Thursday, March 3, 2022

SharePoint 2010 Ribbon declarative customization - RegistrationType & RegistrationId

SharePoint 2010 Ribbon declarative customization - RegistrationType & RegistrationId

Hi! I made some research on the subject and would like to share my findings with the community. I've created a blog post for this purpose - RegistrationType & RegistrationId in SharePoint 2010 declarative Ribbon customizations. Any comments are welcomed here or there. Let's make SharePoint more understandable! :)


update:

Looking at zero blog post viewing statistics I have to explicitly state that there are some not commonly known things about the subject in the post - like FileType and ProgId registration. :) This research cost me some efforts so I can't stand to share it.

  • Edited by Alex V. Boev Monday, December 26, 2011 9:06 PM Need some clarification :)

EFS-encrypt a WDS index

A Microsoft page [1] says "You can strongly encrypt the WDS index using Encrypting File System."  It tells you how to encrypt the index using EFS keys associated with your account.  I did this on Windows 7 Ultimate and WDS seems to work on my EFS-encrypted files.

 

Another Microsoft page [2] says "The indexing of encrypted files should not be enabled unless the search index itself is protected with full volume encryption. While encrypting the index file with EFS is possible, it is not recommended. ... The Windows Search service runs under the LocalSystem account and needs access to the index files. As a result, EFS keys associated with the LocalSystem account must be used to encrypt the index files. Consequently, the index files are open to the following attacks..." 

 

Which page is right?  In any event, Microsoft should update one of them.

 

[1] WDS Pre-Installation Considerations

(no date listed)

http://technet.microsoft.com/en-us/library/cc770633%28WS.10%29.aspx#

 

[2] Windows Indexing Features

published: May 4, 2009

http://technet.microsoft.com/en-us/library/dd744700%28WS.10%29.aspx#WS_EncryptingtheIndex


  • Edited by x770 Sunday, December 18, 2011 8:27 PM
  • Changed type Arthur Xie Friday, December 23, 2011 8:51 AM

Reply:

The first reference goes to a very old version of WDS which was released around 2005/2006. Since those recommendations were written the best practices have been updated which is what you are referring to in the second link. Follow the recommendations found in reference #2 published in 2009.

 


Blogging about Windows for IT pros at www.theexperienceblog.com

------------------------------------
Reply:

I have an issue with #2.  It says "While the Encrypting File System (EFS) can also be used [to encrypt the index], it is not recommended."  It fails to describe the method of applying EFS that leaves the index open to attack.  It says that with the vulnerable method, "EFS keys associated with the LocalSystem account must be used to encrypt the index files."  However, #1 describes an approach that seems to encrypt the index with the user's keys, not the LocalSystem's keys.  So #2 does not seem to refute #1, and we still have to wonder where the truth is.


------------------------------------
Reply:
The first article indicate how to encrypt search index, but it does not recommend you to do that. It is only a introduce. I do not think that it conflicts with the second article.
Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. "

------------------------------------
Reply:

We have two scenarios:

A. Encrypt the index with user EFS certificate, the Windows Search service is not able to access the index database and therefore cannot index any content making search slower/not working optimal.

B. Encrypt the index with LocalSystem EFS certifiactes, leaves it open for any users to access the index file. The index file itself is a EDB database which according to Microsoft is obfuscated. In reality you can use various tools to open the EDB file and extract the content from the index file, potentially exposing data that should be kept private.


Blogging about Windows for IT pros at www.theexperienceblog.com

------------------------------------
Reply:

I used #1 to encrypt the index, apparently with my user EFS key, but search still works, running as LocalSystem.  So, is the index encrypted with my key or the LocalSystem's key?

#2 lists two attacks.

#2 attack 1: "Any administrative user can gain access to the encrypted index files by simply impersonating the LocalSystem account."  No problem.  I'm the only admin.

#2 attack 2: "The key that is used by the LocalSystem account to decrypt files is stored on the machine in an obfuscated state."  I secured the Windows SAM database by using the SysKey utility to configure a password that you must enter at Windows start-up.  Does that prevent the attack on the LocalSystem's key?

  • Edited by x770 Tuesday, December 20, 2011 5:03 PM

------------------------------------
Reply:

#1 says, "You can strongly encrypt the WDS index using Encrypting File System."  Was that approach always vulnerable to attack 2 (the offline attack) in #2?  Or, did it become vulnerable with a certain release of WDS?  Either way, it contradicts #2.

As the only user on this PC, I can configure WDS to run under my account.  Would that ensure that the index is encrypted with my EFS keys?

  • Edited by x770 Tuesday, December 27, 2011 5:27 PM

------------------------------------

Disallow usb write EXCEPT to Ironkey

I would like to know if there is a way to allow one usb device to be written to but another just read only.  I have been able to successfully apply a group policy that will only allow a usb stick to be read from and not written to but my problem is I need to somehow allow our users with  Ironkey drives the ability to read and write.  Anybody have any ideas?

Thanks


Reply:

As far as i know you can't do it by gpo/resigtry.

There are some 3rd party antivirus software that can block some usb devices by their ID.


------------------------------------
Reply:
May be possible through introducing a custom device class for IronKey -
but I never did that...
 
 

A bissle "Experience", a bissle GMV...

------------------------------------
Reply:

Chip_flyer: Do you have any 3rd party endpoint security programs installed which allow you to configure granular policies by device serial number?  If so, you should be able to configure a specific device (only on network though) to have certain privileges as you described.  My company, Kanguru, makes devices that are similar to Ironkey and we have supported customers with rollouts to do what you are talking about.  Some of the mainstream companies in the US that provide these types of endpoint software are Lumension, McAfee, Symantec, Safend, and DeviceLock.

 

Good luck,

Nate


------------------------------------
Reply:

No 3rd party programs available Nate,  management has it in there head that we should be able to do this with group policy and I don't think it is going to work. Just trying to luck out and see if someone has been down the road and figured out a way to do it.  It doesn't seem like it would be to far fetched of an idea!

Thank you,

Jeff


------------------------------------

Extracting the file name from for each loop enumerator

Hello All,

I am loading a file into a table using for each loop. In for each loop I have selected for each file enumerator and I have selected retrieve fully qualified name. I have also created a variable of string type---filename  and used this variable to hold the file name in for each loop. I have given this variable in variables mapping tab in for each loop. I need to extract the file name and the file date and put it into the destination table as extra columns.

I think the variable in for each loop stores fully qualified file name. In my case it is "p:\Data_mart_account_2011-12-14.csv"

In derived column 

I have given file name for column and value as substring(@[user::filename],4,32). But its not working. Also for file date I need to get 2011-12-13...I have tried like this "DATEADD("D",-1,(DT_DATE)SUBSTRING(@[User::filename],22,10))"...this is not working..

Please assist. Correct me if I did anything wrong.

Thanks so much for any help

 


Reply:
Hello , check the snapshot, you can select only Name, if you don't need path and extension.
http://sqlage.blogspot.com/

------------------------------------
Reply:

But if I select that it says could not open the file. It is not locating the file. If I select fully qualified name the for each loop is selecting the file from a folder.

It says [Flat File Source [1]] Error: Cannot open the datafile "Data_Mart_Account_2011-12-14".

Since the file path is p:\Data_mart_Account_2011-12-14. 

In the folder I have given this path and selected name only and its not working.


------------------------------------
Reply:

Hello,

in the folder you will be giving Folder not file name. Is Data_mart_Account_2011-12-14 is your folder on P Drive?

You only need to provide folder path , exclude the file name. Foreach loop will read the file while execution.

Thanks

Aamir


http://sqlage.blogspot.com/

------------------------------------
Reply:
Oh I am sorry. I have given p:\Test_account in the folder in foreach loop. Data_mart_account_2011-12-14 is my file name. Test_Account is my folder. In that folder I have this file Data_mart_account_2011-12-14

------------------------------------
Reply:

Once you figure out how to get the filename and you need to use this snapshot in your Data Flow task to get the filename and date

FileName Expressions: (DT_STR,100,1252)SUBSTRING((DT_STR,100,1252)@[User::FileName],1,LEN((DT_STR,100,1252)@[User::FileName]) - 11)

Date Expressions:(DT_DBDATE)(DATEADD("D",-1,(DT_DBDATE)((DT_STR,100,1252)RIGHT((DT_STR,100,1252)@[User::FileName],10))))

Note: as you mentioned you want to get previous day. so used DATEADD with -1


http://sqlage.blogspot.com/

------------------------------------
Reply:
Thanks a lot aamir. It worked. Thanks for your time

------------------------------------
Reply:

Hi AAmir,

 

I am getting this error for file date 

[Derived Column [1224]] Error: Casting expression "((DT_STR,100,1252)RIGHT((DT_STR,100,1252)@[User::FileName1],10))" from data type "DT_WSTR" to data type "DT_DBDATE" failed with error code 0xC00470C2.

Thanks


------------------------------------
Reply:

you missed the above part

(DT_DBDATE)(DATEADD("D",-1,(DT_DBDATE)((DT_STR,100,1252)RIGHT((DT_STR,100,1252)@[User::FileName],10))))

use this expression. 

Thanks

Aamir



http://sqlage.blogspot.com/

------------------------------------
Reply:
I have used the same expression (DT_DBDATE)(DATEADD("D",-1,(DT_DBDATE)((DT_STR,100,1252)RIGHT((DT_STR,100,1252)@[User::FileName],10)))) But the error it is showing in this part ((DT_STR,100,1252)RIGHT((DT_STR,100,1252)@[User::FileName],10))))

------------------------------------
Reply:
I Mainly use SCRIPT TASK and/or Script component, its easier to read and trace, and it has a editor, you can use brakepoints and VIEW the values as you run the package
Sincerely SH -- MCITP 2008, MCTS 2008 & 2005 -- Please kindly mark the post(s) that answered your question and/or vote for the post(s).

------------------------------------
Reply:

This is the complete error 

[Derived Column [1224]] Error: Casting expression "(DATEADD("D",-1,(DT_DATE)((DT_STR,100,1252)RIGHT((DT_STR,100,1252)@[User::FileName1],10))))" from data type "DT_DBTIMESTAMP" to data type "DT_DATE" failed with error code 0xC00470C5.


------------------------------------
Reply:

I got this. I just replaced substring in place of right like this

(DT_DATE)(DATEADD("D",-1,(DT_DATE)SUBSTRING((DT_STR,100,1252)@[User::FileName1],50,10)))

and it worked. 

Thanks for your time.


------------------------------------

FIM 2010 > FIM 2010 R2 upgrade path

Hi,

 

In http://technet.microsoft.com/en-us/library/hh322919(WS.10).aspx i states;

Upgrade is supported for all server components from all builds prior to 4.0.3579.2. To find out what build you are using, click About Forefront Identity Manager on the administrator home page in the FIM portal. If you have a build equal to or later than 4.0.3579.2 installed, you will not be able to upgrade to FIM 2010 R2 RC, and will have to perform a fresh installation.

But latest hotfix, http://support.microsoft.com/kb/2520954/en-us is 4.0.3594.2, which is higher tha 4.0.3579.2. I.E. you cannot do an upgrade if you have a fully updated FIM installation.

This apparently is true for the FIM 2010 R2 RC, but will that be true for the final as well? If that is the case, i'm glad i haven't installed the KB2520954 in our production environment yet.


/Frederik Leed

Reply:

Hello,

There's a note on the connect site when downloading RC that says:

"This is an evaluation release so does not support an in-place upgrade of a FIM 2010 full installation. You can only do a clean installation of this release--that is, an installation that creates a new FIM database. However, the final, full version of FIM 2010 R2 will support in-place upgrade of an existing FIM 2010 full installation."

I wonder what "does not support" mean? Does it mean it's not possible, or it's just not supported? :)

If it's possible and just not supported I'm assuming (and hoping) the article mentioned above is not accurate, and it should in fact be the 4.0.3594.2 release.

Piotr



------------------------------------
Reply:

Hello,

I wonder what could be the correct build number in the below statements,

 "Upgrade to FIM 2010 R2 RC is supported from all builds prior to, and including, build 4.0.3579.2. To find out what build you are using, click About Forefront Identity Manager on the administrator home page in the FIM portal. If you have a build equal to or later than 4.0.3579.2 installed, you will not be able to upgrade to FIM 2010 R2 RC, and will have to perform a fresh installation.

If you have a FIM 2010 build that is less than 4.0.3579.2, you may upgrade any of the FIM server components in the list at the beginning of this section, and may also add any of the new features that FIM 2010 R2 RC has to offer as part of this upgrade"

 As Piotr mentioned it could be 4.0.3594.2, but it can be 4.0.3576.2 also. I could not find any build with 4.0.3579.2 .  Based on this if a hotfix need to be applied on FIM 2010 build 4.0.2592.0, what should it be which would allow upgrade to R2?

Kishoz


------------------------------------

FIM Password Reset Registration slows startup every day

Hello.

My work laptop uses FIM 4.0.3555.2. The FIM Password Reset Registration starts with every Startup of the system, shows in the taskbar (as "FIM Password Reset ..."), doesn't show a window, and sits for several long seconds, hardly letting any other Startup item or clicked Desktop item run until it's finished. Very annoying. Clicking on it does nothing (except show its taskbar button as pressed). Right-clicking shows Move and Close. Selecting Move puts the Move cursor on a blank area of the desktop, from which the user can apparently "move" an invisble window. Selecting Move again puts the Move cursor back to the same place that the invisible window was moved. Then this task goes away and all is well, until the next Startup. What might be making this appear on every Startup? What can be done to make the window appear, in order to do whatever so that the Registration doesn't clog Startup every time? Thanks.


Reply:
I'll add: My employer's IT dept. had no idea what to say about this Registration task appearing daily. Apparently it happens to no one else. They said to uninstall and reinstall. I did. No change.

------------------------------------
Reply:

This is an option to avoid registraion from running every time you log in.

Using Group Policy to update how often registration is checked

By default, the FIM client checks the end user’s registration status every time he or she logs on to Windows. The frequency setting for how often registration is checked is located in the registry. If you are deploying password reset broadly in your organization, we recommend that you configure FIM 2010 to check periodically, not every time that the user logs on to Windows.

There are two potential locations for the registry key:

  1. HKCU\Software\Policies\Microsoft\Forefront Identity Manager\2010\Extensions

  2. HKCU\Software\Microsoft\Forefront Identity Manager\2010\Extensions

The location under Policies takes precedence. However, the second key, in the second listing above, must be created. It can be an empty key.

The settings are as indicated in the following table.

Name Type Data description Registry location

CacheInterval

Int

Registration status cache duration in days

HKCU\Software\Policies\Microsoft\Forefront Identity Manager\2010\Extensions

HKCU\Software\Microsoft\Forefront Identity Manager\2010\Extensions

MaxOffset

Int

Maximum random offset in days to be added or subtracted to cache interval

HKCU\Software\Policies\Microsoft\Forefront Identity Manager\2010\Extensions

HKCU\Software\Microsoft\Forefront Identity Manager\2010\Extensions

CacheInterval specifies the amount of time in days before the FIM client checks the user’s registration status again. MaxOffset adds or subtracts a random number of days to CacheInterval. The offset exists so that all FIM clients are not checking registration status on the same day. We recommend that you create these settings in the Policies folder.


Frank C. Drewes III - Senior Consultant: Oxford Computer Group

------------------------------------
Reply:

if it isn't a software that your IT dept is aware of, how did u have it installed in the first place?

if you open a command prompt and type "MsPwdRegistration -all", what do you see?


The FIM Password Reset Blog http://blogs.technet.com/aho/

------------------------------------

V3 CTP2 ISE cmd windows

so they changed how the command window works (not sure if I like it)... its
more like the console, which is fine, but I find myself clearing my lines
too often...
 
if you type part of a line, and it loses focus (if you scroll up for example
or give focus to another window and then click back on ISE) you have to
either mouse specifically to it (a pain) or type....  but, if you want to
modify a line you cant just use the arrow keys to get focus back, and if you
hit esc it clears the line.
 
some where I've picked up a habit of hitting esc, which clears my lines more
often than I'd like.
 
is this just me or do others have this problem?
 
I submitted a suggestion to connect to have them make esc move you to the
line if you are not on it, and if you are on it then clear it...
 
 
 

Justin Rich
http://jrich523.wordpress.com
Please remember to mark the replies as answers if they help and unmark them if they provide no help.
  • Changed type Greg_Gu Thursday, December 22, 2011 9:28 AM It's an issue in PowerShell V3 CTP2

Reply:
"I submitted a suggestion to connect to have them make esc move you to the
line if you are not on it, and if you are on it then clear it..."
I thought this was actually how it worked, until you have brought my attention to it.  Yes, I agree, it should behave the way you describe, and it's actually very annoying working between the script window and the command pane.  There should be an F key to toggle between the two panes.

([string](0..9|%{[char][int](32+("39826578846355658268").substring(($_*2),2))})).replace(' ','')

------------------------------------
Reply:
there is, CTRL+D - command, CTRL+I for script window... and I guess
technically I could use CTRL+D to get back to the line, but my habit is to
hit esc..
 
you could assign those to F keys if you wanted...
 
$psise.CurrentPowerShellTab.AddOnsMenu.Submenus.Add("Select
Script",{$psise.CurrentPowerShellTab.CommandPane.Focus() | Out-Null},"F6")
 
$psise.CurrentPowerShellTab.AddOnsMenu.Submenus.Add("Select
Script",{$psise.CurrentPowerShellTab.Files.SelectedFile.Editor.Focus()},"F4")
 it puts in a new line, but keeps your text, so its ok, but not ideal.. im
sure there is another way to capture the F keys that would prevent that
though.
 
 

Justin Rich
http://jrich523.wordpress.com
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

------------------------------------
Reply:
Yes, I know about Ctrl-I and Ctrl-D, but they are not intuitive, and I never use them.  A single F key which toggles between the two panes would be ideal.  I like F7.
([string](0..9|%{[char][int](32+("39826578846355658268").substring(($_*2),2))})).replace(' ','')

------------------------------------
Reply:
hmmm, interesting...
 
im not able to find anyway to check who has focus so you cant make it 100%,
but you can do it if you always use that key... (no mouse or no ctrl+ i/d)
which might be easy if that's what you instinctively want...
 
 

Justin Rich
http://jrich523.wordpress.com
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

------------------------------------
Reply:

Yes, F7, which is an old habit from using the VBA editor.  F7 takes you from your form setup to the code behind.  It toggles back with Shift-F7.

If my memory serves me correctly, the VB6 IDE also had F7 as a toggle.  F2 has always been the Object Explorer.


([string](0..9|%{[char][int](32+("39826578846355658268").substring(($_*2),2))})).replace(' ','')

------------------------------------
Reply:
well you can do F7 for script and Shift+F7 for command pane
 $psise.CurrentPowerShellTab.AddOnsMenu.Submenus.Add("Select
Script",{$psise.CurrentPowerShellTab.CommandPane.Focus()},"F7")
 
$psise.CurrentPowerShellTab.AddOnsMenu.Submenus.Add("Select
Script",{$psise.CurrentPowerShellTab.Files.SelectedFile.Editor.Focus()},"SHIFT+F7")
 
 

Justin Rich
http://jrich523.wordpress.com
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

------------------------------------
Reply:
well you can do F7 for script and Shift+F7 for command pane
 $psise.CurrentPowerShellTab.AddOnsMenu.Submenus.Add("Select
Script",{$psise.CurrentPowerShellTab.CommandPane.Focus()},"F7")
 
$psise.CurrentPowerShellTab.AddOnsMenu.Submenus.Add("Select
Script",{$psise.CurrentPowerShellTab.Files.SelectedFile.Editor.Focus()},"SHIFT+F7")
 
 

Justin Rich
http://jrich523.wordpress.com
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

That looked promising, and I tried it, but, although it executes without error, it doesn't actually move the cursor to the required pane.  It says it's doing it, but it doesn't really!
([string](0..9|%{[char][int](32+("39826578846355658268").substring(($_*2),2))})).replace(' ','')

------------------------------------
Reply:
hmm I cant get it to go back to the command pane... bug report time :)
 
 
 

Justin Rich
http://jrich523.wordpress.com
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

------------------------------------

Lync 2010 dial plan

Hi guys,

Hope you can help.

We have two outbound call centers. Lets call them A and B. They require the following. When call center A wants to call out CLI must show. When call center B dials out CLIR must show.

So to accomplish this I created two dial plans, voice policies, routes and pstn usuages for each.

For call center A where the CLI must be shown my TISP told me to send the following through: 991127 infront of the number the user is dialing. Basicly their media gateway will strip the 991127 and so they will know when to show CLI. For call center B I must add 990027 infront of the number and the media gateway will know to show CLIR.

Now the problem I have is as follow:

Firstly here is my dialplan: pattern to match ^\d{1}(\d*)$           translation rule: 990027$1

Route: Pattern to match is .*

When I dial 0832910904 lync translates it to 990027832910904 which is correct but the call fails. The reason for that is because lync basicly duplicates the 990027. Here is the log:

101 Progress Report

ms-diagnostics: 14011;reason="Called Number translated";source="atrlyncfe.domain.local";RuleName="Silverton Clir";CalledNumber="990027832910904";TranslatedNumber="99002790027832910904";appName="TranslationService"

We only have one trunk setup which is the default global one. Is it maybe the trunk translation rule that breaks my dialplan or am I doing my dialplan translation rule wrong?

When I create a basic dialplan where I dont strip anything: ^(\d*)$    $1 and I manually dial 990027832910904 the clir is working perfectly.

Help will be much appreciated.

Thanks


Reply:

Do you have any translation rules configured on the trunk? Check under Voice Routing/Trunk Configuration/Rules (asociated translation rules at the bottom).

 

Damo.


------------------------------------

What is the purpose of Information Card in WCF?

Hi All,

What is the purpose of Information Card in WCF? 

Please explain with example.

Thank in advance

  • Moved by Larry Yin Wednesday, December 21, 2011 12:23 PM (From:MSDN, TechNet, and Expression Profile and Recognition System Discussions)

Reply:

Hello there,

I'd like to suggest you to post your question to one of the MSDN forums:

.NET Framework Developer Center > .NET Development Forums > Windows Communication Foundation (WCF)

located at:

http://social.msdn.microsoft.com/Forums/en-US/wcf/threads


Larry Yin(Chinasoft)
Customer Support

EPX Service Engineering Support Team


------------------------------------

Generic USB Hub

Hi,

I have a USB hub connected to the active board, every time the PC is restarted this hub goes unrecognize and shows an error "this device cannot start (code 10)", if I uninstall from the device manager and scan for hardware changes Generic drivers gets installed and working fine. But it is a pain in the neck to do this in almost in 40 computers everyday when they restart. Please put in your comments and help me resolving this issue and please note i have few windows xp computer and i never faced this problem but in few days i am going to upgrade these computers to Win7.

 


Reply:

Hi,

 

You might want to try to upgrade your motherboard and BIOS versions to the latest for a test.


Alex Zhao

TechNet Community Support


------------------------------------

How do YOU define private cloud?

There are various definitions about Private Cloud out there.  Do you agree with them?  What other components are missing?

Remember, a Private Cloud is a combination of both technology and processes.  It is a HOW, not a what.  HOW do you use these technologies and process to create a Private Cloud?

The NIST definition: “Cloud Infrastructure as a Service (IaaS): The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, deployed applications, and possibly limited control of select networking components…”  From: http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145_cloud-definition.pdf

The Microsoft definition: “Private cloud is the implementation of cloud services on resources that are dedicated to your organization, whether they exist on-premises or off-premises. With a private cloud, you get many of the benefits of public cloud computing—including self-service, scalability, and elasticity—with the additional control and customization available from dedicated resources.”  From: http://www.microsoft.com/virtualization/en/us/private-cloud.aspx

Thanks!
Symon Perriman
Technical Evangelist
Private Cloud Technologies
Microsoft


Reply:

Private Clouds are more than simply a set of tools, but more about approaching the "problem" of IT, from a customer first, service oriented, and shared resource perspective.  It is causing internal IT to look at itself as a service provider, with products, customers, and costs.  At the end of the day, it allows IT to function in greater alignment with what the business is actually asking for. 

I feel like one of the best ways a company can start to engage the private cloud, in addition to determining toolsets, is to develop a service catalog.  This is a great step, as it causes IT to engage what they "do".  http://www.microsoft.com/events/podcasts/default.aspx?seriesID=Series-c462ef16-f398-455a-979f-c5cb3c5d4c6f.xml&pageId=x7623&source=Microsoft-Podcasts-about-IT-Manager-Connections:-Build-Business-and-Careers-on-the-Microsoft-Platform&WT.rss_ev=a

I also drafted this:

http://blog.concurrency.com/infrastructure/private-cloud-architecture-and-staffing/

Nathan Lasnoski


http://blog.concurrency.com/author/nlasnoski/

------------------------------------
Reply:

We drafted a cloud computing Wiki to provide more insight into specific aspects of cloud computing and private cloud computing:

What are the Benefits of Private Cloud Computing for Businesses?

How to Transition to the Cloud

and

Public vs. Private Cloud Computing

The wiki has more info on primary concerns including disaster recovery in the cloud, cloud computing security and more - you can view it here: 

http://www.onlinetech.com/resources/cloud-computing-wiki/item/33-public-vs-private-cloud-computing


------------------------------------
Reply:

Great feedback and thanks for the links!  We certainly agree that the Cloud is not just hardware and technologies, but also processes.

My opinion is that the cloud is not just a WHAT, but a HOW.  HOW does one use the technologies in such as way to make it behave like a cloud, offering benefits such as automation, resource-pooling and self-service (along with many others).

The key technologies are Windows Server 2008 R2 SP1 (with Hyper-V) and the System Center suite of products, yet they need to be utilized in such a way to make the datacenter behave like a Private Cloud.

For this reason it is not really possible to 'buy' a Private Cloud.  While it is possible to buy the technologies and hardware (such as through the Hyper-V Fasttrack program: http://www.microsoft.com/en-us/server-cloud/private-cloud/hyperv-cloud-fast-track.aspx), it requires that special 'human touch' to implement the custom processes, though this can be achieved through partnering with Microsoft Consulting Services (http://www.microsoft.com/microsoftservices/en/us/cloud.aspx).

Thanks!
Symon Perriman
Technical Evangelist
Private Cloud Technologies
Microsoft


------------------------------------
Reply:

From what I see out in the world is that the word "Cloud" is being slapped on just about anything today which can lead to some problems when looking at solutions for companies.  There are a lot of magazine and tech articles about how great it is, how much money they save, how they can just lower the axe on entire IT departments because of rush to the cloud. 

What ever "Cloud" fluffy or otherwise, it is still a collection of servers, storage and networking providing a foundation to offer services, applications, and data.  There are great strides in this as new tech continues to bubble forth.

What companies don't seem to think about is some of the reprocussions of jumping to the "Cloud", who owns your data? who controls your business processes? What is your expected uptimes and service levels?  I would expect that the bar on high avaliblilty .9's will be upped and improvements in this arena in the coming months/years.

What I see going on is many hosting companies have now slapped "Cloud" stickers on top of the sales brochures and are still offering what amounts to co-location, managed hosting, or application services.

It is possible to buy a private cloud? Yes, according to one company, they drag a container full of servers to your location, hook it up and you deploy into it, at certain aspects of hardware failure, they drag another container in and dupe it over and haul the other off.

There are advantages to moving applications and process out to the Cloud environments, my current and last roles were Cloud administration/infrastructure based.  There are some pitfalls as their are many major applications on the market where the developers have not allowed flexibilty in the installation and configuration of their product that keeps them tied to a physical and costly plaftform.

I think overall that this is a new coinage of a process overall, people must keep a good and even keel with evaluating thier business and data and what is valuable to them.

On the other foot, there are still many, many applications and process that a unable to move to the cloud, lack of internets, lack of physical interfaces to accomidate process/monitors/input devices.

A private Cloud in essence should be a resource for applications and data that a company can leverage, with the words "Private" being operative in that the customer retains all control and rights to their data and information.  A private cloud should contain only that which is prudent to the operations of said company, it is not a inroad for others to come solicite you for snacks, or pills.  In a private cloud, the only usage data and metrics of the system as whole should only be used by the company to look at performance of the environment, and the cloud provider to ensure it's SLA's.

Lets take a hypothetical company, call it Moogle, and look at all the wonderful little toys and apps that they serve up, sure bring your corporate emails, information, documents, GIS information, at Moogle, they make it cheap cheap cheap!! look at the savings!  Now, just what happens with all your data while you sleep? why it metrics an raw behavior data is being sold and traded?  while looking at that corporate email, would you like a little advertising for some burrito's?  In this case, Moogle has turned your corporate cloud solution into an advertising vehicle into your company. 

My 2 cents so far this morning.


:P Advice offered, If you need more help it is advised to seek the council and advice of paid professionals. The answer is always 42, or reboot.

------------------------------------
Reply:

Hi Jason,

Nice insights regarding private cloud and architectural, management and operations considers you need to consider before jumping into private cloud.

Thanks!

Tom


MS ISDUA/UAG DA Anywhere Access Team Get yourself some Test Lab Guides! http://blogs.technet.com/b/tomshinder/archive/2010/07/30/test-lab-guides-lead-the-way-to-solution-mastery.aspx

------------------------------------
Reply:

On the more "What is a Cloud"

http://www.wired.com/wiredenterprise/tag/nebula/

Entire cloud on a USB stick, so is the "cloud" a datacenter filled with rows and rows of servers in racks? or is it something more flexible that is almost metamorphic in nature?, but at the end of the day, its still hardware somewhere.

Or the more horrifying future is that no individual OS for a hardware platform, just a giant conencted mass of computer power all unified under one giant OS using the computational power of millions of home pc's, handhelds, and servers filling datacenters... Who owns your data and information at that point? Everyone? no one?  Hello Skynet?

I just finshed reading and watching a company streaming session on how they are selling "cloud".  At then end of all that "selling" and telling those about it how great it is and what not, I realized they were doing nothing more than acting as middle men reselling someone else's products.  They didn't own an actual server anywhere, just the laptops they carry, everything about thier cloud was just managed hosting at someone else's colocation facility.

From a lot of the articles I have been reading, (Kudos MS cloud guys for writing the last one i read in english aka easy to read) I see that a lot of folks are just slapping cloud on everything and seeing what sticks.

I have been reading up on "building clouds" and the hardware vendors are all a twitter about just how snazzy things are for thier said products.  But if you really look at it all, it breaks down to these basics as a platform:

1.  Ability for Global/Muliti location resources for attaining and keeping uptime to limit outages (Global redirectors, load balancers, dns weighting)

2.  Horsepower, a generic server chock full of ram and mulit core cpu's to provide the giddyup (whether a single server OS or running hyperv to support many on that platform

3.  Data storage, somehow you have bits, they have bits, and we have bits, The ability to move bits from a to b and store them.  When you get to look at multi site locations, you need the ability to have your bits replicated.

4.  Bandwidth, The need for more and more bandwith, support of front ended users, servers sharing information between each other, and what is becoming really appartent is data replication.  The more data, the more you need to mirror, or copy per say 2PB of data from site a to site b, in case a site is taken offline, you are up to snuff 1 to 1 on data at your b site.

5.  Security, is my bits secure? I don't want to spread by bits about, I don't want another cloud user seeing my bits for storage, and security to the point that I don't want the server guy at the cloud data center having access to my bits.  how it's protected.

6. Costs, it costs money to rack servers, power them, staff the datacenters, purchase the software, etc.. that makes it all go.

This is a light overview, I am guessing we will see more evolve on this as a whole, it would not surprise me if Amazon, Google, Oracle and MS come forth with some sort of "cloud" operating guidlines or common standard practice to allow diverse cloud interoperbilites.


:P Advice offered, If you need more help it is advised to seek the council and advice of paid professionals. The answer is always 42, or reboot.

------------------------------------
Reply:

One interesting thing was an article I read over the weekend, about the development of a city based OS, using a private cloud that would manage all the city infrastructure components (Traffic lights, water pumps, sewage drain switch, main electrical, etc..) 

I would imagine implementation of such a thing would have massive security concerns, though sadly in real life I know of one major US city whos traffic light operations are controlled by an old Pentium D computer in a storm drain closet.... 

 


:P Advice offered, If you need more help it is advised to seek the council and advice of paid professionals. The answer is always 42, or reboot.

------------------------------------
Reply:

Private clouds are built exclusively for a single enterprise. They aim to address concerns on data security and offer greater control, which is typically lacking in a public cloud. There are two variations to a private cloud:

On-premise Private Cloud: On-premise private clouds, also known as internal clouds are hosted within ones own data center. This model provides a more standardized process and protection, but is limited in aspects of size and scalability. IT departments would also need to incur the capital and operational costs for the physical resources. This is best suited for applications which require complete control and configurability of the infrastructure and security.

Externally hosted Private Cloud: This type of private cloud is hosted externally with a cloud provider, where the provider facilitates an exclusive cloud environment with full guarantee of privacy. This is best suited for enterprises that dont prefer a public cloud due to sharing of physical resources


------------------------------------

Sharepoint Audit Trail

Hello Everyone.. I am trying to generate an audit trail report in sharepoint 2010.. im trying to achieve it through OOB.. trail report should be user specific... Needed a support..


Reply:
Hi

To view the audit reports:

1. Navigate to the Site Settings page for the top-level site in the site collection.

2. On the Site Settings page, in the Site Collection Administration section, click the Audit Log Reports link.

3. On the View Auditing Reports page, click the name of the report you want to execute.

4. For the Run a Custom Report option, the Run a Custom Report Page is presented. On this page, follow these steps:
a. In the File Location section, select where the report should be saved once it is generated.
b. In the Location section, check if the report should be restricted to a specific list, and if so, select the web site where the list is located and select the list.
c. In the Date Range section, specify the optional Start Date and/or End Date to which the report should be restricted.
d. In the Users section, specify which users the report should be restricted to.
e. In the Events section, specify the events the report should be restricted to.In your case include the following events:
• Opening or downloading documents, viewing items in lists, or viewing item properties
• Editing items
Once all of the appropriate report settings have been entered, click the OK button.

5. The report is generated, and the file is saved to the library specified.

Hope this helps



------------------------------------
Reply:

Hi Nehruraj,

Is this report accessible only to 'site collection administrators'? How do we enable access to these interactive audit log reports so that others (for example individual site owners and members) would want to have a look at their sites's reports ?

 

 

Thanks,

MR


MR

------------------------------------

NTBackup Not Working

I have a problem with NTBackup on a Windows 2003 server. It does not come up at all. When I click on the icon it does nothing however ntbackp.exe is running the the processes tab in task manager. I have errors in Event Viewer (System) as follows.
Event ID 84 RSM database is not compatible with the Removable Storage Service binary. My question is is there any way to re-install the NTBackup software to start over. Or is there anything else I can do to fix this problem.

Thanks in advance
Chad

Reply:
Do you by any chance have an APC UPS connected to the server?

If so, are you running APC PowerChute Business Edition 6.x?

------------------------------------
Reply:
I have seen this issue twice in the past two days where I work.

APC PBE service version 6.x has a Java security certificate that expired end of july.

Symptoms can include slow logon, blank desktop and the inabilityto start/stop services.

Boot into safe mode and remove the service - issues should go away.

APC has a version 7.04 that resolves the issue available from their site:

APC Answer ID 7202  -
http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_sid=KEizUDLh&p_lva=&p_faqid=7202&p_created=1119891241&p_sp=cF9zcmNoPSZwX2dyaWRzb3J0PSZwX3Jvd19jbnQ9NTIzJnBfcGFnZT0x

APC PowerChute Business Edition Basic V7.04 Upgrade -
<http://www.apc.com/tools/download/software_comp.cfm?sw_sku=SFPCBE704 >


Original link from
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_21521563.html

------------------------------------
Reply:
Thanks for the reply Hari but I dont have any APC Backup software installed on the computer. Any other ideas?

Thanks
Chad

------------------------------------
Reply:
Tried Reinstalling NTBACKUP, download NTBackup-Installer.exe and install it....

You can find the download link in the below url...
http://www.ntbackup.us/Articles/install-ntbackup-xp-home.htm

------------------------------------
Reply:

I had a problem with NTBACKUP Hanging which was due to a Damaged Removable Storage Manager Database.

I found the solution in this article: http://support.microsoft.com/kb/235032

(After a lot of time lost)


------------------------------------

windows 2008 server forest to forest trust problem

when ever i validate Forest trust from my forest (BRBNMPL.COM) to another forest (BRBRWORLD.COM) following error i'm getting

(windows cannot find an AD DC for the BRBWORLD.Com domain.Verify that an AD DC is available and then try again.)

 

That BRBWORLD.COm AD DC is available....Please can anyone help me for this issue.

 

 

 

 

 

 


rmesh.k

Reply:

Hi,

Please try to turn off Firewall first.

it should be a DNS related issue for the error message "Windows cannot find a domain controller for the domain".

1.    Please check how it work when imputing a domain name UNC path in the Windows Explorer

Such as "\\brbworld.com\"

If you can't access the share with error, it can be known that some of the DNS records for the brbworld.com is missing. Try to run "DCdiag" on the DC of brbworld.com to verify whether the DNS zone for that domain is in error.

2.    Use the following command to see if the machine can locate a domain controller:

nltest /dsgetdc: <DomainName>

Hope this helps!

Best Regards
Elytis Cheng


Please remember to click “Mark as Answer” on the post that

Elytis Cheng

TechNet Community Support


  • Edited by Elytis Cheng Thursday, December 15, 2011 2:04 AM

------------------------------------
Reply:

The processing of Group Policy failed. Windows attempted to read the file \\BRBWORLD.com\SysVol\BRBWORLD.com\Policies\{36EEFD42-CC93-49B9-9D35-07F6FE0F5DB4}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

 

still my xxx domain to yyy domain trust not validating..

 

please help us..


rmesh.k

------------------------------------
Reply:

Hi,

The Group Policy service logs the name of the domain controller and the error code. This information appears on the Details tab of the error message in Event Viewer. The error code (displayed as a decimal) and error description fields further identify the reason for the failure. Evaluate the error code with the list below:

•Error code 3
•Error code 5
•Error code 53

There is a useful article to troubleshoot this issue:

Event ID 1058 — Group Policy Preprocessing
http://social.technet.microsoft.com/wiki/contents/articles/1456.aspx

Hope this helps!

Best Regards
Elytis Cheng


Please remember to click "Mark as Answer" on the post that

Elytis Cheng

TechNet Community Support


------------------------------------

Desktop Background Problem coming with folder tasks


Reply:

  Dear All,

  the above is desktop background issue my orginal wallpaper is shrink and the a folder    pane coming always on right side of desktop, I unable to close it or remove it.

  Steps Taken by Me:-

1. Restart the machine.

2. Change the profile.

3. Create new Profile.

but problem is still pending. Please help me.

 

 


------------------------------------
Reply:

Solution of this Issue

user the following reg setting and restart your machine.

Copy the following and save your file with name "name.reg"

Windows Registry Editor Version 5.00

;Created by Vishal Gupta for AskVG.com

[HKEY_CLASSES_ROOT\CLSID\{00021400-0000-0000-C000-000000000046}\shellex\ExtShellFolderViews\{5984FFE0-28D4-11CF-AE66-08002B2E1262}]
"PersistMoniker"=hex(2):66,00,69,00,6c,00,65,00,3a,00,2f,00,2f,00,25,00,75,00,\
  73,00,65,00,72,00,61,00,70,00,70,00,64,00,61,00,74,00,61,00,25,00,5c,00,4d,\
  00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,5c,00,49,00,6e,00,74,00,\
  65,00,72,00,6e,00,65,00,74,00,20,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,\
  00,72,00,5c,00,44,00,65,00,73,00,6b,00,74,00,6f,00,70,00,2e,00,68,00,74,00,\
  74,00,00,00

Export this reg setting into your pc and use your old desktop background.


Regards Suraj Kant Singh Surajkants@hotmail.com

------------------------------------

i want the code of doc to pdf file conversion in c#.net ...

 want the code of doc to pdf file conversion in c#.net ... how can i do this operation

Unable to export data from one database to other

Hi,

i get following error when i try to export my database data to sever database :

 

TITLE: SQL Server Import and Export Wizard

------------------------------

Column information for the source and the destination data could not be retrieved, or the data types of source columns were not mapped correctly to those available on the destination provider.

[dbo].[tblads_general] -> [dbo].[tblads_general]:

     - The data type could not be assigned to the column "date" in "SQL Server Native Client 10.0".

------------------------------

BUTTONS:

 

OK

------------------------------

need help , what does it mean
thanks
Shan kHAn


Reply:

What versions are you exporting from/to? If you are trying to move data from SQL Server 2008 to SQL Server 2005 for example and the [date] columns data-type is date or time you will have problems since SQL Server 2005 does not support these types and you will need to map to the datetime data-type. If this does not solve your problem can you provide details of both columns data-types etc.

Thanks


/Neil Moorthy - Senior SQL Server DBA/Developer (MCITP (2005/2008), MCAD, ITILv3, OCA 11g) Please click the Mark as Answer button if a post solves your problem

------------------------------------

FIM 2010 GAL Free/Busy access

Recently I posted for some additional ideas as to how we can share our free/busy time with a sister company who we do not yet have a trust in place nor do we want to leverage Federation at this point. Since we have a direct link to them I think this option might be best http://briandesmond.com/blog/cross-forest-availability-with-exchange-2007-and-exchange-2010/ and http://blogs.technet.com/b/exchange/archive/2011/03/04/3412075.aspx.

That said I have the following question regarding FIM2010.

Based on what I have read it looks like we can use this to sync our GALS between our two orgs. If thats the case do we need a dedicated FIM2010 server? Can and should it be installed on our CAS? Would the sister company need one as well? I've never worked with FIM or the older version IIFP at all so I'm trying to iron out what product can facilitate the sync in order to share /free/busy.

Any information would be greatly appreciated.

Thanks,

Blindf8th

 


Reply:
Blindf8th, I'm not sure about Free/Busy sync, but typically a single FIM
Synchronization Service instance is used in inter-forest GAL sync scenarios..

Cheers
Tom Houston

------------------------------------

Log user activity in SharePoint list

Hi,

I have to store User Id and time in a list whenever any user goes or visit to a specific Document Library. 

Can you please guide me steps to create the custom feature using Visual Studio and how to deploy the same in the site.


Abhijit Sil

Reply:
  1. Create a list with both a person and a datetime column.
  2. Create a custom webpart
    • The webpart will need to get the current user via SPWeb's CurrentUser property.  
    • Use that to find the entry in the existing list for that user.  
    • If there is no entry add a new one for that user.
    • Update the time now that you have the list item.
    • The web part need not display anything visually.  It should just run some code without the user ever seeing anything.
  3. Add your custom webpart to any pages that access the document library.  
This is the basic outline that you'll need to follow.  If there is some particular aspect that is giving you trouble, then please clarify more specifically what you are unable to get working.

------------------------------------
Reply:

thanks for the quick reply,

i have one question, i need to track the user id and date time, when user either clicks on any of the document library link in "_layouts/viewlsts.aspx" page or directly type the url: "/<document library name>/AllItems.aspx" to view the document library.

My question: is there any common place from where that web part code get triggered to update the list of user, means, i need some event to trigger to update the list.

Also, its difficult to edit the "AllItems.aspx" to place my custom web-part, can you please suggest me, how can i do that, I might be missing some thing.

 


Abhijit Sil

------------------------------------
Reply:

There is no built in mechanism or event triggered when viewing a list, nor is there a single common location that is always accessed when viewing a list.  If the requirement was to log when a user last edited a list or list item, then you could use event receivers which would be much quicker, easier, and foolproof.

You can use SharePoint Designer to edit AllItems.aspx and add a WebPart.


------------------------------------
Reply:

how about just using out-of-the-box auditing?

http://www.sharepointedutech.com/2011/02/14/setting-up-audit-logging-in-sharepoint-2010/


------------------------------------

FIM 2010 Outlook 2007 add-on - approve/reject buttons are not visible

I have testing environment with windows vista enterprise SP1, all the prerequisites are installed

the add-on for groups join/leave buttons are there, only the approve/reject buttons are not visible

the environment has exchange 2003 ...


burn baby burn ... Idm Inferno

Reply:

I believe Exchange 2007 or higher is required for the Outlook add-on to be supported.

Also, watch out for the 64-bit version of Outlook, as it also may not work with the FIM 2010 add-on.  When this has come up in the past, though, it was in the context of the add-on installing in the first place.

Chris


------------------------------------

No comments:

Post a Comment

Setup is Split Across Multiple CDs

Setup is Split Across Multiple CDs Lately I've seen a bunch of people hitting installation errors that have to do with the fact th...