Latest Contributions by RandallWilliams

When you publish, are you choosing the option to write your data into the service definition, or do you register your data store using ArcCatalog/ArcGIS Server? http://enterprise.arcgis.com/en/server/latest/publish-services/windows/overview-register-data-with-arcgis-server.htm ... View more

Hi Michael, In February we'll be changing ArcGIS Online so that HTTPS connections can only be made via TLS 1.2. Currently ArcGIS Online supports TLSv1.0, TLSv1.1, and TLSv1.2. Later this year (Q4 expected) we'll be updating ArcGIS Online to require HTTPS and disabling plaintext HTTP.  You're correct that this warning was put in place to gently nudge users toward HTTPS so that they have time to test workflows and generally become accustomed.  Regarding your question: No - checking this box would just force you to use HTTPS when working with your ORG. The patches for ArcGIS Desktop are specifically to support TLS 1.2. If you checked this box, at this point your users wouldn't see a failure because they'll just use older versions of TLS to connect to ArcGIS Online. It wouldn't be until the 20th of February that they'd experience an issue when connecting to ArcGIS Online using the Add Data button. We'll be releasing a list of TLS 1.2 only endpoints very soon (with instructions) with which users can test the experience. Best, Randall  ... View more

Similar to IPv4, there aren't really configuration action items when moving to an IPv6 environment from an Esri perspective. The software just ingests what it's provided by the network infrastructure. ... View more

Hi Daniel, While MFA isn't available OOTB in Portal for ArcGIS, MFA can be achieved by using capabilities in your SAML provider. For instance, OKTA provides MFA for Portals I've created for internal use.  Esri Mobile apps can leverage MFA with ArcGIS Online.  Have a look through our ArcGIS Mobile Security Patterns Whitepaper. It and others are available in our documents page in the ArcGIS Trust Center. Trust ArcGIS | ArcGIS  ... View more

I would expect that this would work. I don't think you'd need to bind to a port other than 443 if the web adaptors have different names. You'd just need to bind the new cert to the arcgis2 web adaptor instance. Users frequently use untrusted self signed certs at the GIS tier with trusted certs at the web tier. I expect the behavior here to be similar.  ... View more

Piggy backing on Jonathan Quinn‌, people used to use low process isolation to try to 'do more with less', basically, to squeeze more running instances out of processes running on the GIS Server. These days, the better solution is to add more memory to the ArcGIS Server host and keep processes in high isolation.  ... View more

As George Thompson‌ mentioned, there are a lot of potential reasons for this. I'd also add that there can be latency related to Active Directory performance (EG, the domain controller that governs the location that this share is located, DNS latency, etc. Have your network run a wireshark trace and check for delays.  ... View more

Correct. I'd keep everything as apples to apples as you can. If the previous configuration was working, and your front end server resolves correctly to the back-end GIS Server using the machinenumber.citynetwork.cityname.com format, you should be good to go and not have service interruption beyond a brief scheduled outage when you change the certificate alias in the ArcGIS Server admin API to point to the new certificate's alias. ... View more

Hi Bill, There are two patches - one's a cumulative patch for 10.3.1, 10.4.1, 10.5.1 and 10.6.1 - referred to as the "Portal for ArcGIS Security 2018 Update 3" patch. This patch contains the critical privilege escalation patch plus patches for other medium priority issues.  For 10.3, 10.4, 10.5, and 10.6, we've released a stand alone patch that only addresses the critical  issue described as: BUG-000117564 - Privilege escalation vulnerability This patch is titled "Portal for ArcGIS Privilege Escalation Security Patch" For 10.5.0, you should see "Portal for ArcGIS Privilege Escalation Security Patch". The recommendation is to move to the "dot" minor version and install the full Update 3 patch. If that's not possible, due to the critical nature of the issue addressed, we took the step to provide a stand-alone patch for this this issue at the current major releases as well. I don't have a 10.5.0 machine handy, but I'm curious to see if you see "Portal for ArcGIS Privilege Escalation Security Patch" in patchfinder. I do see the "Portal for ArcGIS Security 2018 Update 3" patch in the 10.5.1 patchfinder. ... View more

Awesome.  My guess (and take that with a grain of salt) is that the password for this account expired. A Windows service will continue to run if a password has expired until the service is restarted - which an upgrade will do. Hard to be certain without more details, but in the end I suppose it doesn't really matter if you were successful in the end.  Happy to hear you're up and going! ... View more

There are a few issues that sound like they may be in play. I'd contact support to see which of these (if any) apply. The second one below sounds like what you're seeing but the criteria described may not match your experience.  [#BUG-000118005: ArcGIS Server logs shows Severe error "ClassFactory cannot supply requested class" during service recycling when multiple pooled services have SOIs enabled] [BUG-000099727: When server object extensions (SOEs) are deployed to ArcGIS 10.4.1 for Server, and the SOE capability is enabled on more than one service, the process of starting a service configured to use the new capability results in the following error, "0x80040111: ClassFactory cannot supply requested class." This error is generated because the content of the Assembly Cache folder cannot be overwritten at service start.] [BUG-000112391: A map service with an Server Object Interceptor (SOI) enabled does not process REST requests properly when the map service spawns ArcSOC instances.] ... View more

This seems like a bandwidth/throughput issue. ArcGIS is expecting faster writes over the network and the locks aren't getting cleared fast enough. ... View more

I'd contact support services and look for a better option. Running an application server as the local system account is highly unadvised from a security perspective.  ... View more

It shouldn't. TLS changes on ArcGIS Online won't go into effect until February. ... View more