MARS 04/09
Operations
Streamlined our server build process, and updated our build documentation accordingly. For both Windows 2003 and Windows 2008 I wrote some PowerShell scripts that utilize netsh to set all of our default firewall rules.
Also for Server 2008, I wrote some additional scripts that install all the Windows Features that we install by default, such as PowerShell. As soon as I find the time I plan on attempting to completely automate our OS install to include all of our default settings and application installs, i.e. Anti-virus, smartcard, etc.
OCS
Not much to report on this one, other than that I prepped two of the OCS servers for our R2 rollout. I also prepped our ISA farm (added some new network interfaces) for OCS.
ISA
Well after months of troubleshooting and countless hours on the phone with Microsoft Premier support we’ve finally figured out a work around to our issue with editing documents in SharePoint when using ISA. In a nutshell clients running Windows Vista and Office 2007 would receive an error when trying to save a document back to SharePoint after editing. After spending a lot of time on the phone with and outstanding Support Engineer at Microsoft it was determined that it was a bug in WebDAV. Until the WebDAV team releases a fix we were able to find the following work around.
- Require Check In/Check Out on all document libraries.
- Disable Basic Authentication for the the Web Client Service, open regedit, and browse to HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
- Find the BasicAuthLevel key, and set the value to 0
SharePoint
Deployed a new GPO to all of ITS staff that configures all settings needed for seamless use of SharePoint. The changes made by the GPO are as follows:
- Adds the SharePoint URL’s to the trusted sites list.
- Enables automatic login for trusted sites.
- Adds the VU Certificate Authority as a trusted root certificate authority.
- Adds the AuthForwardServerList registry key listing all the SharePoint URL’s via a startup script:
HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
REG_MULTI_SZ “AuthForwardServerList”
Leave a Reply