Remote Assistance in Windows 7

by Anand Prabhu 21. April 2010 18:49

If you are a Windows 7 user, you might have struggled every time when you want to provide support using Remote Assistance. Here is a simple solution to create a short cut in your desktop.
Right click desktop and create a short cut with this value.

%windir%\system32\msra.exe /offerra

JavaRa cleans old version of Java in your computer

by Anand Prabhu 12. April 2010 06:47

This might be a helpful thread for Java Runtime Environment users and application developers. Some applications behave abnormally if you are not running the required and supportive version of JRE in your computer. CISCO ASDM is a good example. I had issues when I installed it in JRE Update 19. So you need to remove this version and install a compatible version of JRE Update 17.

All you need to do is uninstall the existing version and install a compatible version of Java Runtime Environment. Here comes JavaRa

Tiny utility JavaRa cleans up older or redundant versions of the Java Runtime Environment (JRE) that might be littering up your PC, and optionally updates to the latest version. It's a simple tool that just works.

Download JavaRa

How to maximize windows remote desktop connection?

by Anand Prabhu 4. April 2010 22:43

The response from Microsoft for the below issue made me laugh at Microsoft
 
Issue is When you start the Remote Desktop Connection client, you may find that the window size is the same as the remote desktop size, not full screen as expected; however, the Maximize button indicates the window is in the maximized state. If you click the Maximize button, the window does not enter full-screen mode as expected; instead, the window is restored to a size slightly smaller than the remote desktop size.
 

Solution provided by Microsoft: "To work around this issue, restart the computer. The Default.rdp file is replaced by Windows File Protection as soon as you restart the Remote Desktop client."
 
http://support.microsoft.com/kb/302803
 
This is so funny as Microsoft asks to restart the server for small window size of remote desktop connection.
 
The solution that works is
 
1.    Go to run > mstsc

2.    Under Display Tab, move the “Display configuration” settings to Full Screen mode.

3.    Now try connecting to the server. Your issue is resolved. No need to restart the computer.

Windows 7: Set up Flip 3D Shortcut

by Anand Prabhu 3. April 2010 17:48

Would you like to bring Flip 3D view of Windows Vista in your Windows 7 Computer? By default Windows 7 doesn't have short-cut for Flip 3D. If you are not aware of what is Flip 3D, see below picture.

1. Right click on your desktop and choose New > Shortcut

2. Type the below bold text in 'Type the location of the item' textbox

C:\Windows\system32\rundll32.exe DwmApi #105

 

3. Click Next button and set a name for this shortcut, say 'Flip 3D View'

4. Click Finish

5. Now you need to change the icon of the shortcut. Right click and choose properties

6. Choose 'Change Icon' button

7. Type the below bold text in the 'Look for icons in this file' textbox

%SystemRoot%\System32\imageres.dll

 

8. Click ok. Now you could see that the icon has changed

9. Right click the shortcut and 'Pin to Taskbar'

 

use Gmail new attractive interface of iPad in your computer

by Anand Prabhu 3. April 2010 06:48

If you have tried surfing Gmail in iPad, you may find it different than what you have used on your desktop. Yes Google has released new version of Gmail Interface ( Gmail for mobile HTML5 web app) specially for iPad (launched for launched for iPhone and Android devices as well). It is classic, see below. You would defintely love to have the same interface in your desktop or laptop computer.

The solution is very simple to do if you already have firefox browser or else download firefox. Here it is

1. Install the User Agent Switcher Firefox extension

2. Once installed, go to Tools -> Default User Agent -> Edit user agents.

3.Click New -> User agent, then copy and paste the iPad-spoofing user agent below in 'User Agent' text field.

Mozilla/5.0(iPad; U; CPU iPhone OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B314 Safari/531.21.10

 

4. Now that you've added the new user agent, select it as your active user agent. (Tools -> Default User Agent -> iPad)

5. Now navigate to and log into Gmail. When it loads the Gmail interface, you should see the tablet-friendly interface you see in the screenshot above.

 

Solution for 'Validation of viewstate MAC failed'

by Anand Prabhu 3. April 2010 04:51

Server Error in '/' Application.

Validation of viewstate MAC failed. If this application is hosted by a Web Farm or cluster, ensure that <machineKey> configuration specifies the same validationKey and validation algorithm. AutoGenerate cannot be used in a cluster.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Web.HttpException: Validation of viewstate MAC failed. If this application is hosted by a Web Farm or cluster, ensure that <machineKey> configuration specifies the same validationKey and validation algorithm. AutoGenerate cannot be used in a cluster.

-------------------------------------------------------------------------------------------------

Do you get above error in your website?

This means that Content Services Switch or Load Balancer is established in your application servers and thus causing this error.

The problem now is that most of the web applications require to maintain the client connection to same server till the client ends the connection. CSS by default connects the client request to which ever the server is free at that moment. If the first request of the client is handled by SERVER1(10.2.2.1), CSS may direct the same client request to SERVER2(10.2.2.2) if SERVER2 is comparatively free than SERVER1. Even if the same version and patches of web application is maintained at SERVER1 and SERVER2, Machine Key and session information will not be available on both the servers. So now, what you need to do is setting up of  'stickiness' in CSS content rule.

Before trying to resolve it, I explain you some technical terms related to this bug.

  • Viewstate: Explained very well here http://www.dotnetjohn.com/articles.aspx?articleid=71.
  • MAC (Viewstate MAC): ASP.NET runs a message authentication check(MAC) on the page's viewstate when the page is posted back from the client. This is to ensure that the same client sends the requests without data tampering in between transmission. Some peoples suggest to disable this check by setting enableEventValidation="false" (see bulletin 1 below), but please be aware of the consequences of security risk. Disabling this check skips the validation of postback and the attacker could spoof the postback data and corrupt your application or servers.

  • Web Farm: Two or more server balancing the traffic of a web application. In a Web Farm, a front-end load balancer will handle the client requests and distribute it between the back end application servers.
  • Content Services Switch (CSS):  CSS receives the client request for content and directs to a specific server, say for example, if you have setup CSS to balance the load between two servers, then it would send the client request to the servers which are free at that moment. To assist you in understanding see the setup diagram below,

Other suggested solutions that I do not prefer to do:

 1.             Try adding this string in <system.web> section of your web.config file :
                <pages validateRequest="false" enableEventValidation="false" viewStateEncryptionMode ="Never" />
                for fix "Validation of viewstate MAC failed" error.

Even your issue is resolved by adding this line, it is like removing the speakers from 'Fire Alarm System'. 


2.              Force every server in your farm to use the same key; generate a hex encoded 64-bit or 128-bit <machineKey> and put that in each server's machine.config.

<machineKey     validationKey='123123GDGAGASGAGDGGAGDAGAG712879812701NVKAHDA9817913134FF01F3FADFSA9'

decryptionKey='190283091UJHFA701820938JFKAJF8' validation='SHA1'/>

 

You can generate a key from http://www.eggheadcafe.com/articles/GenerateMachineKey/GenerateMachineKey.aspx

This solution is atleast better than the above one but again setting up of static machinekey is a security loop hole.


Proper Solution:

Include 'Stickiness' in CSS configuration

Stickiness will tell the CSS to maintain an association between client and same server connection (SERVER1 or SERVER2) till the connection ends.

 content rule-1
    protocol tcp
    vip address 172.20.20.20
    port 80
    add service webserver1
    add service webserver2
    advanced-balance sticky-srcip
    active

CISCO Advanced Configuration Guide of Sticky

Details of Microsoft Patches

by Anand Prabhu 2. April 2010 19:01

What Security Administrators must know about Microsoft Patches?


Microsoft publishes a Security Bulletin Summary each month to notify customers of the security updates they have made to address vulnerabilities in Microsoft products. The security updates are released on the second Tuesday of the month, commonly known as patch Tuesday. Individual Security Bulletins, identified within the monthly summaries, each describe a set of vulnerabilities and are linked to from the Security Bulletin Summary page.

 


  • Subscribe Microsoft Technical Security Notifications to get alerts to your email or mobile device whenever a security patch is released. Help protect your computing environment by keeping up to date on Microsoft technical security notifications. Notifications are available in RSS, instant message, mobile device, or e-mail format, and are also available online.

What are Microsoft Security Advisories?

Microsoft Security Advisories, a supplement to the Microsoft Security Bulletins, address security changes that may not require a security bulletin but that may still affect customers' overall security. These advisories are a way for Microsoft to communicate security information to us (customers) about issues that may not be classified as vulnerabilities and may not require a security bulletin.


Did you find any vulnerability in Microsoft product? Do you want to know where to report it?

Report your identified vulnerabilities

Microsoft Security Response Center investigates all reports of security vulnerabilities affecting Microsoft products and services. If you are a security researcher and believe you have found a Microsoft security vulnerability, you can report on the above link and Microsoft is ready to investigate it with you.!

 

Search by Product/Technology and Service Pack of all Microsoft Patches

Month List

RecentComments

Comment RSS