Navigation

Search

Categories

On this page

Front Page Macro to remove pfhover applets
IFilter fun
Win2k3 server, how I love thee, let me count the ways

Archive

Blogroll

Disclaimer
The opinions expressed herein are my own personal opinions and do not represent my employer's view in any way.

RSS 2.0 | Atom 1.0 | CDF

Send mail to the author(s) E-mail

Total Posts: 120
This Year: 1
This Month: 0
This Week: 0
Comments: 40

Sign In
Pick a theme:

# Wednesday, September 27, 2006
Wednesday, September 27, 2006 10:53:20 AM (Mountain Daylight Time, UTC-06:00) ( )

I can't really take credit for this. I found it somewhere on the net, and wanted to make sure I kept it around.

Sub HoverRepair()

Dim applet As IHTMLElement
Dim param As IHTMLElement
Dim paramStr As String
Dim Text As String
Dim URL As String
Dim target As String

For Each applet In ActiveDocument.all.tags("applet")
If applet.getAttribute("code") = "fphover.class" Then

Text = ""
URL = ""
target = ""
paramStr = ""
For Each param In applet.Children
If param.tagName = "param" Then
'paramStr = paramStr & param.outerHTML

If param.getAttribute("name") = "target" Then
target = param.getAttribute("value")
End If
If param.getAttribute("name") = "url" Then
URL = param.getAttribute("value")
End If
If param.getAttribute("name") = "text" Then
Text = param.getAttribute("value")
End If

End If
Next

paramStr = paramStr & "<a href=""" & URL & """"
If target <> "" Then
paramStr = paramStr & " target=""" & target & """"
End If
paramStr = paramStr & ">" & Text & "</a>"

applet.outerHTML = paramStr


End If

Next

End Sub

Comments [0] | | # 
# Friday, September 08, 2006
Friday, September 08, 2006 9:37:49 AM (Mountain Daylight Time, UTC-06:00) ( )

Batch script to run FiltDump against a list of files

SET FiltDump="C:\Programs\Microsoft Platform SDK for Windows Server 2003 R2\Bin\FiltDump.Exe"
net use z: /delete /y
net use z: \\server\share
for /R z:\subfolder1\subfolderN\ %%i in (*.*) do @%FiltDump% %%i
Comments [0] | | # 
# Monday, August 28, 2006
Monday, August 28, 2006 2:30:25 PM (Mountain Daylight Time, UTC-06:00) ( )

Creating a Scheduled task with a named account is a fun thing to do.

You get to do all sorts of wonderful things.

Including paying attention to this KB and the associated implications

http://support.microsoft.com/?id=867466

When your Scheduled task is a batch file, that account HAS to have READ & EXECUTE access to the CMD.EXE file in %SYSTEMROOT%\SYSTEM32

If you don't you get a wonderfully non-descript error of 0x80070005: Access is denied. This shows up in Task Scheduler as "Cannot start task"

Anyway - the problem is solved by adding an Access Control Entry (ACE) to the Access Control List (ACL) to the file for a well known security ID. Which one?
The one I needed was...
 
SID: S-1-5-3
Name: Batch
Description: A group that includes all users that have logged on through a batch queue facility. Membership is controlled by the operating system.
 
I was trying to setup a scheduled task using a domain user. Thusly, they have to have the ability to login as a batch, which should be setup automagically when creating the job. They're not logged on Interactively (the console), and they're not running as a service (services.msc). We're definately not running under telnet, and that user shouldn't be an administrator for obvious reasons. That leaves us with the final solution.
 
Also, if the scheduled task is a batch file, that user has to have access to the CMD.EXE file in %SYSTEMROOT%\SYSTEM32\
On windows 2003 server by default, that file has the ACL
 
BUILTIN\Administrators:F
NT AUTHORITY\INTERACTIVE:R
NT AUTHORITY\SERVICE:R
NT AUTHORITY\SYSTEM:F
SERVERNAME\TelnetClients:R
 
I needed to have an ACE for
 
NT AUTHORITY\BATCH:R
 
 in that list for my task to work
Comments [0] | | #