OK, I feel really stupid with this one. I use the Appended Column setting as a Log Column all over the place.
A user was wondering why they were only seeing the last 6 appended entries and not all of them. The appended column setting only stores as many Versions as you have set in your List Version Control settings. DUH, I knew that of course but had completely forgotten about it.
I came across this bug the other day. When creating a custom master page, I then wanted to delete it. When trying to delete the page I got the following error
"This item cannot be deleted because it is still referenced by other pages. This item cannot be deleted because it is still referenced by other pages "
but I knew my page was not attached to any other pages. I finally found this KB from Microsoft http://support.microsoft.com/?kbid=926812 stating this is a known bug.
Rather than "hiding" the page as they suggest, I chose to create a Folder called "DeleteMe" in the MasterPage Gallery, then I had to turn my Version Control off completely and Content Approval off too. Then I opened the gallery using SPD and was able to drag the master pages into the DeleteMe Folder, then I went back to the Master Gallery web page and deleted the Folder.
Technorati Tags: SharePoint Master Page,can not delete
This occurs more on architectures where the majority of sites are NOT a Site Collection but merely a Site under a Site Collection. While the Site Owners group has Full Control of their site they still are not able to Create a Page from the publishing pages library in their site.
This is because they must also have Read access to the Master Page Gallery at the Site Collection level.
Site Actions - Site Settings - Modify All Site Settings - Master Pages and Page Layouts - Settings - Permissions - New - add all users with Read only permissions.
If you are working with the BlueGlassBand.master file, there are many items different than the default.master since this is a publishing template. Here are some of my notes from working with it.
Although the layout is nice and clean and you may be tempted to want to use it for sites, just remember it was intended for Internet facing sites, so many items are different and will be confusing for the users if they are use to the default.master.
I would recommend copying the default.master and changing that copy to look how you want.
I have posted this before, but I just needed to do it the other day again. If you want to change the number of days SharePoint displays that NEW! icon here is the command.
Enter 0 to hide it all together, or enter 2-6 for the days. If you enter 0...say to upload some bulk items that you don't want it to show the NEW! on...but you want to turn it back on say to 3 days later...you can, but make sure you wait until the 4th day from your upload to issue the new command otherwise your documents will show the NEW! for how ever many days are left. It goes by the Created On date field.
cd /d %programfiles%\Common Files\Microsoft Shared\Web Server Extensions\12\BIN
stsadm.exe -o setproperty -pn days-to-show-new-icon -pv 0 -url http://WebApplicationDefaultManagedPath
cd /d %programfiles%\Common Files\Microsoft Shared\Web Server Extensions\12\BIN
stsadm.exe -o setproperty -pn days-to-show-new-icon -pv 5 -url http://WebApplicationDefaultManagedPath
Reference Material: http://support.microsoft.com/kb/825510
Again this is an old article that did not get migrated over to this new site.
I am always surprised at how many senior engineers do not understand how to use the Windows Server built-in Performance Monitor to determine hardware, software, network bottlenecks...or that have never even used it.
First thing to remember, is that while you are running Performance Monitor that will cause a performance hit to your server too. Now, obviously you do need to run it to create a good baseline to compare against, and to troubleshoot...but you should just perform short captures of less than 30 minutes if possible, during times not used, then average use, then peak times or with forced hits.
Below is the baseline object counters that I always start with, then I eliminate different Performance Objects one by one, by their results, until I have just 2 or three that I have narrowed it down to. I suggest you create a baseline like this and save it locally so the next time you need to capture you can do so very quickly by just opening and starting it. I have had this baseline for literally years, I am sure I probably got it from a Microsoft white paper, but can't remember where.
Start - Run - type Perfmon or
Start - Administrative Tools - Performance - System Monitor. You have 3 display formats; graph, histogram and text report.
Adding Performance Counters
Performance Object
Count
Threshold
Description
Processor
Percent processor time_total
80 to 85 percent averaged over three intervals
The total percentage of processor usage for a server.
Network Interface
Bytes total per second_network interface
50 percent of the available network interface bandwidth -- for example, a 100-MB network interface running at 50,000 KB per second
The rate at which bytes are sent and received over each network adapter.
Logical Disk
Percent idle time_ (drives C:,D:, and so on)
20 percent over idle time_.
Reports the percentage of time during the sample interval that the disk was idle. If this value is very low, the logical disk is very busy.
Paging File
Percent usage
Above 70 percent
Review this value in conjunction with memory -- available megabytes and page faults per second -- to understand paging activity on the server.
Memory
Available MBs
128 MB -- assuming 2 GB of RAM as prescribed on servers
The amount of physical memory, in MBs, immediately available for allocation to a process or for system use on the server.
Memory
Page faults per second
20
A high rate of page faults indicates a lack of physical memory.
System
Processor queue length
The number of CPUs + 1
Exceeding the threshold indicates that the processors are not fast.
ASP.NET Applications
Requests per second_total
Through ongoing monitoring, trends begin to emerge that equate requests per second with CPU consumption
The number of requests executed per second; this roughly equates to the number of HTTP pages per second.
Disk
Physical Disk\% Free Space
15%
Disk
Logical Disk\% Free Space
15%
Disk
Physical Disk\% Disk Time
90%
Disk
Logical Disk\% Disk Time
90%
Disk
Physical Disk\Disk Reads/sec, Physical Disk\Disk Writes/sec
Depends on manufacturer's specifications;15,000 RPM vs 10,000 RPM, etc.
Check the specified transfer rate for your disks to verify that this rate does not exceed the specifications. In general, Ultra Wide SCSI disks can handle 50 to 70 I/O operations per second. Note that whether or not the I/O is sequential or random can have a strong impact on values for disk reads/sec and disk writes/sec.
Disk
Physical Disk\Current Disk Queue Length
Number of spindles plus 2
This is an instantaneous counter; observe its value over several intervals. For an average over time, use Physical Disk\Avg. Disk Queue Length.
Memory
Memory\Available Bytes
For larger memory computers, greater than 4 MB
Research memory usage and add memory if needed.
Memory
Memory\Pages/sec
n pages/sec per pagefile
Research paging activity. Note the amount of I/O going to the disks with pagefiles.
Paging File
Paging File\% Usage
Above 70%
Review this value in conjunction with Available Bytes and Pages/sec to understand paging activity on your computer.
Processor
Processor\% Processor Time
85%
Find the process that is using a high percentage of processor time. Upgrade to a faster processor or install an additional processor.
Processor
Processor\Interrupts/sec
Depends on processor; 1,000 interrupts per second is a good starting point
A dramatic increase in this counter value without a corresponding increase in system activity indicates a hardware problem. Identify the network adapter, disk, or other hardware causing the interrupts.
Server
Server\Bytes Total/sec
If the sum of Bytes Total/sec for all servers is roughly equal to the maximum transfer rates of your network, you may need to segment the network.
Server
Server\Work Item Shortages
3
If the value reaches this threshold, consider
adding the DWORD entries InitWorkItems
(the number of work items allocated to a
processor during startup) or MaxWorkItems
(the maximum number of receive buffers that
a server can allocate) to the registry (under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\LanmanServer\Parameters). The entry
InitWorkItems can range from 1 to 512 while
MaxWorkItems can range from 1 to 65,535.
Start with any value for InitWorkItems and a
value of 4,096 for MaxWorkItems and keep
doubling these values until the Server\Work
Item Shortages threshold stays below 3.
Server
Server\Pool Paged Peak
Amount of physical RAM
This value is an indicator of the maximum paging file size and the amount of physical memory.
Server
Server Work Queues\Queue Length
4
If the value reaches this threshold, there may be a processor bottleneck. This is an instantaneous counter; observe its value over several intervals.
Multiple Processors
System\Processor Queue Length
I wrote this article over a year ago, but many of my old posts are missing from this new blog location.
Below are all of the SharePoint 2007 performance guidelines post SP1 summarized. Note not all of these are "limits" but many are just suggested thresholds by Microsoft. Referenced Material: http://technet.microsoft.com/en-us/library/cc262787.aspx
Microsoft Best Practices:
1/17/2009 8:03 PM
Recently I got the following error when trying to save a site as a template with Content. This site's size was well under the supported 25-50MB. So I really should not have gotten the error. However, this site did have much custom work and third party content types, etc. So I think we sometimes get this error for other reasons than the KB article says.
Error: Failure decompressing data from a cabinet file.
Resolution: none really, you can try increasing your template size by running on the front end servers: Stsadm.exe -o setproperty -pn max-template-document-size -pv 524288000 However, in my case it didn't fix my error. I ended up having to backup the site using SPD and restore it to a new location and work on my Lists from there.
Microsoft KB Article: http://support.microsoft.com/kb/960969
Published: 6/1/2009 11:05 PM
Well as you probably know, you can add fields/columns to your document library lists, and populate those same field on the Folders themselves by going into Datasheet Mode. The problem with this is that not all fields can be edited in Datasheet Mode. For example using this method you cannot edit a Data Lookup column to a Folder, or People Picker field, or Multi-line Text field while in Datasheet Mode.
Another way is to create your own Folder Content Type.
Whether you create this new Content Type at the Site Collection or Site level will depend on whether your additional columns are standard ones or unique.
Published 2/1/2007 9:01 PM
WELL, then have fun with this! As you know with SharePoint to get corporate branding looks you can create Custom Themes, Master Pages, etc. Well what about those users that are not server admins, just a site owner? If you know CSS (Styles) even just a little you can change the colors and fonts on your home page or any other pages you are the Site Owner to.
All you have to do is add a Content Editor Web Part to the bottom of your page. Then hide the Title and Border, then select Source Code and enter <style> then your CSS custom styles </style> that's it.
What's the catch? Well you do need to know what the SharePoint Controls Styles are called, that part is hard. But you can right click on a page select View Source, and you can see most of the controls there. Also Heather Solomon has a chart of course. Also this will only apply this style on this one page. Also it will be slower this way because it will actually apply this CSS control last, meaning after it loads the styles from Site Definition, Themes, etc.
But this is excellent to show regular Site Owners. Have fun with it.
Published: 11/1/2007 8:29 PM
Too many books try to combine MOSS 2007 (Portal Server) in the same book as WSS 3.0 and therefore much ends up not being relevant to a pure WSS configuration.
So I just looked over mine, and I think that the following one is best for users, power users and Site Owners. I have a copy in my document library. Careful if you choose to open it or download it, it is 44MB in size, a PDF file. But for those preferring to order the book the information is below.
Published: 3/3/2008 10:51 PM
Check out these free SQL 2008 eLearning courses from Microsoft Learning site. I went through them this weekend and they are okay beginner courses to get you up to speed with what is new in 2008...and did I mention its free? Clinic 6188, 6189, and 6190 Here is a link to all their current FREE online courses: http://learning.microsoft.com/Manager/Catalog.aspx?view=free
Published: 11/5/2007 10:19 AM
This week I presented System Center Operations Manager 2007 and its differences from its predecessor MOM 2005 and the migration path, for Microsoft at the Utah IT Pro Users Group. It was a 2 hour presentation. I am posting the presentation for any of you interested in Operations Manager. There is allot of content in my Speaker Notes so look there.
It is in my document library here. Beware it is 3MB and in PowerPoint 2007 SCOM 2007 Presentation
Org Published: 10/9/2007 10:06 PM
People always ask me what books I recommend for SQL, AD, SharePoint, etc. It always seems to be a disappointment to them when I say the Microsoft Press books are by far my favorite. I don't deny that I am partial, I used to sit on their review/editing board for the MOC training classes and the MS Press publishing. I liked their process for how they decided what content they left in did away with, by polling experts from different lines of business.
This newest set, the blue books, I find are very logical and easy to follow. I think I have everyone they've published so far! I especially like the Administrator's Pocket Consultant series; SQL 2005, Exchange 2007, IIS 6.0.
But it is easier for me to say what books I have bought and read that were not worth the money or time spent; Syngress "How to cheat at Managing Microsoft Operations Manager 2005", horrible, they somehow just took the Installation ReadMe Text file that comes with MOM and reworded it to fill up 467 pages! Don't waste your money!
Published: 1/5/2008 8:19 PM
This is one of the batch files I put together to troubleshoot forest trust relationship problems. It was based off a Microsoft Port Query template batch file.
@echo off
Goto START
************************************************************************
* Created By: Linda Chapman
* CMD File to facilitate PortQry test for Domain Controllers
* INPUT SYNTAX: OpenPorts.cmd <DC NetBIOS name>
* OUTPUT: This will generate a <DC NetBIOS name>TrustedDomainResults.txt file.
* DEPENDENCY: PortQry.exe
*
************************************************************************
:START
echo.
echo Testing with PortQry against %%s
echo AD/DC specific ports
echo.
echo.
:ERRORCHECK
echo Press any key to continue the test...
pause
:PINGTEST
echo Pinging %%s
Echo ************* > TrustedDomainResults.txt
Echo * Ping Test * >> TrustedDomainResults.txt
Echo ************* >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do ping %%s >>TrustedDomainResults.txt
pause
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
:PORTWORK
echo Testing DNS
Echo ************************ >> TrustedDomainResults.txt
Echo * DNS (53) UDP and TCP * >> TrustedDomainResults.txt
Echo ************************ >> TrustedDomainResults.txt
Echo Performing Portqry -n %%s -p both -e 53
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p both -e 53 >>TrustedDomainResults.txt
echo.
echo.
pause
echo Testing Kerberos
Echo ***************************** >> TrustedDomainResults.txt
Echo * Kerberos (88) UDP and TCP * >> TrustedDomainResults.txt
Echo ***************************** >> TrustedDomainResults.txt
Echo Performing portqry -n %%s -p both -e 88 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do portqry -n %%s -p both -e 88 >>TrustedDomainResults.txt
echo.
echo.
echo Testing RPC End Point Mapper Service
Echo ********************************** >> TrustedDomainResults.txt
Echo * RPC End Point Mapper (135) TCP * >> TrustedDomainResults.txt
Echo ********************************** >> TrustedDomainResults.txt
echo performing portqry -n %%s -p TCP -e 135 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p TCP -e 135 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing NetBIOS Name Service
Echo ********************* >> TrustedDomainResults.txt
Echo * NetBIOS (137) UDP * >> TrustedDomainResults.txt
Echo ********************* >> TrustedDomainResults.txt
echo performing portqry -n %%s -p UDP -e 137 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p udp -e 137 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing NetBIOS Datagram Service
Echo ********************* >> TrustedDomainResults.txt
Echo * NetBIOS (138) UDP * >> TrustedDomainResults.txt
Echo ********************* >> TrustedDomainResults.txt
echo performing portqry -n %%s -p udp -e 138 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p udp -e 138 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing NetBIOS Session Service
echo ********************* >> TrustedDomainResults.txt
Echo * NetBIOS (139) TCP * >> TrustedDomainResults.txt
Echo ********************* >> TrustedDomainResults.txt
echo performingportqry -n %%s -p tcp -e 139 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p tcp -e 139 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing LDAP
Echo ************************** >> TrustedDomainResults.txt
Echo * LDAP (389) UDP and TCP * >> TrustedDomainResults.txt
Echo ************************** >> TrustedDomainResults.txt
echo performing portqry -n %%s -p both -e 389 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p both -e 389 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing SMB Direct Hosting
Echo ***************** >> TrustedDomainResults.txt
Echo * SMB (445) TCP * >> TrustedDomainResults.txt
Echo ***************** >> TrustedDomainResults.txt
echo performing portqry -n %%s -p tcp -e 445 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p tcp -e 445 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing Secure LDAP
Echo ******************* >> TrustedDomainResults.txt
Echo * LDAPS (636) TCP * >> TrustedDomainResults.txt
Echo ******************* >> TrustedDomainResults.txt
echo portqry -n %%s -p tcp -e 636 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p tcp -e 636 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing GC LDAP
Echo ******************* >> TrustedDomainResults.txt
Echo * LDAP (3268) TCP * >> TrustedDomainResults.txt
Echo ******************* >> TrustedDomainResults.txt
echo performing portqry -n %%s -p TCP -e 3268 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p tcp -e 3268 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo Testing GC Secure LDAP
Echo ******************** >> TrustedDomainResults.txt
Echo * LDAPS (3269) TCP * >> TrustedDomainResults.txt
Echo ******************** >> TrustedDomainResults.txt
Echo Test GC SSL (3269) TCP >> TrustedDomainResults.txt
echo performing portqry -n %%s -p tcp -e 3269 >> TrustedDomainResults.txt
for /f "eol=; tokens=1 delims=," %%s in (TrustedDomainServerList.txt) do Portqry -n %%s -p tcp -e 3269 >>TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
Echo. >> TrustedDomainResults.txt
echo.
echo.
echo End of Script
echo pause
Goto END
:END
Published: 4/30/2008 11:39 PM
I like Dundas Charts and Gauges for SharePoint. Aproximately $1999 or $2999 for both Charts and Gauges. http://dundas.com/Technologies/Sharepoint/DashBundle.aspx
I would have liked AnyChart.com's product better, but they need to integrate into SharePoint more. They need to figure out to how point to a Sharepoint List and have their tool automatically generate the XML file and modify it so that the user doesn't have to try to figure this out. They also had TERRIBLE SUPPORT! No one would ever answer the emails. They tried to say they were caught up in their spam filter. I am sorry, but when your site says your primary means of support is over EMAIL, then you better make sure you can get all the emails.
Published: 1/1/2009 1:38 PM
Okay I have been blogging for over 3 years now, before it was even well know of, and I have to say, I happen to like Discussion Threads better than Blogs.
I really like how Discussion Threads make it so easy to see the "tree" of the discussion. With Blogs, regardless of what tool you are using, they are all the same in that you do not easily see the entire threaded discussion back and forth.
So there it is my vote is for Discussion Threads...I rarely express my opinion about stuff like this, but I am really just not getting the Blog over a Discussion Thread. If Microsoft would modify Windows Live Writer to post to Discussion Forums then I would switch to a Discussion Forum in a heart beat. But I do like the convenience that Windows Live Writer provides when documenting, so I use it for almost everything, which in turn means I have to use Blogs for almost everything! Just do me a favor and modify Live Writer to post to Microsoft Discussion Forums so I can use those.
Published: 12/26/2008 1:36 PM
If you are using or have an application that is using the free version of SQL 2005 (Express), then you should install the free utility to manage it, Microsoft SQL Server Management Studio Express. It provides a simple interface to manage instances of SSDE. You can download this from Microsoft here.
It is very light weight, not taking up much space. You can still use SQLcmd to script and schedule it through Scheduled Tasks if you prefer. It can be found in C:\Program Files\Microsoft SQL Server\90\Tools\binn or C:\Program Files\Windows Resource Kits\Tools .
First create a TSQL file. You can create this using SQL Server 2005 Express Studio to get the proper syntax. First create a backup, then while in the backup, go to the top bar and select Script - Script Action to File, and it will create the .sql file for you :
You will notice that Express defaults to a Simple Recovery. If you need to perform a Full Recovery you will need to right click on your database, select New Query, paste the code below changing [Linda] for your database name, then select Execute. Then you will notice you will now have the Transaction Log as an option under Backup Method.
USE [master]
GO
/****** Object: Database [Linda] Script Date: 09/04/2008 12:57:52 ******/
ALTER DATABASE [Linda] SET RECOVERY FULL
GOExample of Backup of a Database:
BACKUP DATABASE [Linda] TO DISK = N'c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Backup\Linda.bak' WITH NOFORMAT, NOINIT, NAME = N'Linda-Full Database Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10
GOExample of Backup of a Database with FULL, Append to Existing and Verify:
BACKUP DATABASE [Linda] TO DISK = N'c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Backup\Linda.bak' WITH NOFORMAT, NOINIT, NAME = N'Linda-Full Database Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10
GO
declare @backupSetId as int
select @backupSetId = position from msdb..backupset where database_name=N'Linda' and backup_set_id=(select max(backup_set_id) from msdb..backupset where database_name=N'Linda' )
if @backupSetId is null begin raiserror(N'Verify failed. Backup information for database ''Linda'' not found.', 16, 1) end
RESTORE VERIFYONLY FROM DISK = N'c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Backup\Linda.bak' WITH FILE = @backupSetId, NOUNLOAD, NOREWIND
GOExample of Shrink of a Transaction Log:
USE [Linda]
GO
DBCC SHRINKFILE (N'Linda_log' , 1)
GOYou should always backup the Transaction Log before Shrinking it. Example:
BACKUP LOG [Linda] TO DISK = N'c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Backup\Linda.bak' WITH NOFORMAT, NOINIT, NAME = N'Linda-Transaction Log Backup', SKIP, NOREWIND, NOUNLOAD, STATS = 10
GO
declare @backupSetId as int
select @backupSetId = position from msdb..backupset where database_name=N'Linda' and backup_set_id=(select max(backup_set_id) from msdb..backupset where database_name=N'Linda' )
if @backupSetId is null begin raiserror(N'Verify failed. Backup information for database ''Linda'' not found.', 16, 1) end
RESTORE VERIFYONLY FROM DISK = N'c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Backup\Linda.bak' WITH FILE = @backupSetId, NOUNLOAD, NOREWIND
GO
Then create your command for the Scheduled Task:
Example: SQLcmd -S ComputerName\Instance -E -i "LocationOfINPUTfile\Backup.sql"
4/6/2009 11:13 PM
This is a list of good MS articles to reference in respect to your WSS SQL server and databases.
Published: 12/1/2008 9:24 PM
Using Vista, Office 2007 and Internet Explorer 7, or Windows 7 Office 2007 and IE8, you get any of the following errors when trying to edit and save a document from a SharePoint Document Library, or any other WebDAV based service.Cause:
This file is read-only.
Unknown error trying to lock file.
This document was checked out to your local drafts folder but the local copy could not be checked in to the site. Close any application that is editing the document and try to check in again, or discard the checkout.
This problem is caused from a Vista and Windows 7 WebDAV problem when you do not have a Proxy Server defined.Resolution:
Refer to Microsoft KB Article 943280. Please note if Service Pack 1 for Vista is already applied then you only have to perform the Registry change shown below.
Please follow the steps in the KB article above.Published: 2/15/2008 9:21 PM
Step Summary
Start - Run - RegEdit
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
From top menu select Edit
New - Multi-String Value
Enter: AuthForwardServerList
Press ENTER
From top menu select Modify
In the Value Data box type:
Then reboot.http://YourSharePointApplicationURLs
Problem:
Issue tracking list data is not saved when you save a site as a template.
Cause:
This is due to using the built-in Issue Tracking List as the original template.
Resolution:
Microsoft has confirmed this to be a problem, and there is currently no fix.
Microsoft Knowledge Base: http://support.microsoft.com/kb/948141/en-us
Your only options are to re-create the list and copy the data over.
Published: 12/4/2008 9:20 PM
Problem:
You save a site as a Site Template, and you see it listed in the Site Collection Gallery but you cannot see it as an option in a site under the Site Collection.
Cause:
If you create a Site off a built-in or custom template, then you create a sub-site based off a different built-in or custom template, then save that sub-site as a Site Template, you will not see this new Site Template as an option to create from under any sub-sites that are not built off the same template as the saved template site was.
Resolution:
Basically there is no workaround for this issue. You must create both sites from the same template to be able to see the Custom-CustomSiteTemplateName . You will either need to re-create a new top site based of the same original template the saved sub-site was…or re-create your sub-site to be based off the same original template the top site was, then re-customize it and re-save it back up to the Gallery again.
I did NOT find a Microsoft KB article on this exact problem, but did find a similar one on this same issue with a saved List Template, then tested this and found Site Templates have the same problem.
Published: 12/20/2008 9:17 PM
How to perform Full Farm Backups through Scheduled Tasks.
Go to Start - Control Panel - Scheduled Tasks - Open - Add Scheduled Task
At the Task tab:
Do not forget to write or schedule another routine that goes and deletes old Farm Backups out of the backup directory listed above, otherwise you can fill up that server quite quickly.
Published: 12/21/2006 9:15 PM
"www.microsoft.com/technet/solutionaccelerators/cits/mo/
winsrvmg/adpog/adpog5.mspx#EOBBG"
To view the current operations master role holders, use Ntdsutil.exe with the roles option. This option displays a list of all current role holders.
Procedure Requirements
Procedure Steps
To view the current operations master role holder
Published: 7/1/2008 9:14 PM
As a consultant, I have specialized in large enterprise migrations for 13 years. Over that time I have lead the migration effort for over 10 large global enterprises all from complex mixed environments (MS, Unix, Novell, etc). Below is the methodology I have developed over the years trying to follow all best practices. This is my first article in a series of "Migration" topics.
The focus of this article is: Performing a IntraForest Domain Migration and Collapse using the free tool ADMT v3 (Active Directory Migration Tool). This article does not take into consideration Exchange, SharePoint or any other application specifically. It is a high level migration planning approach to get you started.
Important Concepts
Active Directory Migration Tool
You must use ADMT to perform a domain migration or collapse properly. You can script it, use command prompt or use the Wizard. Many things can go wrong in a migration using ADMT, especially if you have never performed a domain migration before. Therefore, for this migration I highly suggest using the Wizard rather than scripting.
You will need to create at least one Migration Service Account that ADMT will use to perform the migration functions.
Object Migration Order
Remember you migrate 2 sets; 1) Groups and Users, and 2) Resources and Local Groups
Migration Steps - high level
A domain migration and collapse is no minor task, and if not done in the proper order can orphan objects and lose their ACLs. If you know me at all, you would know that I like to follow a phased approach for my migrations, as I was taught from my years work with Microsoft Consulting and EDS.
Referenced Material: Chapter 12 Restructuring Active directory Domains Within a Forest.doc
del.icio.us Tags: Migration Specialists,Active Directory migration,Active Directory Collapse,ADMT
Category: Active Directory;Migration
Published: 6/1/2008 9:11 PM
In a forest, there are at least five FSMO roles that are assigned to one or more domain controllers. For best performance and recovery purposes you should not have all 5 FMSO roles on the same DC unless just to temporarily transfer to it for short-term maintenance. These are high level steps to transfer the Windows 2003 FSMO Roles to another DC for maintenance to be performed on the original DC.
For best performance and recovery purposes you should never have all 5 FMSO roles on the same DC unless just to temporarily transfer to it for short-term maintenance.
You can transfer FSMO roles by using the Ntdsutil.exe command-line utility or by using an MMC snap-in tool.
Depending on the FSMO role that you want to transfer, you can use one of the following three MMC snap-in tools:
If a computer no longer exists, the role must be seized. To seize a role, use the Ntdsutil.exe utility. Please use extreme caution when using this utility.
Transferring FSMO Roles – high level steps
Below are the high level steps required to perform any FSMO role transfers. What additional Change Management steps would be required would be determined following normal Change Management guidelines. At a minimum an RFC would always be required with a backup and restore plan.
If you have never transferred FSMO roles including the Schema Master role before you should perform this first in the lab. If you would perform a step out of sequence or when other DCs are not fully synchronized with the FSMO DCs you could have to revert to your back out plan.
- Go into Sites and Sites for that domain and force replication
- Check Event Viewer to see when the last reboot of both servers occurred, if over a week or prior to any other changes, then reboot both servers separately prior to proceeding to ensure stable after the reboot.
- Go into the Event viewer on all DCs and verify that Directory Services Replication has occurred successfully on all DCs, and no major errors on the target DCs. You can verify replication using EV or RepAdmin
- Verify all trusts are working using NLTest.exe
- Perform an NTBackup including System State and all drive data to an off disk location
- Verify that backup is restorable
- View and record the FSMO roles for the forest and target domain
- Transfer the Domain Naming Master Role
- Verify in Event Viewer or using NTDSutil, or MMC snap-in that the role transferred successfully.
- Go into Sites and Sites for that domain and force replication
- Verify successful replication to all DCs using Event Viewer, or repadmin /showrepl command, nltest, etc.
- Transfer RID Master, PDC Emulator, and Infrastructure Master Roles
- Verify in Event Viewer or using NTDSutil, or MMC snap-in that the role transferred successfully.
- Go into Sites and Sites for that domain and force replication
- Allow 30 minutes for all role changes to replicate throughout the forest, more if previously you found replication problems.
- Go into the Event viewer on all DCs and verify that Directory Services Replication has occurred successfully on all DCs, and no major errors on the target DCs. You can verify replication using EV or RepAdmin
- Transfer the Schema Master Role
- Verify in Event Viewer or using NTDSutil, or MMC snap-in that the role transferred successfully.
- Go into Sites and Sites for that domain and force replication
- Allow 30 minutes for all role changes to replicate throughout the forest, more if previously you found replication problems.
- Go into the Event viewer on all DCs and verify that Directory Services Replication has occurred successfully on all DCs, and no major errors on the target DCs. You can verify replication using EV or RepAdmin
Transferring FSMO Roles – Detailed Steps
The following steps to transfer FSMO Roles are from Microsoft white papers referenced below. These are not specific to any one environment, but are general steps.
Transfer the Domain Naming Master Role
Click Start, point to Administrative Tools, and then click Active Directory Domains and Trusts.
Right-click Active Directory Domains and Trusts, and then click Connect to Domain Controller.
You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer.
Do one of the following:
In the Enter the name of another domain controller box, type the name of the domain controller that will be the new role holder, and then click OK.
In the Or, select an available domain controller list, click the domain controller that will be the new role holder, and then click OK.
In the console tree, right-click Active Directory Domains and Trusts, and then click Operations Master.
Click Change.
Click OK to confirm that you want to transfer the role, and then click Close.
Transfer the RID Master, PDC Emulator, and Infrastructure Master Roles
Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
Right-click Active Directory Users and Computers, and then click Connect to Domain Controller.
You must perform this step if you are not on the domain controller to which you want to transfer the role. You do not have to perform this step if you are already connected to the domain controller whose role you want to transfer.
Do one of the following:
Transfer the Schema Master Role
It is very important that you ensure you have a complete backup and verified replication is successful on all DCs prior to transferring the Schema Master Role. If you have replication problems you could transfer the role and it not be accepted in the target DC or it accepts it and the remaining DCs still see the original schema master as still holding the role. This conflict would cause Forest wide problems potentially. So use with caution.
Use the Active Directory Schema Master snap-in to transfer the schema master role. Before you can use this snap-in, you must register the Schmmgmt.dll file.
Register Schmmgmt.dll
- Click Start, and then click Run.
- Type regsvr32 schmmgmt.dll in the Open box, and then click OK.
- Click OK when you receive the message that the operation succeeded.
Transfer the Schema Master Role
This document is based on the best practices for transferring FSMO Roles from Microsoft at:
http://support.microsoft.com/kb/324801
http://support.microsoft.com/kb/255690/
Published: 1/4/2008 9:09 PM
Okay I will be unpopular with this...but I really can't stand it when a product/application says in their instructions that you must give the application account or service account local Administrator permissions...and the engineers believe it!
Recently I just did a short contract for software development company. A name most of you have heard of. I was extremely surprised at their huge lack of knowledge about the Microsoft products they were developing off the shelf software for. Even when I showed them how to use a Service Account to run their app and how their app only needed read permissions in the place they were coding, they simply didn't care. They insisted that "...we always state our application requires Domain Administrator privileges..." and they wouldn't stop. Need less to say for those that know me, I gave my notice and quit that contract.
Several years ago, I was on a Microsoft contract where we were applying the tightest security on our Microsoft servers. I was tasked with taking our entire application layer and determining what the lowest level permissions were actually needed for every service account and every application. This of course took quite a bit of time in the lab, by me installing with the permissions the application owners said it needed (usually Administrator), then re-imaging and reinstalling with the individual permissions one by one until the install and application worked. End result was there was absolutely no applications that we tested for our deployment that needed Administrator permissions. Some of the products I tested were; Veritas, Norton AV, several web applications, Office, Active Directory functions, DNS functions, Account and Server functions, and many other off the shelf products, including some Microsoft ones. Now this is not saying that none do. If they don't take the time to code it right then it can. But many don't even know themselves.
Vendors typically will say it needs Administrator permissions because they don't want to bother with testing the permissions one by one to see what exact granular permissions it needs. Yes, even Microsoft has become worse about doing this. Most applications only really need 4 NT rights to operate and those 4 rights added to an application account is what is a Service Account. There are some that need some other additional privileges of course too.
If you want a tighten down environment you will always take the time to test the actual granular permissions needed, and never believe the vendor when they say it takes Administrator.
ALSO, I come across so many engineers that will test it using the built-in groups (Administrators, Backup Operators, Account Operators, etc) and say...see it only worked when I added the account into the Administrators group. Open your eyes and learn your operating system better. There are about 35+ granular permissions you can grant...but you have to use the proper tools to grant or remove them! This is probably not a complete list either, but the two tools I use the most often to get the granular permissions needed.
DSacls found in the Support Tools
Permissions
NTrights.exe found in the Resource Kit
Published: 7/25/2007 9:06 PM
This batch file is one that I created many years ago, but still use. It is a simple non-complicated way to automatically create users, apply a password, create their home directory and home share. Your list of users have to be one to a line in the referenced u:\user.txt file. There are many different ways you can script something like this. I use this on contracts where they don't have someone that can support a script but could a simple batch file.
rem NB: user home directory is set at Z:\
rem Use: Users.bat, LogonName, LastName, FirstName
rem
net use u: /delete
Net use u: \\ServerName\ShareName
u:
PAUSE
REM for /f %%v in (u:\user.txt) do net user %%v P@ssword /add /fullname:%%v
for /f "eol=; tokens=1,2,3,4 delims=," %%v in (u:\user.txt) do net user %%v P@ssword /add /fullname:"%%w"
PAUSE
for /f "eol=; tokens=1,2,3,4 delims=," %%v in (u:\user.txt) do net user %%v /Comment:"enter comment here" /scriptpath:LogonScript1.bat
PAUSE
REM for /f %%v in (u:\user.txt) do net user %%v /Comment:"enter comment here" /scriptpath:LoginScript1.bat
for /f %%v in (u:\user.txt) do net group "Domain Users" %%v /add
for /f %%v in (u:\user.txt) do net group GlobalGroupName %%v /add
for /f %%v in (u:\user.txt) do net group GlobalGroupName %%v /add
PAUSE
::creates directory for each user
u:
for /f %%v in (u:\user.txt) do md u:\%%v
::Gives the user ownership to his directory
for /f %%v in (u:\user.txt) do subinacl /subdirectory u:\%%v /setowner=%%v /grant=%%v=F
::Creates a remote hidden share and Gives Change permissions to the user
for /f %%v in (u:\User.txt) do net share %%v=d:\users\SubDirectory\%%v /grant:%%v,CHANGE
REM if you need to delete shares perform the following command
REM for /f %%v in (u:\user.txt) do net share \\ServerName\%%v /DELETE
PAUSE
Published: 8/10/2005 9:03 PM
Use NbtStat to verify that you have the right IP address for a specific NetBIOS name is to use a tool that displays protocol statistics and TCP/IP connections using NBT (NetBIOS over TCP/IP). The syntax is case sensitive. For example, nbtstat -A lists the remote computer name table when given its IP address, and nbtstat -a lists the remote computer name table when given its name.
Examples of NetBIOS name resolution problems:
You can use Nslookup to perform DNS queries and to examine the contents of zone files on local and remote servers. To use Nslookup in interactive mode and to verify name resolution, at the command prompt, type the following: NSLOOKUP
Published: 8/4/2008 9:01 PM
This is continuing my entries on troubleshooting. Use DCdiag to perform a fully automatic analysis with little intervention. It is a read-only tool that does not affect the state of the object. Although it allows specific tests to be run individually, it is not intended as a general toolbox of commands to perform specific tasks. Best use is to run all commands at once and compare the outcome of each as some my be related.
Use the Dcdiag tool to diagnose domain controller status for the following:
Published: 8/1/2008 8:57 PM
For Active Directory to function correctly through a firewall, the Internet Control Message Protocol (ICMP) protocol must be allowed through the firewall from the clients to the domain controllers so that the clients can receive Group Policy information. You will need the following ports opened to create the trust and to perform the user/group administration after the trust is established.
Resource Material: Microsoft KB http://support.microsoft.com/default.aspx/kb/179442/
(migrated content from old site, need to relink pictures)
* NOTE: The port for WINS is optional. It is not required for a trust but only if YOUR Active Directory configuration is dependent on WINS still for resolution.
Published: 12/1/2008 8:54 PM
Many things require communication for RPC over ports 1024-65535/TCP. In many cases having all of these ports open is not practical. Microsoft recommends you reduce this number of ports. Material References: http://support.microsoft.com/kb/154596 .
This is nothing new, I have been doing this per Microsoft's recommendations for several years, although this referenced KB is newer, if you search you will find similar articles published since Active Directories first release.
This is a best practice for security lock down, and has been for years. I heard an engineer once say it breaks your support contract with Microsoft to make ANY edits to the registry. That is simply incorrect, contact Microsoft to verify. If it is to fix known reported problems where Microsoft publishes a KB article instructing you how like above, this is supported.
Published: 10/31/2008 8:53 PM
Hopefully you are using WinPE 2.0 if so you can open a command prompt and type net stop ipnat . That is temporarily disable your firewall. You cannot open and close individual ports using WinPE, just the disable and enable.
Published: 4/30/2008 12:52 AM
I am always surprised at how many senior engineers do not understand how to use the Windows Server built-in Performance Monitor to determine hardware, software, network bottlenecks...or that have never even used it. First thing to remember, is that while you are running Performance Monitor that will cause a performance hit to your server too. Now, obviously you do need to run it to troubleshoot...but you should just perform short captures of less than 30 minutes if possible, during times not used, then average use, then peak times or with forced hits. Below is the baseline object counters that I always start with, then I eliminate different Performance Objects one by one, by their results, until I have just 2 or three that I have narrowed it down to. I suggest you create a baseline like this and save it locally so the next time you need to capture you can do so very quickly by just opening and starting it. I have had this baseline for literally years, I am sure I probably got it from a Microsoft white paper.
Start - Run - type Perfmon or
Start - Administrative Tools - Performance - System Monitor. You have 3 display formats; graph, histogram and text report.
Adding Performance Counters
Performance Object
Counter
Threshold
Description
Processor
Percent processor time_total
80 to 85 percent averaged over three intervals
The total percentage of processor usage for a server.
Network interface
Bytes total per second_network interface
50 percent of the available network interface bandwidth -- for example, a 100-MB network interface running at 50,000 KB per second
The rate at which bytes are sent and received over each network adapter.
Logical disk
Percent idle time_ (drives C:,D:, and so on)
20 percent over idle time_.
Reports the percentage of time during the sample interval that the disk was idle. If this value is very low, the logical disk is very busy.
Paging file
Percent usage
Above 70 percent
Review this value in conjunction with memory -- available megabytes and page faults per second -- to understand paging activity on the server.
Memory
Available MBs
128 MB -- assuming 2 GB of RAM as prescribed on servers
The amount of physical memory, in MBs, immediately available for allocation to a process or for system use on the server.
Memory
Page faults per second
20
A high rate of page faults indicates a lack of physical memory.
System
Processor queue length
The number of CPUs + 1
Exceeding the threshold indicates that the processors are not fast.
ASP.NET applications
Requests per second_total
Through ongoing monitoring, trends begin to emerge that equate requests per second with CPU consumption
The number of requests executed per second; this roughly equates to the number of HTTP pages per second.
Disk
Physical Disk\% Free Space
15%
Logical Disk\% Free Space
Disk
Physical Disk\% Disk Time
90%
Logical Disk\% Disk Time
Disk
Physical Disk\Disk Reads/sec, Physical Disk\Disk Writes/sec
Depends on manufacturer's specifications
Check the specified transfer rate for your disks to verify that this rate does not exceed the specifications. In general, Ultra Wide SCSI disks can handle 50 to 70 I/O operations per second. Note that whether or not the I/O is sequential or random can have a strong impact on values for disk reads/sec and disk writes/sec.
Disk
Physical Disk\Current Disk Queue Length
Number of spindles plus 2
This is an instantaneous counter; observe its value over several intervals. For an average over time, use Physical Disk\Avg. Disk Queue Length.
Memory
Memory\Available Bytes
For larger memory computers, greater than 4 MB
Research memory usage and add memory if needed.
Memory
Memory\Pages/sec
n pages/sec per pagefile
Research paging activity. Note the amount of I/O going to the disks with pagefiles.
Paging file
Paging File\% Usage
Above 70%
Review this value in conjunction with Available Bytes and Pages/sec to understand paging activity on your computer.
Processor
Processor\% Processor Time
85%
Find the process that is using a high percentage of processor time. Upgrade to a faster processor or install an additional processor.
Processor
Processor\Interrupts/sec
Depends on processor; 1,000 interrupts per second is a good starting point
A dramatic increase in this counter value without a corresponding increase in system activity indicates a hardware problem. Identify the network adapter, disk, or other hardware causing the interrupts.
Server
Server\Bytes Total/sec
If the sum of Bytes Total/sec for all servers is roughly equal to the maximum transfer rates of your network, you may need to segment the network.
Server
Server\Work Item Shortages
3
If the value reaches this threshold, consider adding the DWORD entries InitWorkItems (the number of work items allocated to a processor during startup) or MaxWorkItems (the maximum number of receive buffers that a server can allocate) to the registry (under HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Services\LanmanServer
\Parameters). The entry InitWorkItems can range from 1 to 512 while MaxWorkItems can range from 1 to 65,535. Start with any value for InitWorkItems and a value of 4,096 for MaxWorkItems and keep doubling these values until the Server\Work Item Shortages threshold stays below 3. For information about modifying the registry, see Registry Editor overview .
Caution
•
Server
Server\Pool Paged Peak
Amount of physical RAM
This value is an indicator of the maximum paging file size and the amount of physical memory.
Server
Server Work Queues\Queue Length
4
If the value reaches this threshold, there may be a processor bottleneck. This is an instantaneous counter; observe its value over several intervals.
Multiple processors
System\Processor Queue Length
2
This is an instantaneous counter; observe its value over several intervals.
