Configuring MSDTC for Windows 2003 SP1

Transcription

1 Configuring MSDTC for Windows 2003 SP1 MSDTC for Windows 2003 SP1 has changed Configuration of the Microsoft Distributed Transaction Coordinator (MSDTC) in Microsoft Windows 2003 SP1 is slightly different than in Microsoft Windows You will need to manually configure the MSDTC whenever: You upgrade a system running a component of AMCC from Microsoft Windows 2003 to Microsoft Windows 2003 SP1. Reconfiguring the MSDTC in Microsoft Windows 2003 SP1 for a non-clustered system You must follow the procedure below for each Microsoft Windows 2003 SP1 system that hosts a component of AMCC Choose Administrative Tools -> Component Services from the Windows Start menu. 2 In the Component Services dialog box, expand Component Services and then expand Computers. 3 Right-click My Computer and select Properties from the pop-up menu. 1

2 4 Choose the MSDTC tab and you will see the following window: Note If you are not in a clustering environment, the Take Ownership button will not be present. 2

3 5 Click the Security Configuration button, to open the Security Configuration window. 6 Accept the defaults, except that you must check the four check boxes labeled: Allow Remote Clients, Allow Remote Administration, Allow Inbound, and Allow Outbound. 7 Select the No Authentication Required radio button. 8 Click OK in this window and then Apply and OK in the My Computer Properties window that you return to. 9 Reboot the computer. Reconfiguring the MSDTC in Microsoft Windows 2003 SP1 for a clustered system In the event that you use clustered servers for the NQCCDB, you must run this procedure on each node in the cluster. When clusters are present, you will see some minor differences: 3

4 There will be a Take Ownership button in the My Computer Properties window. The Security Configuration button in the My Computer Properties window may be grayed out. Case 1. Security Configuration button is enabled (not grayed out) 1 Choose Administrative Tools -> Component Services from the Windows Start menu. 2 In the Component Services dialog box, expand Component Services and then expand Computers. 3 Right-click My Computer and select Properties from the pop-up menu. 4 Choose the MSDTC tab and you will see the following window: 4

5 5 Click the Security Configuration button, to open the Security Configuration window. 6 Accept the defaults, except that you must check the four check boxes labeled: Allow Remote Clients, Allow Remote Administration, Allow Inbound, and Allow Outbound. 7 Select the No Authentication Required radio button. 8 Click OK in this window and then Apply and OK in the My Computer Properties window that you return to. 9 Reboot the computer. 10 (IMPORTANT!) Repeat steps 1 through 9 for each node in the cluster. Case 2. Security Configuration button is not enabled When configuring a node, you may find that the Security Configuration button is grayed out. In this case: 5

6 Click the Take Ownership button. Wait several seconds for the MSDTC service to restart. Click OK. This will exit the My Computer Properties dialog box. You must start over, but the Security Configuration button should now be enabled. 1 Choose Administrative Tools -> Component Services from the Windows Start menu. 2 In the Component Services dialog box, expand Component Services and then expand Computers. 3 Right-click My Computer and select Properties from the pop-up menu. 4 Choose the MSDTC tab and you will see the following window: 6

7 5 Click the Security Configuration button, to open the Security Configuration window. 6 Accept the defaults, except that you must check the four check boxes labeled: Allow Remote Clients, Allow Remote Administration, Allow Inbound, and Allow Outbound. 7 Select the No Authentication Required radio button. 8 Click OK in this window and then Apply and OK in the My Computer Properties window that you return to. 9 Reboot the computer. 10 (IMPORTANT!) Repeat steps 1 through 9 for each node in the cluster. 7

8 Reconfiguring MSDTC through a firewall If the MSDTC communication goes through a firewall, and you reconfigure MSDTC as above, you have three options: 1 Also reconfigure MSDTC to work through the firewall by following the instructions in default.aspx?scid=kb;en-us; (INFO: Configuring Microsoft Distributed Transaction Coordinator (DTC) to Work Through a Firewall). This will require opening some ports. 2 If you do not want to open new ports in your firewall, you can turn it off. 3 If you do not want to open new ports in your firewall and you do not want to turn it off, you can use VPN connectivity (see Appendix E, Firewalls, in the NetIQ AppManager Control Center Administrator Guide, version 6.0). 8