<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security for a day &#187; Windows 2008</title>
	<atom:link href="http://www.chris-mohan.com/category/windows-2008/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.chris-mohan.com</link>
	<description>Securing Windows networks or giving it a go in Australia...</description>
	<lastBuildDate>Sat, 31 Dec 2011 12:54:48 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>SharePoint 2010 returning HTTP 304 for files in Style Library directory</title>
		<link>http://www.chris-mohan.com/2011/08/sharepoint-2010-returning-http-304-for-files-in-style-library-directory/</link>
		<comments>http://www.chris-mohan.com/2011/08/sharepoint-2010-returning-http-304-for-files-in-style-library-directory/#comments</comments>
		<pubDate>Wed, 31 Aug 2011 04:32:19 +0000</pubDate>
		<dc:creator>ChrisM</dc:creator>
				<category><![CDATA[Real world]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=900</guid>
		<description><![CDATA[I asked to look into  a very curious problem with a new SharePoint 2010 site’s images not being displayed which, in theory, shouldn&#8217;t have happened.  Red crosses replaced the images on the page and the JavaScript code wasn’t running. As an example of the missing images, if I attempted to view one of the failed images [...]]]></description>
			<content:encoded><![CDATA[<p>I asked to look into  a very curious problem with a new SharePoint 2010 site’s images not being displayed which, in theory, shouldn&#8217;t have happened.  Red crosses replaced the images on the page and the JavaScript code wasn’t running.</p>
<p>As an example of the missing images, if I attempted to view one of the failed images say, http ://someweb_site/Style%20Library/Images/btn_home.gif, it would display :</p>
<p><a href="http://www.chris-mohan.com/wp-content/uploads/2011/08/btn_home_bad.gif"><img class="alignnone size-full wp-image-901" title="btn_home_bad" src="http://www.chris-mohan.com/wp-content/uploads/2011/08/btn_home_bad.gif" alt="" width="33" height="33" /></a> (the white square and red cross is intentional, please don&#8217;t adjust your screens)</p>
<p>rather than  <a href="http://www.chris-mohan.com/wp-content/uploads/2011/08/btn_home_good.gif"><img class="alignnone size-full wp-image-905" title="btn_home_good" src="http://www.chris-mohan.com/wp-content/uploads/2011/08/btn_home_good.gif" alt="" width="68" height="20" /></a></p>
<p>&nbsp;</p>
<div class="mceTemp">With the aid of <a title="My little IE proxy friend" href="http://www.fiddler2.com/fiddler2/" target="_blank">fiddler2</a> I could clearly see the process of the connection to the SharePoint server. What was odd was the 304 HTTP message from the server, despite it being the first time I visited the site.</div>
<p><a href="http://www.chris-mohan.com/wp-content/uploads/2011/08/Fidder-capture-304.jpg"><img class="aligncenter size-full wp-image-902" title="Fidder capture 304" src="http://www.chris-mohan.com/wp-content/uploads/2011/08/Fidder-capture-304.jpg" alt="" width="977" height="190" /></a></p>
<p>In case you haven’t memorised the HTTP codes <a href="http://en.wikipedia.org/wiki/List_of_HTTP_status_codes#3xx_Redirection" target="_blank">Wikipedia</a> offers this refresher:</p>
<h3> 304 Not Modified</h3>
<p>Indicates the resource has not been modified since last requested. Typically, the HTTP client provides a header like the If-Modified-Since header to provide a time against which to compare. Using this saves bandwidth and reprocessing on both the server and client, as only the header data must be sent and received in comparison to the entirety of the page being re-processed by the server, then sent again using more bandwidth of the server and client.</p>
<p>Even though fiddler does a cracking job of recording what happening, I can never resist firing up Wireshark to confirm the same information. Below shows the server returning the 304 Not Modified response.</p>
<p><a href="http://www.chris-mohan.com/wp-content/uploads/2011/08/http304_wireshark.jpg"><img class="aligncenter size-full wp-image-903" title="http304_wireshark" src="http://www.chris-mohan.com/wp-content/uploads/2011/08/http304_wireshark.jpg" alt="" width="736" height="102" /></a></p>
<p>&nbsp;</p>
<p>So the file was being requested from the server and the server was telling the client it hadn&#8217;t changed since last visit. But I hadn&#8217;t visited the site before. I flushed the client’s web browser cache just to be sure and still got the same error. To me that confirmed the error was at the server end.</p>
<p>SharePoint has <a href="http://technet.microsoft.com/en-us/library/cc261797.aspx" target="_blank">its own caches</a> to speed up page and content delivery.  The one I was interested in is the binary large objects (BLOB) cache and initial thought was to flush this cache and fix the problem, MS have a nice simple powershell script to do this <a href="http://technet.microsoft.com/en-us/library/gg277249.aspx">http://technet.microsoft.com/en-us/library/gg277249.aspx</a></p>
<p>Flushed BLOB cach for the site, but still no dice. Then took a bit of a step back and looked at how SP used blog caches. <a href="http://www.zimmergren.net/archive/2011/01/09/sp-2010-developing-for-performance-part-3-caching-in-sharepoint-2010.aspx" target="_blank">Tobias Zimmergren&#8217;s blob piece</a> was very help in understand where to look for the BLOB setting in the web.config file. A few simple checks showed that this site wasn&#8217;t using BLOB caching. Somehow SharePoint must have got confused in to thinking it did have a BLOB cache and was trying to return the images and JavaScript from the non-existent cache.</p>
<p>&nbsp;</p>
<p>The fix was easy; we created a BLOB cache and everything worked beautifully, then we disable the BLOB cache and everything still worked. Despite the web page displaying the content correctly, I confirmed under the hood with fiddler and as you can see a much happier result.</p>
<p><a href="http://www.chris-mohan.com/wp-content/uploads/2011/08/Fidder-capture-200.jpg"><img class="aligncenter size-full wp-image-904" title="Fidder capture 200" src="http://www.chris-mohan.com/wp-content/uploads/2011/08/Fidder-capture-200.jpg" alt="" width="975" height="225" /></a></p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2011/08/sharepoint-2010-returning-http-304-for-files-in-style-library-directory/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Netsh commands</title>
		<link>http://www.chris-mohan.com/2010/07/netsh-commands/</link>
		<comments>http://www.chris-mohan.com/2010/07/netsh-commands/#comments</comments>
		<pubDate>Sun, 11 Jul 2010 12:53:59 +0000</pubDate>
		<dc:creator>ChrisM</dc:creator>
				<category><![CDATA[Labs]]></category>
		<category><![CDATA[Study]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/2010/07/netsh-commands/</guid>
		<description><![CDATA[  This is nothing new or exciting, I just keep forget the syntax so I&#8217;m leaving here to make it much easier to find/remember. Interface Configuration Interface named Local Area Connection with the static IP address 192.168.66.100, the subnet mask of 255.255.255.0, and a default gateway of 192.168.66.1: netsh interface ip set address name=&#8221;Local Area [...]]]></description>
			<content:encoded><![CDATA[<p>
 </p>
<p>This is nothing new or exciting, I just keep forget the syntax so I&#8217;m leaving here to make it much easier to find/remember.
</p>
<p style="text-align: center">
<h2>Interface Configuration<span style="font-size:11pt"><br />
			</span></h2>
</p>
<p>Interface named Local Area Connection with the static IP address 192.168.66.100, the subnet mask of 255.255.255.0, and a default gateway of 192.168.66.1:
</p>
<p>netsh interface ip set address name=&#8221;Local Area Connection&#8221; static 192.168.66.100 255.255.255.0 192.168.66.1 1
</p>
<p style="margin-left: 36pt">Add multiple ip addresses
</p>
<p>netsh interface ip add address &#8221; Local Area Connection &#8221; 192.168.66.101 255.255.255.0
</p>
<p>netsh interface ip add address &#8221; Local Area Connection &#8221; 192.168.66.102 255.255.255.0
</p>
<p style="margin-left: 36pt">Configure DNS
</p>
<p>netsh interface ip set dns &#8220;Local Area Connection&#8221; static 192.168.66.200
</p>
<p style="margin-left: 36pt">Add multiple DNS entries<strong><br />
		</strong></p>
<p>netsh interface ip set dns &#8220;Local Area Connection&#8221; static 192.168.66.200primary<br/>netsh interface ip add dns name=&#8221;Local Area Connection&#8221;  192.168.66.201 index=2
</p>
<p style="margin-left: 36pt">Configure WINS
</p>
<p>netsh interface ip set wins &#8220;Local Area Connection&#8221; static 192.168.66.200
</p>
<p style="text-align: center">
<h3>DHCP<br />
</h3>
</p>
<p>Automatically obtain an IP address from a DHCP server:<br/>netsh interface ip set address &#8220;Local Area Connection&#8221; dhcp
</p>
<p style="margin-left: 36pt">Get DHCP DNS/WINS settings:
</p>
<p>netsh interface ip set dns &#8220;Local Area Connection&#8221; dhcp
</p>
<p>netsh interface ip set wins &#8220;Local Area Connection&#8221; wins
</p>
<p style="text-align: center">
<h3>Rename interface names<br />
</h3>
</p>
<p>netsh.exe interface set interface name = &#8220;Local Area Connection&#8221; newname = &#8220;INT&#8221;
</p>
<p>netsh.exe interface set interface name = &#8220;Local Area Connection(2)&#8221; newname = &#8220;Internet&#8221;
</p>
<p style="text-align: center">
<h3>Disabling/enabling an interface<br />
</h3>
</p>
<p><br/>netsh interface set interface name = &#8220;Local Area Connection&#8221; admin = disabled
</p>
<p>netsh interface set interface name = &#8220;Local Area Connection&#8221; admin = enable<strong><br />
		</strong></p>
<p style="text-align: center">
<h3>Export your current IP settings<br />
</h3>
</p>
<p>netsh -c interface dump &gt; c:\current1.txt<br/>import your IP settings<br/>netsh -f c:\current1.txt<br/>You can also use the global EXEC switch instead of -F:<br/>netsh exec c:\current1.txt
</p>
<p style="text-align: center">
<h3>LOOPS<br />
</h3>
</p>
<p>FOR /L %I IN (2,1,20) DO netsh interface ip add address &#8220;Local Area Connection&#8221; 192.168.66.%I 255.255.255.0
</p>
<p>This will add ip addresses from 192.168.66.2 to 192.168.66.20 with 1 step each time.
</p>
<p>Examples:
</p>
<p><a href="http://technet.microsoft.com/en-us/library/bb490943.aspx">http://technet.microsoft.com/en-us/library/bb490943.aspx</a>
	</p>
<p><a href="http://ss64.com/nt/netsh.html">http://ss64.com/nt/netsh.html</a>
	</p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2010/07/netsh-commands/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kicking off the MCITP:Enterprise Study</title>
		<link>http://www.chris-mohan.com/2009/02/kicking-off-the-mcitp-enterprise-study-or-msce-2008/</link>
		<comments>http://www.chris-mohan.com/2009/02/kicking-off-the-mcitp-enterprise-study-or-msce-2008/#comments</comments>
		<pubDate>Mon, 16 Feb 2009 09:16:49 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[Exams]]></category>
		<category><![CDATA[ISA/TMG]]></category>
		<category><![CDATA[Labs]]></category>
		<category><![CDATA[Study]]></category>
		<category><![CDATA[Vista]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=282</guid>
		<description><![CDATA[(or MCSE 2008 as the rest of us call it) For reasons only known to myself, I&#8217;ve stupidly decided to kick off the final two MCITP: Enterprise exams starting with 70-649. Ah, nothing like making bets, attempting to get a bit of competition going, that you can get certified before the rest of the team. [...]]]></description>
			<content:encoded><![CDATA[<h5>(or MCSE 2008 as the rest of us call it)</h5>
<p>For reasons only known to myself, I&#8217;ve stupidly decided to kick off the final two MCITP: Enterprise exams starting with 70-649.</p>
<p>Ah, nothing like making bets, attempting to get a bit of competition going, that you can get certified before the rest of the team.</p>
<p>In front <strong><em>the Boss</em></strong>. (He&#8217;s a hockey playing, beer drinking, Northern ninja for randomly appearing like that!)</p>
<p>Pure Muppet magic on my part! Meep.</p>
<p>Hum ho.</p>
<p>Why the Enterprise rather than the long winded 70-647 update exam first? After skimming the objectives, it looks less work and studying for 749 will help out with 647 at a guess.</p>
<p>Check List:</p>
<p>Study guide:                                         Ms Press Self paced 70-647 Training kit</p>
<p>Hands on:                                              Build a virtual lab on Windows 2008 and use the Ms Virtual Labs</p>
<p>Pick a date to get this done by:    Monday 23rd of March 2009</p>
<p>Better get on with it then.</p>
<p>So, kick off by designing and build and small self contained Windows 2008 domain. This is all built on a physical machine, running Windows 2008 Server x64 with 8GB of RAM, lots of hard disk space and a couple of NICs. Hyper-V is installed.</p>
<p>I&#8217;ve added three additional networks in the Virtual Network Manger: Domain_Internal, DMZ and Hyper-V_External. Hyper-V_External is connected to the router for direct Internet access.</p>
<p>I&#8217;ve build, installed the Integration tools and patched (32updates and 159mb later) one VM, then cloned it (done by copying it to a new location, starting it up and running <a href="http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx">newsid</a>) to speed things up and save download bandwidth. I should have used <a href="http://technet.microsoft.com/en-us/library/cc766320.aspx">Windows Deployment Services (WDS)</a>, but I get around to that later.</p>
<p>The master network plan is below</p>
<p style="text-align: center;"><img class="aligncenter" src="http://www.chris-mohan.com/wp-content/uploads/2009/02/021609-0916-kickingofft1.png" alt="" /></p>
<p>This isn&#8217;t information leakage and I haven&#8217;t forgotten to add IPv6 addresses in, just a basic network diagram!</p>
<p>So once everything has finished installing, on with setting it up.</p>
<p>Now to start going through the notes and playing!</p>
<p><a title="MSCE 2008 Notes part 1" href="http://www.chris-mohan.com/?page_id=292" target="_blank">Notes Part 1</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2009/02/kicking-off-the-mcitp-enterprise-study-or-msce-2008/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Update Forefront Client KB952265</title>
		<link>http://www.chris-mohan.com/2008/08/update-forefront-client-kb952265/</link>
		<comments>http://www.chris-mohan.com/2008/08/update-forefront-client-kb952265/#comments</comments>
		<pubDate>Sun, 03 Aug 2008 07:20:35 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[Forefront]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=86</guid>
		<description><![CDATA[Ment to post this when the patch surfaced on 23rd July 2008. It takes the engine to Client Version:  1.5.1955.0 from Client Version:  1.5.1941.0 if you check the about details KB952265 Basically fixes a couple of things Forefront can break if you it&#8217;s running on a web server, SharePoint, WebDav, IIS7 or a 2008 server [...]]]></description>
			<content:encoded><![CDATA[<p>Ment to post this when the patch surfaced on 23rd July 2008.</p>
<p>It takes the engine to Client Version:  1.5.1955.0 from Client Version:  1.5.1941.0 if you check the about details</p>
<p><a title="What KB952265 does" href="http://support.microsoft.com/kb/952265" target="_blank">KB952265</a></p>
<p>Basically fixes a couple of things Forefront can break if you it&#8217;s running on a web server, SharePoint, WebDav, IIS7 or a 2008 server with Hyper-v. So not massively essential to get out there, for most of us.</p>
<p>It requires a reboot if you apply the patch by running the .exe Not so much fun for those in us in Ops role without of hours only reboot windows.</p>
<p>However, if you extract the files from the .exe you&#8217;ll find the new mp_ambits.msi.</p>
<p>This doesn&#8217;t require a reboot to install. <em>Hurra!</em></p>
<p>You should also replace  the old ones in you Forefont deployment points/shares. There&#8217;s one for x86 and x64. Don&#8217;t get them mixed up.</p>
<p>Oh, and for those using Forefront and Windows 2008 core read this for trying to install the update <a title="kb955884 for core installs" href="http://support.microsoft.com/kb/955884">kb955884<br />
</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2008/08/update-forefront-client-kb952265/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>File Server Resource Manager Demo for Windows 2008</title>
		<link>http://www.chris-mohan.com/2008/07/file-server-resource-manager-demo-for-windows-2008/</link>
		<comments>http://www.chris-mohan.com/2008/07/file-server-resource-manager-demo-for-windows-2008/#comments</comments>
		<pubDate>Sat, 26 Jul 2008 07:16:28 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[User Groups]]></category>
		<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=47</guid>
		<description><![CDATA[Manged to finally cut together a video of the material I used for the Windows user group. This is under the ten minutes allocated unlike the real talk which was closer to 20 &#8211; Oops. Doing the talk was excellent fun and (I think) I managed to answer all the questions put to me. Here&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>Manged to finally cut together a video of the material I used for the Windows user group.<br />
This is under the ten minutes allocated unlike the real talk which was closer to 20 &#8211; Oops.</p>
<p>Doing the talk was excellent fun and (I think) I managed to answer all the questions put to me.</p>
<p>Here&#8217;s the Ms Silverlight video version of the talk I&#8217;ve just published for the Heroes Happen Challenge</p>
<p><iframe src="http://silverlight.services.live.com/invoke/69823/File%20Server%20Resource%20Manager%20Demo/iframe.html" scrolling="no" frameborder="0" style="width:500px; height:375px"></iframe></p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2008/07/file-server-resource-manager-demo-for-windows-2008/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Heroes Happen {Here} Challenge</title>
		<link>http://www.chris-mohan.com/2008/04/heroes-happen-here-challenge/</link>
		<comments>http://www.chris-mohan.com/2008/04/heroes-happen-here-challenge/#comments</comments>
		<pubDate>Fri, 18 Apr 2008 12:23:26 +0000</pubDate>
		<dc:creator>Chris Mohan</dc:creator>
				<category><![CDATA[Windows 2008]]></category>

		<guid isPermaLink="false">http://www.chris-mohan.com/?p=31</guid>
		<description><![CDATA[While at Sydney Windows Infrastructure User Group looking at some of the funky NAP features of Windows 2008, our local Microsoft IT Pro Evangelist, Jeff Alexander, laid down a challenge to step up to the presenting podium and give a 10 minute presentation on a feature Windows 2008 . It&#8217;s part of a national call [...]]]></description>
			<content:encoded><![CDATA[<p>While at <a title="SWIUG" href="http://swiug.org.au/" target="_blank">Sydney Windows Infrastructure User Group</a> looking at some of the funky NAP  features of Windows 2008, our local Microsoft IT Pro Evangelist, <a title="Jeffa!" href="http://blogs.technet.com/jeffa36/default.aspx" target="_blank">Jeff Alexander</a>, laid down a challenge to step up to the presenting podium and give a  10 minute presentation on a feature Windows 2008 .</p>
<p>It&#8217;s part of a <a title="Windows 2008 Comp!" href="http://www.microsoft.com/australia/heroes/community.aspx" target="_blank">national call</a> and frankly looks like a great bit of fun. I stuck my hand up for giving it a go as did a few other brave souls. I&#8217;m going to leaf through some books and pick a topic to try.</p>
<p>Guess it&#8217;s time to build a real 2008 Server and stick Hyper-V on it &#8211; like I need the excuse <img src='http://www.chris-mohan.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.chris-mohan.com/2008/04/heroes-happen-here-challenge/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

