An authentication error has occurred; this could be due to CredSSP encryption oracle remediation

Windows ServerThis error first came up early in 2018, but I’ve stumbled across it a couple of times recently and had to hunt around for the solution, so I am posting it here so I know where to find it next time.

Microsoft released an update to address vulnerabilities for the Credential Security Support Provider protocol (CredSSP) used by Remote Desktop Protocol (RDP) connections for Windows clients and Windows Server.

Since that hotfix came out, if you try to connect from a patched machine to an unpatched one, you receive this error:

CredSSP error

Remote Desktop Protocol

An authentication error has occurred.
The function requested is not supported.

Remote computer: {server name}
This could be due to CredSSP encryption oracle remediation.

Continue reading “An authentication error has occurred; this could be due to CredSSP encryption oracle remediation”

PowerShell to Promote Domain Controller

Windows ServerWhen testing Microsoft Dynamics GP, I often need a domain controller within my set of virtual machines. I’ve been promoting a server to be a domain controller manually, but it recently occurred to me that I could probably do the same task using PowerShell.

After doing some research, I came up with four commands which will rename and restart the server, install the Active Directory feature and add a forest.

To rename a server, run the following command, replacing the highligted section with the new server name:

Rename-computer -newname {server name}

Continue reading “PowerShell to Promote Domain Controller”

New GP Compatibility Page Available

Microsoft Dynamics GPI’ve added a GP Resources section to this site; as well as links to the GP Table Reference, I’ve created a Microsoft Dynamics GP Compatibility page which shows the compatibility with SQL Server, Windows Server and Windows from Dynamics GP 2010 through to 2018.

If you see any errors, or can contribute information on supported versions, prior to 2010, please contact me with the information.

PowerShell to Stop Server Manager Loading

WindowsOne of the things that annoys me about Windows Server 2012 and later, is that the Server Manager launches automatically whenever you log in. This wouldn’t be a problem, if it didn’t take so long to fully launch.

Well, I did some exploring and investigation, and it turns out that the Server Manager is being launched at user log on by a Scheduled Task:

Scheduled Task to Auto Launch of Server Manager

Continue reading “PowerShell to Stop Server Manager Loading”

eConnect 18 Prerequisites: Set Service Install MSMQ Triggers

Microsoft Dynamics GPMicrosoft Dynamics GP 2018 RTM has now been released and I am in the middle of a series of Hands On posts. As part of thsat series, I am about to cover the installation of the eConnect additional product on a server configured for receiving messages via the MSMQ. However, there are two prerequisites which need to be dealt with before eConnect can be installed on the server.

Usually, when doing Hands On posts, I only cover the core installs and only mentioned prerequisites such as this, referring back to old posts were necessary, but it appears I’ve only made references previously to what you have to do, without actually blogging about it. So, this series on the eConnect prerequisites, is going to be a brief diversion from the Hands On series, which will resume tomorrow.

The eConnect 18 Prerequisites series index can be found here.

Before eConnect can be installed and configured to receive messages from the Microsoft Message Queue, the Message Queuing Triggers need to be installed. This is done via Server Manager:

Click Add roles and features link:

Server Manager

Continue reading “eConnect 18 Prerequisites: Set Service Install MSMQ Triggers”

Remote Desktop Connection – An Authentication Error Has Occurred

Windowsthis is an off topic post which I’m posting mainly as a memory prompt for myself. I was working with a set of virtual machines the other day on my test server and received the following error when I tried logging in:

Remote Desktop Connection - An authentication error has occurred. The Local Security Authority cannot be contacted. Remote computer: azc-gp2013-wc-8Remote Desktop Connection
An authentication error has occurred.
The Local Security Authority cannot be contacted
Remote computer: azc-gp2013-wc-8

I logged onto the Hyper-V server and launched the VM from Hyper-V Manager and was able to log in without issue. I did some fiddling around and realised that my Domain Controller wasn’t accepting connection requests.

One quick reboot later and I was able to log into the VM without error.

Implementing Fastpath’s Config AD: Introduction & Index

FastpathMicrosoft Dynamics GP has traditionally had it’s own log on which means for a user who’s day job is based within GP, they need to log into Windows and then log into GP.

If you are using the web client Microsoft Dynamics GP 2013 R2 saw the introduction of Identity Management – Login which will provide single sign-on functionality. However, for those using the desktop client the best that Dynamics GP has to offer is the Remember User and Password introduced in Dynamics GP 2010.

However, Dynamics GP has a thriving community surrounding it which includes many ISVs (Independent Software Vendors), one of which is called Fastpath; this company has developed an add-on for Dynamics GP called Config AD which makes single sign-on with Dynamics GP.

Typically my posts have all been around the Dynamics GP core product or the add-ons from Microsoft with only a small number of posts on products from other vendors. In this series of posts I am stepping outside of this area as I am going to cover the install, configuration and use of Fastpath’s Config AD. The index for this series is below and will expand as posts are made.

Click to show/hide the Implementing Fastpath's Config AD Series Index

Stop Windows Server 2012 Server Manager Loading Automatically

Microsoft Dynamics GPWhen you log into Windows Server, the Server Manager opens automatically, but I rarely want to use it. In Windows Server 2008 R2 there was a checkbox on the main window which would allow you to dismiss the window and prevent it appearing again.

This option still exists in the Windows Server 2012 Server Manager, but it is no longer front and centre.

To prevent Server Manager loading automatically when logging into Windows, click Manage and then Server Manager Properties:

Server Manager

Continue reading “Stop Windows Server 2012 Server Manager Loading Automatically”

Trust Relationship Between This Workstation And The Primary Domain Failed

Microsoft Dynamics GPThis perhaps isn’t the best time of the year to be posting about trust relationship breakdowns, but this is the only post I have ready to go (I have a couple of series of posts I intend to do soon).

I make quite a lot of use of virtual machines for testing and writing because of the flexibility and ease of taking a snapshot before doing something risky so the machine can be reset. After doing so one day, I ran into a problem I hadn’t seen before after restoring one virtual machine to a snapshot:

The trust relationship between this workstation and the primary domain failedThe trust relationship between this workstation and the primary domain failed

Continue reading “Trust Relationship Between This Workstation And The Primary Domain Failed”

File Not Found: VBA6.DLL

Microsoft Dynamics GPWhile VBA is falling out of favour with Microsoft Dynamics GP (by dint of not being supported in the web client) it is still useful for those clients who do not use, and have no intention of using, the web client.

One such client was recently installing some new XenAPp servers using Windows Server 2012; when they tried to open a window with a VBA customisation they received the following error:

File Not Found: VBA6.DLLFile Not Found: VBA6.DLL

Fortunately, Beth Gardner posted the answer to the Developing for Dynamics GP blog.