Nauplius Applications

MS12-011: Vulnerabilities in Microsoft SharePoint could allow elevation of privilege

2012-02-14T10:30:00.000-08:00

Microsoft has released MS12-011 that resolves a few cross-site scripting vulnerabilities in SharePoint 2010 RTM and SP1. KB: http://support.microsoft.com/kb/2663841 Security Bulletin: http://technet.microsoft.com/en-us/security/bulletin/ms12-011 Do not forget to run PSConfig/SharePoint Configuration Wizard after installing the update! You only need to install the update that is applicable to

Release: Nauplius.SharePoint.ADLDS.UserProfiles – Synchronize AD LDS/ADAM Users with the User Profile Service

2012-01-31T21:40:00.001-08:00

I’m please to announce the Beta 1 release of Nauplius.SharePoint.ADLDS.UserProfiles! This application will allow you to synchronize one or more AD LDS/ADAM Application Directory partitions with the SharePoint 2010 User Profile Service. To get started, modify the Nauplius.SharePoint.ADLDS.UserProfiles.exe.config. Change the sample partition by supplying your own AD LDS/ADAM server name, port AD

Active Directory Lightweight Directory Services – Application Data Partitions

2012-01-20T16:08:00.001-08:00

An AD LDS instance can hold more than one Application Data Partition. The Application Data Partition is where user, group, etc. objects are stored. It can provide an effective boundary between partitions, and is useful for SharePoint when using a single AD LDS instance with multiple customers that must remain isolated from each other. One restriction with Application Data Partitions is that one

Active Directory Lightweight Directory Services – Recycle Bin

2012-01-17T15:31:00.001-08:00

To enable the AD LDS Recycle Bin, open a command prompt, navigate to C:\Windows\ADAM, and run: ldifde.exe -i -f MS-ADAM-Upgrade-2.LDF -s localhost:389 -j . -$ adamschema.catWhere “localhost:389” is the host and port where AD LDS is running. If the currently logged on user does not have access to the AD LDS instance, specify the –b switch with a username and –p switch with a valid

Active Directory Lightweight Directory Services – Backup

2012-01-17T14:58:00.001-08:00

Backing up AD LDS is similar to backing up Active Directory: either take a backup of the System State via Windows Server Backup, or via the command line AD LDS utility dsdbutil.exe. To back up an AD LDS instance via PowerShell, call dsdbutil with the required parameters. Also note that the folder that dsdbutil is saving the backup to must be empty of all files and subfolders. 1: $

Allowing Access to ‘Forbidden’ Files

2012-01-17T10:26:00.001-08:00

SharePoint, by default, blocks a variety of file types. IIS also blocks any file type that does not have a defined MIME Type or is specified in the HttpForbiddenHandler. The default list is: .asax, .ascx, .master, .skin, .browser, .sitemap, .config, .cs. .csproj, .vb, .vbproj, .webinfo, .licx, .resx, .resources, .mdb, .vjsproj, .java, .jsl, .ldb, .ad, .dd, .ldd, .sd, .cd, .adprototype, .

Active Directory Lightweight Directory Services – Replication

2012-01-08T21:17:00.001-08:00

Replicating an AD LDS instance is quite simple. First, install the AD LDS role on the second server. Next, launch the Active Directory Lightweight Directory Services Setup Wizard. Select “A replica of an existing instance”. Name the instance appropriately and select the appropriate LDAP and LDAPS ports. Enter the FQDN of the first AD LDS server, and port that the AD LDS instance is listening

SharePoint 2010 and Active Directory Lightweight Directory Services – Better Together

2012-01-03T17:04:00.001-08:00

Using Active Directory Lightweight Directory Services can have many advantages over using a SQL membership database, common to ASP.NET applications, including: 1) Easy replication 2) Active Directory Recycle Bin 3) Easy application partitioning 4) Inherits the password policy from the host server or if joined to a domain, Active Directory 5) Wizard-based deployment 6) Active Directory

SQL Server 2008 R2 SP1 Cumulative Update 4 RTW

2011-12-19T21:06:00.001-08:00

SQL Server 2008 R2 SP1 CU 4 has been released :http://support.microsoft.com/kb/2633146

SQL Server 2008 R2 Cumulative Update 11 RTW

2011-12-19T18:55:00.001-08:00

SQL Server 2008 R2 CU 11 has been released: http://support.microsoft.com/kb/2633145 This one fixes a specific issue with rendering the Report Viewer: http://support.microsoft.com/kb/2624915

SharePoint 2007 December 2011 Cumulative Updates

2011-12-14T05:59:00.001-08:00

Windows SharePoint Services v3: http://support.microsoft.com/kb/2596987 Office 2007 Cumulative Update for December 2011: http://support.microsoft.com/kb/2639880

SharePoint 2010 December 2011 Cumulative Updates

2011-12-14T05:54:00.001-08:00

SharePoint Foundation: http://support.microsoft.com/kb/2597058 SharePoint 2010: http://support.microsoft.com/kb/2597014 Project Server: http://support.microsoft.com/kb/2597015 Office 2010 Cumulative Updates for December 2011: http://support.microsoft.com/kb/2639884

Sean McDonough’s Most Excellent SharePoint Backup Augmentation Cmdlets

2011-12-06T10:13:00.001-08:00

Sean McDonough has introduced a project called SharePoint Backup Augmentation Cmdlets. This farm-based solution adds a few new SharePoint Cmdlets to the mix: Get-SPBackupCatalog Remove-SPBackupCatalog Send-SPBackupStatus The Cmdlets can be used together to automatically maintain a backup catalog, at the specified size or backup count. To deploy the solution, copy the SharePointBAC.wsp to a

You’re a Farm Admin (and Full Control User Policy, too!). But you can’t delete that item.

2011-11-16T18:58:00.001-08:00

So over in the SharePoint TechNet Forums (other MCCs, MVPs, MCMs, please get involved!), there was a thread where an Administrator who had Full Control over all of the appropriate aspects of the farm could not move an item to the Second Stage Recycle Bin, nor could he delete the item using the following PowerShell script: 1: $recList = (Get-SPSite "http://spsite").RecycleBin 2:

October 2011 CU Breaks User Profile Picture Uploads … For Users

2011-11-04T09:48:00.001-07:00

Update 12/14/2011: This is resolved in the December 2011 Cumulative Update. === If an end user attempts to upload a picture to their own profile via their profile in My Sites, they will receive this error: There are some fairly significant code changes between the August 2011 CU version .5005 and the October 2011 CU. For example, here is LoadPictureLibraryInternal() from

SharePoint 2010 October 2011 Cumulative Updates

2011-10-28T21:46:00.001-07:00

SharePoint Foundation: http://support.microsoft.com/kb/2596508 SharePoint 2010: http://support.microsoft.com/kb/2596505 Project Server: http://support.microsoft.com/kb/2596506 Office 2010 Cumulative Updates for October 2011: http://support.microsoft.com/kb/2618119

SharePoint 2007 October 2011 Cumulative Updates

2011-10-28T11:38:00.001-07:00

Windows SharePoint Services v3: http://support.microsoft.com/kb/2596541 SharePoint 2007: http://support.microsoft.com/kb/2596540

Iisreset Not Required After Starting User Profile Sync Service

2011-09-23T11:50:00.001-07:00

Instead of running an iisreset after starting (or re-starting) the User Profile Synchronization Service when Central Administration is running on the same SharePoint Server as the UPSS, you can simply recycle the Central Administration Application Pool. To do that through PowerShell, use: 1: $appPool = gwmi -Namespace "root\MicrosoftIISv2" -class "IIsApplicationPool" | where {$_.Name -eq "

After installing the August 2011 Cumulative Update, a health warning about User Profile Service jobs appears every hour

2011-09-19T16:40:00.001-07:00

Every hour, a health error will appear regarding each User Profile Service Application instance regarding a missing Timer Job for the User Profile Service Application or User Profile Service Application Proxy: The ULS logs state: UserProfileInstalledJobsHealthRule.Check – missing job ‘Microsoft.Office.Server.UserProfiles.ADImport.UserProfileADImportJob’ for UserProfileApp ‘User Profile Services’

Installing SharePoint 2010 on Windows Server 8

2011-09-14T15:39:00.001-07:00

Installing SharePoint 2010 on Windows Server 8 isn’t quite as straight forward as it is on Server 2008 R2. The SQL Server 2008 R2 Database Engine, Full Text Search, and Management Components install without any compatibility notice. The SharePoint 2010 Products Preparation Tool, however, will not run properly. It will fail when attempting to configure IIS. You’ll need to install the following

Using Upload Multiple Documents to upload restricted file types to SharePoint 2010

2011-09-08T20:49:00.001-07:00

Certain file types are restricted by IIS by default. These file types cannot be uploaded to SharePoint 2010 when you select “Upload Multiple”. All other file types are allowed. To make an exception to this list, go to the Web Site (Web Application) or Server level node in IIS Manager. Double click on Request Filtering. Highlight the file extension you want to change from restricted to

SharePoint 2010 August 2011 Cumulative Updates

2011-09-07T10:16:00.000-07:00

SharePoint Foundation 2010: http://support.microsoft.com/kb/2553050 SharePoint Server 2010: http://support.microsoft.com/kb/2553048 Project Server 2010: http://support.microsoft.com/kb/2553049

SharePoint 2007 August 2011 Cumulative Updates

2011-08-30T15:21:00.000-07:00

Windows SharePoint Services v3: http://support.microsoft.com/kb/2553022 SharePoint 2007 Server: http://support.microsoft.com/kb/2553020 (Direct download link is available at http://support.microsoft.com/hotfix/KBHotfix.aspx?kbnum=2553020&kbln=en-us)

Workaround for June CU PWA site provisioning via UI

2011-08-01T06:58:00.001-07:00

Update: This has been completely resolved in the December 2011 CU. ==== EDIT: The behavior has changed in the August 2011 CU. After the second postback, the Administrator's name will become unresolved and will force the administrator to resolve the name. If you attempt to configure a second (or more) Project Server Web Access site via the UI, you may encounter this error with SP1 and the June

Security Validation issue in Forms Server with June CU

2011-07-31T14:16:00.001-07:00

EDIT: This is fixed in the August 2011 CU. The method OnLoad no longer exists. As noted at Security Validation Issue – Form Services issue with SP1+June 2011 CU (Release 2) and at June CU Post Update Regression?, there is a security validation issue within Forms Server when switching views with a PeoplePicker or Attachment item within a Form. The reason for this is the addition of an OnLoad