Latest Contributions by CraigRussell

Establishing trust is not the same as bidirectional communication.  The invitation cannot be accepted if the SSL certificate of the host isn't trusted; if you're getting an error then you'll have to import the root/intermediate certificates into your Portal - Configuring the portal to trust certificates from your certifying authority—Portal for ArcGIS | Documentation for ArcGIS Enterprise ... View more

Hi Klaus In this instance your DMZ Portal will be the host and your Intranet Portal would be the guest.  The guest initiates all communication (outbound over port 443) whether it is two way (push/pull) or one way (push only). Craig ... View more

Thanks Igor, I'm seeing this on Windows Server 2016, and not seeing it on my local Windows 10 machine. ... View more

Hi Asaf You can achieve this with a custom role - from Organization > Settings > Member Roles: create a new role, set all of the privileges that you require, and ensure that Share with organization is disabled: Users who are assigned this role will then be able to share with their groups but not to the organization. Thanks Craig ... View more

BTW, this is not happening on a test 10.8.1 Portal on my local machine (clean installation, not upgrade), so it might be limited to upgraded systems and/or multiple-machine deployments. ... View more

Hi Tanu Hoque‌ I'm experiencing this exact same issue on a 10.8.1 deployment with a client who upgraded from 10.8; any word on a fix or workaround? Thanks Craig ... View more

I think you need the assistance of a network analyst to determine why the network connection test fails for the alias but not the IP/machine name. You could try following the directions to Configure ArcGIS Server in advanced scenarios—ArcGIS Server | Documentation for ArcGIS Enterprise to force ArcGIS Server to only use the machine name (which you know works over 6443) just to see if you can complete the configuration. However, going back to your original post in this thread, I noticed the following: I want to setup a multi-machine deployment on two virtual servers (Windows Server 2019); Machine1 - Portal, ArcGIS Server, Data Store, Web Adaptor (I used Builder to install all software) Machine2 - ArcGIS Server with Image Server license (just used ArcGIS Server installation software) For an ArcGIS Server setup where you join two machines together to form a multi-machine site, both machines must be licensed for the same roles - i.e. Machine1 and Machine2 each need to have their own GIS Server and Image Server licenses. If the idea behind your deployment is for Machine1 to only provide map services and for Machine2 to only provide image services, then you cannot (and don't have to) join Machine2 to Machine1.  In this instance, you should create a new site on Machine2, then you can simply federate this server with Portal. I don't think that this is the source of your issue with joining the sites, but even if you sort out this issue then you won't be able to join them if the licensing isn't correct. ... View more

Does the DNS alias resolve to the correct IP address if you run the command nslookup <DNS Alias> in PowerShell? ... View more

Hi Craig You'll need to go beyond the ping test to be 100% certain that the machines can talk to each other over the correct ports.  To do this, complete the following test from each machine: Open Windows PowerShell Type Test-NetConnection -ComputerName <DESTINATION SERVER> -Port 6443 PowerShell will then provide a diagnostic report indicating success/failure of the test When doing this test, try all combinations of IP addresses, machine names, and DNS aliases just to make sure there aren't any variations in terms of hostname resolution. A few more things to look out for: See Configure ArcGIS Server in advanced scenarios—ArcGIS Server | Documentation for ArcGIS Enterprise if either of the machines has multiple network interface controller (NIC) cards or DNS entries If you've imported your CA-Signed certificate into Server, then try reverting back to the self-signed certificate and attempt to join the sites again To completely rule out any config store access issues, you could do the following: Ensure that the config store is accessible as network share via UNC path Configure your initial ArcGIS Server site to use the UNC path instead of a mapped network drive Run the Configure ArcGIS Server Account utility and use a domain service account Use the same domain service account when installing ArcGIS Server on the second machine, ensuring that it can also access the network file share via UNC path Hope this helps! Craig ... View more

Thanks for the update Bryan; could you please mark this as helpful and the correct answer to assist others who might have the same issue? ... View more

Yep, just got in before me! ... View more

The source of your issue is more likely to be the renaming of the geodatabase; this doesn't work because fully qualified table names (i.e. database.schema.table) are stored throughout the SDE system tables. ... View more

Hi Bryan Not sure of the exact source of the script that I've used in the past to do this, but it was similar to the one found here - What about orphaned windows users? – SQLServerCentral   This only works for SQL Server 2012 and higher. ... View more

Hi Janis If the URL that you've used when federating Portal and Server uses a DNS alias rather than a machine name, then could you look potentially look at having this as an external DNS pointing to the reverse proxy.  This should work provided that internal users always hit the internal DNS and external users hit the external DNS.  I've seen this setup with both Citrix NetScaler and Apache, although I haven't configured the proxies myself so can't offer much insight into the settings, content switching rules etc. ... View more