I know there's some well-supported methods for turning Compatibility Mode on for specific domains and addresses, but what about the reverse? In my case, I'd like to leave the settings open to the user, but by default have a short list of websites that do not render with Compatibility Mode enabled. It seems like there should be a simple way of doing this via GP that I'm just missing or not understanding. Anyone else approached an IE Compatibility Mode policy from this angle?
We're running SharePoint 2013 and allow external access via Microsoft's Web Application Proxy. When I connect to SharePoint from it, the profile images do not load because they are served up from the My Site hostname. Same server in our case, but different hostname. If I login to my a My Site externally, authenticating again, and then refresh the SharePoint page I'll see the images load up.
Shouldn't my session created with SharePoint apply to the My Site so I can login one time and visit different resources offered through the proxy?
I'm setting up the ability for users to log in remotely to access web resources via AD FS 2.0 and Web Application Proxy. What I'm seeing right now is that when I attempt to log in remotely I initially get the AD FS login form, and then once I enter in valid credentials I'm immediately prompted with a 401 login. If I enter that correctly I can browse the published application. What do I need to look at between the Proxy and/or ADFS server(s) to correct this so I'm not entering credentials twice? I figure this should be a relatively common use-case but finding the correct documentation is proving difficult.
We have a lab of computers with printers being deployed to and set as default with Group Policy Preferences, but we're getting a large number of users who don't pick up the default settings. There's another local printer already installed and it's being left as the default after our policy has applied. We use similar policies in dozens of other labs without trouble.
Here's the trace after enabling GPP logging for printers:
2013-01-10 11:49:11.810 [pid=0x488,tid=0x77c] Completed get GPH path. [SUCCEEDED(S_FALSE)]
2013-01-10 11:49:11.810 [pid=0x488,tid=0x77c] Completed remove GPH. [SUCCEEDED(S_FALSE)]
2013-01-10 11:49:11.826 [pid=0x488,tid=0x77c] Read GPE XML data file (496 bytes total).
2013-01-10 11:49:11.826 [pid=0x488,tid=0x77c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-01-10 11:49:11.841 [pid=0x488,tid=0x77c] Properties handled. [ hr = 0x8007000a "The environment is incorrect." ]
2013-01-10 11:49:11.857 [pid=0x488,tid=0x77c] Error suppressed. [ hr = 0x8007000a "The environment is incorrect." ]
2013-01-10 11:49:11.857 [pid=0x488,tid=0x77c] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2013-01-10 11:49:11.857 [pid=0x488,tid=0x77c] WQL : SELECT * FROM RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = "{########-####-####-####-############}"
2013-01-10 11:49:11.857 [pid=0x488,tid=0x77c] Purged 0 old RSoP entries.
2013-01-10 11:49:11.857 [pid=0x488,tid=0x77c] Logging 1 new RSoP entries.
2013-01-10 11:49:11.873 [pid=0x488,tid=0x77c] RSoP Entry 0
2013-01-10 11:49:11.873 [pid=0x488,tid=0x77c] Completed get GPO list. [SUCCEEDED(S_FALSE)]
The obvious line that identifies a problem is hr = 0x8007000a "The environment is incorrect.", but I have yet to find a concrete answer on how to resolve it. The drivers were pre-installed on this particular image so my next step may be to re-image a few machines without the driver included.
Other than that, anybody else ran across this or have other ideas on where to look to troubleshoot?
A couple of days ago we stumbled upon a disturbing issue with a relatively newly installed ESXi 5 management host for VDI. We were preparing a base VM for Linked-Clone deployment and when accessing its admin share from another machine ("\vm\c$") the entire Management network locks up. We can browse for a bit but after digging through a few folders Explorer hangs. The host and all other VMs inside of it are completely unreachable from the vSphere Client. If I physically walk over to the ESXi server I can login and reboot it and it will come back just fine. I can reliably crash it with any Windows-based VM (7 and 2008R2) 99% of the time. Today, I experimented with different physical ports on the server (there are 4) and found that once it crashes on a port, moving it to another and restarting the Management Network gets me back in, but if I fire up a share remotely I can crash that port, too. A reboot clears it all up.
I've combed through the logs on the server and haven't turned up anything of use. Any ideas?
I work for a college with almost a thousand users (faculty and staff). Many staff members also teach part-time, and many faculty members teach in different departments.
Knowing that a user and/or computer can only exist in a single OU, what kind of strategy would allow for a nice hierarchical structure, and still be flexible enough to allow different department Group Policies to apply to the same user.
This can't be too uncommon of a scenario but I'm just not seeing the simplest or cleanest layout yet.
I've seen conflicting suggestions on VMware's documentation as well as around the Internet on a best practice for preparing linked clones for VMware View (5) deployments. Should I join the parent VM to the domain prior to shutting down for a snapshot, or should I do that with Sysprep/Quickprep during Compose?
Last night I patched and rebooted our SharePoint 2010 server. Everything looked fine but this morning the Excel web viewer is broken. When trying to open a spreadsheet I get an error box stating, "Unable to process request. Wait a few minutes and try performing this operation again."
The Excel Calculation Service is running, the Application Pool is running and using a valid domain account, and I've even reinstalled the Excel Services Application.
Any other suggestions as to how to get this functional again?
Logs:
07/06/2012 16:09:44.24 w3wp.exe (0x1F50) 0x10D8 SharePoint Foundation Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://server:9999/{id}/ExcelService.asmx' Channel: 'Microsoft.Office.Excel.Server.CalculationServer.Proxy.IExcelServiceSoap' Action: 'http://schemas.microsoft.com/office/Excel/Server/WebServices/ExcelServerInternalService/ExcelServiceSoap/GetHealthScore' MessageId: 'urn:uuid:{id}' {id}
07/06/2012 16:09:44.24 w3wp.exe (0x1F50) 0x10D8 Excel Services Application Web Front End acbd Critical Unable to reach Excel Calculation Services http://server:9999/{id}/ExcelService*.asmx. [Session: User: DOMAIN\user] {id}
07/06/2012 16:09:44.24 w3wp.exe (0x1F50) 0x10D8 Excel Services Application Web Front End accf Medium ServerSession.ProcessWebException: A Web exception during ExecuteWebMethod has occurred for server: http://server:9999/{id}/ExcelService*.asmx, method: GetHealthScore, ex: System.Net.WebException: The remote server returned an error: (503) Server Unavailable. at System.Net.HttpWebRequest.GetResponse() at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout), response: 'System.Net.HttpWebResponse', status ProtocolError, user name: DOMAIN\user. {id}
07/06/2012 16:09:44.24 w3wp.exe (0x1F50) 0x10D8 Excel Services Application Web Front End acco Critical There was an error in communicating with Excel Calculation Services http://server:9999/{id}/ExcelService*.asmx exception: The remote server returned an error: (503) Server Unavailable. [Session: User: DOMAIN\user]. {id} 2159 Critical Event 5231 (Excel Services Application) of severity 'Error' occurred 10 more time(s) and was suppressed in the event log
07/06/2012 16:09:44.38 w3wp.exe (0x1F50) 0x1248 SharePoint Server Unified Logging Service 2159 Critical Event 5239 (Excel Services Application) of severity 'Error' occurred 10 more time(s) and was suppressed in the event log
07/06/2012 16:09:46.55 w3wp.exe (0x1D04) 0x2670 SharePoint Foundation Topology
I'm trying to run a Scheduled Task on a 2008 R2 Domain Controller and all was well until I set it into the production environment. I'm running the task as a Domain User that's defined in the "Log on as a batch job" setting. For giggles I also added the account to "Allow log on locally" after the former failed.
When I'm prompted for the password after setting up the task I receive the error: "An error has occurred for the task ########. Error message: The following error was reported: Logon failure: the user has not been granted the requested logon type at this computer.."
I'm thinking that because this a DC that maybe it needs something else?