Windows Server 2012R2 kerberos authetication failure with IBM iSeries

Hi all,
I've an IBM iSeries in my environment configured to use kerberos authentication, this type of SSO works fine from 2 years. Every client Windows 7 or Windows 8 works fine.
Now I'm planning to deploy Windows 8.1 and Windows Server 2012R2.
I've made a lot of attempts:
Windows 2012 -> works
Windows 8 -> works
Windows 2012R2 -> does not works
Windows 8.1 -> does not works
All the server and workstation involved in thees attempts belong to the same OU and the same user are utilized.
It seems clear to me that Windows 8.1 / 2012R2 has a different behaviour with kerberos authentication but I don't found anything on the technet.
Please note that all DC are Windows server 2008R2 by two years.

Hi, any news for your problem ?
This setup should work ok.. Any firewall running on the 2012R2 or 8.1 ? did you checked the security log on the DC to see why the ticket was refused ? etc..
Regards, Philippe
Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it!

Similar Messages

Windows Server 2012R2 Failover Cluster error with mounted volumes

Hi all,
I've a problem with mounted volume on a WSFC build on top of Windows Server 2012R2, the situation is:
M: is the volume hosting mounting points
disk-1, disk-2, disk-3 are volume mounted on M:\SomeFolder
Theese volumes are used by a SQL Server Failover Cluster Instance, but my problem is related to WSFC. I've set dependencies so disk-1, disk-2, disk-3 depend upon H:
If I try a failover of the role "SQL Server" I observe that when the disk come online in the other node they fail with this error:
Cluster resource 'disk-1' of type 'Physical Disk' in clustered role 'SQL Server (ISQL2014A)' failed. The error code was '0xaa' ('The requested resource is in use.').
Based on the failure policies for the resource and role, the cluster service may try to bring the resource online on this node or move the group to another node of the cluster and then restart it. Check the resource and group state using Failover Cluster
Manager or the Get-ClusterResource Windows PowerShell cmdlet.
If I manually take offline H: and than bring it online and then manually take online all disk (1 to 3) they come online with no error.
I'm going crazy!

I've found the root of the problem: the servers are virtual machine on a VMware ESX 5.5 infrastructure, VMware claims that on 5.5 multipath is supported for raw device mapping disks but disabling multipath (I've set to fixed path) the Windows Server Failover
Cluster stops to get problems.
Now we have opened a support call with VMware.

Windows Server 2012R2 fails to get update from WSUS with error code 80072ee6

Hi all,
I've deployed WSUS role on a Windows Server 2012R2 machine. WSUS listen on port 8530. Now I'm trying a test server (this machine runs WIndows Server 2012R2 too). I've configured a GPO but when I try to check for updates I get the errore in the subject.
I've checked windowsupdate.log and theese are the settings of the client:
AIR Mode is disabled
2014-02-05 12:59:00:357
776 fe0
AU # Policy Driven Provider: http://MyWSUS.MyDomain.local:8530
2014-02-05 12:59:00:357
776 fe0
AU # Detection frequency: 22
2014-02-05 12:59:00:357
776 fe0
AU # Target group: CSM Servers
2014-02-05 12:59:00:357
776 fe0
AU # Approval type: Pre-install notify (Policy)
2014-02-05 12:59:00:357
776 fe0
AU # Auto-install minor updates: No (User preference)
2014-02-05 12:59:00:357
776 fe0
AU # Will interact with non-admins (Non-admins are elevated (User preference))
I confirm that from the test server I can telnet to my wsus server on TCP port 8530

Hi,
This issue occurs if the URL under the Group Policy setting 'Specify intranet Microsoft update service location' is invalid.
You receive a "80072EE6" error code when you download an update from Windows Server Update Services in Windows 7-based or Windows Server 2008 R2-based
computer
http://support.microsoft.com/kb/2724184
Make sure that the URL is correct and the name can be resolved.
Hope this helps.

Can't create ODBC connection in Windows Server 2012R2

I just finished installing the instant client & odbc connection on Windows Server 2008R2. I then attempted to perform the same installation on a new Windows Server 2012R2 instance and encountered the following issue.
After extracting the contents of the 64bit instant client & odbc files into c:\oracle\instantclient_12_1, adding this to the path statement, and adding a TNS_ADMIN environmental variable, I successfully ran odbc_install.exe from an admin cmd window. I then opened the 64bit ODBC Data Source Administrator, clicked add, selected the Oracle in instantclient_12_1, and clicked finish. As soon as I did so, I received the following error: "The setup routines for the Oracle in instantclient_12_1 ODBC driver could not be loaded due to system error code 126: The specified module could not be found. (c:\oracle\instantclient_12_1\SQORAS32.dll)"
I uninstalled the odbc client (odbc_uninstall.exe) and attempted again with the 32bit version & 32bit odbc configuration screen. I get the exact same result with 32bit as I do with 64bit.
Any help would be appreciated.
EDIT: Nevermind. Apparently I needed the Microsoft Visual C++ 2010 SP1 Redistributable Package for the correct DLLs

Hi,
I am running Netweaver 7 and ERP2005.
J2EE support pack is 9. The sap note that you mentioned is for NW2004 and our system is running on NW2004s.
Now I am trying to reconfigure the sld. In case if you can suggest me another solution, I will be very happy to try that out...
Thanks for your reply
Edited by: Rakesh Bothra on Apr 20, 2011 4:23 AM

We're running Windows server 2003 32bit and want to migrate to Windows server 2012R2 64bit, can someone provide a step by step procedure on how to migrate instances on ADAM to AD LDS?

I have no experience in dealing with servers, but my senior has asked me to investigate on how to migrate instances on ADAM (windows server 2003 32bit) to AD LDS (Windows server 2012R2 64 bit) as in place upgrade is not an option as we're running a 32bit
Server and want to migrate to a 64bit Server. can someone please give me a Walkthrough on how to do this.
Thanks in advance.

Hi,
it'd be of great help if you could give me a step by step process of replication.
There is no step-by-step article/guide of replication process, replication between AD LDS instances of the same configuration set is an automatic process.
All we need to make sure is to create a replica of the existing instance, and there is no network/security obstacle preventing the replication.
Please note that we need to install AD LDS from Server manager on Windows Server 2012 and 2012 R2.
More information for you:
Understanding AD LDS Replication and Configuration Sets
http://technet.microsoft.com/en-us/library/cc770465.aspx
Best Regards,
Amy

Windows Server 2012R2 disks go offline after reboot

Hi all,
I've a strange issue in my brand new Windows Server 2012R2, let's describe the environment:
Hypervisor = VMware ESX 5.5
Guest OS = Windows 2012 R2 Standard Edition
I've configured the guest OS with several disk for a SQL Server installation, each disk are presented as "pure" virtual disk to Windows that means no RDM (pass through disk).
After a reboot I've discovered that SQL Server has failed to come online, on a brief analisys, all the disks except system drive (C:) and a volume dedicated to swap file (D:) have not come online. They are present in disk management, but they are offline.
I've manually brung online those disk, than reboot and all returned to normality. Subsequent reboot have generated no issues.
In the system log I have no error message except that one of SQL that fails to came online due to the lack of disks...

This happened to me too. Except with server 2008 R2 and exchange 2010. My servers replicate offsite using zerto and I was testing failover and noticed the drive D was offline. Brought it online then rebooted and everything was fine.
So I just build a server 2012 R2 Datacenter edition VM on my production servers, gave it a second disk, initialized it, formatted it and assigned it the drive letter D. Rebooted after installing 3 windows updates and it was offline. There is nothing on this
server at all. It's a fresh install.
I'm running ESXi 5.5 build 2302651 with hardware version 8 and VMware tools version 9.4.11 build 2400950.
From my experience when you see this kind of stuff happen in multiple situations it will happen again. My worry is what if one of my hosts decides to die and HA kicks in and the disk is offline when it boots.
Anyone have anything to add to this?
Edit: My DR site where I tested my failover is DAS and my production site is iscsi. So I don't think the storage type matters.
Edit 2: The SCSI controller type is Paravirtual for all my VM's.

Windows Server 2012R2 RDS sound and smartcard redirection issues

We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with
Windows Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
Our terminals are running correctly after fresh boot, but in 12 to 48 hours after boot we encounter problem with sound and smardcards redirection in RDP. Remote sound stops working and users cannot login with their smardcards.
Relogging users doesnt help, deleting profiles doesnt help, restarting sound service doesnt help, only viable way to solve issue is server restart. There is not any event in event log about this issue.

Hi,
Thank you for posting in Windows Server Forum.
Sound Redirection:
Please check the following GP setting as well.
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Limit audio playback quality: Enabled
Audio Quality: High
On the Client PC, in the .rdp file that you use to connect to the server, make sure you have the following line:
audioqualitymode:i:2
In addition check that the Windows Audio and Windows Audio Endpoint Builder services must be running for audio to work.
Smartcard redirection:
Kindly try to update the patch for Smartcard redirection and check the result.
Smart card redirection in remote sessions fails in a Windows 7 SP1-based RDP 8.1 client
http://support.microsoft.com/kb/2913751
Hope it helps!
Thanks,
Dharmesh

Windows Server 2012R2 - svchost.exe 60-100% load!

We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with Windows
Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
There is problem with high cpu load on these servers. Sometimes Svchost.exe starts to cause 60-100% load. Our virtual machines have 10 virtual processor cores. Load is caused by LSM (Local Session Manager) Service from DCOM Launcher group. Svchost
creates many thread as you can see on picture attached. Sometimes this load disappears after 12-24 hours, sometimes it needs restarting whole server.
We still cannot find cause of this problem, although we managed to reproduce this issue one time by logging two admin accounts to server console and force disconnecting one of these accounts by third admin account connecting to server console by RDP
mstsc.exe with -admin parameter.
Our users are very unsatisfied :-(
This is screenshot of Process Explorer - svchost.exe - Threads:

Hi,
Thank you for posting in Windows Server Forum.
Do you have any recent updates, might happens due to automatic updates which also can cause high cpu through svchost.exe. Please check as suggested by “Larry” by turning off Windows update service. In addition go through beneath articles for more information.
1. Automatic Update causes SVCHOST.exe high CPU
2. Getting Started with SVCHOST.EXE Troubleshooting
Hope it helps!
Thanks,
Dharmesh

Windows Server 2012R2 DHCP Load Sharing Mode

Hello,
I am planning to migrate a standalone DHCP Server on Windows 2003 to Windows Server 2012R2. With this migration, I like to use the 2012R2 Load Sharing Mode feature for DHCP. This implementation cover TWO sites.
My initial plan was to have two Windows 2012R2 DHCP Servers (virtual) at each site thus servers at each offers site redundancy as well. So two at Site 1 and two at Site 2 on load sharing mode. If ServerA at Site 1 goes down for some reason Server B
at Site1 will service the DHCP clients in load sharing mode without going to Site 2. I came across a MS document that says:
Number of Servers: DHCP failover is not supported for more than two DHCP Servers. The failover relationship is always comprised of two DHCP servers.
Does this mean I can have only TWO DHCP Servers in a load sharing mode. One at Site 1 and the second one at Site 2??
Thanks in advance
TIA TP

Hi,
The DHCP failover relationship is comprised of DHCP server and its partner. In a relationship there are just 2 DHCP servers.
But this doesn’t mean you can just use 2 DHCP servers in your sites. The DHCP failover setting is based on DHCP scope, for one DHCP scope there could be just one DHCP failover relationship including 2 DHCP servers. If you have more than 1 DHCP scope,
for example, set DHCP failover relationship between DHCP server 1 and DHCP server 2 for scope A. then set DHCP failover relationship between DHCP server 1 and DHCP server 3 for scope B.
The document Step-by-Step: Configure DHCP for Failover(http://technet.microsoft.com/en-us/library/hh831385.aspx) is a introduction about this function and for your reference.
Depends on the DHCP scope’s configuration and the requirements of your network. You may enhance or customize the architecture of implementation.
Best Regards,
Eve Wang

Windows Server 2012R2 ISO trial not booting

I downloaded Windows Server 2012R2 ISO trial file - named 9600.17050.WINBLUE_REFRESH.140317-1640_X64FRE_SERVER_EVAL_EN-US-IR3_SSS_X64FREE_EN-US_DV9.ISO .
After burning by Nero 12 (and even by Windows 8 image burning tool) , I got only one README.TXT file on the DVD disk,
with the text content:
This disc contains a "UDF" file system and requires an operating system
that supports the ISO-13346 "UDF" file system specification.
I tried to begin boot from this disk to install Windows server 2012 R2 , but I got the error message:
Couldn't find BOOTMGR
How can I solve this problem?
Regards,
Zvi

Try with WUDT
http://www.microsoft.com/en-us/download/windows-usb-dvd-download-tool
I personally no longer use DVD media. I use UFD instead and I recommend it to you.

DPM Storage Pool on Windows Server 2012R2 iSCSI target Storage Spaces - supported?

Hi,
for migration purpose we need more space for one of our DPM 2012R2 Servers.
And we cannot buy more space for our NetAPPs..
So our idea was to use an Windows Server 2012R2 as an iSCSI target and use Storage Spaces.
I remember something that using an iSCSI target on Windows 2008 was not supported.
Is this configuration supported when usinf DPM 2012R2 on Win 2012R2 and the target is Win2012R2 aswell?
Thanks in advance
regards
/bkpfast
My postings are provided "AS IS" with no warranties and confer no rights

Hi,
This talks about
Virtual DPM servers, but the same is true for Physical DPM servers when it comes to using .VHD(x) files for DPM storage pool.
Virtual DPM installations do not support the following:
Windows 2012 Storage Spaces.
Virtual hard drives built on top of storage spaces.
Local or remote hosting of VHDX files on Windows 2012 storage spaces.
Enabling Disk Dedupe on volumes hosting virtual hard drives.
Using synthetic FC to connect to tape drives.
Windows 2012 iSCSI targets (which use virtual hard drives) as a DPM storage pool.
NTFS compression for volumes hosting VHD files used in the DPM storage pool.
Bitlocker on volumes hosting VHD files used for the storage pool.
A native 4K sector size of physical disks for VHDX files in the DPM storage pool.
Virtual hard drives hosted on Windows 2008 servers.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

CR for vs2008 not connecting on Windows Server 2012R2

I have an application running on Windows Server 2008R2 which I urgently need to mirror on Windows Server 2012R2.
However, my crystal reports basic runtime for vs2008 version 10.5.1.0
and crystal reports basic runtime for vs2008(64) version 10.5.0.0 brings up the report but doesn't seem to connect to the
database (it seems to be pulling in a null dataset)
What am I doing wrong? [I tried opening all incoming ports, etc, etc]
This is the web.config line:
<add assembly="CrystalDecisions.ReportAppServer.ClientDoc, Version=10.5.3700.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/>
[changing this crashes the application]

Hi,
CR for VS 2008 does not support Windows Server 2012.
See this article: http://wiki.scn.sap.com/wiki/pages/viewpage.action?original_fqdn=wiki.sdn.sap.com&pageId=56787567
Currently there is only one version of CR which supports WS 2012, SAP Crystal Reports for Microsoft Visual Studio.
http://scn.sap.com/docs/DOC-7824
You would need to upgrade to VS 2010 or VS 2012 and SAP Crystal Reports for Microsoft Visual Studio.
- Bhushan
Senior Engineer
SAP Active Global Support
Follow us on Twitter
Got Enhancement ideas? Try the SAP Idea Place
Getting started and moving ahead with Crystal Reports .NET applications.

Installing SSL certificate Windows Server 2012R2 RDSH servers

Hello,
I'm currently in the final fase of installing an functional Remote Desktop (Windows Server 2012R2) environment. The only problem i have, which i try to complete several days now without any luck, is the installation of our WildCard SSL certificate on de
Remote Desktop Session Host servers (farm).
We have 1 gateway server which is also the connection broker. On this server i have installed (using the Deployment Properties of the Session Collection) the certificate on all available levels. But still, when i try to connect to our Remote Desktop Servers
i get the automatically created certificate from the Remote Desktop Session Host servers. The certificate works for all the other functions (gateway etc.)
The servers are joined to the domain, and the wildcard certificate = *.zon-ict.nl.
Below the screenshot of the deployment settings.
Can someone point me in the right direction for installing the certificate on the RDSH servers?

Hi,
Thank you for posting in Windows Server Forum.
Basic requirements for Remote Desktop certificates:
1. The certificate is installed into computer’s “Personal” certificate store.
2. The certificate has a corresponding private key.
3. The "Enhanced Key Usage" extension has a value of either "Server Authentication" or "Remote Desktop Authentication" (1.3.6.1.4.1.311.54.1.2). Certificates with no "Enhanced Key Usage" extension can be used as well.
Please follow beneath article for details.
Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
http://blogs.technet.com/b/askperf/archive/2014/01/24/certificate-requirements-for-windows-2008-r2-and-windows-2012-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki

To install Remote Desktop Services User CAL on Windows Server 2008 R2 Enterprise Edition with SP1

Dear Sir,
Presently we have installed Windows Server 2008 R2 Enterprise Edition with SP 1. And now i would like to install Remote Desktop Services User CAL on this server. I have 25 digit product key of Windows Server
2008 R2 Remote Desktop Services User CAL (20). Downloaded this product key from our MSDN Subscriptions.
Kindly suggest me how to install (CAL server with product key that i have) and configure remote desktop services on my above existing server also how to point other server with my CAL server.
Thanks

Hi,
1. Install Remote Desktop Session Host and Remote Desktop Licensing Role Services using Server Manager.
2. Open RD Licensing Manager (licmgr.exe), Activate your server, then install your license
3. In RD Session Host Configuration (tsconfig.msc), set the Licensing mode to Per User and Specify your RD Licensing server name (itself). If you want you may configure these two settings via group policy setting instead. The path of the
group policy settings is Computer Configuration\ Administrative Templates\ Windows Components\ Remote Desktop Services\ Remote Desktop Session Host\ Licensing
4. You may point other RDSH servers to your RD Licensing server using RD Session Host Configuration or via group policy as mentioned above.
5. Optionally you may consider installing other Remote Desktop Role Services such as RD Gateway, RD Web Access, RD Connection Broker, etc.
-TP

Error While installing Visual Studio 2005 in windows server 2012R2

Hi Team
One Help
I am using windows server 2012R2.I want to install visual studio 2005.
i downloaded VS 2005 from :
http://www.microsoft.com/en-us/download/details.aspx?id=804
while installin i am getting this error :
"the upgrade patch cannot be installed by the windows installer service because the program to be upgraded or missing or upgrade patch may update a different version of the program.Verify that progam to be upgraded on exiting computer that you have
the correct upgrade patch"
PLease help us.
Thanks,
Bob

Hi Gopi,
Are you trying to add the hosts to your OEM 12c, and then choosing "Deploy Agent"?
Please check this error message about the image file..
The image file C:\oracle\core\12.1.0.2.0\jdk\bin\java.exe is valid, but is for a
machine type other than the current machine.
"Validating OMS_HOST & EM_UPLOAD_PORT failed."
If the agents are deployed earlier from another OEM12c server, please undeploy them and then try.
Thanks,
Rajiv.

Windows Server 2012R2 kerberos authetication failure with IBM iSeries

Similar Messages

Maybe you are looking for