Category: Windows Server 2003

Hide files and folders which users don’t have permission to

The other day I implemented the Microsoft tool Access-based Enumeration tool for the first time with a customer. The tool installs on Windows Server 2003 and present you with a new tab when you choose Properties on shares on the server. When activated it will make sure that users on their client computers don’t see files and folders in Windows Explorer to which they do not have permission.

Download the Access-based Enumeration tool

Workflow problem in SharePoint finally resolved

In my latest posts I’ve been talking about the now released infrastructure for Windows SharePoint Services 3.0, an update that would solve the automatic workflow problem once and for all. The problem with workflows not being run automatically is now solved, but be aware that installing the infrastructure update (KB951695) alone does not resolve the problem.

To permanently resolve the problem one must also apply the command that is mentioned in KB953289: A declarative workflow that is configured to start automatically when e-mail enabled items are created does not start automatically after you install Windows SharePoint Services 3.0 Service Pack 1.

Troubleshoot and analyze Blue Screens of Death

TechRepublic has written a post on how to Extract troubleshooting info from Windows XP BSOD error messages. This is good, but I must say that extracting even more information from the memory crash dump file is even better. If you’ve missed my guide on how to do this you have it right here:

Troubleshoot and analyze Blue Screens of Death

Fix for automatic workflows in SharePoint WSS 3.0

So finally Microsoft have released the infrastructure update which once and for all fixes the problem with automatic workflows not working in Windows SharePoint Services 3.0.

More information: Description of the Infrastructure Update for Windows SharePoint Services 3.0: July 15, 2008
More information: Issues that are fixed in Windows SharePoint Services 3.0 by the Windows SharePoint Services 3.0 Infrastructure Update
More information: A declarative workflow that is configured to start automatically when e-mail enabled items are created does not start automatically after you install Windows SharePoint Services 3.0 Service Pack 1 

Source: SharePoint blog

Hotfix for annoying SharePoint issue on the way!

Many users that are using automatic workflows in Windows SharePoint Services 3.0 (WSS) have experienced problems with the workflows not running automatically after applying Service Pack 1 for WSS. According to Microsoft this is a feature because of changes to security. Anyway, Microsoft have had a KB article out (see KB947284) for a possible workaround on this since February but many people including myself has found this KB article to be useless as the problem remain after performing the steps mentioned in the article.

Anyway, after working with Microsoft Product Support Services on this issue for some weeks it seems that Microsoft soon will be done with a hotfix that once and for all will resolve the automatic workflow bug. I’m holding my thumbs!

Collection of best practices guides

Microsoft is providing best practice analyzers for most of their server products and I have gathered them on a list, for your convenience. These best practices analyzers are extremely good for troubleshooting and for making sure that the servers are performing at their best. Here is the link for the article:
http://www.theexperienceblog.com/technical-articles/collection-of-best-practices-guides/

Backing up BitLocker recovery keys to Active Directory

Using BitLocker to encrypt your system partition is a very good option to keep the computer and the data on it secure. Starting with Vista SP1 you will be able to encrypt not only the system partition but all the other partitions as well, offering even better security. When you encrypt a partition with BitLocker a recovery key is automatically generated so that you can recover the data on the computer when necessary. By default you have the choice of printing the recovery key or saving it to a USB stick or a network share.

BitLocker Key Recovery ToolHowever using a group policy setting (Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Turn on BitLocker backup to Active Directory)  you can also backup the recovery key to Active Directory, which is a very good suggestion I must say. If you are running Windows Server 2008 you do not have to anything to get this working but if you would like to use Windows Server 2003 with SP1 or later to backup the BitLocker recovery key you must use scripts provided by Microsoft to extend the schema.

Microsoft also offer a tool called BitLocker Recovery Password Viewer which can be downloaded directly from Microsoft Premier Services. When this tool is installed it introduce another tab in a computer objects Properties called “BitLocker Recovery” where the BitLocker recovery keys are listed for your viewing pleasure in the case of necessary restoration. The only negative part about the tool is that it can only be installed on a Windows XP or Windows Server 2003 computer as it require that you have installed the “Window Server 2003 Administration tools for SP1” on Windows XP to get the control panel for Active Directory Users and Computers.

UPDATE: I forgot to add the link to the page where you can find all the necessary information as well as the “extend schema”-script. Here it is!