handler to generate non-range requests.
2014-04-20 17:21:52:602 576 7bc Handler Generating request for CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C in sandbox C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc
2014-04-20 17:21:52:602 576 7bc Handler Selecting self-contained because update does not have express payload.
2014-04-20 17:21:52:603 576 7bc Handler Selected payload type is ptSelfContained
2014-04-20 17:21:52:603 576 7bc Handler Detected download state is dsStart
2014-04-20 17:21:52:603 576 7bc Handler Adding Windows6.1-KB974405-x64.cab (entire file) to request list.
2014-04-20 17:21:52:606 576 7bc Handler Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
2014-04-20 17:21:52:613 576 7bc Misc Validating signature for C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc\Windows6.1-KB974405-x64.cab:
2014-04-20 17:21:52:661 576 7bc Misc Microsoft signed: Yes
2014-04-20 17:21:52:661 576 7bc DnldMgr Asking handler to generate non-range requests.
2014-04-20 17:21:52:661 576 7bc Handler Generating request for CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C in sandbox C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc
2014-04-20 17:21:52:661 576 7bc Handler Selecting self-contained because update does not have express payload.
2014-04-20 17:21:52:661 576 7bc Handler Selected payload type is ptSelfContained
2014-04-20 17:21:52:661 576 7bc Handler Detected download state is dsHavePackage
2014-04-20 17:21:52:664 576 7bc Handler Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
2014-04-20 17:21:54:230 3308 9e8 COMAPI -------------
2014-04-20 17:21:54:230 3308 9e8 COMAPI -- START -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:21:54:230 3308 9e8 COMAPI ---------
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - Allow source prompts: Yes; Forced: No; Force quiet: No
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - Updates in request: 1
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:54:231 3308 9e8 COMAPI   - Updates to install = 1
2014-04-20 17:21:54:231 576 2428 Agent *************
2014-04-20 17:21:54:231 3308 9e8 COMAPI <<-- SUBMITTED -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:21:54:231 576 2428 Agent ** START ** Agent: Installing updates [CallerId = wusa]
2014-04-20 17:21:54:232 576 2428 Agent *********
2014-04-20 17:21:54:232 576 2428 Agent   * Updates to install = 1
2014-04-20 17:21:54:233 576 2428 Agent   *   Title = Update for Windows (KB974405)
2014-04-20 17:21:54:233 576 2428 Agent   *   UpdateId = {B78C39B2-C915-4F8C-9780-23F71C14A560}.501
2014-04-20 17:21:54:233 576 2428 Agent   *     Bundles 1 updates:
2014-04-20 17:21:54:233 576 2428 Agent   *       {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501
2014-04-20 17:21:54:242 576 2428 Agent WARNING: failed to calculate prior restore point time with error 0x80070002; setting restore point
2014-04-20 17:21:54:244 576 2428 Handler Attempting to create remote handler process as [] in session 1
2014-04-20 17:21:54:328 576 2428 DnldMgr Preparing update for install, updateId = {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501.
2014-04-20 17:21:54:331 7904 2290 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) ===========
2014-04-20 17:21:54:331 7904 2290 Misc   = Process: C:\windows\system32\wuauclt.exe
2014-04-20 17:21:54:331 7904 2290 Misc   = Module: C:\windows\system32\wuaueng.dll
2014-04-20 17:21:54:329 7904 2290 Handler :::::::::::::
2014-04-20 17:21:54:331 7904 2290 Handler :: START :: Handler: CBS Install
2014-04-20 17:21:54:331 7904 2290 Handler :::::::::
2014-04-20 17:21:54:334 7904 2290 Handler Starting install of CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C
2014-04-20 17:21:54:340 7904 2290 Handler CBS package identity: Microsoft-Windows-Identity-Foundation-Package-TopLevel~31bf3856ad364e35~amd64~~6.1.7600.16394
2014-04-20 17:21:54:342 7904 2290 Handler Installing self-contained with source=C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4\Windows6.1-KB974405-x64.cab, workingdir=C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4\inst
2014-04-20 17:22:20:838 7904 1214 Handler FATAL: CBS called Error with 0x80070643,
2014-04-20 17:22:20:937 7904 2290 Handler FATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x80070643
2014-04-20 17:22:20:938 7904 2290 Handler :::::::::
2014-04-20 17:22:20:938 7904 2290 Handler :: END :: Handler: CBS Install
2014-04-20 17:22:20:938 7904 2290 Handler :::::::::::::
2014-04-20 17:22:20:940 576 2428 Agent *********
2014-04-20 17:22:20:940 576 b1c AU Can not perform non-interactive scan if AU is interactive-only
2014-04-20 17:22:20:940 3308 21ec COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:22:20:940 576 2428 Agent ** END ** Agent: Installing updates [CallerId = wusa]
2014-04-20 17:22:20:940 3308 21ec COMAPI   - Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2014-04-20 17:22:20:940 576 2428 Agent *************
2014-04-20 17:22:20:940 3308 21ec COMAPI   - Reboot required = No
2014-04-20 17:22:20:940 3308 21ec COMAPI   - WARNING: Exit code = 0x00000000; Call error code = 0x80240022
2014-04-20 17:22:20:940 3308 21ec COMAPI ---------
2014-04-20 17:22:20:940 3308 21ec COMAPI -- END -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:22:20:940 3308 21ec COMAPI -------------
2014-04-20 17:22:23:877 3308 9e8 COMAPI ----------- COMAPI: IUpdateServiceManager::RemoveService -----------
2014-04-20 17:22:23:877 3308 9e8 COMAPI   - ServiceId = {758e58e0-c318-45ba-b6ae-e6b311555e5c}
2014-04-20 17:22:23:956 3308 9e8 COMAPI IUpdateService removing volatile scan package service, serviceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:22:23:957 576 2220 Agent WARNING: WU client fails CClientCallRecorder::RemoveService with error 0x80248014
2014-04-20 17:22:23:957 3308 9e8 COMAPI WARNING: ISusInternal::RemoveService failed, hr=80248014
2014-04-20 17:22:25:939 576 2484 Report REPORT EVENT: {D1B660E1-6D7E-4434-A011-F61B74BFDEF5} 2014-04-20 17:22:20:939-0700 1 182 101 {B78C39B2-C915-4F8C-9780-23F71C14A560} 501 80070643 wusa Failure Content
Install Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Windows (KB974405).
2014-04-20 17:22:25:947 576 2484 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-04-20 17:22:25:947 576 2484 Report WER Report sent: 7.5.7601.17514 0x80070643 B78C39B2-C915-4F8C-9780-23F71C14A560 Install 101 Unmanaged
2014-04-20 17:22:25:947 576 2484 Report CWERReporter finishing event handling. (00000000)

Cannot install Windows-Identity-Foundation

Hello, I've tried to install "Windows-Identity-Foundation" feature, but without success (OS is Windows 8.1 Professional).
I can not find this feature in the UI (ControlPanel -> Programs&Features -> "Turn Windows Features on or off").
So I've tried to install it via command line (dism tool).
I've checked feature via executing command "dism /online /Get-FeatureInfo /FeatureName:Windows-Identity-Foundation"
this command line is returning correct output on working machine,
but on my machine it returns:
> Error: 0x800f080c
> Feature name Windows-Identity-Foundation is unknown.
> A Windows feature name was not recognized.
So I can't install it via the "dism /online /Enable-Feature /FeatureName:Windows-Identity-Foundation" command.
That issue is occurs not only with the "Windows-Identity-Foundation", but also with some other features (for example "Legacy Components").
Next I googled that this issue may be fixed via calling "sfc /scannow" to restore the packages,
but "sfc" is ended with message "Windows Resource Protection found corrupt files but was unable to fix some of them.";
the log file contains the next errors:
* STATUS_OBJECT_NAME_NOT_FOUND #5186404# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(
* Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression
(full logs I put in the onedrive http://1drv.ms/1BILQWs )
so that errors are not clear to me,
please guide me how I can try to fix this issue?
any advice is welcome.

Just have tried to execute "InstallFeature" with /Sourceand locate image with windows installation files
>dism /online /enable-feature /featurename:Windows-Identity-Foundation /Source:G:\sources\sxs
and the response:
Error: 0x800f080c
Feature name Windows-Identity-Foundation is unknown.
A Windows feature name was not recognized.
The dism.log file contains errors:
* Failed to get the Update through CBS. - CDISMPackage::Internal_OpenFeature
* Failed to get the underlying CBS Feature - CDISMPackage::OpenFeature
* Feature name windows-identity-foundation is unknown. - CPackageManagerCLIHandler::Private_GetFeaturesFromCommandLine
* Unknown features were specified on the command-line. - CPackageManagerCLIHandler::Private_GetFeaturesFromCommandLine
* Failed to get the Feature List from the command line. - CPackageManagerCLIHandler::Private_ProcessFeatureChange
* Failed while processing command enable-feature. - CPackageManagerCLIHandler::ExecuteCmdLine
Full log file copied to onedrive: http://1drv.ms/18TpVSf .
I am accepting any advice.

Windows identity foundation

how to install windows identity foundation in windows 10..??
Now have problems with install Microsoft Dynamics AX 2012 Client in 1 terminal with Windows 10, and the installer can't launch because show the next message Windows Update Standalone Installer. Installer encountered an error 0x80096002. The certificate for
the signer of the message is invalid or not found.
Help I have provate this aplication for update user of AX 2012.

If installing .NET 4.5 doesn't work, then there is no way to install this functionality. Someone mentioned a workaround, which is to copy the DLL files from a Windows 8.1 install to the Windows 10 install, but there's nothing built in
right now.
The WIF libraries were moved into the base install of .NET 4.5, that's why I suggested installing .NET 4.5 and seeing what happens. If that doesn't work, then either 1) you'll need to wait until Microsoft updates Win 10 with the ability to install
this feature, or 2) copy the DLLs from a Windows 8.1 install of WIF.
Hope that helps!

Windows Server 2012: Installing Windows Identity Foundation runtime

Hello!
I'm trying to install Windows Identity foundation runtime (Windows6.1-KB974405-x64.msu) on a Server 2012 Standard and keep getting this error:
This package installs properly on my Windows 7 prof workstation.
Thank you in advance,
Michael

Hello,
Any reason not to use the following?
(Powershell)
Add-WindowsFeaturewindows-identity-foundation
Regards
MCITP: Enterprise Messaging Administrator 2010 MCTS: Lync Server 2010, Configuring MCSE

Unable Windows Identity Foundation in Windows 10 TP

Hi all,
This question has been asked before but I've yet to see anyone describe the exact steps they have attempted to resolve the issue.
Microsoft Dynamics AX 2012 R2 client has a dependency upon Windows Identify Foundation being installed / option enabled.
WIF is not able to be installed on Windows 10 TP as an executable, the same as Windows 8. However, the option to manually register the DLL using the
gacutil option is not working either.
I have also attempted to resolve by running the same PowerShell command line that the AX installer uses to configure WIF.
C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin>gacutil /i "C:\Program Files\Reference Assemblies\Microsoft\Windows Identity Foundation\v3.5\Microsoft.IdentityModel.dll"
Microsoft (R) .NET Global Assembly Cache Utility. Version 3.5.30729.1
Copyright (c) Microsoft Corporation. All rights reserved.
Assembly successfully added to the cache
PS C:\WINDOWS\system32> Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-Foundation
Enable-WindowsOptionalFeature : Feature name Windows-Identity-Foundation is unknown.
At line:1 char:1
+ Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-F ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Enable-WindowsOptionalFeature], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.EnableWindowsOptionalFeatureCommand
Thanks,
Kieran.

Hi all,
This question has been asked before but I've yet to see anyone describe the exact steps they have attempted to resolve the issue.
Microsoft Dynamics AX 2012 R2 client has a dependency upon Windows Identify Foundation being installed / option enabled.
WIF is not able to be installed on Windows 10 TP as an executable, the same as Windows 8. However, the option to manually register the DLL using the
gacutil option is not working either.
I have also attempted to resolve by running the same PowerShell command line that the AX installer uses to configure WIF.
C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin>gacutil /i "C:\Program Files\Reference Assemblies\Microsoft\Windows Identity Foundation\v3.5\Microsoft.IdentityModel.dll"
Microsoft (R) .NET Global Assembly Cache Utility. Version 3.5.30729.1
Copyright (c) Microsoft Corporation. All rights reserved.
Assembly successfully added to the cache
PS C:\WINDOWS\system32> Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-Foundation
Enable-WindowsOptionalFeature : Feature name Windows-Identity-Foundation is unknown.
At line:1 char:1
+ Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-F ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Enable-WindowsOptionalFeature], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.EnableWindowsOptionalFeatureCommand
Thanks,
Kieran.

Windows 10 and Dynamics CRM 2013 Outlook Client - Identity Foundation missing

How can I install/activate the Identity Foundation in Windows 10.
In Control Panel\All Control Panel Items\Programs and Features the feature is missing.
Dynamics CRM 2013 (and 2011) Outlook Client does need the Identity Foundation:
Error is "Could not load file or assembly 'Microsoft.Identity.Model, Version=3.5.0.0 ...
icomedias Austria - Germany

I've had the same problem with the CRM 2011 Plug-in.. It is not possible to install the Windows Identity Framework onto Windows 10 since it was not included as an option in the "Features" menu.
Also - I found this forum entry discussing that exact problem (with no answer, so far):
Windows Identity Foundation not working with Technical Preview
EDIT: Fixed link. Inside of the linked discussion thread, I see this:
"From Windows 8.1 Features Screen:
WIF 3.5 has been superseded by WIF classes that are provided as part of .NET 4.5. It is recommended that you use .NET 4.5 for supporting claims-based identity in your applications.
so i guess they removed it completely in Windows TP"

ERROR: Could not retrieve a valid windows identity

When I try to create PowerView reports from BISM connection file, I get error:
<MoreInformation>
<Source>Microsoft.ReportingServices.ProcessingCore</Source>
<Message msrs:ErrorCode="rsErrorOpeningConnection" msrs:HelpLink="http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsErrorOpeningConnection&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=11.0.3000.0"
xmlns:msrs="http://www.microsoft.com/sql/reportingservices">Cannot create a connection to data source 'TemporaryDataSource'.</Message>
<MoreInformation>
<Source>Microsoft.AnalysisServices.AdomdClient</Source>
<Message/>
<MoreInformation>
<Source>Microsoft.SharePoint</Source>
<Message>Could not retrieve a valid Windows identity.</Message>
<MoreInformation>
<Source>mscorlib</Source>
<Message>WTS0003: The caller is not authorized to access the service.</Message>
</MoreInformation>
</MoreInformation>
</MoreInformation>
</MoreInformation>
From SharePoint logs: I get following exception details:
01/02/2013 11:00:34.17            w3wp.exe (0x0828)        0x2AEC SharePoint Foundation Claims Authentication
bz7l        Medium
SPSecurityContext: Could not retrieve a valid windows identity for username 'DOMAIN\user' with UPN 'user@domain'. UPN is required when Kerberos
constrained delegation is used. Exception: System.ServiceModel.EndpointNotFoundException: The message could not be dispatched because the service at the endpoint address 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' is unavailable for the
protocol of the address.    Server stack trace:      at System.ServiceModel.Channels.ConnectionUpgradeHelper.DecodeFramingFault(ClientFramingDecoder decoder, IConnection connection, Uri via, String contentType, TimeoutHelper&
timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection
connection, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan
timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan
timeout)     at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)     at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage
methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)     at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String
upn, Int32 pid)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)     at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity().
a1bef09b-025a-208e-cd5e-4ef6678b6d0d
Any help on how to get this resolved would be greatly appreciated.

Hi GuYuming
I have already read the mentioned blog. Code mentioned there gives me the following output.
I have already verified that the c2WTS service is running and it's dependency 'Cryptographic services' is also running.
Where is the root cause? How can I resolve this?
Output of the code on the mentioned blog:
Testing Service c2WTS
+- Service c2WTS found
+- Service c2WTS is running
+- Path of service: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe
+- Config File: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe.config
+- Service Logon: SYSTEM\NT AUTHORITY
----- start of config file ----
<?xml version="1.0"?>
<configuration>
<configSections>
<section name="windowsTokenService" type="Microsoft.IdentityModel.WindowsTokenService.Configuration.WindowsTokenServiceSection, Microsoft.IdentityModel.WindowsTokenService, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
/>
</configSections>
<startup>
<supportedRuntime version="v4.0" />
<supportedRuntime version="v2.0.50727" />
</startup>
<windowsTokenService>

<allowedCallers>
<clear />
<add value="WSS_WPG" />
</allowedCallers>
</windowsTokenService>
</configuration>
----- end of config file ----
Retrieving security groups/users allowed to use the service from config file
+- WSS_WPG
Trying to login .........
Using current Windows Credentials
***** c2WTS could not provide a valid Windows Token. Reason: WTS0003: The caller is not authorized to access the service.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String upn, Int32 pid)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.<>c__DisplayClass1.<UpnLogon>b__0(IS4UService_dup channel)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)
at c2WTSTest.Form1.button2_Click(Object sender, EventArgs e)
Now Verifying if user DOMAIN/monish has rights on c2WTS
+- User DOMAIN/monish has no access to the service
*** Analysis Complete ***
Monish Gupta

When starting Window XP on my laptop (which was connected, in the past, in a wi-fi network now no more available) appears immediatly this allert: "iTunes Helper was not installed correctly. Please reinstall iTunes. ERROR 7." Reistallation impossible!

When starting Window XP on my laptop (which was connected, in the past, in a wi-fi network now no more available) appears immediatly this allert: "iTunes Helper was not installed correctly. Please reinstall iTunes. ERROR 7."
Reistallation of older or up to date iTunes versions is impossible because: "Installation package iTunes.msi is located on a network resource not available" and because "It is impossible to remuove thew previous verson of iTunes. Impossible fto find the path."
Someone can help me ???
Thank,
Gerald

Take a look at iTunes for Windows: "Error 7" message when opening iTunes. Perhaps your .NET Framework needs a repair.
For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down the page in case one of them applies.
Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
tt2

Claims debacle (error) with Term Store: "Could not retrieve a valid windows identity" for all sites in a particular web app.

When I pull up the Term store in CA or any MySite collection, it works.
When I do so in any other site collection (HNSCs, incidentally), It doesn't return any term stores.
My ULS log immediately before and after the "/_vti_bin/taxonomyinternalservice.json/CheckPermission" POST on termstore .aspx triggers the WCF call:
Claims Authentication af30y Verbose Claims Windows Sign-In: Successfully signed-in the the user 'contoso\domainUser' for request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Claims Authentication af30q Verbose Updating header 'LOGON_USER' with value '0#.w|contoso\domainUser' for the request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|contoso\domainUser, ClaimsCount=77
Logging Correlation Data xmnv Medium Site=/
Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://CONTOSOFE3:32843/00e6d55691824965ac223f1d1cfae6d2/MetadataWebService.svc' Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:590e916c-c89a-4f89-9819-a82c97fabcaa'
Claims Authentication bz7l Medium SPSecurityContext: Could not retrieve a valid windows identity for username 'contoso\domainUser' with UPN '[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access the service. at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity) at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid) at SyncInvokeUpnLogon(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..
Claims Authentication g220 Unexpected No windows identity for contoso\domainUser.
The "The caller is not authorized to access the service." message seems pertinent.
Both web apps are using only NTLM auth.
The url for both web apps ends in the same contoso.com domain.
I get the same errors no matter what account I use, including the install account.
Things I've tried:
Deleting and building a new HNSC root web app and site. Error happens in all sites in all web apps except the PBSC hosting MySites.
Giving the root site app pool identity full control of the metadata service app (even though the MySite identitiy doesn't have it)
Giving the root site app pool identity full permissions on the metadata service app.
Comparing database and web app config permissions between dev (where everything works perfectly) and prod (where it does not).
Made sure IIS auth settings on both sites are identical
Both sites are using the same SSL certificate (though the call to the web service appears to be http)
Reprovisioned the metadata service app with a new database and new app pool identity.
Made sure C2WT is running. Tried it with the service stopped as well.
Web.configs are identical between working and non-working apps.
I'm stumped but still Googling. I'm hoping to avoid having to call Micrososft. Any help would be appreciated!
UPDATE:
Interestingly, when I restored the web application from backup (via CA), I ended up with 3 identical "Windows Authentication" authentication providers assigned to the problem web app. Since there was more than one, I was directed to the provider-chooser
page when visiting the site. Upon choosing 1 of the 3, I was authenticated, and *poof*, no more authentication errors and the term store loaded term sets as expected.
Of course, 3 providers was not an ideal state, so I grabbed the one that worked (#1) via get-spauthenticationprovider, and assigned it to the web app via set-spwebapplication, and my problem returned.
I am currently updating the farm to SP1 from June 2013 CU. Fingers crossed.
Update:
The update to SP1 went smoothly, but did not resolve the issue. Also related (I believe) are the random authentication errors when trying to upload images to some libraries, and 401-errors on the accessdenied.aspx page itself.
Update:
The problem is resolved, seemingly after making 4 changes. I'm trying to narrow down which change was the cure, if any:
I installed SP1 on all 6 servers, rebooted and upgraded. This appeared to have no effect.
Removed an old login from SQL that no longer existed in AD because of this ULS error:
System.Runtime.InteropServices.COMException: The user or group contoso\svc_xxxxxxxxx' is unknown., StackTrace: at Microsoft.SharePoint.Utilities.SPUtility.GetFullNameFromLoginEx(String loginName, Boolean&
bIsDL)
This login was the identity of the application pool that used to run the web app in question.
This login was the schema owner of a schema named after itself on every SharePoint database so I changed the schema owner to dbo but left the schema attached.
The problem may have surfaced initially when the app pool identity was changed in CA, but went unnoticed?
Note that the web app had been deleted and recreated many times with a new identity and pool to no avail, but the URL remained the same throughout each attempted fix. Relevant?
Grasping at straws, I changed the app pool identity for this web app to the same one that runs the MySite web app pool as per this only slightly related problem: http://www.planetsharepoint.org/m/preview.php?id=372&rid=34764&author=Vlad+Catrinescu
I changed the authentication method from NTLM to Negotiate.
I am rolling back #3 and #4 to see if the issue resurfaces.
Update:
It doesn't appear to have been the NTLM/Negotiate setting. Web app is currently set to NTLM and all is well. No strange accessdenies, and term Store is still manageable from all sites.
Update: Sorry for the delay. I am administering 6 farms these days. Will update as soon as the final phase of rollbacks happens.
I think I can. I think I can.

maybe that web app was accidentally created with classic auth?
here's an example of how to create claims based, with classic, and then "doing 2013" claims
#Create the example web application, as mentioned above, either with gui, and pick later, or
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-databaseName$contentDB-securesocketslayer
#If doing for 2013
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-AuthenticationProvider(new-spauthenticationprovider)
-databaseName$contentDB-secureSocketsLayer

Myriad Pro accidently no more available in Flash

Hello,
I am using the Myriad Pro font for years. Now it is accidently not more available in Flash. I worked on a customer project and accidently the Myriad Pro font isn't shown any more in any FLA file. To test it I created a new FLA file, but even there the Myriad Pro isn't shown (I can choose it from the menu, but no letters are shown).
Also reinstalling the font in Windows is no solution. In any other programs like Flash CS 3 Extended etc. I can still use the font and it works fine.
Can somebody help me or has got the same problem?
Thank you very much!
Regards,
Timo

Ahhh thank you so much! Searched for it half of the day. Here are some more information, if anyone has got trouble with it too: http://graphics-unleashed.unleash.com/2012/12/windows-update-kb2753842-will-make-some.html

Does hp-v40,all in one is supported by windows 8? are drivers available?

does hp-v40,all in one is supported by windows 8? are drivers available?

Hi,
Based on the following, no more support from Vista ages that means at least 6 years:
http://h10025.www1.hp.com/ewfrf/wc/softwareCategory?os=2093&lc=en&cc=us&dlc=en&sw_lang=&product=6063...
With luck, Windows 8 can find a generic, basic driver for your machine to print. Otherwise it's time to buy a new printer.
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Windows Presentation Foundation AND BO DESKI

Hello!
Could you help us anybody.
We faced with problem when we created some project used Windows Presentation Foundation (WPF is a graphical subsystem for rendering user interfaces in Windows-based applications) and try to open our application and BO DeskI application simultaneously. The result: when we try to close BO DESKI this application abnormal closed..
We create test project used Windows Presentation Foundation which include only 2 standard control. And this test very simple application can not work correct with BO DeskI. If need I ready to send Visual Studio 2008 test project.
We tested this behaviour with BO XI DESKI Release 3.x SP3
Best regards
Andrey

That's interesting - thanks for the greater details.
It's helpful to rule out possible connections between your application and DeskI.
You might want to open a support case with SAP, if you need more interactive assistance. It'll be opened with the DeskI support team, since you're not using any of the SDKs.
But you may want to run Process Monitor (a tool found on Microsoft's site) to see if there's any file or registry access issues.
Another useful tool is [modules|https://smpdl.sap-ag.de/~sapidp/012002523100006252802008E/modules.zip], that takes a snapshot of all dlls loaded by a process - to see if there's anything in common between your application and DeskI, and to see if DeskI loads different dlls when your application is running.
Sincerely,
Ted Ueda

Could not retrieve a valid windows identity - access is denied

Background:
We have a reporting solution based on SQL Server 2012 SP1 running on Server 2008 R2. Users access the solution through SharePoint 2013. We have several hundred users and all is well with the exception of 2 users.
Problem:
When these 2 users try and open a SSRS report they receive an error. The entry is the SharePoint log reads:
SPSecurityContext.WindowsIdentity: Could not retrieve a valid
windows identity for NTName='domain\username', UPN='[email protected]'.
UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.Security.SecurityAccessDeniedException: Access is denied.
Other details (thoughts):
We are confident that Kerberos and C2WTS are set up and working correctly (we have a couple of hundred users working).
We suspect it may be Active Directory related but can find nothing that sets the users apart from everyone else.
Has anyone any suggestions to resolve this?

Hi Robin,
If you have a One Way Transitive Trust setup between the domain, where the Windows Services reside, and the other domain where the users reside. Then please refer to the link below and set two-way trusts:
http://blogs.msdn.com/b/psssql/archive/2012/08/20/sharepoint-adventures-reporting-services-claims-and-one-way-trusts.aspx
If not, then some users could access Excel Services while others could not, the issue might be caused by credentials. Please refer to the link below:
http://blogs.msdn.com/b/rodneyviana/archive/2011/07/19/troubleshooting-claims-to-windows-nt-token-service-c2wts-in-sharepoint-2010-may-be-difficult-if-you-don-t-know-where-to-start.aspx
Please try narrowing down the issue and test if only internal machine works. More information about the error message:
http://blogs.msdn.com/b/andrasg/archive/2010/05/04/setting-up-sharepoint-2010-excel-services-to-get-external-data.aspx
Regards,
Rebecca Tu
TechNet Community Support

Windows Workflow Foundation and SAP Business One

Does anyone here have any experience creating Windows Workflow Foundation (.NET 3.5) activities and workflows that interact with SAP Business One?
A lot of examples in books show how easy it is to use workflows to write directly to a database, but we obviously cannot do that with SBO.
I am most interested in where to place the code to log into the DI-API and how to pass that connection to the individidual activities.
Thank you,
Mike

Michael,
This could be done with some work using the DI Server and Business One Web Services (B1WS). You can get more detail on B1WS from the Tools section of main SAP Business One page here on SDN ... although it does not go into WFS or WF.
In the future when eSOA services are delivered for SAP Business One ... you will see that WF can be used much more easily. This is an area that SAP is investigating ... keep a lookout on SDN!
Eddy

Windows Identity Foundation no more available? No Dynamicy CRM working?

Similar Messages

Maybe you are looking for