For JConsole to work with the Application Server, security has to be disabled for the JMX connector. The current version of the Application Server (SE/EE edition) has security enabled by default.
Use the Admin Console to disable security for the JMX Connector. To do this from the Admin Console,
Use asadmin to disable security for the JMX Connector. To do this from a terminal window or command prompt,
Start JConsole and enter the JMX URL, user name, and password on the Advanced tab for logging in. The JMX URL is of the form:
service:jmx:rmi:///jndi/rmi://<your machine name>:<port>/management/rmi-jmx-connector
NOTE: You can get the exact JMX URL from the admin server.log file if you search for message ADM1501.