Archive for May, 2009

Important note about the SharePoint SP2

May 22nd, 2009 by Tobias Zimmergren

Read the full disclosure "Attention- Important Information on Service Pack 2" in Microsoft’s SharePoint Blog

There is an issue with installing SP2, which causes your SharePoint environment to fall back to "Evaluation" licence without ever notifying you.

So if you’ve got SP2 recently installed, have a look at your license type to make sure it’s still valid. If it says "Evalutation" – you’ll simply need to insert the original key again.

Summary

If you’ve got SP2 installed, read this article: Attention- Important Information on Service Pack 2

Checking out for the weekend!

Sweden SharePoint User Group, May 28th

May 21st, 2009 by Tobias Zimmergren

Author: Tobias Zimmergren
URL: http://www.zimmergren.net

Introduction

On May 28th (thursday next week), we’re having our next SharePoint User Group meeting in Stockholm.

I’m travelling to Stockholm the 26th and leaving the 29th. Anyone care to hook up for a beer or three, let me know.

Agenda

The agenda for the evening looks something like this:

  • 17:00 – 18:00 : Welcome & Mingle
  • 18:00 – ??:?? : Sessions
    • Introduction to SPVisualDev (Tony Restaino)
    • Feedback from the Microsoft Certified Masters program (Peter Williams)
    • Demo of Windows 7 RC (Microsoft*)
  • ??:?? – ??:?? : Beer-time. Everyone is welcome to join us for a beer or three!

Sign up

Since there’s a limit to how many people can fit into the room we’re going to be provided with, you need to sign up here: http://www.sharepointcommunity.se/events/sharepoint-user-group

Sign-ups have precedence before people who didn’t sign up if the room gets full.

See you there!

Tobias

Recover/fetch the Application Pool password

May 18th, 2009 by Tobias Zimmergren

Author: Tobias Zimmergren
URL: http://www.zimmergren.net

Introduction

Alright, so we’ve had a few discussions lately regarding securing your SharePoint environments. Not only did I have a discussion about this when I were conducting SharePoint training last week, but we also covered the aspect which is a base for this article: The Application Pool Password is stored in Clear Text.

If you read this article and the code associated, you’ll see how unsafe it can be to run your Application Pool accounts with too much permissions – which leads us in to the discussion about running a least-privileged installation of SharePoint, at all times!

Note: This can also be seen as a way of "recovering your application pool password".

Where can I get/retrieve my Application Pool Password?

Well, there’s plenty of ways to fetch your Application Pool password, but I’m going to give you two possible ways which is fairly easy. One of which you need to be an administrator on the local server, and one where you can be an anonymous user running a web part under elevated privileges <yikes!>.

  • Use the SharePoint Manager to get your Application Pool password
    • Find your Application Pool:
      image

Note: You’ll see that the password for your Application Pool is indicated in clear text, along with the name, ID, User Name etc.

  • Use the following SharePoint object model code to get your Application Pool password:

    image

  • Copy/Paste friendly code:

SPWebService webService =
                SPContext.Current.Site.WebApplication.WebService;

string appPoolName =
                SPContext.Current.Site.WebApplication.ApplicationPool.Name; 
SPSecurity.RunWithElevatedPrivileges(delegate()
{
    var app = new SPApplicationPool(appPoolName, webService);
    var lit = new Literal();
    lit.Text += "Application Pool Name: " + app.Name;
    lit.Text += "<br/>";
    lit.Text += "Application Pool Password: " + app.Password;
    lit.Text += "<br/>";
    lit.Text += "Application Pool User Name: " + app.Username;
    Controls.Add(lit);
});

  • This is what the Web Part would look like, even to anonymous users

    image
     

What can we do to secure our environments then?

First off, you should think about security before you install SharePoint. That’s for sure. Second, you should always perform a least-privileged installation of your SharePoint environment, meaning that e.g. the Application Pool account doesn’t get more permissions than needed.

To see some related articles on how you can correctly install your SharePoint environments, please have a read-through on the following articles:

Summary

This post was merely meant to be a follow-up to the discussions going on, and to enlighten you that there are some things we DO NEED TO CONSIDER with our SharePoint environments, even if they’ve been running fine for quite some time.

Just a heads up.

Z out.

SharePoint Server 2010 preliminary requirements

May 12th, 2009 by Tobias Zimmergren

Introduction

The Microsoft SharePoint Team Blog announced today what the preliminary requirements look like for SharePoint Server 2010. Brace yourself, and have a read through this article:
http://blogs.msdn.com/sharepoint/archive/2009/05/07/announcing-sharepoint-server-2010-preliminary-system-requirements.aspx

Have a good read ;-)

WSS 3.0 & MOSS 2007 Software Development Kit (SDK) 1.5

May 3rd, 2009 by Tobias Zimmergren

On the 24th of April, Microsoft released a new version of their SDK for WSS and MOSS, and we’re now talking about version 1.5.

I suggest that you update your virtual machines (or whatever tech you’re using for your playgrounds) and install the new SDK.

Download

Download WSS 3.0 SDK 1.5
Download MOSS 2007 SDK 1.5