SomaFM commercial free internet radio All posts tagged 'Windows-2003'

Paul Sturm

My notebook of discovered facts

8.3 Short filenames on Windows 2003 Server

If you have a document repository of sorts, it may pay to disable short filenames (legacy leftover from Win95 days).

To check if enabled:

fsutil.exe behavior query disable8dot3

To disable:

fsutil.exe behavior set disable8dot3 1

This will not remove existing short filenames but the system will no longer generate them.  This also works on XP.

 


Categories: Windows 2003 | XP
Permalink | Comments (18) | Post RSSRSS comment feed

Remote shutdown GUI

Did you know the shutdown command has a GUI?  It was news to me.  Now I don't have to remember the command line switches.

 shutdown.exe -i


Categories: Windows 2003 | XP
Permalink | Comments (5) | Post RSSRSS comment feed

Set group policy to use WSUS server

To tell a windows server to use a specific Windows Server update Services (WSUS) server, use the following:

 Start > Run > gpedit.msc > OK > Computer Configuration > Administrative Templates > Windows Components > Windows Update

 The 2 keys 'Configure Automatic Updates' and 'Specify intranet Microsoft update service location' are the items you will want to change.


Permalink | Comments (15) | Post RSSRSS comment feed

Getting integrated authentication to work on XP/Apache 2.2/Coldfusion

I took documentation of getting SVN working on windows and the Apache documentation along with something called Moodle

Download the mod_auth_sspi Module from: http://sourceforge.net/projects/mod-auth-sspi/. At the moment of writing this (2008.07.16), the current version is mod_auth_sspi 1.0.4. Select your proper version (Apache 2.0.x or Apache 2.2.x)

Unzip the right file and copy mod_auth_sspi.so (it's inside bin subdirectory) to your Apache modules directory.

Edit your Apache 2 configuration file (httpd.conf) to load the module.

<IfModule !mod_auth_sspi.c>
   LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>

 

If you have your root directory setting to AllowOverride none, you will need to change it to all so we can use .htaccess files for authorization. Otherwise .htaccess files are ignored by apache.

   <Directory >
       ... some settings ...   
       AllowOverride All    
      ... more settings ... 
   </Directory>
OR

You can allow this on just one directory (/secure in this case) if you would like instead:

   <Directory /secure>
      AllowOverride AuthConfig
   </Directory>


AllowOverride details here: http://httpd.apache.org/docs/2.2/mod/core.html#allowoverride

virtual-hosts.conf remains unchanged if you have one but nothing stops you from using it instead. I only wanted a single file to use integrated authorization so I went the .htaccess route with a file directive.  I feel it is a bit more portable, could be committed with my source code, and also allows configuration changes without restarting Apache.

Create .htcaccess file in the directory of the file you want to protect.

   <Files autologon.cfm>
      AuthName "Login using your DOMAIN username and password"
      AuthType SSPI
      SSPIAuth On
      SSPIOfferBasic On       # let non-IE clients authenticate 	
      SSPIOmitDomain On        # keep domain name in userid string
      SSPIBasicPreferred Off   # should basic authentication have higher priority
      SSPIUsernameCase lower
      SSPIAuthoritative On
      # set the domain to authorize against
      # SSPIDomain domain.company.com
      Require valid-user
   </Files>

From the Apache Docs:

"When you put configuration directives in a .htaccess file, and you don't get the desired effect, there are a number of things that may be going wrong.

Most commonly, the problem is that AllowOverride is not set such that your configuration directives are being honored. Make sure that you don't have a AllowOverride None in effect for the file scope in question. A good test for this is to put garbage in your .htaccess file and reload. If a server error is not generated, then you almost certainly have AllowOverride None in effect.

If, on the other hand, you are getting server errors when trying to access documents, check your Apache error log. It will likely tell you that the directive used in your .htaccess file is not permitted. Alternately, it may tell you that you had a syntax error, which you will then need to fix."

Here I am protecing the file autologon.cfm. This allows this folder to be moved to any apache webserver that is configured to allow authentication configuration through .htaccess and still work if the module has been enabled.

In this example, the argument valid-user tells the server that any username that authenitcates. Require options are here: http://httpd.apache.org/docs/2.2/mod/core.html#require


Permalink | Comments (20) | Post RSSRSS comment feed

Save a reboot

I recently upgraded my TortiseSVN to 1.5.  This usually requires a reboot for the changes to be worked into the explorer shell.  Some say you can use task manager to kill explorer.exe and, while that works, here is the way to restart explorer SAFELY thus saving a reboot:

 XP/2003: click on Start and select Shut Down. The Windows shut down dialog will appear. Next, while holding down the Control, Shift, and Alt keys click the Cancel button on the shut down dialog window. You can tell because you will loose your Start menu, task bar, system tray and desktop icons. Now, press Ctrl-Alt-Del to bring up the Windows task manager. Click File and select New Task (Run…). You want to start explorer.exe so type in explorer.exe to relaunch Windows Explorer.

Vista: click on Start and hold down the Control and Shift and right-click on a blank space in the Start menu. Choose Exit Explorer. Open the Task Manager (Ctrl+Shift+Esc), navigate to File->Run, enter "explorer.exe" to restart it. I've yet to test this on Windows server 2008 but I would think it would. I've tested this and as expected, this works on on Windows 2008 server too - it make sense since they are both considered 'Windows 6'

Remote Desktop users: since you can't use Ctrl-Alt-Del use Ctrl-Alt-End instead.


Categories: Vista | Windows 2003 | XP
Permalink | Comments (54) | Post RSSRSS comment feed

How to Use Registry Editor to Restore Administrative Shares

Important This task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.

  1. Start Registry Editor (Regedt32.exe)
  2. Locate and click the following key in the registry:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareServer
  3. Either change the value of the AutoShareServer key to 1 or delete the value.
    NOTE: If the AutoShareServer key is set to 0, administrative shares (such as C$, D$, Admin$, and so on) cannot be created automatically.
  4. Quit Registry Editor.

Permalink | Comments (430) | Post RSSRSS comment feed