æ¤ç›£è¦–器指出,Federation Service 嘗試接è½æ¬²è®€å–其發行的åŒç›Ÿä¸ç¹¼è³‡æ–™ä¹‹è¦æ±‚時發生æ„外錯誤。
如果 15 分é˜å…§æ²’有å†æ¬¡ç™¼ç”Ÿç›¸åŒå•é¡Œï¼Œæ¤ç›£è¦–器的å¥å…¨ç‹€æ³ç‹€æ…‹æœƒè®Šå›žç¶ 色狀態。æ¤ç›£è¦–器產生的è¦ç¤ºå¿…é ˆæ‰‹å‹•è§£æ±ºã€‚
AD FS Windows æœå‹™å¯èƒ½ä¸å…·æœ‰åŒç›Ÿä¸ç¹¼è³‡æ–™ç«¯é»ž URL 的讀å–權é™ï¼Œæˆ–å¯èƒ½éé™åˆ¶ç¨‹åº¦è¼ƒé«˜çš„å˜å–控制清單 (ACL) æ¬Šé™ (覆寫了其 URL 權é™) å°éŽ–。
請使用 HTTP çš„ netsh 命令檢查åŒç›Ÿä¸ç¹¼è³‡æ–™ç«¯é»ž URL 上的 URL ACL 權é™ï¼Œæˆ–檢查是å¦æœ‰å…¶ä»– URL å¯èƒ½è¦†å¯«äº†åŒç›Ÿä¼ºæœå™¨æ‰€ç”¨ç«¯é»žéœ€è¦çš„權é™ã€‚ For more information, see the examples for netsh http show urlacl syntax in 超文å—傳輸通訊å”定 (HTTP) çš„ Netsh 命令
下列範例顯示了當您檢查åŒç›Ÿä¸ç¹¼è³‡æ–™ç«¯é»žæ¬Šé™ (å…¶ä¸ä½¿ç”¨è€…定義的æœå‹™ä½¿ç”¨è€…帳戶 ("adfssrv") å·²è¨å®šä¸”用於 AD FS æœå‹™èº«åˆ†è˜åˆ¥) 時,netsh http show urlacl 命令的一般輸出。
C:\>netsh http show urlacl url=https://+:443/FederationMetadata/2007-06/
Reserved URL :https://+:443/FederationMetadata/2007-06/
使用者:NT SERVICE\adfssrv
接è½:是
委派:是
SDDL:D:(A;;GA;;;S-1-5-80-2246541699-21809830-3603976364-117610243-975697593)
Target | Microsoft.ActiveDirectoryFederationServices.2016.TrustManagement | ||
Parent Monitor | System.Health.ConfigurationState | ||
Category | ConfigurationHealth | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | Microsoft.Windows.SingleEventLogTimer2StateMonitorType | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementMetadataListenerErrorMonitor" Accessibility="Public" Enabled="true" Target="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagement" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogTimer2StateMonitorType" ConfirmDelivery="true">
<Category>ConfigurationHealth</Category>
<AlertSettings AlertMessage="Microsoft.ActiveDirectoryFederationServices.2016.TrustManagementMetadataListenerErrorMonitor_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[1]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="EventRaised" MonitorTypeStateID="EventRaised" HealthState="Warning"/>
<OperationalState ID="TimerEventRaised" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>$Target/Host/Property[Type="Microsoft.ActiveDirectoryFederationServices.2016.FederationServer"]/ADFSEventLog$</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">155</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005RegularExpression</Operator>
<Pattern>(^AD FS$)</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
<TimerWaitInSeconds>900</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>