Silicon Shecky

Infosec Practitioner

Connect

So remember when I said keep it simple…

By Leave a Comment

I really need to take my own advice sometimes. Ok, most of the time.

Here is the whole scenario. A few months ago, I saved a client’s SBS 2003 server without rebuilding it. Client was happy. Since then they have been getting odd ball disconnect messages for no rhyme nor reason. the main machine that was getting these had a bad motherboard, got it replaced under warranty. Everyone still gets odd disconnects and it causes corruption in a critical program when it happens too often. So I start doing the network troubleshooting, checking the server NIC, replacing cables, checking the wiring in the office, and changing out switches.

None of it does any good. So I decide to go ahead and update the server’s NIC drivers, and while waiting for the download, I go into the SBS console and notice something really odd. Licensing says they have only 5 licenses and a max usage of 6…

Head meet desk, wall and palm. Of course the client had an additional 5 licenses, but in the process of saving the server, it forgot that there were another 5 licenses. Re-add these licenses and voila! No more disconnects.

Now in SBS 2008 you wouldn’t hit this problem as they have removed the licensing service, and while yes you do need CALs, you don’t install them, and instead keep the paper on hand to prove that you are compliant when the BSA comes knocking. Chalk up another reason to use SBS 2008.

Meanwhile, lesson learned. Always check everything after fixing a server without rebuilding it.

SBS 2008 notes and observations

By 3 Comments

Now having completed a full SBS 2008 deployment, I feel I can give some thoughts and a more proper review of the system.

Overall SBS 2008 is a very nice and slick system. There are some nice changes to it from SBS 2003, but there are also some things that you do need to watch out for.

First the positives about it. The install process is very smooth and simple. Really a base preconfigure took an hour of my time and a couple hours to download patches and updates. The help files in the actual SBS console are way better than the help in SBS 2003. They actually explain how to move files and folders such as the user folders to different drives, something you had to look up on the net with SBS 2003. They also have gotten rid of the licensing feature, so while you still need to purchase CALs, you don’t install them directly on the server. The also have one wizard for setting the server IP and Internet connectivity. Also it will try to discover any router/firewall and attempt to allow you to configure it ( I did not test this feature out). Also you can set it up to automatically redirect user folders (i.e. My Documents) to the server with just the check of a box.

Downside though are somewhat more annoyances than anything else. First off, you cannot run the Internet Connection Wizard if there is another DHCP server running on the network (say from a firewall/router). This can be a pain due to hunting down DHCP servers. Also the password policy wizard I found to be incomplete. Considering this was a new network, and I gave users a default password that they were going to change after everything was set up, I had to go through group policy to change the fact that passwords had to be active for more than 2 days before you can change them. This decision was not available in the password policy wizard and did make things a little more difficult until I found the policy and figured out that it had to be set to 0 days and this was after setting it to undefined did not produce the desired result. Finally, my last complaint is updates. Basically that you actually have to tell the update system to search for more than just OS updates. If you don’t it will not find the Exchange, SQL, or other items that are part of SBS 2008 and will need to be updated (not to mention Microsoft trying to force IE8 down our throat by making it a high priority update).

Even with these few minor issues, I think that SBS 2008 is a definite step up from SBS 2003 and one that will be good for many future uses.

Tricksy Microsoft lessens Firefox security

By Leave a Comment

Those that use Firefox love how it works. They know that it does not install software without your permission, and it tends to bee more secure overall. Well that is not always so true when using Firefox on a Windows based machine anymore.

See with some recent security updates to the .Net framework, Microsoft also installs an extension into Firefox without asking, and that is not all. The extension is tough to remove (you have to go into the registry to remove it), and it allows software to be installed on a machine without a user even knowing it.

Now security updates are important, but how can we trust them from a source such as Microsoft, if they are doing the same things as phishing and adware sites? Honestly, these underhanded practices really have to stop.

You can read more about this at ZDNet.