virtual machine backup policy template
please let me know if there is standard virtual backup policy draft available for hyper-V clustered vm's or any other virtual environment.
- Changed type IT2012 Thursday, December 15, 2011 6:42 PM
Reply:
Hi SAJOIT,
There aren't any template that you could apply in DPM or for example SCCM. Is this what you're wondering about?
If you have any best practice wonderings please let me know.
You could have a look at this URL for tips: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=c9d141cf-c839-4728-af52-928f61bebdca&displaylang=en
Best Regards
Robert Hedblom
MVP DPM
Check out my DPM blog @ http://robertanddpm.blogspot.com
------------------------------------
remotefx compression
Reply:
Read it carefully. This is the quote from step by step guide:
http://technet.microsoft.com/en-us/library/ff817580(WS.10).aspx
"If the RemoteFX hardware compression was used, Event ID 1001 will be shown."
This means that you need a special hardware compression card which I presume you don't have?
------------------------------------
Send mails by dailywise in sharepoint 2010 based on list values
HI,
i have one Doc library with name Docs,with column name status.If admin change that status(edit colum) to Approve the Splistitem will move to another Documentlibrary.
i need to send mails by dailywise to the users in Createdby column base.
How can i send mails to the Splistitem Authors by dailywise????????
please hep me......
Thans in advance,
prboss
Reply:
Hi,
option 1 . You can also use workflow, in workflow there is a onWorkFlowchange activity, that you can use to send mail when item updatedOption 2 . Most suggested option is Custom Event Handler, Where you can use itemUpdated event to send mail.
you can use custom send mail function too,public string SendMail(string From, string To, string msgSub, string msgBody)
{
try
{
System.Web.Mail.SmtpMail.SmtpServer = Site.WebApplication.OutboundMailServiceInstance.Server.Address.Trim();
System.Web.Mail.MailMessage msg = new System.Web.Mail.MailMessage();
msg.From = From;
msg.To = To;
msg.Subject = msgSub;
msg.Body = msgBody;
msg.BodyEncoding = Encoding.UTF8;
msg.BodyFormat = System.Web.Mail.MailFormat.Html;
System.Web.Mail.SmtpMail.Send(msg);
return
"The e-mail has been sent successfully";
}
catch (Exception ex)
{
}
}
Satyam MCITP, MCPD
------------------------------------
Reply:
Thank you kumar.
actually my problumis i need to send a mails to the all users who are upload that docment in document library .
Dail Eod i need send mails based on status colum.
i nned to schedule that mails automatically please help me.
Tnak you
prboss
------------------------------------
Reply:
Thank you kumar.
actually my problumis i need to send a mails to the all users who are upload that docment in document library .
Dail Eod i need send mails based on status colum.
i nned to schedule that mails automatically please help me.
Tnak you
prboss
------------------------------------
Reply:
You can create custom timer job, it will send mail to all user (who uploaded document) based on status column. you can configure timer job time, when it will execute.
please refer this article for Timer job referance
http://dotnetfinder.wordpress.com/2010/07/24/creatingcustomsharepointtimerjob2010/
Satyam MCITP, MCPD
------------------------------------
Reply:
HI kumar,
It is working on top level sites like http://server:1234/default.aspx it is not working for sitecollection level under top level
like http://server:1234/sites/samplecol
can u help me
prboss
------------------------------------
Reply:
HI kumar,
It is working on top level sites like http://server:1234/default.aspx it is not working for sitecollection level under top level
like http://server:1234/sites/samplecol
can u help me
prboss
------------------------------------
Exchnage 2010 Online Archive mailbox is not visible in Outlook 2007 Small Business Edition client
Hi,
We are having the Exchange 2010 SP1 and Outlook 2007 Small Business Edition client with Ent CALs. We have enabled the online Archive features in a mail box and its visible in OWA, Where as its not visible in Outlook 2007 Small Business Edititon MAPI client, At the same time i have tried with Outlook 2007 Professional Plus and i am able to see the online Archive mail box. Where do i have the problem or did the Outlook 2007 Small Business edition supports the Online Archive feature?
Can some one help on this case.
Arul Nathan.T
Reply:
Check this Out..
http://blogs.technet.com/b/exchange/archive/2010/12/20/3411710.aspx
Gulab | MCITP: Exchange 2010-2007 | Lync Server 2010 | Windows Server 2008 | Skype: Exchange.Ranger | Blog: www.ExchangeRanger.Blogspot.com
------------------------------------
Reply:
There are no support for Online Archive within Outlook 2007 Small Business edition and that's why you are not able to see it using that version of Outlook.
License requirements for Personal Archive and retention policies
http://office.microsoft.com/en-us/outlook-help/license-requirements-for-personal-archive-and-retention-policies-HA102576659.aspx
Martina Miskovic - http://www.nic2012.com/
------------------------------------
Reply:
Hi,
Yap Your right, i could able to confirm the same
What about OOF in Outlook 2007 SBE with Exchange 2010 SP1,
Is there any compatibility chart i can view for Outlook 2007 SBE with Exchange 2010 SP1, Like what all are the functions not available in this regards..
Arul
------------------------------------
Issue uploading pdf files to Sharepoint 2010 through TMG
Hi
I have a public facing site (extended, Internet zone) published through TMG. Word docs upload fine but pdf don't. Both work for the default zone. Anyone got any ideas as I don't even know where to start.
Thanks in advance.
Phil
- Changed type Nick Gu - MSFTModerator Monday, December 19, 2011 11:53 AM
Reply:
Hi,
Thank you for the post.
“Word docs upload fine but pdf don't.” – it does not seem like TMG issue, as word docs upload fine. Is there any error message during the pdf uploading? Do you have install the latest TMG sp2?
Regards,
Nick Gu - MSFT
- Edited by Nick Gu - MSFTModerator Wednesday, December 14, 2011 6:23 AM
------------------------------------
Reply:
Hth, Anders Janson Enfo Zipper
------------------------------------
Root CA cannot request certificate
Hi, we have a problem with our root CA, the CDP repository has expired, when we renew the CDP repository all our certificates cannot be displayed or requested.
When we try to request a certificate we receive an error message indicates that the root ca dont have or cant read the certificates
Raulito
- Moved by Tiger LiMicrosoft employee Tuesday, December 13, 2011 12:44 AM (From:Network Infrastructure Servers)
- Changed type Bruce-Liu Thursday, January 5, 2012 3:10 PM
Reply:
what do you mean by CDP repository? how did you renew it?
------------------------------------
Join a computer into my domain
Hi
I'm Trying to join an XP computer (PC1) into my domain XYZ.com, but it give me the error: DNS name does not excist. errorcode: 0x000232B RCODE_NAME_ERROR)
PC1 is located in a different subnet as my 2008 server DC. computers that are located in the same subnet as the DC are able to join the domain.
Futher i can also ping the DC from PC1
Could anyone point me in the good direction to fix this problem?
DC: IP 168.10.2.150/16; GW 168.10.2.251; DNS 168.10.2.150, 127.0.0.1
PC1: IP 168.1.2.97/16; GW 168.1.2.250; DNS 168.10.2.150
- Changed type Tiger LiMicrosoft employee Wednesday, November 16, 2011 1:47 AM
Reply:
Hi Steven
Have you checked by nslookup command to check whether your Domain name getting resolve or not from XP machine.
Firewall Setting on client machine.
Date and time of client machine should be match to DC.
Telnet port status as per below mentioned path:
http://technet.microsoft.com/en-us/library/dd772723%28WS.10%29.aspx
Thanks,
Jatinder Kumar | MCSE 2003
------------------------------------
Reply:
On your DNS server, you have verified that the zone is loaded and the name you are typing is correct? Can you supply the results from IPCONFIG /all from that workstation not able to join?
Guides and tutorials, visit ITGeared.com.
------------------------------------
Reply:
Your IP and DNS seems correct so I assume that you have full connectivity on an IP level between DC and PC1. But neverthelss you should check the following:
From PC1
Ping 168.10.2.150 - is it ok?
On DC
Check the A-record for PC1 so that it is associated with the IP addres 168.1.2.97
Likewise check the PTR record for reverse lookup.
Usually hosts should be added in the DNS database when receiving an IP from the DHCP but sometimes that fails. And since you have PC1 on a different subnet, I doubt that DC is the DHCP server. Have you issued the IP for PC1 manually?
------------------------------------
Reply:
Hi Steven,
Thanks for posting here.
Just make sure we were not using NetBT name when add into domain , some workaround could be found form the articles below:
Troubleshooting Domain Join Error Messages
DNS error when you add a Windows XP-based computer to a Small Business Server 2000 domain
http://support.microsoft.com/kb/331072
Thanks.
Tiger Li
Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
------------------------------------
Reply:
Hi
thanks for the suggestions.
I tried nslookup. the result went to DC.xyz.com, adress:168.10.2.150, name: xyz.com
date /time is the same and firewall is off.
As for telnet, i don't know how to use it.
Still no connection to the domain.
------------------------------------
Reply:
thank you for the reply. the zone is loaded
Windows IP Configuration
Host Name . . . . . . . . . . . . : ALS-Server
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
Ethernet adapter LAN-verbinding:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-10-C6-AE-7C-02
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 168.1.2.99
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 168.1.2.250
DNS Servers . . . . . . . . . . . : 168.10.2.150
------------------------------------
Reply:
hi,
Ping works fine, its avg 25ms, none lost
on the dc what should my PC1 be in the dns host tabel?, i got other computers (on the same subnet at the DC) who are connected without being in the dns table.
This computer also got his ip manualy
The DC is our active direcory, DNS, DHCP, print server and file server.
------------------------------------
DAQ And GSM Modem Commands . Problems and Solutions By Eftychios Aristodemou (Project : Larnaca Airport )
Starting 4 months ago a small Data Aquation System for monitoring and control 20 Digital I/O and 45 Analog I/O
This Project , Hardware and Software Created For the Industrie (LCA Airport & MyMall) Solution For Making Energy Sucking Machines To Energy Saving
Saving energy is equally important as saving Electricity , but what many people don’t know is that Electricity consumption equals Resource consumption. HAVAC machines are one of the most energy Sucking Ever Built , Draining almost 6000MA Globally.
I Will Post Some GSM Modem Commands That Control The BMS-DAQ System in VB6 .
----------------------------------notify of new sms received
Public Function NewSmsIndicate(InpA As Boolean) As String
If InpA = True Then
NewSmsIndicate= Reque("AT+CNMI=1,1,0,0,0", , resultPos, vbCrLf)
Else
NewSmsIndicate= Reque("AT+CNMI=0,0,0,0,0", , resultPos, vbCrLf)
End If
RaiseEvent Resp(NewSmsIndicate)
End Function
----------------------------------
Private Sub MSComm_OnComm()
Select Case MSComm.CommEvent
Dim RespontAAA As String
Dim ip44
Dim str33
Case comEvReceive
232Buffer = MSComm.Input
RespontAAA = 232Buffer
inttemp = InStr(RespontAAA , "ME") ' new message
If InStr(RespontAAA , "+CMT") Or InStr(232Buffer, "+CMT") Then
strTemp = Mid$(RespontAAA , ip44, Len(RespontAAA ))
Main.Status.Caption = "Command Message Received"
Main.Timer2.Enabled = True '' Here you can active a command every time a new sms arrives :)
Main.Text2.Text = 232Buffer
End If
Main.Text4.Text = Mid(RespontAAA , 3, 4) ' RespontAAA
Main.Text5.Text = str33
End Select
end sub
Public Property Get MnufacturerId() As String
' get modem manufacturer identification
MnufacturerId= Requ("AT+GMI", , resultPos, vbCrLf)
RaiseEvent Resp(MnufacturerId)
End Property
Public Property Get Modsernum() As String
' get modem imei number
Modsernum= Requ("AT+GSN", , resultPos, vbCrLf)
RaiseEvent Resp(Modsernum)
End Property
Public Property Get RevId() As String
' get revision identification
Dim answ As String
answ = Requ("AT+GMR", , resultPos, vbCrLf)
RevId= MvField(mAnswer, 2, ":")
RaiseEvent Resp(RevId)
End Property
Public Property Get ModelId() As String
' get model indentification number
ModelId= Request("AT+GMM", , resultPos, vbCrLf)
RaiseEvent Resp(ModelId)
Err.Clear
End Property
---------the form load
Private Sub Form_Load()
'PowerTimer2 will arm the sms alarm every 1 minute
'every 2 hours the powertimer3 will reset the alarm check3 to send sms
PowerTimer2.Enabled = False
PowerTimer2.Interval = 1
PowerTimer2.IntervalUnit = Minutes
PowerTimer3.Enabled = True
PowerTimer3.Interval = 2
PowerTimer3.IntervalUnit = Hours
dtpDateTime.Value = Now
Winsock1.LocalPort = 15000
Winsock1.Listen
Status.Caption = "Modem Not Connected"
List2.AddItem "0"
List2.AddItem "1"
List2.AddItem "2"
List2.AddItem "3"
List2.ListIndex = 0
Text1(2).Text = "Not Connected"
Modem.LoDev cboDevices
Modem.LogFile = App.Path & "\Modem.log"
cboDevices.ListIndex = 0
LED1.BlinkInterval = 200
LED1.Blink = True
Dim signal As String
If Modem.SMStorage <> "ME" Then
Call Modem.SMStorage(MobileEquipmentMemory)
End If
Modem.sms_ListView progBar, ListView1, "inbox", "inbox", RecUnread
Label3.Caption = "Gsm Signal" & " " & Val(msignal) & "%"
Shell App.Path & "\morechiller.exe", vbMinimizedFocus 'run the chillerboard 1 program.
Check3(0).Value = 0
Check3(1).Value = 0
Check3(2).Value = 0
Check3(3).Value = 0
Check3(4).Value = 0
Check3(5).Value = 0
Check3(6).Value = 0
Check3(7).Value = 0
If Not Init_Com(txt(0).Text, txt(1).Text) Then
End If
SwitchTags
232Comm.Enabled = True
Call PlaySound(App.Path & "\Windows XP Logon Sound.wav", 0, SND_ASYNC)
End Sub
This Code Change The Remote Set Temperature on 8 Mwatt (3600 Amper ) HVAC Systems , Alarming On any error , and transmit Digital Data To our server in nicosia for Logging 5 years database.
For other Code Contact me .
- Edited by Eftychios Aristodemou Thursday, December 15, 2011 10:19 AM
Exchange 2010 Problem
Some Exchange 2010 users can not receive email from External. When troubleshooting with Mail flow troubleshooter between these two addresses, the error message was "Mail submission failed, the smtp host was not specified.
Does anybody know the solution?
Reply:
Hi,
Kindly check the DNS entries at your end where emails are not being received. Open the Command Prompt and run Nslookup then check the A record that is being used for MX, whether it is being resolved or not. Did u make any policy on outlook or by using Transport Rule.
Check and let me know
Regards,
RK
- Edited by Rashid Kamal Thursday, December 15, 2011 4:55 AM
------------------------------------
Reply:
1) This is new server ? ,Have you created the send connector ?
2) Can you telnet to port 25 on Exchange server and send the test mail using Telnet and letus know the results
3)Also run Mailflow Troubleshooter available on TOOLBOX to see if we get any error.
Viral Rathod Blog : http://viralr.wordpress.com
------------------------------------
Reply:
Also refer :
Viral Rathod Blog : http://viralr.wordpress.com
------------------------------------
active directory
- Moved by Tiger LiMicrosoft employee Friday, December 16, 2011 4:49 AM (From:Network Infrastructure Servers)
- Changed type Tiger LiMicrosoft employee Tuesday, December 20, 2011 10:39 AM
Reply:
Guides and tutorials, visit ITGeared.com.
------------------------------------
Reply:
I too, don't understand what you are asking. Clean?
Are you asking how to demote the domain controller (remove Active Directory)? If you can log in to the domain controller, you can use dcpromo /forecremoval to force a demotion.
What password are you talking about, the Active Directory Domain Administrator account password, or the Directory Services Restore Mode (DSRM) password?
Can you log into DSRM? To do that:
- Reboot the server
- Hit the F8 button as it boots. This will invoke the startup menu.
- Choose "Directory Services Restore Mode"
- Logon with the administrator account. Try various passwords you may have used.
If you are able to login to it, then you can try to using dcpromo /forecremoval.
If that doesn't work, but you can log in, you can manually rip out the DC services by using the steps at the bottom section of this link:
Complete Step by Step Guideline to Remove an Orphaned Domain controller
http://msmvps.com/blogs/acefekay/archive/2010/10/05/complete-step-by-step-to-remove-an-orphaned-domain-controller.aspx
However, my suggestion to fix it, is to blow away the current installation, and reinstall a fresh operating system. That is the best recommendation and suggestion.
Ace
Ace Fekay
MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.
------------------------------------
Script to add newly created mailboxes automatically to Mail-Enabled Universal DL
I created 100s of Dynamic Distribution Group (this group in EMC shows as Mail-Enabled Universal Group) with some third party tool and it was automatically adding newly created mailboxes to respective DL on query based.
Now that tool eval period has been expired and i want to do the same operation with some script.
Any help will be appreciated.
Shahid
- Changed type KadarShahid Wednesday, December 21, 2011 8:56 AM
Reply:
You could implement it as a scripting agent, whenever the new-mailbox cmdlet is used:
http://technet.microsoft.com/en-us/library/dd297951.aspx
[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "
------------------------------------
Reply:
Thanks for the link. Unfortunately i don't know scripting and i need one for this. We have E2K7 environment.
Shahid
------------------------------------
Outlook for mac 2011 keeps crashing opening large emails
When viewing it on owa it appears the bottom of the email including the disclaimer has replicated itself hundreds of times resulting in a 3mb email.
this occurs quite frequently, i have tried rebuilding the database and installing the latest version of safari but it appears to make no difference.
We are connecting Outlook 2011 sp1 for Mac to an SBS2008 server running Exchange 2007
- Changed type Tony Chen CHN Thursday, December 15, 2011 3:03 AM Mac Office 2011
- Moved by Max Meng Monday, January 2, 2012 8:48 AM Off-topic (From:Outlook IT Pro Discussions)
Reply:
Hi,
This is the forum to discuss questions and feedback for Microsoft Outlook, better to post your question to the forum for Office for Mac
http://answers.microsoft.com/en-us/mac/forum/macoutlook
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
More information:
http://www.microsoft.com/mac/support
http://technet.microsoft.com/en-us/office/hh127784.aspx
Tony Chen
TechNet Community Support
------------------------------------
Correct invalid configuration file paths
You can correct configuration file paths that are not valid without having to open the package in BIDs, by using the Package Configuration File Editor. Package configuration paths can become invalid when packages are moved from development environments to production environments.
The Package Configuration File Editor, for SSIS 2008/2008 R2, is available on CodePlex at http://ssisconfigeditor.codeplex.com/ .
Carla Sabotta
Why can I not disable mailbox?
Denise
Reply:
I doesn't seem to be much to discuss about so If you want to ask a question, change the thread type and add some information. Just a Title is not good enough.
Martina Miskovic - http://www.nic2012.com/
------------------------------------
Desktop icon bug
With auto arrange turned off, place some test icons on the desktop that you don't mind deleting.
Then, create a new folder on the desktop after all the other icons.
There are three things to do:
1) Drag an icon into the folder - no bug.
2) Shift-Drag an icon into the folder - no bug.
3) Ctrl-Drag an icon into the folder - Ahah! The icon does indeed copy into the new folder but it also moves to where the folder used to be and the folder itself moves down to the next position on the desktop.
T.R.
Reply:
Hi,
Get it. I have found that this is already reported. It will be fixed in later Windows 7 versions.
Thanks for your test and sharing.
Arthur Xie - MSFT
------------------------------------
Reply:
(Classic mode) - what's going on?
------------------------------------
Reply:
I am indeed using build 7000 only.
T.R.
------------------------------------
Reply:
Another small irritation I've found with desktop icons lately is when you remove software you don't want anymore. The uninstall proccess fails to remove the icon from the desktop as in past versions of Windows. Manually trying to delete the icon gets you a warning that basically says that "The file path is missing: Access Denied". The icon will eventually disappear after two or three reboots but it's still a minor aggravation none the less. Of course the workaround at the moment is to just delete the icon before starting the uninstall. Hope this is fixed in the RC.
Denny
P.S. Feedback has been sent.
------------------------------------
Reply:
I am having a problem with downloading files, saving them to desktop and then they simply don't appear unless I F5 the desktop?
(Classic mode) - what's going on?
Holy cow, this problem is back. As of 12/14/2012, I have all updates to 64 bit Windows 7 Home Premium installed, but I have exactly the same problem. If I save a file from any program to the desktop, it ends up in c:\users\Elbert\desktop but there's no icon on the desktop. F5 does make it appear, as does rebooting or logging out and back in again.
- Edited by Elbert Levi Thursday, December 15, 2011 1:25 PM
------------------------------------
Central Management in two subdomains
I want to purchase a license Lync 2010 Ent. Now I want to install a trial version for 3 users. Our company has several branches. Each branch has a different subdomain. We all belong to the windows domain, eg mydomain.com. My branch has a subdomain d01.mydomain.com. Each branch has a different subdomain d02.mydomain.com - germany. When I create a topology, and I want to publish it I get the information that the Central Management Server is a subdomain d02.mydomain.com and I can not share topology. Can I have your Central Management Server only for my subdomains?
Reply:
Hi ukaszq,
Did you install the Central Management Store on a server which is part of your parent domain (mydomain.com)?
Or Did you install it on the sub domain d02.mydomain.com?
Also make sure that the server you are trying to publish the topology from has admin permissions on the subdomains.
Jamie Smith
------------------------------------
Reply:
Hi Jamie,
Yes, all subdomains are part of my parent domain (mydomain.com). CM has been installed on subdomain d02.mydomain.com, now i want install CM on two subdomain d01.mydomain.com only for my subdomain. I have admin permissions on the subdomain d01.mydomain.com.
------------------------------------
Reply:
I recieve this error:
------------------------------------
Reply:
Hi Ukazq,
For the error you need to add megsql03 to your SQL stores. Right-click the SQL Store and create it.
Jamie Smith | MCP, MCTS
------------------------------------
Reply:
Hi Jamie,
I added the megsql03.d02.mydomain.com with subdomain name to SQL Store with Instance Default. But the server SQL is in other subdomain in my network. It is not in my subdomain d01.mydomain.com, but in subdomain d02.mydomain.com. When i added and i run publish topology - the same error.------------------------------------
Azure SDK 1.6: documentation on new MSBuild options?
We just upgraded to Azure SDK 1.6 - I see tons of new features, nice work! In many place I see a bullet list of new features, but no link on how to use them. Specifically, I would like to know how to use the new MSBuild options -
For example, in this post from Neil Hutson's -
Windows Azure SDK ( November Update )
http://blogs.msdn.com/b/neilhut/archive/2011/11/15/windows-azure-sdk-november-update.aspx
I see this -
Team Build: The Windows Azure Tools for Visual Studio 2010 now offer MSBuild command-line support to package your application and pass in properties.
Where can I find any documentation or examples on how to use these new MSBuild options? I didn't see any examples in the "Windows Azure Platform Training Kit - November Update".
If there's no published documentation yet on this, can someone from Microsoft help me out in this thread?
I am hoping we can now create a 'publish profile' (one of the new features) and just pass that to MSBuild - is that possible?
- Edited by Emmanuel Huna Monday, November 21, 2011 10:35 PM
- Changed type MingXu-MSFTMicrosoft employee Sunday, December 4, 2011 2:50 PM General Discussion about documentation feedback
Reply:
Hi,
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay.
Appreciate your patience.
Best Regards,
Ming Xu.
Please mark the replies as answers if they help or unmark if not.
If you have any feedback about my replies, please contact msdnmg@microsoft.com.
Microsoft One Code Framework
------------------------------------
Reply:
Don Glover: AzureDocGuy
- Edited by Don Glover Tuesday, November 22, 2011 8:26 PM
------------------------------------
Reply:
That's too bad - not only I'm looking forward to the new features - but I'm hoping by using them we will get back our trace logs in the cloud (fixing the issue described here).
If a feature is announced, but there's no documentation, does it make a sound? Is it really released? Rhetorical questions, no need to answer.
------------------------------------
Reply:
So... it has been a week since my original question and two weeks since the latest SDK has been released.
Any ideas when we'll get any direction on how to use these new features around integration with MSBUILD and TFS?
------------------------------------
Reply:
Don Glover: AzureDocGuy
------------------------------------
Reply:
It has been about a month since this feature was "released".
When will we be able to use it?
------------------------------------
Reply:
Don, what's the hold up? Could I sign a NDA and get access to any documentation on this feature?
In this thread -
http://social.msdn.microsoft.com/Forums/br/windowsazuretroubleshooting/thread/43bcaa2e-1bb9-4190-889f-b00b14b71fbf
I describe how logging from azure tracing no longer works when creating the azure package through msbuild and the "/t:Publish" target. Since I'm not getting any help there - I was wondering if the new options in the 1.6 SDK could help us get our logs back.
Sometimes it's frustrating with you guys - can you see the headaches you put us through? And if you do, is there any way to let the pointy head managers to know they should treat their customers better?
------------------------------------
Reply:
Don Glover: AzureDocGuy
------------------------------------
reinstall office ultimate
I have to format my computer and I have already used up all my office ultimate keys.
I have not done the format yet
I need to know how I can reinstall it if I don’t have any product codes left
Reply:
Kent Agerlund | My blogs: blog.coretech.dk/kea and SCUG.dk/ | Twitter: @Agerlund | Linkedin: Kent Agerlund
------------------------------------
Launch Action workflow on Denial
Is it possible to launch an Action workflow based on the outcome of an Authorization workflow? So what i want to do is launch Workflow1 if it is Approved, or launch Workflow2 if it is denied.
Thanks,
Rich
- Changed type Markus VilcinskasMicrosoft employee Thursday, March 14, 2013 7:56 AM
Reply:
I'm pretty sure If/Else scenarios have to be handled inside the custom workflow, or by passing messages between workflow phases using the Request object.
One thing that would be interesting to try is a set of request objects - perhaps it's possible to trigger a workflow based on the request itself transitioning into a Failed set. But I haven't tried that myself.
http://www.wapshere.com/missmiis
------------------------------------
Reply:
I don't know if its doable but what about creating custom approval activity
then you inspect the IsApproved property in ApprovalActivity using IF/Else activity
I read a post to disable the termination of the workflow upon rejection in the ApprovalActivity so you can add more logic after its finished, refer to this:http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/649f6a28-f662-4296-a222-a0ebaf3dc63d/
but then you can not add action activities to the MPR since they will be invoked regardless of the result of the custom AuthZ activity, so you need to manage all your actions inside your custom approval workflow.
you can test that and see if its applicable
------------------------------------
Reply:
Hello,
Everything has to be processed in Action. But due to Termination Exception, you must understand that Rejection code has to be processed in a dedicated MPR.
See :
http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/4165c1d4-0183-473b-bd3a-dbd1892e91c6
http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/649f6a28-f662-4296-a222-a0ebaf3dc63d
Regards
------------------------------------
Two validation levels with independent approval workflows
I’m currently looking for this behavior :
The property for a user to have an account in AD, AS400 or other resource is symbolized by attributes attached to the user. For example on the user object, the attribute attAD take the value « yes » or « no ». If the value is « yes » the user account will be provisioned in AD. This is the same logic for all other resource attributes.
When a user is created, a mail is sent to the top manager for approval. If the top manager refuses, all the request is rejected and the user is not created. If the top manager accepts, a mail is sent for approval to each resource manager for which the corresponding attribute is « yes ».
If a resource manager accepts the corresponding attribute is « yes ». If a resource manager refuses, the corresponding attribute is set to « no ». The process continues and the request is not rejected. When the workflow is terminated, the user is created with the right attributes.
The problem :
The key sentence is «The process continues and the request is not rejected». When the top manager validates the user creation, if only one of the resource managers refuses, all the request is rejected and the user is not created. A user contains a lot of these attributes (about 100)
Is it only possible ? Does anyone have a solution to make it work ?
thank you in advance !
- Edited by Alexis Derrien Friday, June 11, 2010 2:51 PM
- Changed type Markus VilcinskasMicrosoft employee Thursday, September 23, 2010 10:52 AM
Reply:
I can imagine 2 solutions:
1. user object is created on a FIM portal without an account. Once object is created an MPR with custom action is trigged. This custom action should do several modifications with user account (one in a time) or request to add a user to several groups. This would raise several independent approval workflows. Another MPR should watch user attributes and/or membership to construct an account name.
2. have one approval for user creation process but approval from resource manager must be raised by a custom action in authZ stage so it will look like a sub approval to original request and will not affect original workflow but will modify its workflow data.
anyway, I can't imagine all of this without custom WFs.
------------------------------------
Reply:
Hello and thank you for taking the time to discuss a solution.
The synchronisation uses the user attributes and doesn’t use groups.
I have understood that a user creation is represented in FIM by a single request. As soon as the authz stage is validated, the user object is physically created in FIM database as a resource. That means the user object attributes are potentially in an unstable state. For example the AttAd attribute is true although the user is waiting for a validation. It can be confusing for the customer and the synchonisation could use unstable values.
We could consider to reset the corresponding attribute to « no » in an action WF but we also manage the attribute modification with a MPR and I think we are going to infinite loops…
The second solution you propose is much more our needs.
Is it possible to disable attributes modifications/creations before the Action stage according to an approval result ?
------------------------------------
Reply:
Is it possible to disable attributes modifications/creations before the Action stage according to an approval result ?
Sure, create a set that will include all 'incomplete' objects and another set with 'approved' objects. Apply an MPR which allows modification to the second set.
But you can't modify user object on a portal before it will be approved - its not created yet.
BUT! MS says that Authz WFs should never modify objects - seems like it would be better to modify //WorkflowData/AttAd during AuthZ phase and then have an action WF to alter user attributes.
------------------------------------
Reply:
Thanks,
I am also studying the possibility of using filters and groups in this situation. I think it could be an interesting way to resolve my problem.
I'm looking for this behavior :
1) The property for a user to have an account in AD, AS400 or other resource is symbolized by attributes attached to the user
2) I create a group for each resource (AD_Group, AS400_Group). All users in the set will be provisionned to the corresponding resource
3) I define a criteria based filter foreach of these groups. An user will be automatically added to the group if the corresponding attribute is true (for example a user with AttAd = true will be automatically added to the AD_Group). In the same way, a user will automatically leave the group if the corresponding attribute is false.
4) I define a MPR on the transition In event and transition out event where an approval is asked to the resource manager to enter or leave the group.
5) The top manager only validates the global user creation or modification.
All is ok except if a resource manager rejects the request for a user to enter or leave a group. I think the corresponding attributes keep the old « yes » or « no » value ?
I can imagine a custom activity that inverse the attribute value during the authz stage. As you said it’s not a good practice but in this way, if the user’s request to enter or leave the group is rejected, the corresponding attribute keeps the good value.
Finally in the action stage, I set the attribute to the right value (« true » if the user has entered the set, false otherwise).
I’m relatively new with FIM management. Please tell me if there is something wrong with this solution.
Thanks again for your help !
------------------------------------
Reply:
Make it more simple:
1. user is created on a FIM portal without any additional attributes set.
2. "top manager" validates and approves a request
3. after approval has been completed an MPR starts an action activity that submits several object modification requests using UpdateResourceActivity to enable user options like ADAccount, AS400, ADLS account, Solaris shell login or whatever. this MPR can be trigged by a Transion Set IN or even by an original user creation MPR.
4. every modification for user attributes like ADAccount or AS400Account have its own MPR with its own workflow and different approvers.
5. once user will be approved for having an account in AD with ADAccount=true property it will fall into the set 'AD enabled users' and this in turn will trigger an MPR with Transition IN rule to apply proper sync rules and calculate user account name.
------------------------------------
Reply:
I have read this post :
http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/b5f20a76-04a4-4783-b343-5525de2ac39c/
It seems that a request submitted by a fim activity cannot trigger an authorization workflow. I understand that when the user creation MPR uses UpdateResourceActivity in the action stage, the approval for the attribute modification will not be trigged. In this situation, I think the approval from resource managers will be skipped when a user is created.
If each attribute has its own modification MPR, I think we fall in the case I want to avoid. After the user creation, if few user’s attributes are modified in the same time and if one of the approvals fails, all the modification request fails.
------------------------------------
Reply:
Hi Alexis!
The problem you have is that the Approval activity fails the whole workflow silently without an exception that can be caught on a single rejection but the Forum User Phil - CGI has examined the Approval activity and found a way to make the approval activity not to fail on rejection. I'm not sure Microsoft would consider the solution supported but at least it's a way to solve your problem.
Have a look at this post: http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/649f6a28-f662-4296-a222-a0ebaf3dc63d
//Henrik
Henrik Nilsson, ILM/FIM MVP Blog: http://www.idmcrisis.com Company: Cortego (http://www.cortego.se)
------------------------------------
Reply:
Hi Alexis,
You do not want an approval workflow to fire on the FIM MA Activity.
I would create an ACTION workflow for new users that - as Evginy suggested - set each one of the attributes to true (ADAccount, AS400, ADLSAccount). The activities in this ACTION workflow should be done by an Actor that requires approval from the mid-level managers.
In this way, each entitlement can be independently approved or denied without impacting the other entitlements.
-Jeremy
------------------------------------
Reply:
Hello,
I tested it. Jeremery Palenchar has the solution.
Approval must not be thought necessarily as an Auth phase. Action can also do it but I will be more precautionous regarding the processing of rejection.
See :
http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/4165c1d4-0183-473b-bd3a-dbd1892e91c6
http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/649f6a28-f662-4296-a222-a0ebaf3dc63d
Regards
------------------------------------
No comments:
Post a Comment