<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:copyright="http://blogs.law.harvard.edu/tech/rss" xmlns:image="http://purl.org/rss/1.0/modules/image/">
    <channel>
        <title>Windows Server 2003</title>
        <link>http://www.mostlylucid.net/category/28.aspx</link>
        <description>Windows Server 2003</description>
        <language>en-US</language>
        <copyright>Scott Galloway</copyright>
        <generator>Subtext Version 2.1.0.5</generator>
        <item>
            <title>Just noticed on Larkware - Exchange intelligent Message filter just released to everyone!</title>
            <link>http://mostlylucid.net/archive/2004/05/25/just-noticed-on-larkware---exchange-intelligent-message-filter-just.aspx</link>
            <description>Umm..title says it all, &lt;a href="http://www.larkware.com/Articles/TheDailyGrind381.html"&gt;Larkware link &lt;/a&gt;is here, &lt;a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=C1B08F7B-8CAF-4147-B074-8C9C8F277071&amp;amp;displaylang=en"&gt;download link here&lt;/a&gt;&lt;img src="http://mostlylucid.net/aggbug/846.aspx" width="1" height="1" /&gt;</description>
            <dc:creator>Blog Author</dc:creator>
            <guid>http://mostlylucid.net/archive/2004/05/25/just-noticed-on-larkware---exchange-intelligent-message-filter-just.aspx</guid>
            <pubDate>Wed, 26 May 2004 00:14:00 GMT</pubDate>
            <comments>http://mostlylucid.net/archive/2004/05/25/just-noticed-on-larkware---exchange-intelligent-message-filter-just.aspx#feedback</comments>
            <wfw:commentRss>http://mostlylucid.net/comments/commentRss/846.aspx</wfw:commentRss>
        </item>
        <item>
            <title>This strikes me as incredibly useful! AzMan - lets you assign your own permission types (like 'CanEatPizza')</title>
            <link>http://mostlylucid.net/archive/2004/02/24/this-strikes-me-as-incredibly-useful-azman---lets-you.aspx</link>
            <description>&lt;p&gt;Found &lt;a href="http://weblogs.asp.net/lorenh/archive/2004/02/24/79218.aspx"&gt;this&lt;/a&gt; on &lt;a href="http://weblogs.asp.net/lorenh/"&gt;Loren Halvorson's Blog&lt;/a&gt;...he (?) explains it best, so here's just a complete copy of what he wrote...&lt;/p&gt;&lt;p&gt;&lt;!--StartFragment --&gt; &lt;/p&gt;&lt;blockquote dir="ltr" style="MARGIN-RIGHT: 0px"&gt;&lt;h2&gt;&lt;a id="viewpost.ascx_TitleUrl" href="http://weblogs.asp.net/lorenh/archive/2004/02/24/79218.aspx"&gt;&lt;em&gt;Is anyone using AzMan?&lt;/em&gt;&lt;/a&gt;&lt;em&gt; &lt;/em&gt;&lt;/h2&gt;&lt;p&gt;&lt;em&gt;We are in the process of developing a common role based authorization layer for several of our applications and stumbled across the Microsoft's &lt;/em&gt;&lt;a href="http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/maintain/security/athmanwp.asp"&gt;&lt;em&gt;Authorization Manager&lt;/em&gt;&lt;/a&gt;&lt;em&gt;. I had originally passed over it because I thought it was tied to Windows Server 2003, but it turns out that it runs on &lt;/em&gt;&lt;a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=7edde11f-bcea-4773-a292-84525f23baf7&amp;amp;DisplayLang=en"&gt;&lt;em&gt;Windows 2000&lt;/em&gt;&lt;/a&gt;&lt;em&gt; which we are using in production, and Windows XP which developers use. On XP, just install the &lt;/em&gt;&lt;a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=c16ae515-c8f4-47ef-a1e4-a8dcbacff8e3&amp;amp;DisplayLang=en"&gt;&lt;em&gt;Windows Server 2003 Administration Tools Pack&lt;/em&gt;&lt;/a&gt;&lt;em&gt; and you'll get it.&lt;/em&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;The idea seems great. It allows you to define logical operations like "CanApproveExpenseReports", map those to logical roles in your organization like "Manager". Then assign users to the roles. (The model is extremely flexible...I recommend &lt;/em&gt;&lt;a href="http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/maintain/security/athmanwp.asp"&gt;&lt;em&gt;Dave McPherson's article&lt;/em&gt;&lt;/a&gt;&lt;em&gt;). There is a COM runtime and a .NET interop assembly for use from .NET, that allows your application to quickly check to see if the current user is allowed to perform some operation. Following is not the actual API, I just wanted to give you a feel for how you use it in an app:&lt;/em&gt;&lt;/p&gt;&lt;p&gt;&lt;font face="Courier New" size="2"&gt;&lt;em&gt;if (azMan.CheckAccess(user, "CanApproveExpenseReport")&lt;br /&gt;{&lt;br /&gt;    // Approve expense reports code goes here&lt;br /&gt;}&lt;/em&gt;&lt;/font&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;It also provides an MMC snap-in tool to manage everything. If it works out, it promises to save us a ton of time.&lt;/em&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;I see the &lt;/em&gt;&lt;a href="http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag/html/authpro.asp"&gt;&lt;em&gt;Patterns and Practices Authorization and Profile Application Block&lt;/em&gt;&lt;/a&gt;&lt;em&gt; has a provider that can use it, and there is a RoleManager Provider in Whidbey that uses a part of it too. So Microsoft seems to think it fits the problem.&lt;/em&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;Actually while I'm on the subject of Whidbey, I was surprised that it doesn't seem to provide a general purpose authentication mechanism other than IsInRole. Roles are good for some things, but they are too course-grained for deciding whether a button is visible or not, or whether a user can delete items from a table.  There can potentially be hundreds of these fine-grained secured operations scattered throughout your application, and hard-coding role names (if (User.IsInRole(“Manager“)...) throughout your app is not an acceptable solution in my opinion because it limits the ability to redefine the permissions of each role later on without touching code.&lt;/em&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;Authorization Manager (or AzMan for short) seems to fit the bill perfectly. However I hesitate to jump in too quickly because I don't see very much buzz about this technology on the web. I'd like to read other people's experience with it. Has anyone tried to use it in a .NET Application?&lt;/em&gt;&lt;/p&gt;&lt;/blockquote&gt;&lt;img src="http://mostlylucid.net/aggbug/757.aspx" width="1" height="1" /&gt;</description>
            <dc:creator>Blog Author</dc:creator>
            <guid>http://mostlylucid.net/archive/2004/02/24/this-strikes-me-as-incredibly-useful-azman---lets-you.aspx</guid>
            <pubDate>Wed, 25 Feb 2004 01:11:00 GMT</pubDate>
            <comments>http://mostlylucid.net/archive/2004/02/24/this-strikes-me-as-incredibly-useful-azman---lets-you.aspx#feedback</comments>
            <slash:comments>3</slash:comments>
            <wfw:commentRss>http://mostlylucid.net/comments/commentRss/757.aspx</wfw:commentRss>
        </item>
        <item>
            <title>CDONTS, Windows XP and Windows 2000</title>
            <link>http://mostlylucid.net/archive/2003/10/15/cdonts-windows-xp-and-windows-2000.aspx</link>
            <description>If you have a lot of ASP code which currently runs on a Windows 2000 server, you probably use CDONTS to send your mail...Now, if you want to migrate to Windows 2003 (or Windows XP for local dev) you'll have a problem - CDONTS no longer comes with those environments...&lt;br /&gt;
Luckily CDONTS still works, you just have to hunt down a file called CDONTS.dll  in the system32 directory of your Win 2000 box, copy it to your 2003 box and register it...your old code will then work (though CDOSYS is better!)&lt;img src="http://mostlylucid.net/aggbug/616.aspx" width="1" height="1" /&gt;</description>
            <dc:creator>Blog Author</dc:creator>
            <guid>http://mostlylucid.net/archive/2003/10/15/cdonts-windows-xp-and-windows-2000.aspx</guid>
            <pubDate>Thu, 16 Oct 2003 04:01:00 GMT</pubDate>
            <comments>http://mostlylucid.net/archive/2003/10/15/cdonts-windows-xp-and-windows-2000.aspx#feedback</comments>
            <wfw:commentRss>http://mostlylucid.net/comments/commentRss/616.aspx</wfw:commentRss>
        </item>
        <item>
            <title>Windows Server 2003 Bug in the SMTP administration tool</title>
            <link>http://mostlylucid.net/archive/2003/09/07/windows-server-2003-bug-in-the-smtp-administration-tool.aspx</link>
            <description>This one drove me nuts for a while, I have an smtp server running on my server, but occasionally, the SMTP administration snapin would disappear for no particular reason. This is needless to say VERY annoying - as there's not other effective way to administer SMTP and the snapin doesn't appear in the normal list. Well, forget where I found the solution but here's the fix - just run this command - &lt;font face="Courier New"&gt;regsvr32 c:\windows\system32\inetsrv\smtpsnap.dll &lt;/font&gt;and you'll magically see it's back!&lt;img src="http://mostlylucid.net/aggbug/545.aspx" width="1" height="1" /&gt;</description>
            <dc:creator>Blog Author</dc:creator>
            <guid>http://mostlylucid.net/archive/2003/09/07/windows-server-2003-bug-in-the-smtp-administration-tool.aspx</guid>
            <pubDate>Mon, 08 Sep 2003 05:08:00 GMT</pubDate>
            <comments>http://mostlylucid.net/archive/2003/09/07/windows-server-2003-bug-in-the-smtp-administration-tool.aspx#feedback</comments>
            <wfw:commentRss>http://mostlylucid.net/comments/commentRss/545.aspx</wfw:commentRss>
        </item>
    </channel>
</rss>
