Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Friday, March 30, 2012

Installing MSDE - User Security Issues...

Hi,
Could someone point me in the direction of a step-by-step tutorial for
replicating a SQL Server 2000 database as an MSDE database in a seperate
machine, with all tables (including data), users/security, etc.
Currently I'm taking a backup (I can't script the data from Ent. Mgr) and
using oSQL to restore the database to an MSDE install on a machine.
It's done in two steps - installing MSDE and restoring the backup. However,
after the backup has been restored (the user restores correctly) - I am
unable to connect to the database as the default user that I created in the
backup. If I remove the user and re-add him via Ent. Mgr then I can
connect... does anyone know why this is?
First Step - Install MSDE script:
^^^^^^^^^^^^^^^^^^^^^^^^
Set objShell = CreateObject("WScript.Shell")
Set fso = createobject("scripting.filesystemobject")
Set WshNetwork = WScript.CreateObject("WScript.Network")
objShell.Exec(fso.getabsolutepathname(".") & "\setup.exe BLANKSAPWD=1
SAPWD="""" SECURITYMODE=SQL TARGETDIR=""C:\Program Files\Microsoft SQL
Server\Mssql\Binn\"" DATADIR=""C:\Program Files\Microsoft SQL
Server\Mssql\Data\"" instancename=""" & WshNetwork.ComputerName &
"\DatabaseName""")
Second Step - Restore the database backup:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Set objShell = CreateObject("WScript.Shell")
set fso = createobject("scripting.filesystemobject")
Set WshNetwork = WScript.CreateObject("WScript.Network")
currentpath = fso.getabsolutepathname(".")
' Start the msde service
objShell.Exec("net start MSSQL$" & WshNetwork.ComputerName &
"\DatabaseName")
' Make local data and backup directories
'objShell.Exec("md c:\SQL_Databases\DATA")
'objShell.Exec("md c:\SQL_Databases\BACKUP")
' Copy this Repository.bak to the SQL_Databases DatabaseName.bak
fso.CopyFile currentpath &
"\Repository.bak","c:\SQL_Databases\BACKUP\DatabaseName.bak"
' Restore
objShell.Exec(currentpath & "\osql.exe -S" & WshNetwork.ComputerName &
"\DatabaseName -E -Q ""restore database DatabaseName from disk =
'C:\SQL_Databases\BACKUP\DatabaseName.bak'""")
All I want to do is reproduce one of my SQL Server databases AS IS on
several client workstations by way of an MSDE installer.
Any help gratefully appreciated !
Thanks,
Mike
xposted to closely related groups: .sqlserver.msde, .sqlserver.security,
.sqlserver.setup
--
Liddle Feesh
*fap fap fap fap*
<>< <>< <>< <>< ><>
<>< <>< <>< <>< <>< <><
. ,
.:/
. ,,///;, ,;/
. o:::::::;;///
quote:

>::::::::;;\\\

''\\\\'" ';\
';\314546 HOW TO: Move Databases Between Computers That Are Running SQL Server
http://support.microsoft.com/?id=314546
304692 INF: Moving SQL Server 7.0 Databases to a New Server with BACKUP and
http://support.microsoft.com/?id=304692
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||"Kevin McDonnell [MSFT]" <kevmc@.online.microsoft.com> wrote in message
news:clkWql2wDHA.2900@.cpmsftngxa07.phx.gbl...
quote:

> 314546 HOW TO: Move Databases Between Computers That Are Running SQL

Server
quote:

> http://support.microsoft.com/?id=314546
> 304692 INF: Moving SQL Server 7.0 Databases to a New Server with BACKUP

and
quote:

> http://support.microsoft.com/?id=304692

Hi Kevin and Joseph,
Many thanks for your replies relating to my difficulties with the orphaned
users that arise when restoring a backup on a different server.
Using the sp_change_user_login stored procedure worked perfectly.
Thanks again for your advice, and please accept my apologies for the slight
crosspost.
Best Regards,
Mike
Liddle Feesh
*fap fap fap fap*
<>< <>< <>< <>< ><>
<>< <>< <>< <>< <>< <><
. ,
.:/
. ,,///;, ,;/
. o:::::::;;///
quote:

>::::::::;;\\\

''\\\\'" ';\
';\sql

Monday, March 26, 2012

Installing Delphi 2005 Gives Security Exception..

After installing delphi 2005 I am getting a security exception when trying
to access the reports/report manager/web service of Reporting Services.
I think it is Borland related - the stack trace shows borland in there
now...How do I fix?
======================================================== Description: The application attempted to perform an operation not allowed
by the security policy. To grant this application the required permission
please contact your system administrator or change the application's trust
level in the configuration file.
Exception Details: System.Security.SecurityException: Request for the
permission of type System.Security.Permissions.EnvironmentPermission,
mscorlib, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089 failed.
Source Error:
An unhandled exception was generated during the execution of the
current web request. Information regarding the origin and location of the
exception can be identified using the exception stack trace below.
Stack Trace:
[SecurityException: Request for the permission of type
System.Security.Permissions.EnvironmentPermission, mscorlib,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
failed.]
System.Security.CodeAccessSecurityEngine.CheckHelper(PermissionSet
grantedSet, PermissionSet deniedSet, CodeAccessPermission demand,
PermissionToken permToken) +675
System.Security.CodeAccessSecurityEngine.Check(PermissionToken permToken,
CodeAccessPermission demand, StackCrawlMark& stackMark, Int32 checkFrames,
Int32 unrestrictedOverride) +0
System.Security.CodeAccessSecurityEngine.Check(CodeAccessPermission cap,
StackCrawlMark& stackMark) +88
System.Security.CodeAccessPermission.Demand() +62
System.Environment.GetEnvironmentVariable(String variable) +53
Borland.DbkAsp.DbkConnModule.getInstallRoot() +27
Borland.DbkAsp.DbkConnModule.OnBeginRequest(Object sender, EventArgs e)
+191
System.Web.SyncEventExecutionStep.System.Web.HttpApplication+IExecutionStep.Execute()
+60
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
completedSynchronously) +87Hi Wayne,
Thanks for your posting!
It seems that the security module internal reports the error message, I
will make research to see whether others meet this issue before. You are
encouraged to see whether Borland guys have solutions to this issue.
Sincerely yours,
Michael Cheng
Online Partner Support Specialist
Partner Support Group
Microsoft Global Technical Support Center
---
Get Secure! - http://www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!|||Search for 'Security Exception - Article ID : 887787'.
I uninstalled Delphi 2005 and the problem went away immediately.....
I look forward to your solution. (I imagine I just have to give rights to
some borland assembly or something for Rptsvs..)
"Michael Cheng [MSFT]" <v-mingqc@.online.microsoft.com> wrote in message
news:JFbg9w11EHA.1512@.cpmsftngxa10.phx.gbl...
> Hi Wayne,
> Thanks for your posting!
> It seems that the security module internal reports the error message, I
> will make research to see whether others meet this issue before. You are
> encouraged to see whether Borland guys have solutions to this issue.
>
> Sincerely yours,
> Michael Cheng
> Online Partner Support Specialist
> Partner Support Group
> Microsoft Global Technical Support Center
> ---
> Get Secure! - http://www.microsoft.com/security
> This posting is provided "as is" with no warranties and confers no rights.
> Please reply to newsgroups only, many thanks!
>|||Hi Wayne,
Unfortunately, I found the only workaround available now is uninstall
Delphi 2005.
Thank you for your patience and corporation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Online Partner Support Specialist
Partner Support Group
Microsoft Global Technical Support Center
---
Get Secure! - http://www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!|||Michael,
Exactly what did you find. What are we 'working around'? The problem
is what exactly? Isn't this an assembly rights issue, like when you install
that URL monitor DLL (security fix) from microsoft (forgot its name). You
would get these same sort of errors, until you put some magic entries into a
config file...
"Michael Cheng [MSFT]" <v-mingqc@.online.microsoft.com> wrote in message
news:g$%23vysC2EHA.3152@.cpmsftngxa10.phx.gbl...
> Hi Wayne,
> Unfortunately, I found the only workaround available now is uninstall
> Delphi 2005.
> Thank you for your patience and corporation. If you have any questions or
> concerns, don't hesitate to let me know. We are always here to be of
> assistance!
>
> Sincerely yours,
> Michael Cheng
> Online Partner Support Specialist
> Partner Support Group
> Microsoft Global Technical Support Center
> ---
> Get Secure! - http://www.microsoft.com/security
> This posting is provided "as is" with no warranties and confers no rights.
> Please reply to newsgroups only, many thanks!
>|||Hi Wayne,
Yes, you probably have to change the policy files to include some CAS (Code
Access Security) permissions for the Borland assemblies. See the following
information for more detailed information about how to set the Code Access
Security correctly
Code Access Security
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/htm
l/cpconCodeAccessSecurity.asp
Code Access Security in SQL Server 2000 Reporting Services
http://msdn.microsoft.com/data/default.aspx?pull=/library/en-us/dnsql2k/html
/dngrfCodeAccessSecurityInSQLServer2000ReportingServices.asp
Hope this helps and if you have any questions or concerns, don't hesitate
to let me know. We are always here to be of assistance!
Sincerely yours,
Michael Cheng
Online Partner Support Specialist
Partner Support Group
Microsoft Global Technical Support Center
---
Get Secure! - http://www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
Please reply to newsgroups only, many thanks!|||Reinstall Delphi 2005 and press "No" when asked:
An entry needs to be added to the machine.config file to enable ASP
debugging for Delphi.
Would you like setup to add this entry for you now?
"Wayne Brantley" wrote:
> Michael,
> Exactly what did you find. What are we 'working around'? The problem
> is what exactly? Isn't this an assembly rights issue, like when you install
> that URL monitor DLL (security fix) from microsoft (forgot its name). You
> would get these same sort of errors, until you put some magic entries into a
> config file...
>
> "Michael Cheng [MSFT]" <v-mingqc@.online.microsoft.com> wrote in message
> news:g$%23vysC2EHA.3152@.cpmsftngxa10.phx.gbl...
> > Hi Wayne,
> >
> > Unfortunately, I found the only workaround available now is uninstall
> > Delphi 2005.
> >
> > Thank you for your patience and corporation. If you have any questions or
> > concerns, don't hesitate to let me know. We are always here to be of
> > assistance!
> >
> >
> > Sincerely yours,
> >
> > Michael Cheng
> >
> > Online Partner Support Specialist
> > Partner Support Group
> > Microsoft Global Technical Support Center
> > ---
> > Get Secure! - http://www.microsoft.com/security
> >
> > This posting is provided "as is" with no warranties and confers no rights.
> > Please reply to newsgroups only, many thanks!
> >
>
>

Wednesday, March 7, 2012

Installation of SQL Server - Security Question

Dear All,
We have recently had an audit of our Server and have been told to move the
installation as it cannot be on the same partition or drive as the OS.
Can anyone tell me why ?
We are running 2000 on a 2003 box.
Thanks
P
Hi
Ideally, the installation should be on another drive so that the OS has the
C drive to itself. This helps to keep applications from the OS, enhancing
security.
Data, Logs and Backups should never be on the OS drive, each should be on
seperate drives for recoverability and performance.
Regards
Mike
"Patricia" wrote:

> Dear All,
> We have recently had an audit of our Server and have been told to move the
> installation as it cannot be on the same partition or drive as the OS.
> Can anyone tell me why ?
> We are running 2000 on a 2003 box.
> Thanks
> P
|||Thanks Mike,
Our log and data files are on different drives.
What I can't understand is if they are on a different drive, then why do we
need to move our SQL Server program files ?
thanks
P
"Mike Epprecht (SQL MVP)" wrote:
[vbcol=seagreen]
> Hi
> Ideally, the installation should be on another drive so that the OS has the
> C drive to itself. This helps to keep applications from the OS, enhancing
> security.
> Data, Logs and Backups should never be on the OS drive, each should be on
> seperate drives for recoverability and performance.
> Regards
> Mike
> "Patricia" wrote:
|||Actually I'd think that most people would the happy with the OS and SQL
installation on the same drive. The important thing is to keep your Data,
Log and Backup on seperate drives. The only thing I can think of with
regards to the installation files, is if you have your swapfile and tempdb
files on the same drive as your OS and SQL installation. In that case I'd
think about moving these to another drive, but personally I wouldn't be
concerned about having my OS and SQL files on the same drive.
Regards
Steen
Patricia wrote:[vbcol=seagreen]
> Thanks Mike,
> Our log and data files are on different drives.
> What I can't understand is if they are on a different drive, then why
> do we need to move our SQL Server program files ?
> thanks
> P
> "Mike Epprecht (SQL MVP)" wrote:

Installation of SQL Server - Security Question

Dear All,
We have recently had an audit of our Server and have been told to move the
installation as it cannot be on the same partition or drive as the OS.
Can anyone tell me why ?
We are running 2000 on a 2003 box.
Thanks
PHi
Ideally, the installation should be on another drive so that the OS has the
C drive to itself. This helps to keep applications from the OS, enhancing
security.
Data, Logs and Backups should never be on the OS drive, each should be on
seperate drives for recoverability and performance.
Regards
Mike
"Patricia" wrote:

> Dear All,
> We have recently had an audit of our Server and have been told to move the
> installation as it cannot be on the same partition or drive as the OS.
> Can anyone tell me why ?
> We are running 2000 on a 2003 box.
> Thanks
> P|||Thanks Mike,
Our log and data files are on different drives.
What I can't understand is if they are on a different drive, then why do we
need to move our SQL Server program files ?
thanks
P
"Mike Epprecht (SQL MVP)" wrote:
[vbcol=seagreen]
> Hi
> Ideally, the installation should be on another drive so that the OS has th
e
> C drive to itself. This helps to keep applications from the OS, enhancing
> security.
> Data, Logs and Backups should never be on the OS drive, each should be on
> seperate drives for recoverability and performance.
> Regards
> Mike
> "Patricia" wrote:
>|||Actually I'd think that most people would the happy with the OS and SQL
installation on the same drive. The important thing is to keep your Data,
Log and Backup on seperate drives. The only thing I can think of with
regards to the installation files, is if you have your swapfile and tempdb
files on the same drive as your OS and SQL installation. In that case I'd
think about moving these to another drive, but personally I wouldn't be
concerned about having my OS and SQL files on the same drive.
Regards
Steen
Patricia wrote:[vbcol=seagreen]
> Thanks Mike,
> Our log and data files are on different drives.
> What I can't understand is if they are on a different drive, then why
> do we need to move our SQL Server program files ?
> thanks
> P
> "Mike Epprecht (SQL MVP)" wrote:
>

Installation of SQL Server - Security Question

Dear All,
We have recently had an audit of our Server and have been told to move the
installation as it cannot be on the same partition or drive as the OS.
Can anyone tell me why ?
We are running 2000 on a 2003 box.
Thanks
PHi
Ideally, the installation should be on another drive so that the OS has the
C drive to itself. This helps to keep applications from the OS, enhancing
security.
Data, Logs and Backups should never be on the OS drive, each should be on
seperate drives for recoverability and performance.
Regards
Mike
"Patricia" wrote:
> Dear All,
> We have recently had an audit of our Server and have been told to move the
> installation as it cannot be on the same partition or drive as the OS.
> Can anyone tell me why ?
> We are running 2000 on a 2003 box.
> Thanks
> P|||Thanks Mike,
Our log and data files are on different drives.
What I can't understand is if they are on a different drive, then why do we
need to move our SQL Server program files ?
thanks
P
"Mike Epprecht (SQL MVP)" wrote:
> Hi
> Ideally, the installation should be on another drive so that the OS has the
> C drive to itself. This helps to keep applications from the OS, enhancing
> security.
> Data, Logs and Backups should never be on the OS drive, each should be on
> seperate drives for recoverability and performance.
> Regards
> Mike
> "Patricia" wrote:
> > Dear All,
> > We have recently had an audit of our Server and have been told to move the
> > installation as it cannot be on the same partition or drive as the OS.
> >
> > Can anyone tell me why ?
> >
> > We are running 2000 on a 2003 box.
> >
> > Thanks
> > P|||Actually I'd think that most people would the happy with the OS and SQL
installation on the same drive. The important thing is to keep your Data,
Log and Backup on seperate drives. The only thing I can think of with
regards to the installation files, is if you have your swapfile and tempdb
files on the same drive as your OS and SQL installation. In that case I'd
think about moving these to another drive, but personally I wouldn't be
concerned about having my OS and SQL files on the same drive.
Regards
Steen
Patricia wrote:
> Thanks Mike,
> Our log and data files are on different drives.
> What I can't understand is if they are on a different drive, then why
> do we need to move our SQL Server program files ?
> thanks
> P
> "Mike Epprecht (SQL MVP)" wrote:
>> Hi
>> Ideally, the installation should be on another drive so that the OS
>> has the C drive to itself. This helps to keep applications from the
>> OS, enhancing security.
>> Data, Logs and Backups should never be on the OS drive, each should
>> be on seperate drives for recoverability and performance.
>> Regards
>> Mike
>> "Patricia" wrote:
>> Dear All,
>> We have recently had an audit of our Server and have been told to
>> move the installation as it cannot be on the same partition or
>> drive as the OS.
>> Can anyone tell me why ?
>> We are running 2000 on a 2003 box.
>> Thanks
>> P

Friday, February 24, 2012

installation issues~

I am unable to download security updates for Outlook 2003- the message I got is: Error Code: 0x80070641...

when I tried installing any of the service packs (1,2, & 3) I am unable to as well. The message I get when doing this is:

The expected version of your product was not found on your system.

How can I fix this?

Thank you,

Ramzer

This is the SQL Server forum. My suggestion would be to locate an Outlook (or security update) forum and post the question there. I tried looking for one, but couldn't find it quickly. You could also post in the "Where's the forum for?" to see what they suggest.

Thanks,
Sam Lester (MSFT)

Sunday, February 19, 2012

Installation Error:Setting File Security

I am trying to install Enterprise RS on a server running Server 2000.
The server also has Microsoft's CRM on it as well.
Visual Studio is not installed so I get a warning that says it will not
Report Designer which is fine. I use the built-in account NT
AUTHORITY\SYSTEM for the ReportServer service to run on because that is
the only option (and it is grayed out). At the bottom of the window
there is a line that says
Account: registy:HKLM\Software\AspNetProcess\ASPNET_SETREG,userName
I mention this because it is part of my error.
I use ReportServer and Rpt for the Report Server and Report Manager
virtual directories. I can't use the default "Reports" because the CRM
already uses that.
When it installs, I get this error:
Failure modifying security permissions on file
C:\WINNT\Microsoft.NET\Framework\v1.1.4322\TemporaryASP.NET Files for
user
registy:HKLM\Software\AspNetProcess\ASPNET_SETREG,userName
I click OK and the Setup screen says this:
An error has occured ...
Setting File Security
Error Code: 1603
I then have to cancel the installation and it backs out of the setup.
I've tried everyting I can think of to no avail. Does anyone have any
ideas or has anyone installed RS on the same server as MS CRM? Thanks.I believe the problem is your machine is storing it's ASP.Net account in the
registry rather then in the file. RS Setup does not support this. To get
around this you need to place the ASP.Net credential back in the
machine.config file and then run setup. Once setup completes you can change
the setting back to the registry. Make sure to use the same account in the
config file that you plan on using in the registry. If you don't you will
want to run rskeymgmt -d after you change the asp.net user account back to
the registry.
--
-Daniel
This posting is provided "AS IS" with no warranties, and confers no rights.
"dct" <kev.mcmahon@.gmail.com> wrote in message
news:1106169110.720913.28880@.z14g2000cwz.googlegroups.com...
>I am trying to install Enterprise RS on a server running Server 2000.
> The server also has Microsoft's CRM on it as well.
> Visual Studio is not installed so I get a warning that says it will not
> Report Designer which is fine. I use the built-in account NT
> AUTHORITY\SYSTEM for the ReportServer service to run on because that is
> the only option (and it is grayed out). At the bottom of the window
> there is a line that says
> Account: registy:HKLM\Software\AspNetProcess\ASPNET_SETREG,userName
> I mention this because it is part of my error.
> I use ReportServer and Rpt for the Report Server and Report Manager
> virtual directories. I can't use the default "Reports" because the CRM
> already uses that.
> When it installs, I get this error:
> Failure modifying security permissions on file
> C:\WINNT\Microsoft.NET\Framework\v1.1.4322\TemporaryASP.NET Files for
> user
> registy:HKLM\Software\AspNetProcess\ASPNET_SETREG,userName
> I click OK and the Setup screen says this:
> An error has occured ...
> Setting File Security
> Error Code: 1603
> I then have to cancel the installation and it backs out of the setup.
> I've tried everyting I can think of to no avail. Does anyone have any
> ideas or has anyone installed RS on the same server as MS CRM? Thanks.
>