bjoern-cusatum

What did you configure in the webcosole configuration? This might be due to wrong ARM server entry or wrong SSL certificate. This setting works in nearly 100% of the installations: And for the certificate don't select the Solarwinds certificate. That won't work for the webconsole, it has a different purpose. If there's no…

Hi, put this in the pnServer.config: <exchange.makeMailBoxOUCategories type="System.Boolean">false</exchange.makeMailBoxOUCategories> Restart the service, do a rescan. Then the old mailbox sorting is back. For the search bug: I could reproduce it for mailboxes where the name is "lastname, firstname", the ones with…

Yeah, sometimes a pending reboot can be the problem. Unfortunately 0x80070643 is a common installation error message by Microsoft and has no explicit definition. In most cases the real reason for not installing can be find in a different log. But only if it manages to start the msi package. Go to %temp% (make sure you're…

You're welcome :-) glad I could help.

For further explanation: what ARM does is correct, that's how you hand over an argument to a PowerShell script. The first argument is always $arg[0], the next $arg[1] and so on... Or you can handle them differently in your script: param( [string] $password, [string] $givenname, [string] $sn ) But they are always handled in…

Hi Marcus, but it is logged: All within the logbook. Cheers Björn

Yes, this happens always after an CU installation since this is basically a new installation of Exchange, which includes a clean setup of the IIS which means all settings are reset. This is also noted in the manual: https://documentation.solarwinds.com/en/Success_Center/ARM/Content/prepare-exchange-scans.htm A clear…

Don't change it to TCP because that breaks the system. Just like you experienced. It's no longer supported. A symptom coming from the missing cypher suites is usually a restart-loop of the armServer.exe. The Wizard works with GRPC enabled. I could only imagine it connects differently. There must be something else have gone…

You don't need collectors on the Exchange server since scans are always remote via PowerShell. Even when installed locally it will be a remote scan, so to speak. You have zero advantages. The problem you face is not a collector problem but a configuration problem of the scan itself. Usually people tend to forget to…

Hi, all text of ARM can be found here: C:\Program Files\SolarWinds\ARM\res\strings You don't have to edit those files! Copy the needed file to C:\ProgramData\protected-networks.com\8MAN\res\strings and shorten it by everything you don't need. This will partially replace your text. It must still follow the correct syntax.…

I guess the documentation is wrong at that point, because it works differently: If possible ARM will automatically remove the user. This is only possible for direct permission or permissions given via ARM permission groups. If a user has been given permission by a different group, ARM won't touch it because it does not…

Hi, there's not a direct and easy way. You could only use the Web API (REST) to do this and would need to write a script to do so. If you actually have a proper CSV I would probably use a PowerShell script to directly change it. Way easier and probably can be found with Google. Cheers Björn

Is it possible you've mistaken the configuration UI with the wizard? They are two different applications. You logging in sounds like it. The configuration works if you have experience setting it up and follow the manual, the wizard is a more guided system which sets up some basic stuff.

Most of this can be done with workflows in the WebUI, but the order process that needs to be built might be too complicated for some users since there need to be a lot of entry points at the beginning. Approval in the normal client is just a good method to introduce ARM at the start and then remove it once the users proved…

This is from the latest example template: /*(optional) If you delete/disable the following section the address book policy is not set. Note: The address book policy does not work for some mailbox types (see aspiredMailboxType) */ { // Do not change the next line. "Name": "AddressBookPolicy", "Definition": { "Type":…

If I remember correctly it was said this option should be only available for Administrators. But on the other hand it is available in Analyze and configurable: If you need those options for Data Owner roles you need to open a feature request.

What is the name of the instance? If you're using the default instance, leave the name empty. If you've given the instance a name, use that one (ARM's SQL installation uses SOLARWINDS_ARM) Here's what it looks like in my local test-machine: The local database should always be reachable, missing permission should give a…

And what I've forgotten: there's an entry for the config file which allows multiple logins again, but I would not recommend it.

Just to further @"allmecht"'s answer: It used be possible, but it was set to only one user in the configuration because it happened several times that two (or more people) were changing the configuration and whoever saved last won. So imagine you and your boss configure the same setting to a different value. Whoever saves…

Hi Kip, the AD recertifiaction has different settings. I found the entries for it, they must be placed in the pnServer.config.xml (these here are the defaults): <activeDirectory> <recertification> <suppressSidsDefault type="System.String"></suppressSidsDefault> <suppressSidsByRexExpression…

They are the scan archive. When ARM finishes a scan, the scan will be stored as password protectd zip in the mentioned folder and then saved to the SQL database. The SQL database usually stores scans only for a few days and then needed it loads old scans from the scan archive. The spaces in the scan archive is usally…

Hi Marc, user templates still use an old implementation of script execution which does not support {parentoupath} as variable (this is the actual variable but it was implemented for the new scripting execution only - at least I couldn't get it to work with the old scripting execution). What you could do in the script is to…

Hi Ferdi, there's no real comparison. You could to a "Where has the user/group access?" for both users and compare it manually. Cheers Björn

Hi Tatjana, yeah, that looks like a bug to me as well. It should obey the Data Owner configuration, but I guess it was not implemented that way. You should report it to the ARM support so they can fix it. Cheers Björn

Hi Marcus, you should be able to find it in the corrosponding pnJob logfile when the debug and code logging is set to 1. Unfortunately I can't tell you exactly where because of my simple DFS setup. Cheers Björn

Hi Marc, when this information is stored in userParameters, this means you have a really old AD which got upgraded over time. By now all this information is stored differently in their own attributes. Only old ADs keep is stored in userParameters. At least that's what I could google since I haven't encountered this so far.…

Hi Marcus, our recommendation usually is 6-8 paralell requests per core available for the scanning Collector. You can go higher, or maybe have to drop lower. It's a trial & error to find the sweetspot that has the maximum performance, because at some point too many requests slow it down because they queue up when several…

Hi Tatjana, unfortunately this option is only available for ARM administrators and can't be configured for normal users. The only way normal users could change this is with Analyze, which would be an additional step. Cheers Björn

Did you check C:\ProgramData\protected-networks.com\8MAN\log\script\Disable-OWA_20200528055754095.4739.log for the script logs? ARM logs every script execution seperately.

Hi Marcus, do you really mean LDAPS or do you mabye confuse it with LDAP Signing + Channel Binding like so many people? (for more info see our german blog post https://cusatum.de/ldaps-ist-nicht-ldap-signing-channel-binding/) LDAP Signing + Channel Binding works out of the box, nothing needs to be changed. I have this set…