VBScript Samples:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/Default.asp
VBScript API Reference Guide (all methods, function, the good stuff):
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/script56/html/vbscripttoc.asp
Our ever-so-handy Exchange Ranger just sent out a link to a just released Exchange 2003 Security Hardening Guide and it includes W2K3 security templates for each type of Exchaneg server (front-end, mailbox, etc).
http://www.microsoft.com/downloads/details.aspx?familyid=6a80711f-e5c9-4aef-9a44-504db09b9065&displaylang=en
Create a SQL Agent scheduled task. The task has three steps.
Step 1: Backup the production OnePoint database to a file
BACKUP DATABASE [OnePoint] TO
DISK = N’C:\data\MSSQL$WEBMOM1\BACKUP\OnePointBackup’
WITH INIT , NOUNLOAD , NAME = N’OnePoint backup’, NOSKIP , STATS = 10, NOFORMAT
Step 2: Restore the backup file into the warehouse holding database
RESTORE DATABASE [MOM_HOLDING] FROM
DISK = N’C:\data\sql\MSSQL$MGMTMOM1\BACKUP\OnePointBackup’
WITH FILE=1,NOUNLOAD, STATS=10, RECOVERY, REPLACE,
MOVE ‘EEA_DATA’ to ‘C:\data\MOM_Holding\MOM_Holding_Data.MDF’,
MOVE ‘EEA_LOG’ to ‘C:\data\MOM_Holding\MOM_Holding_Log.LDF’
Step 3: Execute the data warehouse DTS (see notes below)
DTSRun /~E0C11DE740D058919D24F7CCCA76FF726…very long identifier
Notes:
There are a number of configuration tasks that needs to takes place (such as configuring the DTS). Refer to the MOM data warehousing document for the details. The long string after DTSRUN is unique on each box. After you save the DTS package locally on SQL, schedule the DTS package, open the scheduled task to see what the DTS’s identifier is on your machine.
The SQL Agent runs as a domain account. A DTS package is scheduled to execute. During tests, the DTS package executes w/o a problem interactively. However, when the DTS package is executed by the Agent, it fails. We get ‘Access Denied’ errors. Checked database permissions, no problem. Turns out, the DTS package dynamically creates script files to execute in a SQL program files directory. Well… we think that is one of the problems. Anyhow, our every-so-handy DBA (Rod) said I should try adding the Agent to the SQL Server’s local administrators group. Yup… it worked.
Here’s some good info. Will look up more info and provide an update when I return to the client site.
INF: How to run a DTS as a scheduled job
http://support.microsoft.com/?id=269074
The Mosca showed me a neat trick to view your browser’s active page’s cookies and cookie contents. Go to a page where you’ll be issued a cookie. In the URL/address field, type in:
javascript:document.cookie
Neat huh? Good for troubleshooting. We’re currently trouble-shooting a client’s single-signon infrastructure. This feature allows us to verify the single-signon cookie has been issued.
Spirit essentially ran out of storage space (limitation on the file allocation system, not the flash capacity) and crashed. When it rebooted, it tried to mount the faulty file system then crash. When it rebooted, it tried to mount the faulty file system then crashed. So on and so on… Very interesting read.
Today, I had a salad in downtown Sydney close to Pitt St (this is where they filmed the Matrix ‘girl in the red dress’ scene). Since there are lots of food places around here, lunch usually is AUD$6 – $8. Add a few bucks for a drink.
On my last project, I was right outside Sydney in an area called Ultimo. Not much to eat there and our lunchs usually $9-$15. Add a few bucks for a drink.
Good IIS 6.0 Detailed documentation:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/standard/ca_cfgwrkridentity.asp
We’ve been having issues with IIS 6.0 & Windows Integrated Authentication. IA actually attempts to first use Kerberos before NTLM. Our problems have been with Kerberos not working due to a SPN issue. To fix the Kerberos problem:
- Set the SPN using setspn.exe or
- Force NTLM with IA
Paul dug up some good info here:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/standard/ca_cfgwrkridentity.asp
I’m actually thinking of using Digest Authentication and not bother with all this. Just purchased the IIS 6.0 Resource Kit (costs AUD$145, technical books in Australia is a rip) and I’ll add more once I learn more.
Our client is currently using a feature called ‘proxypass’ on Apache. This is actually a rather neat feature. The Apache web server will proxy a request for you when you point to a proxypass-ed URL on the Apache server. So, if you point to http://sampledomain.org/, the Apache server can request a page from http://cnn.com then serves it as if it was http://sampledomain.org. At least that is how it was explained to me. Not sure if the whole cookie redirection thing would work (I suspect not), I’m still researching. Will fill you in when I find more.
http://www.apache-gui.com/apache-windows.html
There does not appear to be an equivalent feature in IIS. However, there is a product that does something similar:
