Unable to workplace join IOS - Windows 8.1 ok

-

i have 2012r2 , wap/adfs working nice, can wpj 8.1 client no problem, ios device wont install profile saying unable connect server, here logs device.

all urls reachable fine devices, trusted public cert enterpriseregistration on upn also, ideas?

jul 16 10:06:52 martins-iphone profiled[39] <notice>: (note ) mc: enrolling in ota profile service...
jul 16 10:06:52 martins-iphone profiled[39] <notice>: (error) mc: failure occurred while retrieving profile during ota profile enrollment: nserror:
desc   : connection server not established.
desc: connection server not established.
domain : mchttptransactionerrordomain
code   : 23001
type   : mcfatalerror
params : (
"https://sts.domain.com/enrollmentserver/otaprofile/profile?operation=enroll",
400
)
jul 16 10:06:52 martins-iphone profiled[39] <notice>: (error) mc: installation failed. error: nserror:
desc   : profile installation failed
sugg   : connection server not established.
desc: profile installation failed
sugg: connection server not established.
domain : mcinstallationerrordomain
code   : 4001

thanks mark, helps if point trace file :)

i'm getting this:

</computer></system><applicationdata>url https://localhost:49443/adfs/services/trust/mex threw exception underlying connection closed: unexpected error occurred on send. system.io.ioexception: unable read data transport connection: existing connection forcibly closed remote host. ---&gt; system.net.sockets.socketexception: existing connection forcibly closed remote host&#xd;&#xa;   @ system.net.sockets.networkstream.read(byte[] buffer, int32 offset, int32 size)&#xd;&#xa;   --- end of inner exception stack trace ---&#xd;&#xa; 

port 49443 doesn't seem responding @ all, need see if needs config in iis.

there details of usage of port , drs here:

http://technet.microsoft.com/en-us/library/dn486819.aspx

device registration service (drs) in windows server 2012 r2 operates on port 443; clienttls user certificate authentication operates on port 49443

  • for active, non-browser clients using certificate transport mode authentication hard-coded point port 443, code change required continue use user certificate authentication on port 49443.
  • for passive applications no change required because ad fs redirects correct port user certificate authentication.
  • firewall ports between client , proxy must enable port 49443 traffic pass through user certificate authentication.

see also:

http://windowsitpro.com/windows-server-2012-r2/certificate-authentication-windows-server-2012-r2

have got port 49443 open on firewalls?

mark.



Windows Server  >  Windows Server 2012 Setup



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

0x300000d errors in Microsoft Remote Desktop client

-
we use rd connect home users office. @ server side remote desktop gateway configured on 2008r2 server. experience following:   for years worked fine, starting last year users apple macbook experienced connection errors after new version of microsoft remote desktop in app store , automatic update. after couple of weeks error disappaered when new updates released. since 6 8 weeks problem again. because don’t have macbook cannot reproduce problem.   starting couple of weeks samsung s6 experiencing problems, here version 8.1.37.135 installed, error displayed is: can’t connect tot remote pc because remote desktop gateway server temporaraily unavailable. try connecting later or contact network administrator assistance. error code  0x300000d   because has worked fine years expect issues on client can configuration error on gateway server.   who pin point real cause?   however, testing other rd gateway server works ok settings identically....
Read more