IT Professionals

Change IIS 6 ASP.Net Version Without Restarting IIS

MWahl — Sun, 01 Aug 2010 16:39:47 +0000

Open a command prompt, browse to C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727,

aspnet_regiis -lk will give a listing.

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis -lk
W3SVC/ 1.1.4322.2407
W3SVC/507495262/root/ 2.0.50727.0

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727>aspnet_regiis -s w3svc/507495262/r
oot -norestart
Start registering ASP.NET scriptmap (2.0.50727) recursively at w3svc/507495262/r
oot.
Finished registering ASP.NET scriptmap (2.0.50727) recursively at w3svc/50749526
2/root.

Implementing A Reverse Proxy with IIS 6

MWahl — Thu, 29 Jul 2010 23:21:30 +0000

Windows server 2008 IIS7 has differnet proxy options, however IIS 6 does not have anything built in. So i found Managed Fusion URL Rewriter, which is a powerful URL manipulation engine based on the Apache mod_rewrite extension. Here is a link to the Managed Fusion Documentation site http://www.managedfusion.com/products/url-rewriter/documentation.aspx

I found the easiest way to get started was to do the following steps.

1. Download the core files from http://urlrewriter.codeplex.com/releases/36792/download/95504

2. Extract the downloaded files to a directory such as C:\websites\Proxy

3. Create a new IIS site, which will act as your reverse proxy.

4. Under home directory of the new site, select configuration, insert a new wildcard app, browse to C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll, and uncheck the box to verify the file exists.

5. Browse to C:\websites\proxy or the name of the directory you created in step 2.

6. Open the ManagedFusion.Rewriter.txt file and delete everything in the file.

7. Insert the these two lines,

RewriteEngine On RewriteRule ^/(.*) http://website or ip address/$1 [NC,P]

New to PowerShell? Try powergui!

MWahl — Wed, 14 Jul 2010 03:59:02 +0000

Similar to the Exchange Management console it shows you the powershell script that was used!

Here is the site, and there is a tab to download.
http://powergui.org/index.jspa

Dont forget to check out the PowerGUI Library for more add-ons
http://powergui.org/kbcategory.jspa?categoryID=21

Tutorials Page
http://powergui.org/tutorials.jspa

Scan file shares on your network and view their security settings to close security holes with ShareEnum

MWahl — Wed, 14 Jul 2010 03:42:59 +0000

This is pretty cool and gives you an idea of most shares and permissons off your servers.

From http://technet.microsoft.com/en-us/sysinternals/default.aspx

http://technet.microsoft.com/en-us/sysinternals/bb897442.aspx

View The Security of an NTFS Folder

MWahl — Wed, 14 Jul 2010 02:18:02 +0000

Often times this isnt a big deal if there are only a few people or groups, but when there are a lot of people and groups its nice to use the two commands to pump out the info,

To List the security of a folder
From a command prompt type the following, C:\>cacls "D:\Business Development" D:\Business Development BUILTIN\Administrators:(OI)(CI)F DomainName.COM\UserName:(OI)(CI)C

To List the security of a folder and all sub content.
From a command prompt type the following,

C:\>cacls "D:\Business Development" /T

If you need a list of the members of a Security Group
From a command prompt on a Domain Controller type the following, C:\>net group "Business Development" >Report.txt

SharePoint Services 3.0 Site With Forms Based Authentication

MWahl — Mon, 05 Jul 2010 18:40:23 +0000

The other day I needed to configure a new external partner sharePoint site with forms based authentication. I also need to give users the ability to change their passwords when they wanted to. In the past we had used Active directory accounts which was ok, just not the best for this situation.

You will need to download the Visual Web Developer 2008 Express Edition Http://go.microsoft.com/?linkid=7729281

Head to the sharePoint Administration page and create a new web application under SharePoint Web Application Management.Authentication provider should be set to NTLM, allow anonymous set to Yes,

Once you have the new web app created, head to Application providers under Application Security. Make sure to select the correct web app from the drop down located on the upper right. For now you should see a default Zone and the membership provider name should be Windows.

Now access the url of the newly created web app from the step above, you may need to login as the primary admin of the site. once in, select site actions, site settings, advanced permissons, setting, Anonymous Access, select Entire Website.

Hopefully by now you have installed Visual Web Developer 2008 Express Edition on the server. First, create a directory called UserManagement and remember where you created it. Open the IIS manager, find the website site that relates to the web app you created earlier, create a new virtual directory and point it to the UserManagement directory, select Read and Run Scripts. Make sure that this UserManagement directory run with the same app pool as the web app site. The rest of the configuration can be done by watching this video.

SharePoint Services 3.0 Forms Authentication

Make sure that the user identity running your under your web site app pool has access (data reader and writer) to the Aspnetdb. Also i added a user password reset control to the UserManagement default.aspx page so users can rest their passwords.

<asp:changepassword runat=”server”>asp:changepassword>

The last thing is to configure a second extranet Zone by extending your web App.

I followed this post and I had no issues at all getting this to work.

http://grounding.co.za/blogs/brett/archive/2008/01/09/setting-up-dual-authentication-on-windows-sharepoint-services-3-0-forms-and-ntlm.aspx

Setup Secure FTP (SFTP) With OpenSSH on Windows Server

MWahl — Sat, 05 Jun 2010 23:18:18 +0000

Windows Server 2008 IIS7 does have support for SFTP unlike IIS6. We are running Windows Server 2003 so IIS7 was not an option. I looked at Filezilla, the setup does not work work well with enterprise level firewalls, etc.

The most simplistic solution was to just use OpenSSH.

1. First open port 22 to the secure Secure FTP Server ip address and apply any needed access lists or static mappings.

2. Download OpenSSH from http://sshwindows.sourceforge.net/download/ and download the binary installer. Once the software is downloaded, click on the executable file to launch the installer.

3. The installation wizard should come up, select next, accept the license agreement, install the Client and Server components, select the destination path.

4. From your server computer Management Console create a user, and a group. add the user to the group. The User name could be sftp and the group be secftp.

5. Create a directory you want your sftp users to access. I created my on the following path:
E:\sftp\sftp
Make sure the OpenSSH service is not running under services. if it is, stop it, otherwise leave it stopped

6. go to RUN and type Regedit and click OK.
navigate to the following registry folder: HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin expand the Mounts v2 folder, and click on /home right click the native file, and click on modify, and add the path of the directory you want your users to have access to. mine is E:\sftp\sftp
7. Create a file named group and passwrd at the following location and don’t put any extension on them.
C:\Program Files\OpenSSH\etc
8. Click on RUN and type CMD and then OK.


type the following command on the command prompt:
cd C:\Program Files\OpenSSH\bin
once you switch to the BIN directory type the following commands:
mkgroup -l >> ..\etc\group
and then:
mkpasswd -l -u username >> ..\etc\passwd

on the username option, add the username we created above.
9. From the command prompt, execute the following command to start the service

net start opensshd
10. One last thing to do is modify the passwd file C:\Program Files\OpenSSH\etc

Create home directories for your user

In the passwd file, you will notice that the user’s home directory is set as /home/username. Change the location by editing the passwd file with notepad or any other text editor. Only edit the second last entry (/home/username), by replacing it with any directory that you wish to act as that user’s home directory,
using the following syntax: /cygdrive/c/path_to_the_folder

Below is an example of my passwd file entry.
FTP:unused_by_nt/2000/xp:1003:513:SFTP


Testing,U-2K3FS01\SFTP,S-1-5-21-3837532754-3053635440-2016409431-1003:/cygdrive/c/sftp

:/bin/switch

A few iPhone Tips and Tricks

MWahl — Sat, 05 Jun 2010 23:10:09 +0000

1. If you wish to go to the top of any screen without scrolling up just tap anywhere on the status bar.

2, Want a screen shot, just press the home and sleep buttons at the same time while you have the desired screen loaded. The screen shots show up in your camera roll as regular pics.

3. While in any screen you can shake to undo and redo

Must Have Tools For All IT Professionals

MWahl — Wed, 12 May 2010 03:23:26 +0000

Virtual CloneDrive

http://www.slysoft.com/en/download.html

FileZilla

http://filezilla-project.org/

ImgBurn

http://www.imgburn.com/

VirtualBox

http://www.virtualbox.org/

Sysinternals Suite

http://download.sysinternals.com/Files/SysinternalsSuite.zip

HWiNFO32

http://www.hwinfo.com/download32.html

CCleaner

http://www.piriform.com/ccleaner/download/standard

Recuva

http://www.piriform.com/recuva/download/standard

BlackBerry Enterprise Server Express is Free!!

MWahl — Wed, 12 May 2010 02:52:08 +0000

I wrote an article a while back about BES 5.0.1 as we upgraded our BES 4.6 server after installing a new email server with MS Exchange 2010. However, today i learned that there is a free version of BES 5.0.1. I was thinking the express version would probably be very limited, but to my surprise it offers almost all of same functiionality as the enterprise version. The express version is really designed for small to mid-size organizations and provides the same security, management, and push technologies of BlackBerry Enterprise Server. The only cost outside the blackberry software is the microsoft server(s) to run it.

I have come accross admins who use Express to manage personal BlackBerry phones that employees purchase and bring to work, while letting BES handle the corporate BlackBerry devices that are deployed in large numbers.

I should also note that both versions have the new BlackBerry Administration Service, which is a Web-based console. This is where most of the user, device and server management and configuration happen.