Latest Contributions by Joshua-Young

I have missed the web styles step before. We experienced errors in web scenes, then I realized what I forgot, and those errors went away as soon as I upgraded the web styles component. No lasting damage that I could find, other than my pride. 🙂

I am starting to wonder if Portal for ArcGIS 11.5 Security 2026 Update 2 Patch has reintroduced the problem that Portal for ArcGIS 11.5 Security 2026 Update 1 created. I installed Windows Updates last night and when the server came back up the Portal for ArcGIS service refused to start. Finding the log files for that Windows service, the error message was the same one reported with the Portal for ArcGIS 11.5 Security 2026 Update 1 issue when trying to upgrade a newer version. [2026-07-30 22:58:16] [info] [ 7716] Apache Commons Daemon procrun (1.3.4.0 64-bit) started. [2026-07-30 22:58:16] [info] [ 7716] Running Service 'Portal for ArcGIS'... [2026-07-30 22:58:16] [info] [ 9456] Starting service... [2026-07-30 22:58:16] [error] [ 6344] FindClass com/esri/arcgis/portal/impl/Main failed [2026-07-30 22:58:16] [error] [ 9456] Failed to start Java [2026-07-30 22:58:16] [error] [ 9456] ServiceStart returned 4. [2026-07-30 22:58:16] [info] [ 7716] Run service finished. [2026-07-30 22:58:16] [info] [ 7716] Apache Commons Daemon procrun finished. I stopped the Portal for ArcGIS service before doing the Windows Updates so the shutdown should have been graceful. I had to repair the installation of ArcGIS for Portal 11.5 before the Portal for ArcGIS service would successfully start. This is the first time I have stopped and started the Portal for ArcGIS service since installing Portal for ArcGIS 11.5 Security 2026 Update 2 Patch.

I am starting to wonder the same thing about Portal for ArcGIS 11.5 Security 2026 Update 2 Patch having a regression issue. I installed Windows Updates last night and when the server came back up the Portal for ArcGIS service refused to start. Finding the log files for that Windows service, the error message was the same one reported with the Portal for ArcGIS 11.5 Security 2026 Update 1 issue when trying to upgrade a newer version. I stopped the Portal for ArcGIS service before doing the Windows Updates so the shutdown should have been graceful. I had to repair the installation of ArcGIS for Portal 11.5 before the Portal for ArcGIS service would successfully start.

I am sure this is easier said than done, but is there a more secure way to provide ArcGIS Monitor access to ArcGIS for Portal and ArcGIS Server other than using the primary service account? Esri's own documentation recommends disabling the primary service accounts after the initial setup is complete. What I have in mind is being able to use an account (ArcGIS built-in, SAML, etc.) that has read only access to all content in ArcGIS for Portal and ArcGIS Server. That probably requires enhancements to both ArcGIS for Portal and ArcGIS Server because I do not think that permission is available in that software. A ready only account that has headless access to everything in my environment is much less scary to me than a headless read/write account that has access to everything.

@Todd_Metzler I have an idea open for adding SAML support to ArcGIS Monitor. https://community.esri.com/t5/arcgis-monitor-ideas/add-support-for-saml-or-open-id-logins-to-arcgis/idi-p/1709340/jump-to/first-unread-message Our organization is trying to reduce the number of "identity stores" that we have to use for both improved security and ease of use. For us, the solution is using SAML where possible to tie back to one identity store as much as possible.

‎07-17-2026

We could really use something like Partnered collaborations for ArcGIS Enterprise. It could be ArcGIS Enterprise to ArcGIS Enterprise or ArcGIS Enterprise to an ArcGIS Online organization. This would save a lot of time sharing data between organizations by being able to add content to a group and add members from other organizations to that group. The current distributed collaboration share by reference has only ever worked for us when content was shared with everyone. If we add something to that collaboration that is not shared with everyone anyone in the other organization gets a prompt to sign into our ArcGIS Enterprise deployment.

‎07-17-2026

In the organization settings page under Collaboration it would be helpful to run a manual sync for specific items in the workspace.

‎07-17-2026

The current way that distributed collaboration works does not scale very well as more data is added to the collaboration and the one hour minimum between workspace syncs is too long for coordinating information during emergency response. I would like to be able to configure syncs schedules on a per item basis Reduce the minimum time between attempting a sync to five minutes Syncs should not trigger if no item details or data has changed Separate item details syncs and data syncs Update the Settings->Collaborations->Workspaces UI to show the status of each item within a workspace Include info on the item details page about sync status and time of last sync attempt

‎07-07-2026

I do agree that ArcGIS Enterprise is in need of some better QA/QC for both platform releases and patch releases, but Esri's release cadence is usually only two releases a year for ArcGIS Enterprise. The odd minor releases (11.3, 11.5, 12.1, etc.) are long term releases that are supported for a longer period of time if you do not want to upgrade more often.

‎07-07-2026

FYI, the issue is caused by the attribute rule templates Generate ID and Symbol Rotation. Those rules use an Arcade function call FeatureInFilter that is causing the error only in ArcGIS Field Maps. The function should be supported in ArcGIS Pro 3.5+, ArcGIS Enterprise 11.5+, and Field Maps 25.2+. Esri has a bug number for the issue that is "Under Consideration". Current workarounds are to use map services instead of feature services if no editing or offline is required. Otherwise, those attribute rule templates need to be modified to not use the FeatureInFilter function.

‎07-06-2026

The Map Image is being rendered on ArcGIS Server and an image is passed to the client. It supports all the symbology and labeling as the client that published the service. The Feature Service on the other hand has its data passed to the client and is downgraded to what the client supports. If you open the Feature Service in ArcGIS Pro it should look like the Map Image, but if you open the Feature Service in Map Viewer you are limited to what Map Viewer supports for symbology and labeling. Symbology in Map Viewer has come a long way and most of the time it will match what you would see in ArcGIS Pro. Labeling in Map Viewer is very simplistic compared to ArcGIS Pro, especially the Maplex Labeling engine. You will run into similar limitations viewing the Feature Service in other clients like ArcGIS Field Maps. Also, I noticed that you are on ArcGIS Pro 3.7 and ArcGIS Enterprise 12.0. The matching version of ArcGIS Pro for ArcGIS Enterprise 12.0 is ArcGIS Pro 3.6. I have run into odd issues when using a version of ArcGIS Pro that is higher than the matching version of ArcGIS Enterprise. If you can, you may want to try to republish the service using ArcGIS Pro 3.6 and see if the issue still happens.

‎07-02-2026

With SQL Server the account hierarchy is the SQL Administrator account (can create databases), then the database owner account (can manage the database), and then user accounts (create, edit, or just view tables depending on permissions). Those can all be the same account but that is not the best practice. This is what I usually do in our environment using SDE schema. My admin Windows account is in the SQL admin group so it can create an enterprise geodatabase (EGDB). For simplicity, I use the Create Enterprise Geodatabase tool to create the EGDB and we use SDE owned schema instead of DBO. Create a database connection to the new EGDB using my admin Windows account (if the accounts already exists in SQL Server, I think this can just be the SDE account instead) Use the database connection in Step 2 to run the Create Database User to create an account to load the data into the EGDB. I use SQL Server Management Studio to create the "regular" user accounts and add them to the EGDB. These accounts can view or edit data but cannot modify or add feature classes or tables. You cannot use the Create Database User tool for this because it gives too many privileges. Create another database connection for the new EGDB using the data loading account Use the database connection in Step 5 to load data into the EGDB After the data is loaded into the EGDB, use the database connection in Step 5 to run the Change Privileges tool. The Change Privileges tool can process multiple feature classes and tables by default. If any of the users have the exact same privileges, you can run Change Privileges in batch mode with the User parameter as the batch parameter. You will have to run the Change Privileges tools each time different privileges are required for different users. Here is an example: John and Jane both view table 1 (Input Dataset: table 1; Users: John, Jane; View: Grant) John only views table 2 (Input Dataset: table 2; Users: John; View: Grant) Jane edits table 2 (Input Dataset: table 2; Users: Jane; View: Grant; Edit: Grant) Now your users can create database connections to the new EGDB and see what has been shared to them. This is probably a bit excessive, but I like having the separation of account duties for security and quality control. I am the only one that has access to the data loading account, and I only use that account to load and manage feature classes and tables. I do not use it for regular access or editing.

‎07-02-2026

The only way that I have gotten that to work is to setup the distributed collaboration workspace as a two-way sync with the copy only turned on. Setting it up that way creates a copy in ArcGIS Enterprise and you no longer get the prompt to sign into AGOL. Then any changes you make in ArcGIS Enterprise should sync back to AGOL. That approach has its own problems unfortunately. Often the sync will start to fail with replication package errors. You will have to delete the version in ArcGIS Enterprise, remove the service from the AGOL workspace group, manually run a workspace sync, add the service back to the AGOL workspace group, and finally run one more manual workspace sync. You will lose any edits that did not sync before the errors start. The good news is the ArcGIS Enterprise copy should keep the same item name and service name, so you do not have to fix any maps or apps referencing the service. Esri does not say it anywhere in their documentation that I can find but, in my experience, distributed collaboration sync by reference is only functional with publicly shared items.

‎07-01-2026

I agree with what has been said except un-sharing the archived user's content. ArcGIS Online and ArcGIS Enterprise need a separate way to archive items (Add the ability to archive items, AGO - Archive content). Archiving a user does not necessarily mean their content needs to be archived as well. Items that are not going to change could stay associated with the archived account and items that will need changes made could be transferred to a new owner with some kind of lineage of who the previous owner was. Really all that has been mentioned so far could be applied to the existing "Disabled" account classification.

‎06-30-2026

We recently finished migrating from geometric networks to utility networks for water, wastewater, and storm water. We are on ArcGIS Pro 3.5 and ArcGIS Enterprise 11.5. In ArcGIS Enterprise I published view-only feature services of the utility networks that do not have editing or tracing. Those services do use subtype groups for the symbology. In Map Viewer and Experience Builder the utility network feature services render without issues, but in ArcGIS Field Maps none of those feature services will render. Field Maps is reporting ArcGIS.MappingError Invalid arcade expression: The Arcade expression requires a later version of Runtime for some of the subtype groups and other subtype groups report ArcGIS.GeodatabaseError Item already exists. I updated Field Maps to 26.2.1 and the issues remain. If I change the map to use the map services of those view-only services instead, the errors go away and the utility network data shows up in Field Maps. I am not seeing errors in the Field Maps logs even when I turn on verbose logging.

Online Status	Offline
Date Last Visited	Wednesday

My Ideas

Latest Contributions by Joshua-Young

Re: Order of Operations for Enterprise Upgrade

Portal for ArcGIS 11.5 Security 2026 Update 2 Patch regression issue?

Re: When upgrading from 11.5 to 12.1 the upgrade installation gets stuck and has remained at the status of 'Configuring the service'

Remove primary service account dependency

Re: Identity Mangement: Leverage Portal User Store

Add Partnered collaborations to ArcGIS Enterprise

Distributed collaboration force sync of specific items

Sync distributed collaboration items separately

Re: Repair ArcGIS Enterprise

Re: The Arcade expression requires a later version of Runtime

Re: Utility Network Sewer Main Lines: Labeling Issue

Re: Migrating from 10.9.1 to 11.5 and Updating Permissions/Roles to Best Practices

Re: Distributed Collaboration Access to both Organizations

Re: When accounts are disabled, either have the ability to remove the Professional Plus license or it does not count towards your license count

The Arcade expression requires a later version of Runtime

Re: Order of Operations for Enterprise Upgrade

Add Partnered collaborations to ArcGIS Enterprise

Remove primary service account dependency

Re: Distributed Collaboration Access to both Organ...

Re: Attribute Rule Generate ID - Create Sequence E...