Forum Ninjas News! Forum Top Contributors – October Week 4
Welcome back to another weekly edition of the MSDN and TechNet Forum Top Contributors blog. Below, we pull out some of the leader boards from the forums, and drill deeper into who is topping the charts.
For full statistics join us to read Pete Laker blog
https://blogs.msdn.microsoft.com/forumninjas/forum-top-contributors-october-week-4/
| Ronen Ariely [Personal Site] [Blog] [Facebook] [Linkedin] |
Cloud Connector downlaod problem
Hi ,
While running Start-CcDownload getting error, any idea please
Cannot index into a null array. At C:\Program Files\WindowsPowerShell\Modules\CloudConnector\Internal\MtDownloadCommon.ps1:92 char:9 + $url = $ini[$IniSections.CommonSection][$IniValues.DownloadUrlRoot] + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidOperation: (:) [], RuntimeException + FullyQualifiedErrorId : NullArray w
Continuous plan Do review is key to success.
Please mark as answer \Helpful if its . My Linkedin Profile
Reply:
Hi Satya,
For the download to happen , did you go through modifying the ini file so that it can get the Windows download servers and other details . more info here
https://insidemstech.com/tag/call-flow/
Linus || Please mark posts as answers/helpful if it answers your question.
------------------------------------
Reply:
Hi ,
yes i have created ini file and placed on right folder.
Continuous plan Do review is key to success.
Please mark as answer \Helpful if its . My Linkedin Profile
------------------------------------
Reply:
Hi ,
Thanks its because of ini file , I have update it again and download started.
Continuous plan Do review is key to success.
Please mark as answer \Helpful if its . My Linkedin Profile
------------------------------------
Reply:
Nice. Thanks for the update
Linus || Please mark posts as answers/helpful if it answers your question.
------------------------------------
How connect Lynce server With workgroup clinet
I did not want to join domain systems that can use this service lync server possible?
Some join domain system and some are wotkgroup
Lync to join the Active Directory server
Reply:
Hi Mehrdad,
You can join Lync from any System within the network, no need to be in the domain.
Please take care about following aspects.
- Make sure CA used to create certificates for Lync Server is in the Trusted Root certificates of the client machine.
Following reference is actually for Edge, use the same on client
Download CA chain from a machine connected to domain. https://technet.microsoft.com/en-us/library/gg412750(v=ocs.15).aspx#Anchor_0
Install CA in Client machine. https://technet.microsoft.com/en-us/library/gg412750(v=ocs.15).aspx#Anchor_2
- If you have different sign in address from UPN signing in would fail. It would ask your user name on the next try. Provide UPN there and try signing in again.
- Make sure you have Internal DNS access. Otherwise configure Host file entries and do a manual configuration on client.
MvH
------------------------------------
Project Server 2016 > Site Creation Settings removed from Central Admin
Hi,
Recently we have configured the Project Server 2016 and noticed that 'Site Creation Settings' from Central Admin is removed.
But we can configure the same setting from PWA Instance.
PWA Root Site > PWA Settings > Operational Policies > Connected SharePoint Sites > Settings [toolbar]
Excel Services
- Changed type Sandeep_Nandey Monday, October 24, 2016 7:41 AM
raid conffiguration
hi
i am configuring windows server 2012 . the problem is before installing windows server 2012 i need to configure raid 5. but in the settings i can only see raid 0,1 and 10. i know i should ask server manufacturar. but can u suggest, any options i have to change inside windows to get raid 5
Reply:
Gleb.
------------------------------------
Request failed with HTTP status 401: Unauthorized. in SSRS
Hello All,
Suddenly all reports and datasources failing to load and throwing error "The request failed with HTTP status 401: Unauthorized".
Microsoft SQL Server Reporting Services Version 10.50.2550.0
SQL Server: 2008 R2 Service Pack 2(10.50.4339.0)
SharePoint 2010 : 14.0.7149.5000
Error:
10/07/2016 12:11:14.44 w3wp.exe (0x1580) 0x22F8 SQL Server Reporting Services SOAP Client Proxy 0000 High Exception encountered for SOAP method GetSystemProperties: System.Net.WebException: The request failed with HTTP status 401: Unauthorized. at Microsoft.SqlServer.ReportingServices2010.RSConnection2010.SetConnectionProtocol() at Microsoft.SqlServer.ReportingServices2010.RSConnection2010.SoapMethodWrapper`1.ExecuteMethod(Boolean setConnectionProtocol)
When i try to load the report or datasource getting 401 error. Also getting same error for the below actions too.
When i click on the "Reporting Services Site Settings" page from site settings.
when i try to create new datasource from the report library.
I have verified below things.
1. SPN is set for Report Server, Database server and SharePoint servers.
2. In Central admin report server Authentication Mode is "Trusted Account"
3. Authentication Settings in reportserver config
<Authentication>
<AuthenticationTypes>
<RSWindowsNTLM/>
</AuthenticationTypes>
<EnableAuthPersistence>true</EnableAuthPersistence>
<RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
<RSWindowsExtendedProtectionScenario>Proxy</RSWindowsExtendedProtectionScenario>
</Authentication>
If it is kerberos authinication problem not sure why i am getting error when i try to open "Reportign services site settings".
Could you please find the above all information and help to fix the error.
Thanks
Liakath
MD.Liakath ali
Reply:
------------------------------------
Restore strategy and Recovery state
What is the exact Difference between restore and recover .
Could some one please help me on this.
- Edited by RameshChandraG Monday, October 24, 2016 5:25 AM
- Changed type RameshChandraG Monday, October 24, 2016 5:26 AM
Reply:
Hi,
Find the exact reason of corruption and try to repair it. Run the DBCC CHECKDB command and share the result here.
From the above three options, I think full backup is good option to restore database.
Good Luck!
------------------------------------
Reply:
- Edited by Jason_Clark03 Monday, October 24, 2016 4:23 AM
------------------------------------
Reply:
Guys if you can't help, specially Dinesh Vishe STOP posting crap. When did user asked for that he is facing corruption issue, he is asking for restore scenario and I am sure Dinesh Vishe has no idea as he only copies links and post it. Trying to be smart on forum by randomly posting links is very easy.
Sudheer
The restore scenario would be
1. Sunday 10:00 AM full backup with No recovery
3 Wednesday differential backup 10:00 Am with no recovery
4. After that all logs from differential backup uptill 6:40 PM. It in this case you have 5 mins data loss.
There can be other scenario's but this is plain and simple one
Cheers,
Shashank
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from itMy TechNet Wiki Articles
MVP
------------------------------------
Reply:
As Shanky said, you can have all 1,3,4 steps(i am not sure why he left 2, may be typo) in some scenarios we can minimize the 5 min data loss with Tail-log back up.
you can take tail-log back up even when the server is available or not available
http://www.sqlskills.com/blogs/paul/disaster-recovery-101-backing-up-the-tail-of-the-log/
After all Shanky 1,3,4 steps you can perform the tail-log backup
https://msdn.microsoft.com/en-us/library/ms179314.aspx
Thanks Saravana Kumar C
- Edited by SaravanaC Monday, October 24, 2016 5:17 AM
------------------------------------
Reply:
What is the exact Difference between restore and recover .
Could some one please help me on this.
Ramesh,
why did you changed the question, please change it back to what you asked, if you are satisfied mark the answer and close the thread and then open a new thread. Or else I would have to delete this thead
Cheers,
Shashank
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from itMy TechNet Wiki Articles
MVP
------------------------------------
Windows server 2k8 STD geting error code 80070005 while updating.
Hi,
Need help to update Windows server 2k8 standard but getting error code 80070005.
Reply:
Hi Rajendra,
2008 without R2? Can you upload a copy of c:\windows\windowsupdate.log somewhere where we can download it?Best regards,
Andrei
We could change the world, if God would give us the source code.
------------------------------------
Reply:
Hi Andrei,
Below is the logs.
2016-10-18 17:42:46:286 996 155c Agent * WARNING: Exit code = 0x80070005
2016-10-18 17:42:46:286 996 155c Agent *********
2016-10-18 17:42:46:286 996 155c Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2016-10-18 17:42:46:286 996 155c Agent *************
2016-10-18 17:42:46:286 996 155c Agent WARNING: WU client failed Searching for update with error 0x80070005
2016-10-18 17:42:46:286 996 1568 AU >>## RESUMED ## AU: Search for updates [CallId = {EDB9A9EA-6B1A-4F3B-8B21-85CC5E0B3FE9}]
2016-10-18 17:42:46:286 996 1568 AU # WARNING: Search callback failed, result = 0x80070005
2016-10-18 17:42:46:286 996 1568 AU # WARNING: Failed to find updates with error code 80070005
2016-10-18 17:42:46:286 996 1568 AU #########
2016-10-18 17:42:46:286 996 1568 AU ## END ## AU: Search for updates [CallId = {EDB9A9EA-6B1A-4F3B-8B21-85CC5E0B3FE9}]
2016-10-18 17:42:46:286 996 1568 AU #############
2016-10-18 17:42:46:286 996 1568 AU Need to show Unable to Detect notification
2016-10-18 17:42:46:286 996 1568 AU AU setting next detection timeout to 2016-10-18 17:12:46
2016-10-18 17:42:46:286 996 1568 AU Setting AU scheduled install time to 2016-10-18 21:30:00
2016-10-18 17:42:51:091 996 155c Report REPORT EVENT: {386E88ED-FE46-4F1C-AAAC-FCE597C7C1C4} 2016-10-18 17:42:46:083+0530 1 148 101 {61CA813A-7585-442E-A66B-B0D15CE6BDC0} 1 80070005 SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x80070005.
2016-10-18 17:42:51:091 996 155c Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2016-10-18 17:42:51:091 996 155c Report WER Report sent: 7.6.7600.256 0x80070005 61CA813A-7585-442E-A66B-B0D15CE6BDC0 Scan 101 Unmanaged
2016-10-18 17:42:51:091 996 155c Report CWERReporter finishing event handling. (00000000)
2016-10-18 17:53:39:241 996 b40 AU Triggering AU detection through DetectNow API
2016-10-18 17:53:39:241 996 b40 AU Triggering Online detection (interactive)
2016-10-18 17:53:39:241 996 994 AU #############
2016-10-18 17:53:39:241 996 994 AU ## START ## AU: Search for updates
2016-10-18 17:53:39:241 996 994 AU #########
2016-10-18 17:53:39:241 996 994 AU <<## SUBMITTED ## AU: Search for updates [CallId = {8FCA16DD-770F-4894-B0AF-ADB067E40DE4}]
2016-10-18 17:53:39:241 996 155c Agent *************
2016-10-18 17:53:39:241 996 155c Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2016-10-18 17:53:39:241 996 155c Agent *********
2016-10-18 17:53:39:241 996 155c Agent * Online = Yes; Ignore download priority = No
2016-10-18 17:53:39:241 996 155c Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2016-10-18 17:53:39:241 996 155c Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2016-10-18 17:53:39:241 996 155c Agent * Search Scope = {Machine}
2016-10-18 17:53:39:241 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2016-10-18 17:53:39:257 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:39:397 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2016-10-18 17:53:39:397 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:39:413 996 155c Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://ds.download.windowsupdate.com/v11/2/microsoftupdate/redir/v6-legacy-muauth.cab
2016-10-18 17:53:39:413 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2016-10-18 17:53:39:413 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:39:553 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
2016-10-18 17:53:39:553 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:39:553 996 155c Setup Checking for agent SelfUpdate
2016-10-18 17:53:39:553 996 155c Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
2016-10-18 17:53:39:553 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2016-10-18 17:53:39:569 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:39:585 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2016-10-18 17:53:39:585 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:39:585 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2016-10-18 17:53:39:600 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:41:566 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2016-10-18 17:53:41:582 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:41:582 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2016-10-18 17:53:41:582 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:41:628 996 155c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2016-10-18 17:53:41:628 996 155c Misc Microsoft signed: Yes
2016-10-18 17:53:41:644 996 155c Setup Determining whether a new setup handler needs to be downloaded
2016-10-18 17:53:41:644 996 155c Setup SelfUpdate handler is not found. It will be downloaded
2016-10-18 17:53:41:644 996 155c Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256"
2016-10-18 17:53:41:644 996 155c Setup WARNING: Cbs StartSession, error = 0x80070005
2016-10-18 17:53:41:644 996 155c Setup FATAL: Applicability evaluation for setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.256" failed, error = 0x80070005
2016-10-18 17:53:41:644 996 155c Setup FATAL: SelfUpdate check failed, err = 0x80070005
2016-10-18 17:53:41:644 996 155c Agent * WARNING: Skipping scan, self-update check returned 0x80070005
2016-10-18 17:53:41:675 996 155c Agent * WARNING: Exit code = 0x80070005
2016-10-18 17:53:41:675 996 155c Agent *********
2016-10-18 17:53:41:675 996 155c Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2016-10-18 17:53:41:675 996 155c Agent *************
2016-10-18 17:53:41:675 996 155c Agent WARNING: WU client failed Searching for update with error 0x80070005
2016-10-18 17:53:41:675 996 1568 AU >>## RESUMED ## AU: Search for updates [CallId = {8FCA16DD-770F-4894-B0AF-ADB067E40DE4}]
2016-10-18 17:53:41:675 996 1568 AU # WARNING: Search callback failed, result = 0x80070005
2016-10-18 17:53:41:675 996 1568 AU # WARNING: Failed to find updates with error code 80070005
2016-10-18 17:53:41:675 996 1568 AU #########
2016-10-18 17:53:41:675 996 1568 AU ## END ## AU: Search for updates [CallId = {8FCA16DD-770F-4894-B0AF-ADB067E40DE4}]
2016-10-18 17:53:41:675 996 1568 AU #############
2016-10-18 17:53:41:675 996 1568 AU Need to show Unable to Detect notification
2016-10-18 17:53:41:675 996 1568 AU AU setting next detection timeout to 2016-10-18 17:23:41
2016-10-18 17:53:41:675 996 1568 AU Setting AU scheduled install time to 2016-10-18 21:30:00
2016-10-18 17:53:46:652 996 155c Report REPORT EVENT: {094FE555-A8E1-4ACE-8F1E-75D9B4E25C79} 2016-10-18 17:53:41:644+0530 1 148 101 {61CA813A-7585-442E-A66B-B0D15CE6BDC0} 1 80070005 SelfUpdate Failure Software Synchronization Windows Update Client failed to detect with error 0x80070005.
2016-10-18 17:53:46:652 996 155c Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2016-10-18 17:53:46:652 996 155c Report WER Report sent: 7.6.7600.256 0x80070005 61CA813A-7585-442E-A66B-B0D15CE6BDC0 Scan 101 Unmanaged
2016-10-18 17:53:46:652 996 155c Report CWERReporter finishing event handling. (00000000)
------------------------------------
Reply:
Hi Rajendra,
please install the following Windows Update version and see if the error goes away:
https://support.microsoft.com/en-us/kb/3172605
Best regards,
Andrei
We could change the world, if God would give us the source code.
------------------------------------
Excel Services: The trial period for SharePoint Server has expired. SHAREPOINT 2013
Hi Everyone,
Good day!
Just want to know if anyone encounter same problem regarding the Excel File cannot open due to the trial period for sharepoint server has expired.
- I can upload the excel file in Sharepoint 2013
- I cannot open it due to the Error "Excel Services: The trial period for SharePoint Server has expired."
Please see attached pics
Thanks
Reply:
Hi,
Your sharepoint trial period is expired because of that it's not letting you open the file. Once your sharepoint got expired you will face really strange issues.
------------------------------------
Reply:
Hi,
Renew your license to get the issue fixed
For anything related to SharePoint https://www.fiverr.com/rashu268
------------------------------------
Reply:
Hi @Rashu, Rahul,
Thank you
This is only for the excel file but other is okay.
renew the whole sharepoint? I think no this only particular to excel services.
Regards
J.R
------------------------------------
Adding to the details pane in file properties
I couldn't figure out where to put this question, so I apologize if this is the wrong place, but I am trying to get extended file details in the details tab when I click on a file's properties. Ideally, I am looking for a way that when I save a file from the internet, it will copy the URL of the file into file details. Any help is greatly appreciated.
Thank you
- Changed type Bill_Stewart Tuesday, November 22, 2016 4:20 PM
- Moved by Bill_Stewart Tuesday, November 22, 2016 4:21 PM User doesn't understand scope of question
Reply:
The details pane is established by the file provider. It is different for most files and most files do not allow you to edit the details. Some that do are Word, Excel and most image files. In all cases you must use the file providers tools or API to edit the file properties. There is no simple command that does what you ask. The default properties are provided by NTFS and are only the values from the HTFS directory. These cannot be added to.
\_(ツ)_/
------------------------------------
Reply:
\_(ツ)_/
------------------------------------
Reply:
-- Bill Stewart [Bill_Stewart]
------------------------------------
AddPresearch+filter on Lookup Field
Hi all,
I am getting issue i have three lookup fields and I have to filter the third lookup records based on above two lookup fields
Ex:1.Category,2.subtype,3.subsubtype
If i selected category and subtype based on the two values the subsubtype should be filter.
if i selected subtype as null then subsubtype should be filtered by only category.
I applied addpresearchfilter to filter the records but when i select casetype and subtype the filter is working fine and if i delete the subtype and i am trying to acess the subsubtype at that time i am getting Invalid Argument.
Feedback on upgrades
- Changed type Carey FrischMVP Sunday, October 23, 2016 7:53 PM Comment
- Moved by Carey FrischMVP Sunday, October 23, 2016 7:54 PM Relocated
Another Cumulative Update for Insiders in Release Preview or Slow ring
Cumulative Update KB3199986 for Insiders in Release Preview ring or Slow ring.
It can also be obtained from Microsoft Update Catalog.
32-bit (x86) - 5.1MB
64-bit (x64) - 11.2MB
- Edited by david hk129 Sunday, October 23, 2016 2:20 PM
- Changed type david hk129 Sunday, October 23, 2016 2:21 PM
Reply:
Cumulative Update KB3199986 for Insiders in Release Preview ring or Slow ring.
Thanks! We're still waiting on the KB article but I've seen some conjecture on the web that this is actually just another Servicing Stack update. Those guessing have pointed to its download size and inability to uninstall as possible evidence. Curiously, the download size is exactly the same as the last two stack updates (last week and August)
As for the latest Insider's CU for Release Preview, apparently KB3197954 brings the build to 14393.351.
See THIS THREAD over at TenForums for more discussion on both updates. See THIS ARTICLE over at WinCentral for CU links.
- Edited by john.b_ Sunday, October 23, 2016 5:18 PM
------------------------------------
SCCM 2012 R2 Toolkit - Distribution Point Job Queue Manager - Not Working
I don't know if anyone else has run into this, but when I attempted to use the SCCM 2012 R2 Toolkit - Distribution Point Job Queue Manager to manage the DPs and content, it came back with sorry no DPs. So it looks like something changed between 2012 R2 and 1606. Unfortunately, that tool was one of the better tools for monitoring distribution.
And apparently the SCCM group almost a year into Current Branch hasn't decided to update any of the tools.
Bob
Reply:
I'm using the DP Manager from the 2012 R2 Toolkit all the time and I'm on CM 1606 Update 1
I agree that the tools need a freshen up though - if not just from a design perspective. They do look very Configuration Manager 2007 ish.
Cheers
Damon
- Edited by Damon. Johns Saturday, October 22, 2016 6:21 AM
------------------------------------
Reply:
Bob
------------------------------------
Reply:
Yes an upgrade from 2012 R2 SP1 CU3.
Still on 2008 R2 as an OS but will be upgrading to Server 2012 R2 in December.
Cheers
Damon
------------------------------------
(GAMES FREEZE) Asus x540 LJ Nvidia geforce windows 10
every time i open games on my brand new asus x540 LJ the screen, sound, mouse and keyboard freeze up i literally cannot do anything on the computer except for use the power button to shut it off. This happens everytime i open my games. the main game i play is diablo 3: reaper of souls. i have tried just about everything to fix the issue from watching different videos with people with similar problems this includes; updating my driver, going back to an older driver, checking internal temperatures to see if its over heating, uninstalling windows 10 updates, as well as reinstalling widows 10 completely. Nothing seems to work and now its becoming frustrating. what could the issue be ? i can use my computer for everything else with out any issues; watch movies, browse..... etc. so why does everything else work but as soon as i go to play a game it freezes ?
Reply:
I shall suggest you to check the event viewer logs.
In the Start Search type in event logs and hit the enter key.
S.Sengupta, Windows Insider MVP
------------------------------------
Marissa's green
My name marissa
Script to check the specific Schedule task of every branch server from central location
I have 125 Server branch servers and have scheduled backp through script on daily basis on local server
Pramod Jadhav
- Edited by pramodjadhav Saturday, October 22, 2016 10:15 AM
How to now my product key using product id :00326-10000-00000-AA870( Product key not available)
problem is when I was buy a dell laptop that have come with preloaded os (windows 8 )I have available product id but product key not available. now my head drive damaged. Now how to load window 8 OS use previous product key.
How to now my product key using product id :00326-10000-00000-AA870
One time I was replace motherboard on that laptop on warrienty periode. that time they give me a window product key with seal pack. now when I will go to load window 8 useing that product key my laptop has not accepet that product key
pls solve inform me how to load os on my laptop
Reply:
Where is the Windows 8 or Windows 10 Product Key?
Factory-installed Windows 8 and Windows 10 computers differ from previous versions of Windows. Previously, the Product Key for Windows was attached as a label on the computer so that, in the event that the computer required reinstallation, the key could be referenced for activation.
For Windows 8 and Windows 10, the Product Key is "injected" onto the computer motherboard at the factory, and the installation and activation processes refer to the BIOS of the computer to verify authenticity and activate Windows. No Windows Product Key is otherwise provided or needed by the customer.
Ref:
http://www.dell.com/support/article/in/en/inbsdt1/SLN290004
S.Sengupta, Windows Insider MVP
------------------------------------
DCOM Permissions & Powershell.
Hello,
I am attempting to write an automated method to pull permissions for all objects in a specific installed application. I am leveraging accesschk.exe (sysinternals) to pull the effective permissions of the service "log on" accounts from the registry/filesystem then attempted to find a method to pull the assigned permissions for DCOM objects and have run into a road block.
(Cleaned up script.. should have everything relevant here)
$ComName = 'PrintNotify'$dcom = Get-WMIObject Win32_DCOMApplicationSetting `
-Filter "Description='$ComName'" -EnableAllPrivileges
$lsd = $dcom.GetLaunchSecurityDescriptor().Descriptor
write-host "Users: " $lsd.dacl.trustee.name
So here is the issue:
I can see a list of users assigned to the "Launch" permissions. These users will show up as long as at least 1 of the 4 options are enabled (Local/Remote Launch/Activation). However, I do not see any sort of object that will show what users are assigned which permissions.
So here are the questions:
Is there an attribute that can be scripted in Powershell to list the permission attributes assigned to the users inside a specific DCOM object? Or is the maximum possible just: Has at least one permission granted?
- Edited by stoneway Friday, October 21, 2016 5:37 PM
- Changed type Bill_Stewart Friday, December 30, 2016 8:01 PM
Reply:
$dcom.GetLaunchSecurityDescriptor().Descriptor.DACL
The permission you asked for is "Launch" which is the permission assigned.
\_(ツ)_/
- Edited by jrv Friday, October 21, 2016 5:50 PM
------------------------------------
Reply:
To get access security use this:
$dcom.GetAccessSecurityDescriptor().Descriptor.DACL
\_(ツ)_/
------------------------------------
Reply:
Hello,
or $lsd.dacl
Yes, it returns 4 objects. I assume those 4 objects are Remote Launch, Local Launch, Remote Activation, Local Activation in some undetermined order with undetermined users attached to each object.
This is the part where I am stuck.
If I do $lsd.dacl.trustee it will show the users that are assigned any one of the 4 possible permissions with no obvious way to identify which ones they are assigned.
The whole purpose is to identify which user is assigned which permission.
For Example: The account: "System" has Local Launch/Activation assigned. However, I cannot tell the difference between removing or adding additional permissions. It just exists if it has at least 1 permission granted.
------------------------------------
Reply:
No. They are all activation permissions.
\_(ツ)_/
------------------------------------
Reply:
I'm not understanding what you are saying. 2 are launch 2 are activation.
(Was going to screenshot but apparently cant)
Group or user names:
- System
- Administrators
- Interactive
Permissions for SYSTEM Allow Deny
- Local Launch [X] [ ]
- Remote Launch [ ] [ ]
- Local Activation [X] [ ]
- Remote Activation [ ] [ ]
The 3 providers map to:
- Launch and Activation Permissions
- Access Permissions
- Configuration Permissions
- Edited by stoneway Friday, October 21, 2016 8:00 PM
------------------------------------
Reply:
What you see in the GUI is not what is in DCOM. DCOM has objects for activation and launch. They are separate methods.
Launch permissions:
$dcom.GetLaunchSecurityDescriptor().Descriptor.DACL.Trustee.Name
Activation permissions:
$dcom.GetAccessSecurityDescriptor().Descriptor.DACL.Trustee.Name
PS D:\scripts> $dcom.GetAccessSecurityDescriptor().Descriptor.DACL.AccessMask 3 3 3 PS D:\scripts> $dcom.GetLaunchSecurityDescriptor().Descriptor.DACL.AccessMask 11 11 11
The access is a combination of launch and activation flags.
\_(ツ)_/
------------------------------------
Reply:
Thanks, I think I understand.
I finally found something that made it a bit more clear. So this is my final time bugging you:
I found this listed as the AccessMask values. From looking at it I am deducing it is a math problem. Basically an AccessMask of 3 would be Execute+Execute_Local. Or an 11 would be Execute,Execute_Local, Activate_Local
Execute = 1
Execute_Local = 2
Execute_Remote = 4
Activate_Local = 8
Activate_Remote = 16
Can you confirm I am on the right track? Would be nice to see the users.. but honestly it will be enough to know if any of them are something other than default.
------------------------------------
Reply:
Okay, nevermind.. figured it out. Can even map it to users. Awesome, again.. thanks for helping work through this.
------------------------------------
SQL Server : How to manually audit user, IP, and action?
Hi Guys,
i just want to discuss about something maybe impossible, i dont know. I need to audit my sql server 2012 to know what user login, with their IP Address, and what they have done in my database. for example there are a few users remote my sql server and do some action, what query to be executed, to get this following result??
USERNAME-------IP_ADDRESS-------EXECUTED_TIME------------------QUERY-------------------------------------- user1 | 192.168.172.10 | 10/10/2016, 16:30 | Select * from TableA where condition CD; | user2 | 192.168.172.15 | 11/10/2016, 09:00 | update TableA set FieldX = value1 ; | user1 | 192.168.172.10 | 11/10/2016, 12.00 | Select * from TableA where condition AX; |is it possible to get this result?
i have tried a few advice such as this following queries
SELECT deqs.last_execution_time AS [Time], dest.TEXT AS [Query] FROM sys.dm_exec_query_stats AS deqs CROSS APPLY sys.dm_exec_sql_text(deqs.sql_handle) AS dest WHERE deqs.last_execution_time > '5/19/2011 11:00' AND dest.text LIKE 'Update%' ORDER BY deqs.last_execution_time ASC
SELECT conn.session_id, sson.host_name, sson.login_name, sqltxt.text, sson.login_time, sson.status FROM sys.dm_exec_connections conn INNER JOIN sys.dm_exec_sessions sson ON conn.session_id = sson.session_id CROSS APPLY sys.dm_exec_sql_text(most_recent_sql_handle) AS sqltxt ORDER BY conn.session_id
SELECT OBJECT_NAME(OBJECT_ID) AS DatabaseName, last_user_update,* FROM sys.dm_db_index_usage_stats WHERE database_id = DB_ID( 'TABLE') AND OBJECT_ID=OBJECT_ID
it cannot answer my wish. anyone can help me to make this happen?
Thank You,
yoga
- Edited by king.yhk Monday, October 17, 2016 8:50 AM
Reply:
Queries you have used are able to provide data for that point. But for audit purpose you need regular monitoring of your system which will keeping checking all incoming queries and other details you needed.
You can use server side trace for desired auditing. Server side trace is having ultiple options, you can choose according to your complete requirement.
Note - Server side trace put 5%-10% extra load on server.
Refer - https://msdn.microsoft.com/en-us/library/cc293613.aspx?f=255&MSPPError=-2147217396
Regards,
Rohit Garg
(My Blog)
This posting is provided with no warranties and confers no rights.
Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.
------------------------------------
Reply:
yoga
------------------------------------
Reply:
Server side trace has multiple option, you can get user name, query, hostname and other multiple things for each session coming on server. Please explore it.
Regards,
Rohit Garg
(My Blog)
This posting is provided with no warranties and confers no rights.
Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.
------------------------------------
Reply:
The SQL Audit feature will give you some of what you are looking for.
https://msdn.microsoft.com/en-us/library/cc280386.aspx?f=255&MSPPError=-2147217396
There are also commercial products for this:
I have used this one:
https://www.idera.com/productssolutions/sqlserver/sqlcompliancemanager
------------------------------------
Reply:
We have another option too:
Like the commands in terms of DMVS to get user, IP and command text to be recorded into tables using SQL job based on interval you need and you can review any time by selecting from it. You can set archival table too for that or finally push data to another UAT\Dev\DR servers for refereeing too old data too.
You should also plan for preventive steps, if somebody wants to do changes then how you stop that.
In one way,what Rohit has shared, you have option to select those columns that you need and keep it those that ou need. That is something you need to keep running all the time and you need to keep scale-up your sever configuration for additional load.
There are other third party based audit tool too to use as Hilary said.
Various other options to audit data, can be found in below link:
https://msdn.microsoft.com/en-us/library/cc280386.aspx
Know more about change tracking.
https://msdn.microsoft.com/en-us/library/bb933875.aspx
Santosh Singh
------------------------------------
No comments:
Post a Comment