Sharepoint config LDF log is huge

Running into disk space issue on Sharepoint server. The LDF file of Sharepoint config is 25GB. Not good!

there are some other users who went throught this: http://mindsharpblogs.com/bill/archive/2005/01/14/181.aspx
http://boris.gomiunik.net/2008/10/sharepoint-config-database-log-file-too-big-reduce-it/

Sharepoint Search account

I have an error "Access is denied. Check that the Default Content Access Account has access to this content" in the search crawl of http://intranet

Apparently, the server can not access itself with an Cname alias. The "intranet" is indeed Cname DNS alias for the server. If you have this case you should read this.

http://harbar.net/archive/2009/07/02/disableloopbackcheck-amp-sharepoint-what-every-admin-and-developer-should-know.aspx

and this

http://social.technet.microsoft.com/Forums/en/sharepointsearch/thread/84f93fbe-f4a6-4683-b25b-b595b9006ad7

Sharepoint 2007 blob cache

Sharepoint OOB comes with Blob cache disabled. You can enable it - http://office.microsoft.com/en-us/sharepointserver/HA101762841033.aspx

and cache jpg and other files in local server disk and free SQL DB resources.

Sharepoint error ID 10016

We had the error logged in eventlog on MOSS 2007:

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 10/6/2009 2:38:02 AM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: xx\WSSServiceGeneric
Computer: xxx
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server
application with CLSID
{61738644-F196-11D0-9953-00C04FD919C1}
to the user xx\WSSServiceGeneric SID (S-1-5-21-2609680699-1071808428-3414302311-1015)
from address LocalHost (Using LRPC). This security permission can be modified using the Component Services
administrative tool.
Event Xml:


EventSourceName="DCOM" />
10016
0
2
0
0
0x80000000000000

47708


System
xxx



application-specific
Local
Activation
{61738644-F196-11D0-9953-00C04FD919C1}
xx
WSSServiceGeneric
S-1-5-21-2609680699-1071808428-3414302311-1015
LocalHost (Using LRPC)



And it looks looks the solution is

http://geekswithblogs.net/mhamilton/archive/2006/12/19/101568.aspx

to add security to misterious IIS WAMREG admin service

Cisco VPN client on 192.168.1.0

As you know if VPN client connected to 192.168.1.0 or any other local LAN subnet will connect to a remote LAN that use 192.168.1.0 or other subnet that is the same as local LAN, then there will be an IP range conflict. If you do full tunneling to remote LAN then you need to make sure that routing for remote LAN has lower metric than local LAN. You can use this script to fix the metric:



@ECHO off

%Windir%\system32\ipconfig.exe > %temp%\ipconfig.txt
type %temp%\ipconfig.txt|findstr /c:"IP Address" > %temp%\ip.txt
type %temp%\ip.txt|findstr /v "0.0.0.0" > %temp%\ip1.txt
FOR /F "delims=: tokens=2" %%I in (%temp%\ip1.txt) DO ECHO %%I > %temp%\justip.txt
FOR /F "delims=. tokens=1" %%A in (%temp%\justip.txt) DO SET octet1=%%A
FOR /F "delims=. tokens=2" %%B in (%temp%\justip.txt) DO SET octet2=%%B
FOR /F "delims=. tokens=3" %%C in (%temp%\justip.txt) DO SET octet3=%%C
FOR /F "delims=. tokens=4" %%D in (%temp%\justip.txt) DO SET octet4=%%D
del /q %temp%\ip1.txt
del /q %temp%\ip.txt
del /q %temp%\ipconfig.txt
del /q %temp%\justip.txt

Set IPAddress=%octet1%.%octet2%.%octet3%.%octet4%

REM ECHO %IPAddress%

%Windir%\system32\route.exe change 192.168.1.0 mask 255.255.255.0 %IPAddress% METRIC 1




As you know if in routing talbe there are two similair routes with different gateway then the last installed interface will get prority. Re-install Cisco VPN client and it will get priority over other interfaces, no need then for script above.

Inssider WiFi tool

Nice little tool for Windows XP and Vista that will show RF interference for your WiFi.

http://www.metageek.net/products/inssider

And it's free.

TrendMicro

TrendMicro OfficeScan 8.0sp1 with latest engine and pattern can not detect this nasty worm:

http://www.threatexpert.com/report.aspx?md5=13c36740aae01c7417d7a55d23156075

Ticket has been raised at TM, but it may take some time before we get a cure... Housecall also does not detect it. Sad story.
Check if your FW detects calls home to 88.247.183.228 on port 8882

We are using AVG and other tools to clean up PCs.

Checkpoint fw monitor

a command line to capture packets in Checkpoint:

fw monitor -m i -e "accept [20:2,b]=445 or [22:2,b]=445;" -o monitor.cap -ci 10 -co 10

will save 10 packets on port 445 in the file monitor.cap.

You can upload it using tftp from Checkpoint to another server and analyse it with wireshark.

However my preference is to set switch monitoring of the port to another port and use Microsoft Network monitor 3.3 to capture packets.

what is the root password in mac os x?

no, idea,

but here is a command to change it:

sudo bash

and put your passwd

then do passwd root

thanks Gaz!

installing Midnight commander in Mac OS X 10.5.7

I installed fink from http://sourceforge.net/projects/fink/files/
Then in terminal started
fink install mc
mc

it gives error:
dyld: Library not loaded: /sw/lib/libintl.1.dylib
Referenced from: /sw/bin/mc
Reason: image not found
Trace/BPT trap

to fix it I replaced link
ln -s /sw/lib/libintl.3.4.3.dylib /sw/lib/libintl.1.dylib
as suggested in http://www.claws-and-paws.com/node/1266

and now it works fine.

CPU comparison

Compare CPU performance - notebooks and desktops
http://www.notebookcheck.net/index.php?id=2436

How to clone Windows XP

1. Get Live-CD of clone software, such as Clonezilla - http://en.wikipedia.org/wiki/List_of_disk_cloning_software

2. External USB disk

3. Boot from CD and write image to external disk

4. Run CD on new PC and restore image from USB disk

5. Run MS tool to change Prodcut key http://www.microsoft.com/genuine/selfhelp/XPPkuinst.aspx

6. Change SID using newSID tool from Microsoft http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx

Adobe PDF IFilter 9.0 for 64bit

Can't get subject to work under MOSS 2007 64bit.

"IFilter explorer 64bit" shows it correctly enabled under WinFS, but not under Sharepoint 2007 beta. Filtdump gives error. MOSS 2007 search does not find text inside PDf files.

Any ideas? Apart from what was already checked: http://social.technet.microsoft.com/Forums/en-US/sharepointsearch/thread/ba1c7d49-fd71-40c3-a3ab-d594278fd0e2

Check also this black magic for the GUID

Run Regedit by browsing to c:\Windows\system32\regedt32.exe and double-clicking it.

Within left-side tree, browse to: \\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\12.0\Search\Setup\ContentIndexCommon\Filters\Extension\.pdf

Replace the {4C904448-74A9-11D0-AF6E-00C04FD8DC02} with new GUID i.e. {E8978DA6-047F-4E3D-9C78-CDBE46041603}

from:
http://www.codeproject.com/Articles/36204/How-to-Configure-PDF-iFilter-9-0-for-64-bit-operating-system-on-MOSS-2007-Server-Farm.aspx

Now it seems to be working correctly. Thanks!

getting error 403 on Sharepoint administration "Configure Advanced Usage Analysis Processing"

the solution is described here:

http://www.sharepointblogs.com/usecases/archive/2007/07/02/sharepoint-usage-and-search-usage-reports-issues.aspx

you need to "grant the account under which you want to operate the "Manage Usage Analytics" permission (from "Personalization services permissions") from within the SSP"

Sharepoint Designer 2007 is free!

As of April it's free:

http://office.microsoft.com/en-us/sharepointdesigner/HA103607611033.aspx

How to delete avhd files (Hyper-v snapshots)

if you delete snapshots from hyper-v console you may still have avhd files on your server. Hmmm...Does not really help to free some space... To remove file you need to shutdown virtual enviroments or suspend - read exact procedure here: http://technet.microsoft.com/en-us/library/dd560637.aspx

update: for Windows 2012 the merge is done online...

Sharepoint optimisation

Few links that can be helpful for those working on Sharepoint optimisation:

http://www.sharepointblogs.com/marwantarek/archive/2009/03/02/guide-to-sharepoint-performance-optimization.aspx

http://andrewconnell.com/blog/archive/2008/11/15/Limiting-the-Page-Payload-with-IIS-HTTP-Compression.aspx

http://msdn.microsoft.com/en-us/library/ms690559.aspx

http://blogs.technet.com/waynemo/

Excellent tool to see what is on the wire:
http://www.fiddler2.com/fiddler2/version.asp

HP Vulnerability and patch management pack

I knew that HP has "the answer" to the problem of the patch management. However reading the details: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00267883/c00267883.pdf?jumpid=reg_R1002_USEN
you can see that it covers only Microsoft and Redhat patches.
What about Adobe, Java, other 3rd party software?

The VPM is obviously only for servers.

HP OpenSSH vulnerability

HP OpenSSH (from HP Proliant pack, HP SIM)comes with C:\Program Files\OpenSSH\bin\cygwin1.dll version 1.5.4
This version is vulnerable according to http://www.nessus.org/plugins/index.php?view=single&id=28330.

to fix it download HP IS 3.0 DVD where you will get cygwin1.dll version 1.5.25.
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ISDVD&jumpid=reg_R1002_USEN

JRE silent install

Here is command for silent install:
jre-6u12-windows-i586-p-s.exe /s /v "/qn IEXPLORER=1 REBOOT=ReallySuppress JAVAUPDATE=0 WEBSTARTICON=0 /L %temp%\setup.log"

the package itself can be downloaded from http://java.sun.com/javase/downloads/index.jsp

IE should not be open during install.

Scheduled tasks in Windows 2003

I was trying to replace local server administrator to less powerful account in the Sceduled Task definition. But it took some time to set the right properly. Please refer to the following article:

http://www.instant-registry-fixes.org/resolve-error-message-0x80070005-access-is-denied/

to sum up: you can use local account to run as for the task. This account should not be local administrators. Give apropriate rights to the data folders and read/execute to binary folder. Using Local security setting (admin tool) add logon locally and as as a batch. If your script is cmd, add permission to cmd.exe to be exceuted for this account.

Outlook 2007 with Exchange 2003 free/busy problem

The free/busy feature does not work correctly in new Outlook on old server.
Please check this out to fix it: http://www.networkworld.com/community/node/17227

Free webparts

A nice collection of free webpart for Sharepoint

http://www.sharepointblogs.com/mkruger/archive/2007/06/26/free-sharepoint-web-parts-3rd-party.aspx

How to set Microsoft CA certificate to adventnet AD Manager

The winning combination is

http://forums.adventnet.com/viewtopic.php?t=380101
http://msp.wiki.zoho.com/Import-third-party-SSL-Certificate.html

and

http://yellowcat1.free.fr/keytool_iui.html

This tool will allow to import microsoft p7b certificates or DER certificates to the store. You need to use jks store and then rename it to server.keystore and place to conf folder of the ADManager.

The Url for Microsoft CA is http:\\CAservername\Certsrv

Check your email server

some links to check your email server:

http://www.pagasa.net/test-smtp/
http://dnsstuff.com
http://dnsright.com
http://clearswift.com/support/tools/free_utilities.aspx