Book Preview: Least Privilege Security for Windows 7, Vista and XP

Least Privilege Security is the practice of assigning users and programs the minimum permissions required to complete a given task. Implementing this principle in different versions of Microsoft Windows requires careful planning and a good understanding of Windows security. While there are benefits in implementing Least Privilege Security on the desktop, there are many technical challenges that you will face when restricting privileges.

In our company, we are about to plan the rollout for Windows 7, so this book sounds interesting to me. Packt Publishing has promised to send me a copy of this book in return for a review. I’m looking forward to receiving it.

To get a first impression of the content and it’s quality, here is a link to Chapter No. 3 – Solving Least privilege Problems with the Application Compatibility Toolkit .

Happy reading!

By the way, have you heard about “Packt’s Business-to-Business campaign” ? If not, follow this link for further information …


How to transfer working sets in Domino Designer to a different machine

Found this information in the IBM Lotus Knowledgebase ( Technote #1438255 )

The working sets information is kept in a file called workingsets.xml in the following location in your Notes installation folder:

Notes\Data\workspace\.metadata\.plugins\org.eclipse.ui.workbench

Copy this file to the new Domino Designer client in the same location while Domino Designer is not running. When you next start up Domino Designer the working sets will be available and matching the previous client.


Sametime 8.5 frustration

I have done a some 15 sametime installations over the past few month. Most of them to prepare a session for the upcoming AdminCamp in Gelsenkirchen later this year. All installation are on Linux.

I have also setup a productive environment for our company which runs fine except a few issues.

  • During the past 2 weeks our community server ( the only component taht is still running on Windows ) constantly crashes every few hours. It does not really crash but it seems that all of the ST* services are stopped at once and then restart. The services all show a status of “started” after such a “crash” but noone is able to connect to the community server. The only way to get it to work again is to restart the whole server.

There are no clues in the log and nobody is able to explain his very strange behaviour.

  • I tried to uninstall Sametime 8.5 embedded from my 8.5.1 FP3 client using setup.exe /v”EMBEDDED_UNINSTALL=true”

    After I restarted the client sametime 8.5 embedded was still in place. The only way to uninstall Sametime 8.5 and revert back to embedded Sametime 8.0.2 was to completly uninstall Lotus Notes and install the client after restart.

    I have posted this in the Lotus Sametime Forum but no answer. OK there is an answer but not confirmed in any way from IBM side.

No problem if it is a bug. But then pls. confirm.

  • Am I the only one who gets

    org.apache.commons.httpclient.HttpMethodBase getResponseBody
    WARNUNG: Going to buffer response body of large or unknown size. Using getResponseBodyAsStream instead is recommended.

    warning messages on the community server console on Linux. I don’t think so. Also posted this in the Sametime Forum. No answer so far.

No problem if this is not a relevant issue. But then pls. at least give a short feedback.

  • The next one is with group authentication and assign policies to group when using LDAP. Good to know that there is a hotfix available.

    Why is this one not posted on fixcentral?

    And another strange thing about this issue is that the problem does not occur on one of two identically installed machines.

No explaination, no hint where to look into to find a clue.

Another question that I asked in the Sametime Forum is about re-installing a (registered) community server.

No answer so far. The only hint comes from another admin / user / customer. And to be honest. If uninstalling the whole installation including all other components the community server is registered with is the (only) solution , then there must be something wrong with the concept.

There are many more issues I ran into like grayed out icons in the IC ( although the option is checked in the policy ), and “community must be defined as Standard Community” ( although the option is unchecked in the policy ) where I cannot find any hint on how to solve neither in the Knowledge Base nor in the Samtime WiKi or Forum.

At least a short (official) response to my posts would have been great; just to know that someone who is responsible for the product cares about it.

At the moment I am a little bit frustrated. Shall I call a consultant?  Oh, wait better a whole buch of consultants, because “one consultant is no consultant”. What will I tell my boss the next time he asks me if we can start to rollout Sametime in the organization? “Great product, but … “.

I know that it is all my fault that I ran into the problems. And maybe my biggest fault is that I am not a native english speaker and not able to describe my problems with Sametime in a way a first level supporter in Babudistanki / Pamplonistan can understand.

If you never had the described issues, great for you. But if you have seen at least one of the problems and have a solution or workaround, pls. share your knowledge. Any help is appreciated.


(Another) Startup script for Sametime 8.5 on Linux

If you are running Sametime 8.5 either on Windows or on Linux you need to create some script to start all components automatically on server startup. Michael Urspringer has already done this for Windows and Enio Basso contributed a script for Linux.

In addition, Sasa Brkic recently posted a script to start the DB2 server on Linux.

I have also written such a script earlier this year that has some additional options.

You can either start  stop or restart the whole Sametime 8.5 server or only selected components. And you can get the status of for example the meeting server by typing

./sametime status meeting

at the shell console.

Download: sametime