ZCM 11.3 Remote Management Certificate Prompt

Anything new on how to disable the "Unable to verify the identity of workstation as a managed device" certificate prompt? Is this something we just have to live with?

Yes it seems to the help desk staff that everytime they remote control a workstation they have to accept the prompt. Which apparently is annoying enough the the help desk manager is looking at Bomgar.
Apparently Bomgar after a reboot reconnects the session which our guys now ping the workstation so they know when it is back up.
I see that 11.4 beta is going to use tightvnc 2.7. I would like to compare to what we have now. Do you know what 11.2 uses?
Thanks
>>> On 3/26/2015 at 12:26 PM, CRAIGDWILSON<[email protected]> wrote:
kwhite;2351139 Wrote:
> Internal created by ZCM. Do I need an external? if so, it is probably
> not an easy task to convert is it?
>
>
> I don't know where I read it, but I thought I read you won't get
> prompted for the same workstation until after 4 days. If there was a
> way to change that to a year, that might help?
>
>
>
>
> >>> On 3/17/2015 at 4:16 PM,
> CRAIGDWILSON<[email protected]> wrote:
>
>
>
>
> Do you have an Internal (Created by ZCM) or an External CA (eDirectory,
> Active-Directory, VeriSign, etc..)
>
>
> --
> CRAIGDWILSON
> ------------------------------------------------------------------------
> CRAIGDWILSON's Profile: https://forums.novell.com/member.php?userid=5830
> View this thread: https://forums.novell.com/showthread.php?t=482564
Let me check on a few things.
Actually Internals should have less prompting issues, but knowing
Internal vs External is important when I checkout stuff.
CRAIGDWILSON
CRAIGDWILSON's Profile: https://forums.novell.com/member.php?userid=5830
View this thread: https://forums.novell.com/showthread.php?t=482564

Similar Messages

ZCM Agent 11.3.x - Remote Management - Windows User Variable

I noticed this back during the initial deployment of 11.3.1, however have not had a chance to comeback to it. Now we are at 11.3.2 and the issue seems to still be.
On login we have a script that runs via a bundle it tracks user, date, time, computer login info to 2 locations, one on the local workstation to a hidden folder and 2 on the network.....
It looks like this in the log file
"pwolfe" , "192.168.x.x" , "LPTP-PWOLFE" , "Tue 02/03/2015" , "11:44:20.05"
What I have noticed is if someone uses ZRM (Zen Remote Management) to manage the workstation / shadow a user for help or any other such thing...the next logon on the box will look like this
"LPTP-PWOLFE$" , "192.168.x.x" , "LPTP-PWOLFE" , "Tue 02/03/2015" , "11:44:20.05"
Notice the user variable went from the username to the computer name with a dollar sign. I would say it could be the script, however see below it works fine with the old agent installed.
If you reboot the computer its fine, you can login and out time after time and it will display correctly. However if someone remote manages the computer it is broke until the next restart.
here is the script that runs:
for /f "Tokens=2 Delims=[]" %%i in ('ping -4 -n 1 "%computername%"') do set IP=%%i
Echo "%username%" , "%IP%" , "%ComputerName%" , "%date%" , "%Time%" >>"\\192.168.x.x\support\utilities\logfiles\IPaddr essLog.txt"
Echo "%username%" , "%IP%" , "%ComputerName%" , "%date%" , "%Time%" >>"C:\Utilities\IPaddressLog.txt"
This is being called as a launch item under a user run bundle, it is set to run as logged in user.
This is not happening on the older 11.2.4 separate Zone / server setup that is still in use for the majority of people. Just on the newer 11.3.x environment.
If I remove the 11.3.x agent and install the 11.2.4 agent and point it to the old environment / server it works fine.
Any ideas?
Thanks,
Patrick

Originally Posted by CRAIGDWILSON
What happens if you create a Shortcut to this bundle and run it manually after the desktop is up and active? (after a RC session that messes stuff up?)
What happens if you create a bundle that runs "cmd.exe" as logged on user and run it manually while this other bundle is having issues? (type "set" from the cmd session....)
Thanks Craig,
I finally got some time to look at this again.
It appears on the first logon to a computer it runs correctly, if a Remote Management session takes place and once logged off and a log in is initiated you get the incorrect information. If you run the application from the Zen App Window it displays correctly. If you reboot the computer it works as expected for the first logon and then stops working if a remote session is initiated.
3 Straight logons, the 4th entry is when I ran it manually from the zen app window:
"pwolfe" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:53:33.77"
"TDLARM280-50125$" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:54:51.09"
"TDLARM280-50125$" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:57:24.29"
"pwolfe" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:58:22.51"
Here is the "Set" CMD
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\pwolfe\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=TDLARM280-50125
ComSpec=C:\Windows\system32\cmd.exe
DEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\pwolfe
LOCALAPPDATA=C:\Users\pwolfe\AppData\Local
LOGONSERVER=\\TDLARM280-50125
NUMBER_OF_PROCESSORS=4
NWLANGUAGE=ENGLISH
NWUSERNAME=pwolfe
OS=Windows_NT
Path=C:\ProgramData\Oracle\Java\javapath;C:\Progra m Files (x86)\Intel\iCLS Clien
t\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows
\System32\Wbem;C:\Windows\System32\WindowsPowerShe ll\v1.0\;C:\Program Files\Inte
l\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Mana
gement Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management En
gine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Comp
onents\IPT;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Progra
m Files (x86)\Novell\ZENworks\bin;C:\Program Files (x86)\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH;.MSC
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=3a09
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PROMPT=$P$G
PSModulePath=C:\Windows\system32\WindowsPowerShell \v1.0\Modules\
PUBLIC=C:\Users\Public
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\pwolfe\AppData\Local\Temp
TMP=C:\Users\pwolfe\AppData\Local\Temp
USERDOMAIN=TDLARM280-50125
USERNAME=pwolfe
USERPROFILE=C:\Users\pwolfe
VSEDEFLOGDIR=C:\ProgramData\McAfee\DesktopProtecti on
windir=C:\Windows
WINDOWS_LOGIN=0
windows_tracing_flags=3
windows_tracing_logfile=C:\BVTBin\Tests\installpac kage\csilogfile.log
ZENWORKS_HOME=C:\Program Files (x86)\Novell\ZENworks

ZCM 10.3.1 and remote management from Opensuse 11.3

Hi,
I am have finally started to test ZCM as I am a die hard ZEN 7.0 fan...
Anyhow I like the concept of being able to remote control from Linux.
However I am running 64bit OpenSuse. Anyone know how I can get this
working?
Every time I try to remote manage it tells me to install the remote
management viewer(from Linux) It works fine from Windows
The install seems to install correctly.
Anyone know what I have done wrong or what I need to do to get this to
work..
Oh I also run KDE4
Thanks

On 21/09/10 5:36 PM, thsundel wrote:
>
> Peter Norris;2024697 Wrote:
>> Hi,
>>
>> I am have finally started to test ZCM as I am a die hard ZEN 7.0 fan...
>>
>> Anyhow I like the concept of being able to remote control from Linux.
>> However I am running 64bit OpenSuse. Anyone know how I can get this
>> working?
>>
>> Every time I try to remote manage it tells me to install the remote
>> management viewer(from Linux) It works fine from Windows
>>
>> The install seems to install correctly.
>>
>> Anyone know what I have done wrong or what I need to do to get this to
>> work..
>>
>> Oh I also run KDE4
>>
>> Thanks
>
> Don't think openSUSE is supported but you could try reading this:
> 'Novell Doc: ZENworks 10 Configuration Management Remote Management
> Reference - Installing the Remote Management Viewer'
> (http://www.novell.com/documentation/...a/biydyk4.html)
> It requires you to install glitz package.
>
> Thomas
>
>
Yeah figured that was going to be the answer. I installed the glitz
package, but it doesn't work. Oh well just thought I would see if
anyone else has it working, I have a SLES 11 server we run FreeNX on, so
I guess we can use that..
Cheers

ZCM 11 Remote Management Policy Failed after Patch 2

Upgraded to Cumulative Agent Patch 2 on ZCM 11 and now my remote management policy fails. It keeps stating that it "Could not find a results file for remote management policy...."
Is anyone else having this issue?

Dpogue,
This is being worked on, it's not related to the agent update as far as
we know - TID 7006354 has some details.
Shaun Pond

Guide to remote manage Hyper-V servers and VM's in workgroups or standalone

This guide is based on the following 3 products:
Windows server 2012 (core)
Windows 8
Hyper-V server v3 / Hyper-V server 2012
The following guide will enable you to:
1: remotely manage your Hyper-V Virtual Machines with Hyper-V manager
2: remotely manage your Hyper-V servers' firewall with a MMC snap-in.
3: remotely manage your Hyper-V server (2012) with server manager
! This should also work for Core installations of server 2012, but I haven't tried.
This guide is purely focussed on servers in a WORKGROUP, or as a stand alone.
I CAN NOT tell you what you need to do to get it working in a domain.
* You can run these commands straight from the console (Physically at the machine) or through RDP.
* You will need to be logged on as an administrator.
* Commands are listed in somewhat random order; I do however advise to follow the steps as listed.
* Commands with ? in front of them are only ment to be helpfull for troubleshooting,
* and to identify settings and changes made.
* Commands and instructions with ! in front of them are mandatory.
- server: means the server core or hyper-v server (non gui)
- client: means the machine you want to use for remote administration.
- Some commands are spread over 2 lines; be sure to copy the full syntax.
> To enable the Hyper-V manager to connect to your server, you need to perform the following 2 actions: (Assuming you have already installed the feature)
1:
! Client: Locate the C:\Windows\System32\Drivers\etc\hosts file.
! right-click --> properties --> security
! click --> edit --> add --> YOURUSERNAME or Administrator --> OK
! then select this new user, and tick the "modify"-box under the "allow"-section.
! apply the change, and close.
! doubleclick the file, and open with notepad
! add the ip-address and name of your server (no // or other crap needed)
! Save the file
# I recommend putting a shortcut to this file on the desktop.
# If you change the ip-address of your server (e.g. move the server from staging to a live environment)
# you might forget to do so in the hosts file.
# Hyper-V manager, MMC, RSAT, and Server-manager all rely on the hosts-file to resolve the name.
# some of these might connect to their respective service on an i.p.-level, but some don't.
# This is the main reason you need to modify this file.
! USE AN ELEVATED CMD/POWERSHELL PROMPT TO CONTINUE !
# the next config needs to be done on windows 8.
# It seems that it's already preconfigured under server 2012
2:
! Client: dcomcnfg
! open component services --> computers
! right-click -> my computer -> properties
! select "COM SECURITY" tab
! under "ACCESS PERMISSIONS" select "edit limits"
! select "ANONYMOUS LOGON", and tick "remote access" under ALLOW
# Without this adjustment, you can't connect to your Hyper-V server
# with the Hyper-V manager if you're not in a domain.
> And if you haven't done so already... make sure you have enabled remote management number 4 on the Hyper-V server console.
> Next, is to get the MMC firewall snap-in working.
The reason for this, is to have a GUI available to configure it.
If you're happy without it, you may skip this and use a shell instead to do so.
? server: netsh advfirewall show currentprofile
# shows the current profile (public/domain/private) and its settings
# depending on your needs, you should set the right profile to fit your needs.
# You can easily do this when the MMC snap-in is done. (after you've followed these steps)
! server: netsh advfirewall set currentprofile settings remotemanagement enable
# enables remote management of the firewall on an application level
# (In other words: allows the firewall to be remotely managed)
! server: netsh advfirewall firewall set rule group="Windows Firewall Remote Management" new enable=yes
# allows remote management of the firewall, through the required firewall ports with TCP protocol.
# 4 rules will be updated to allow access: public & Domain, dynamic and endpoint-mapper.
# You can disable/add/change the rule from the MMC snap-in after finishing this guide.
# e.g. set the firewall through the MMC-GUI to only allow specific ip-addresses etc.
? server: netsh advfirewall firewall show rule all
# Shows a list of available rules, and their current state.
# when run from cmd, the list exceeds the maximum length for review.
# (from cmd,type:) start powershell, and run the command from there.
! Client: cmdkey /add:YOURSERVERNAME /user:USERNAMEONTHESERVER /pass:THEPASSWORDOFTHATUSER
# I recommend you to use a username with enough privileges for management
# All capital letters need to be replaced with your input
# CMD answers "credential added successfully" when you're done
! Client: locate MMC, and run it as an admin.
# In windows 8/2012, go to search and type MMC. Right-click the icon,
# and choose run as admin on the bar below.
! Client: application MMC: select "file" --> Add/remove snap-in
! --> (left pane) scroll down to "windows firewall" --> select and click "add"
! select "another computer"
! type the name of the server you want to manage (NO workgroup/ or //, just same name as you typed for cmdkey)
* Part 2 is done.
# Have a look by doubleclicking the firewall icon in the left pane.
# It looks and works the same as the GUI version that you are familiar with.
! Next is the Server Manager.
# Follow the steps listed to get your server listed and manageable in the server manager.
! Client: Open the created Firewall snap-in for your server.
! Find the 3 "Remote Event Log Management" entries in the list of INBOUND rules, and enable them.
! Open powershell --> in cmd windows, type: start powershell
! run the following line in powershell
! Client: in C:\Windows\system32> set-item WSMAN:\localhost\client\trustedhosts -value YOURSERVERNAME -concatenate
# WinRM Security Configuration.
# This command modifies the TrustedHosts list for the WinRM client. The computers in the TrustedHosts list might not be
# authenticated. The client might send credential information to these computers. Are you sure that you want to modify
# this list?
# [Y] Yes [N] No [S] Suspend [?] Help (default is "Y"): y
# I recommend to choose yes; unless you like to pull some more hairs...
! server: winrm qc
# WinRM service is already running on this machine.
# WinRM is not set up to allow remote access to this machine for management.
# The following changes must be made:
# Configure LocalAccountTokenFilterPolicy to grant administrative rights remotely
# to local users.
# Make the changes? y / n
! select yes
! Client: open the server 2012 server manager
! click manage -> add server
! select the DNS tab, and type the name of your server
Done.
You can now manage your remote server through the familiar computer management GUI.
! Right-click your remote server, and select "Computer Management"
A few side notes:
? The Performance tab seems to list the local machine's performance, in stead of the remote servers'
? If you want Windows server backup, you need to right-click the server in the server manager, and select "add roles and features.
? it will then become available under the "computer management" of the remote server.
If you liked this guide you may thank my employer, Mr. Chris W.
for giving me the time to work it all out.
Cheers!

As a little update to the post, I'd like to add that replication, clustering and migration will not work in workgroup environments. Unless someone can provide an additional guide for this, I'd recommend anyone to no even bother to try.
To manage the standalone hyper-v server in a remote location over the internet, I would recommend the following:
Install windows 8 pro (x86 uses less resources!) as a vm on the host, and assign 2 network connections to it.
1 external (shared with host) (be sure you have a dedicated ip-address for it!)
1 internal connection.
What I did was this:
As soon as you've installed the win8 guest, proceed with the guide as described.
For the 1st step of the guide (hosts-file) use the ip-address you will later assign to the "internal" network switch of the host!
In my example, I'm using 10.0.0.1 for the host, and 10.0.0.2 for the guest.
To be clear: I first used the guide on a LAN-environment, and did all the steps from a "real" client to server on the LAN.
Then, installed the win8 guest on the host using the "real" clients' hyper-v manager over the LAN.
Next, assigned the 2 network connections to the VM, and configured them as follows:
external - as you would to be able to make your guest reach the internet.
internal - I used the following config:
ip-address: 10.0.0.2
subnet: 255.255.255.252
gateway - blank
dns - Blank
Now, when you get to the console of the hyper-v server (host) or RDP to it, go to network settings.
You'll see that the internal card has been added here as well.
Configure it as follows:
ip-address: static - 10.0.0.1
subnet: 255.255.255.252
gateway - blank
dns - blank
You should now be able to ping your guest (win8) on 10.0.0.2 if it's running.
Don't forget to enable ping response (option 4 on the host) to test connectivity the other way around as well (guest to host)
When you're done, you'll be able to RDP to the guest OS over the internet, and then connect to the host with server manager, hyper-v manager, and MMC.
Don't forget to enable each module on the hosts' firewall to make the snap-ins work!
Remote volume management requires your guest/client firewall INcoming ports to be enabled as well! not just the host.
Either update the firewall rules from the MMC gui as described in the guide, or use the following commands on the
hosts' powershell:
Enable the firewall rules with the command Enable-NetFirewallRule -DisplayGroup "USE_THE_COMMANDS_BELOW" (include the " " in the command)
Remote Service Management
Remote Volume Management
Remote Event Log Management
Remote Scheduled Tasks Management
Windows Firewall Remote Management
Windows Remote Management
You can get the list with Get-NetFirewallRule -DisplayName *management*
You can get the list with Get-NetFirewallRule -DisplayName *remote*
Commands provided with credits to F. verstegen
Cheers,
Michael.
Sigh...

System Image Utility - Create User - Activate Remote Management

When creating an image with system image utility, based on a DVD image instead of a cloned image, I cannot create a user and activate Remote Management.
I have created an installer package with Apple Remote Desktop that is supposed to do both, however it doesn't work. I do not get an error, but no user is created.
I have tried a post-install script however the dscl command is not recognized even if I put the path /usr/bin/dscl.
I even tried to use a popular package out there called "createUser" but that fails as well.
Has anyone had any luck with this when trying to make a moduler image with System Image Utility?
Message was edited by: NeedSomeAnswer

After configuring all the appropriate settings, I
push the "Create" button and it appears to start
working, prompts me for a location to save the actual
image itself, creates a folder with the default name
and then nothing happens.
ok here's the deal: i created a folder in my OSX server home directory labelled "images" and keep our multiple images there. although you CAN have your images on other drives or on the network, that would take a LOOOOOOOONG time to do the data transfer to the invisible netboot folder on your server. my advice: keep local copies of all images. save a ton of time for yourself, eh?
then, when it's time to use the system image suntility to load up an image, i go to that same location each time, call it up and have the app set to the prefs i want or need. i'm on 10.4.7 server and have had no problem using the software.
so try using images locally and then, if that doesn't work, upgrade to 10.4.7

Remote manager is not running but it is running as per DC

I have installed remote manager on windows 2008 R2 server recently to create exchange mail boxes. And I followed the instructions given in oracle documentation while installing this remote manager.
Windows 2008 server R2 is a 64 bit OS so installed 64 bit java version in it. OIM version is 9.1.0.
As we are trying to SSL connection to the remote machince, imported certificates on both OIM server and also on remote machine.
But when I try to provision exchange account for a user, the creation of mail box is getting failed at the task "CheckRemoteManager Connection" saying "Remote manager is not running". But in design console it says that the remote manager is running.
Here is the response from the task:
Response: Exchange remote manager not running
Response Description: Check if Remote Manager parameters are entered correctly
When I bypass the task "checkRemoterManager Connection" in the adatper "Create mail box" then I am getting the below error.
Response: error during JRMP connection establishment; nested exception is: javax.net.ssl.SSLHandshakeExcept
Response Description: Unknown response received
Error Details:
Setting task status... "error during JRMP connection establishment; nested exception is: javax.net.ssl.SSLHandshakeExcept" does not correspond to a known Response Code. Using "UNKNOWN".
Can you please let me know what might be the problem?
Here is the log.
DEBUG,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager entered.
DEBUG,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager entered.
DEBUG,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager Remote Manager Host Lookup URL is rmi://xx.xx.xxx.xxx:12346
DEBUG,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager Remote Manager Host Lookup URL is rmi://xx.xx.xxx.xxx:12346
DEBUG,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager Remote Manager service name is RManager
DEBUG,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager Remote Manager service name is RManager
INFO,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager Remote Manager full URL is rmi://xx.xx.xxx.xxx:12346/RManager
INFO,19 Jan 2012 14:29:58,606,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager Remote Manager full URL is rmi://xx.xx.xxx.xxx:12346/RManager
DEBUG,19 Jan 2012 14:29:58,608,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLClientSocketFactory/createSocket entered.
DEBUG,19 Jan 2012 14:29:58,608,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLClientSocketFactory/createSocket entered.
INFO,19 Jan 2012 14:29:58,608,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLClientSocketFactory/createSocket Remote Manager client socket Host is xx.xx.xxx.xxx and port is 12345
INFO,19 Jan 2012 14:29:58,608,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLClientSocketFactory/createSocket Remote Manager client socket Host is xx.xx.xxx.xxx and port is 12345
DEBUG,19 Jan 2012 14:29:58,610,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLClientSocketFactory/createSocket left.
DEBUG,19 Jan 2012 14:29:58,610,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLClientSocketFactory/createSocket left.
DEBUG,19 Jan 2012 14:29:58,616,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager left.
DEBUG,19 Jan 2012 14:29:58,616,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteManagerSupport/getRemoteManager left.

Have you followed all the steps properly ?
Have you imported Certificate as mentioned in the document ?
Try with restarting the OIM Server
Make sure your RM is running
Try to telnet RM from OIM machine.
Check xlconfig.xml file
Re: Error in Provioning Exchange2007 with oim 11g

System preferences, sharing, remote management?

Hello,
Could someone tell me where I can find more information of how to use remote management that is under system preferences, sharing. What is the difference between screen sharing and remote management? It will be a great help as I am learning my way round my mybook and this feature would be of great help.
Thanks!

Hi Allan,
Open System Preferences (Applications folder) and click the Sharing icon. Very bottom right of that window click the ? mark. That will prompt the Help Viewer for the Sharing preferences. You can type in keywords at the top of that window in the search field. Example: Remote Management
Mac OS X: About File Sharing
Carolyn
Message was edited by: Carolyn Samit

Remote Desktop Certificates

H
I have an Azure hosted RD deployment that consists of 2 x RDG/WebAccess servers (one of these is the connection broker) that sit behind an Azure Traffic manager. Behind these I have 6 RD Session Hosts.
I am totally confused over certifcates. What certificates do I need where and where do I create the CSR for each certificate.
Any help gretly appreciated.
Simon

Hi,
Thank you for posting in Windows Server Forum.
As per your case, you can use wildcard certificate or SAN certificate for your network. Which can serve the certificate for all your server. Basic requirements for Remote Desktop certificates:
1. The certificate is installed into computer’s “Personal” certificate store.
2. The certificate has a corresponding private key.
3. The "Enhanced Key Usage" extension has a value of either "Server Authentication" or "Remote Desktop Authentication" (1.3.6.1.4.1.311.54.1.2). Certificates with no "Enhanced Key Usage" extension can be used as well.
More information.
A. Certificate Requirements for Windows 2008 R2 and Windows 2012 Remote Desktop Services
B. Minimum Certificate Requirements for Typical RDS implementation
Hope it helps!
Thanks.
Dharmesh Solanki

Rd230 simple question re remote management module

Hi,
Just purchased and installed rd230. Installed win2008 R2 SP1 (manually...not with easystartup).
I'm reading the user guide for remote management module. Looks great! One thing...how do I setup the RMM???(IP address...etc). It's not in the BIOS setup...I don't see any prompt at boot to enter a config utility for it....any help??
Thanks
M
Solved!
Go to Solution.

You will find conrfiguration information and answers to other RMM related questions in
ThinkServer RD230 and RD240 Remote Management User GuideThinkServer RD230 and RD240 Remote Management User Guide:
download.lenovo.com/ibmdl/pub/pc/pccbbs/thinkservers/00697mst.pdf

Vista, IE7 and Virtual Office (VO) or Remote Manager

A Windows Vista laptop (Vista Business Edition) is trying to browse to the Virtual Office web page published by their Novell SBS 6.5 server using IE7. Nothing appears in the browser. If I look at the source for the page, there is a bit of code showing, referencing a Java script. I get the same result when I try to use the Netware Remote Manager web page at http://servername:8008 or https://servername:8009. It is the same if I use the server's IP address instead of a resolvable name. The browser windows says "Connecting" and the status line shows "Waiting for 10.170.170.5"
I loaded up Firefox, and after allowing a Certificate Exception, I am able to browse to the server's Virtual Office page from the same computer.
I have installed the Certificate from the server into the Trusted Publishers container, I have set both the http://servername and https://servername into the trusted sites list.
What else do I need to do in Vista to get the web page to work?

The answer is to turn off TLS 1.0 in the Advanced Internet Options
page.
Warren
On Wed, 06 May 2009 01:56:01 GMT, WFRUSH
<[email protected]> wrote:
>
>A Windows Vista laptop (Vista Business Edition) is trying to browse to
>the Virtual Office web page published by their Novell SBS 6.5 server
>using IE7. Nothing appears in the browser. If I look at the source for
>the page, there is a bit of code showing, referencing a Java script. I
>get the same result when I try to use the Netware Remote Manager web
>page at http://servername:8008 or https://servername:8009. It is the
>same if I use the server's IP address instead of a resolvable name. The
>browser windows says "Connecting" and the status line shows "Waiting for
>10.170.170.5"
>
>I loaded up Firefox, and after allowing a Certificate Exception, I am
>able to browse to the server's Virtual Office page from the same
>computer.
>
>I have installed the Certificate from the server into the Trusted
>Publishers container, I have set both the http://servername and
>https://servername into the trusted sites list.
>
>What else do I need to do in Vista to get the web page to work?

Never ending remote management window

ZCM 10.2 running on a SLES 10 SP2 server.
I've recently had to reinstall ZCM. The install went well and it's amazing how well ZCM works when you have a working DNS server that's not hosted on a Windows server.
The problem is when I close a remote management session the window will close for a second and then open back up on it's own. It'll open another one about every three seconds and will happen until I logout of the ZCC.
I'm hoping the issue is a simple one and I can make the fix and be on my merry way. Anyone?

Isys,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Problem connecting to Remote Manager

Hi,
We installed Remote manager on AD 2008 machine
Then followed AD 2008 connector documentation copied the RM_HOME/xlremote/config/xlserver.cert file to OIM Machine
Imported the RM certificate by using the keytool utility to OIM .xlkeystore
started remote manger.
could not connect through design console by double-click Remote Manager. (No Remote Manager Currently running)
Then copied the oim Certificate (OIM_HOME/xellerate/config/xlserver.cert file) to RM machine and imported the certificate
to RM .xlkeystore and tried again...still could not connect
(could not connect to remote manager in Design console and can't create IT Resource for Remote Manager).
Thanks..
Edited by: IDMuser19 on Nov 10, 2009 10:02 AM
Edited by: IDMuser19 on Nov 10, 2009 10:03 AM
Edited by: IDMuser19 on Nov 10, 2009 10:04 AM

Works fine now..thanks

Remote management policy

Hi we're having an issue ever since our Windows Server 2008 ZCM server was updated from 11.1 to 11.2.
It looks like the remote management policy that we typically use no longer is effective.
The original policy was setup in a way that you did not have to require users consent to remote the machine. Now it does. When I do a properties on the agent in the remote management policy section, it shows up as recognizing only the default.
Any ideas?

sflegnc,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Certificate prompt in RDP session and then puts an Allow/Deny option on another users session

The users have a SSL cert installed with the private key so they can access a certain web site and when they access the site using the Windows 2012 R2 RDP server they are getting prompted with a Windows Security dialogue (Confirmation Certificate) and they
press ok. Another user will now get the next message asking if to allow or deny access to the cert. If they click allow the web site will appear for the original user.

Hi,
Thank you for posting in Windows Server Forum.
Can you clarify the actual error message you are getting? Also please let us know, whether there is any event log available.
Seems that you have not placed the certificate under Local Computer\Personal Store. Kindly recheck the configuration related to certificate and please keep the certificate under above path with its private key and verify. You can follow below steps for information.
• Open the MMC and open the Certificates snapin
• Add the Local Computer
• Import the certificate into Computer\Personal
• Open the certificate and find the thumbprint on the details tab. Copy the thumbprint to notepad and delete all the spaces.
• Open up an elevated PowerShell prompt and write:
• wmic /namespace:\\root\cimv2\TerminalServices PATH Win32_TSGeneralSetting Set SSLCertificateSHA1Hash=”‎PASTE_THUMBPRINT_STRING”
• You can check the certificate by running:
• Get-WmiObject -class “Win32_TSGeneralSetting” -Namespace root\cimv2\terminalservices -Filter “TerminalName=’RDP-tcp'”
Source:
INSTALL AND CONFIGURE A REMOTE DESKTOP CERTIFICATE ON RD SESSION HOST SERVERS
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

ZCM 11.3 Remote Management Certificate Prompt

Similar Messages

Maybe you are looking for