.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

How to protect SharePoint servers from the ASP.NET vulnerability

Posted By: erobillard     Posted Date: September 21, 2010    Points: 0   Category :ASP.Net
On Friday an ASP.NET vulnerability was announced at an Argentine security conference, Microsoft posted Security Advisory 2416728 within a few hours, and by early Saturday morning Scott Guthrie described steps to mitigate ASP.NET sites against the vulnerability . Scott also posted a FAQ about the vulnerabilty that describes steps being taken towards a permanent solution, and how to detect attacks by monitoring server logs. Monday the SharePoint Products and Technologies team posted Steps to protect...(read more)

View Complete Post

More Related Resource Links

Fix available to protect SharePoint servers from ASP.NET vulnerability

Today the fix shipped to remedy a cryptographic ASP.NET vulnerability. The update is listed as Important , and it is strongly recommended that this security update be applied to all IIS servers including those hosting SharePoint and other ASP.NET applications. Though the greater risk is to public-facing servers, all servers should be protected. The fix was announced as a Security Bulletin: http://www.microsoft.com/technet/security/bulletin/ms10-sep.mspx A webcast will be held this afternoon to describe...(read more)

Office SharePoint - Mutual Authentication Failed. The servers password is out of date at the domain

I have a SharePoint Server 2010 site setup with SSL. (https://sitename.com) Whenever someone tries to save an Excel or Word document to the site through Save As or Save To SharePoint they get "Mutual Authentication Failed. The servers password is out of date at the domain controller". The desktop experience feature is installed and the webclient service is running. They also receive certificate is not available and if they wait a little bit or hit OK it will show the directory and not the website like on a regular http site.  

ASP.NET Security Vulnerability and SharePoint 2007 (Microsoft Security Advisory (2416728))


With the recent security advisory issued by Microsoft for all ASP.NET applications it was highlighted by Scott Gu that SharePoint applications are at risk also. Scott provided a link to a script which would run on your web-server  to determine if there are ASP.NET applications installed on it and if it was vulnerable or not. I ran this script on my SharePoint server and noticed the following web.config files highlighted as being vulnerable:

C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\template\layouts\web.config
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\template\images\web.config
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\isapi\web.config
C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\wpresources\web.config

Could I follow the instructions provide by Microsoft in the alert and modify these files? If not, how do I protect my web applications from this threat or are they at risk at all?

How to copy a complete list from a sharepoint site to another when both are on different servers and

Hi All,
I have a sharepoint site which has a custom list. This list keeps getting updated with new items probably on a daily basis.
I need a copy of this list on my sharepoint site which is on a different server altogether. And i need the updates too on a daily basis. How can i achieve this programmatically or otherwise?How can i copy the entire list?
Some timer job to get my list updated?
Rgds, Ash

Does Useful Sharepoint Designer Custom Workflow Activities work across servers - pls HELP


Not usre if this is the right place to post this but sure many guys must have used this
I have a siteA at



and Site B at



when i try and use the
Copy List Item Extended Activity to copy the list items across i keep getting error:

System.IO.FileNotFoundException: The Web application at http://myserverA/sites/pop/lists/mylistname could not be found. Verify that you have typed the URL correctly. If the URL should be serving existing content, the system administrator may need to add a new request URL mapping to the intended application.

My AAM looks like this:

Internal URL                  Zone        Plublic URL for Zone

http://myserverA:8080    Default     http://myserverA:8080

http://myserverA.domainname:8080  Default  http://myserverA.domainname:8080

http://myserverA.domainname:2020 Default     http://myserverA.domainname:2020  -- this is been extended for FBA

Any ideas what i ne

Setting up a hardware load balancer between WFEs and App servers in SharePoint 2010


I am looking for any information I can find about setting up a hardware load balancer between WFEs and App servers in SharePoint 2010.

While the load balancing procedure is simple for WFEs since you just set up DNS to point to network load balancer (NLB) and NLB can be configured to load balance between the WFEs, NLB in this case is sitting outside the farm. How will you insert NLB inside the farm?

I know Application Servers can load balance on their own (WFEs can direct traffic to multiple App Servers) but I want to configure a hardware load balancer nonetheless. I have seen architecture diagrams on TechNet which show NLBs between App and WFEs but no guidance on how it will be configured. Since the app servers will be registered as part of the farm (Configuration DB), how do I tell WFEs to direct traffic to NLB rather than to the App servers directly.


Correct procedure for MS NLB on two SharePoint web front end servers


Hi All, What is the correct procedure for deploying MicrosoftSoft  Network  Load Balancing on Windows Server 2008. There is no requirement for a hardware soultion and am only doing this to have availability in the event of one of the servers not being available. This will be a production environement in a smalll server farm setup with very light user usage. Setup consists Two web server, an application server (although there really isn't a need for one but their all virtual and customer is happy to allocate the resource) plus the SQL server.

I thought i would just enable NLB on the two web front servers and use these, then a colleague pointed out that having the web servers laod balancing themselves would only add to the load and he suggested adding another virtual server to act as the load balancer. This seems like a watse of a server just to ast as a load balancer.

 Is it okay in a production environment (with a very light user load) to run the load balancing on the two front end web servers or does this increase the load? i thought i knew the answer until i though about it?

Thanks in advance.  

SharePoint Error 6482 every minutes on query servers


Has SharePoint Error 6482 every minute on query servers. In the Search Administration, crawl status shows "Could not connect to Index server  for application 'SharedServices_Name'. This error might occur if the server is not responding to client requests, the firewall or proxy configuration is preventing the server from being contacted, or the search administration Web service is not running on the server"

Followed "http://kbalertz.com/962928/cannot-browse-Office-SharePoint-Server-Search-Settings-Shared-Services-Provider.aspx" to apply self SSL.. didn't fix the problem..


Any insights? Thank you.

Here is the detail error message:


Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (f3520ea9-5580-4b76-ab0c-2fb315b2d87b).

Reason: The underlying connection was closed: An unexpected error occurred on a send.

Techinal Support Details:
System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Unable to write data to the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host

Copying SharePoint databases from single SQL server to clustered SQL servers, is it possible?



I am going to install SharePoint on load balancing servers - two front web servers, clustered database and on query server.

Since ordering the required hardware for clustering may take long time, my company decides to install SharePoint databases on single SQL server, and later on the databases will be restored on the clustered database server, any SharePoint configuration related to database will use DNS name not the IP address.

My question , in order to copy SharePoint database from single SQL server to clustered SQL servers ,Can we take backup from SharePoint databases (Content , Shared services ,Search …) from single  SQL server to be restored later on clustered SQL server? And then change DNS record to refer to the clustered IP address without any modification on SharePoint settings?



Problem integrating SharePoint with Reporting Services across different servers using Kerberos

Hi Folks

Apologies for the long post but wanted to include as much detail as possible...

Edit - Sorry just realised I hadnt mentioned we are using SQL Server 2005 SP3

We have a problem with our SharePoint Reporting Services integration, we are using Kerberos authentication and our SharePoint installation and SQL Server databases are on separate servers.  I have listed details of our setup below and also the symptoms we are experiencing....


Setup details


ServerA (SharePoint Server) Windows Server 2003 R2 Enterprise x64 Edition SP2


Changing the graphics on the home page of a SharePoint site

When you create a site in Microsoft Windows SharePoint Services by using the default Team Site template, the home page includes two default graphics. A Windows SharePoint Services graphic appears in the body of the page, and a picture of a house in a circle appears near the site title. You can change these graphics to customize your site. Changing the smaller graphic requires a Windows SharePoint Services compatible Web page editor

Displaying SharePoint lists in Web Parts

When you create a built-in or custom list in Microsoft Windows SharePoint Services, Windows SharePoint Services creates a Web Part, a basic building block of a SharePoint site, to display that list. These Web Parts are called List View Web Parts. Windows SharePoint Services stores List View Web Parts in the site collection Web Part gallery. (The site collection Web Part gallery is the most central gallery of Web Parts for a work group. By default, the gallery name is the name of the site, such as "Our Team Site Web Part Gallery." )

Take a tour of your SharePoint site

What is a SharePoint site for?
A SharePoint site is a Web site that provides a central storage and collaboration space for documents, information, and ideas. A SharePoint site is a tool for collaboration, just like a telephone is a tool for communication, or a meeting is a tool for decision making. A SharePoint site helps groups of people (whether work teams or social groups) share information and work together. For example, a SharePoint site can help you:

Coordinate projects, calendars, and schedules.
Discuss ideas and review documents or proposals.
Share information and keep in touch with other people.

Six easy ways to customize your site using Web Parts in SharePoint

Becoming familiar with Web Part customization techniques gives you a range of page-customization choices. For example, you can customize your site's home page so that it displays the specific information that your team needs. You can rearrange the list items on the home page, add lists, and even change the images on the home page. As you become more familiar with Web Part Page customization techniques, you can build interactive Web Part Pages that makes the data in lists more dynamic and useful, and you can add new Web Parts that provide access to external data and Web services.

Working with SharePoint document libraries

Document libraries are collections of files that you can share with team members on a Web based on Microsoft Windows SharePoint Services. For example, you can create a library of common documents for a project, and team members can use their Web browsers to find the files, read them, and make comments. Users with Microsoft Office 2003 can check out and edit the files as if they resided on a local or network drive.

By default, your team Web site comes with a built-in document library named Shared Documents, which is listed on the Quick Launch bar as well as on the Documents and Lists page.

Out of the Depths of SharePoint's XML Hell

I described how a new open source tool called sporm significantly simplifies unit testing SharePoint. Making SharePoint unit testable is my absolute favorite feature of sporm because SharePoint is notoriously hard to unit test. But sporm provides other benefits as well and its ability to pull us out of the depths of verbose loosely typed XML hell and into LINQ excellence is next on my list of favorite features. So in this post I'll describe the pre-sporm technique of querying with CAML, how to query data using sporm, and finally how sporm supports SharePoint's unique architecture of allowing multiple content types per list and what that means to you.

Unit Testing SharePoint - Past, Present, and Sporm

As I described in SharePoint: The Wild West of Software Development there is a serious problem when you develop for SharePoint: ensuring quality through unit testing is really, really hard. And that's where a new open source tool just released today called sporm (SharePoint Object Relational Mapper) comes in. While sporm provides many benefits besides simplified unit testing I wanted to focus on this topic first, because sporm's approach, which models the entity framework in the way it supports POCO's, is a unique feature not available with other SharePoint tools like LINQ to SharePoint.
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend