Latest Contributions by MichaelJenkins

Recent Apache Tomcat RCE Vulnerabilities Esri just posted about that one and says we are not vulnerable to the exploit. I checked our 11.3 server and it running Tomcat 9.0.84.  Can someone check what version 11.4 has? ... View more

I'm marking your answer as a solution.   Still no word from our SCCM people as to if it will work for us or not, but it is valid answer.  Thanks! ... View more

Thank you to all the MVP members!   Your answers and ideas are invaluable to all of us.     ... View more

Ooh, good find!  We install ArcPro on user machines via Microsoft SCCM.  Any idea if that is considered a silent install? ... View more

You mention that you would like the user to be able to view the map and query the map service, so disabling  "Data & Query" would prevent that second part.  If you only required the ability to use an Identify, then you could potentially disable the "Data" capability which would then prevent people from collecting the data via queries. https://enterprise.arcgis.com/en/server/11.3/publish-services/linux/edit-map-service-settings.htm   ... View more

You can, but it takes some special configurations.    It is documented here in the section called "Use an Esri basemap offline"  Take web maps offline—Portal for ArcGIS | Documentation for ArcGIS Enterprise They key is that you must manually create an item "from URL" in Enterprise, connect to the AGO URL for the basemap, and then provide and store credentials to AGO using a built-in account. Share the new item to a group or your Org. Then, users of Enterprise will be able to connect to the AGO item using the credentials that you stored.  They must be logged into Enterprise, no anonymous access allowed. ... View more

This makes a lot of sense to me.   A non-admin user should not be able to control services they do not own. ... View more

If you are using Azure AD (Entra) via SAML, this will be a setting in the application registration item in Azure.    You, or your Azure admin, can choose what to send in the SAML assertion, which will include group membership information.   I think it defaults to just security groups but you can tell it to include distribution groups too.     ... View more

You can install the web adaptor while the Portal is being upgraded, but you won't be able to configure the new web adaptor until the Portal configuration is completed. ... View more

Thank you @ChrisUnderwood  and @JoshuaBixby .   None of those things happen on this server (site backups etc) I went to Esri support with this question and was told the temp files are created when a process fails but that there is no way to tell what process created them.   While it would be useful to know that, I was hoping to find an answer as to why these "temp" files are persisting for so long.  It seems like they should be automatically cleaned up by either ArcGIS Server or Windows OS. Apparantly that is not the case, though, and what we are seeing is expected behavior.  So the lesson learned is to check your service account's appdata\local\ temp directory at least a few times per year and clean out the old stuff, or if your C drive suddenly fills up unexpectedly.   ... View more

It is the service account used to run the 'ArcGIS Server' service. ... View more

In that case, would a collaboration 'by copy' with two way sync work for you?  The feature layer will get copied to Portal, edited there with editor tracking, and the edits will be synced back to AGO by the collaboration. ... View more