On Thu, Mar 1, 2012 at 9:47 AM, Josh Cooper <j...@puppetlabs.com> wrote:
> Hi Marco, > > On Thu, Mar 1, 2012 at 6:17 AM, Marco Parra D. <marco.parr...@gmail.com>wrote: > >> Hi Josh, thank you for reply, >> >> On 29-02-2012 19:12, Josh Cooper wrote: >> >> Hi Marco, >> >> On Wed, Feb 29, 2012 at 10:52 AM, Marco Parra D. <marco.parr...@gmail.com >> > wrote: >> >>> Hi Josh, >>> I'm runnig from cmd.exe, I'm using Administrator account on the windows >>> box, this is the output for the command that you asked: >>> >>> C:\Users\Administrator>whoami /groups >>> >>> GROUP INFORMATION >>> ----------------- >>> >>> Group Name Type SID >>> Attributes >>> ==================================== ================ ============ >>> =============================================================== >>> Everyone Well-known group S-1-1-0 >>> Mandatory group, Enabled by default, Enabled group >>> BUILTIN\Administrators Alias S-1-5-32-544 >>> Mandatory group, Enabled by default, Enabled group, Group owner >>> >> >> This shows that you are running elevated, which is good. >> >> >>> BUILTIN\Users Alias S-1-5-32-545 >>> Mandatory group, Enabled by default, Enabled group >>> NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 >>> Mandatory group, Enabled by default, Enabled group >>> CONSOLE LOGON Well-known group S-1-2-1 >>> Mandatory group, Enabled by default, Enabled group >>> NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 >>> Mandatory group, Enabled by default, Enabled group >>> NT AUTHORITY\This Organization Well-known group S-1-5-15 >>> Mandatory group, Enabled by default, Enabled group >>> LOCAL Well-known group S-1-2-0 >>> Mandatory group, Enabled by default, Enabled group >>> NT AUTHORITY\NTLM Authentication Well-known group S-1-5-64-10 >>> Mandatory group, Enabled by default, Enabled group >>> Mandatory Label\High Mandatory Level Label S-1-16-12288 >>> Mandatory group, Enabled by default, Enabled group >>> >>> C:\Users\Administrator> >>> >>> >>> I found a page that talks about security on windows 2008, and I tried >>> changing a configuration for the IIS, On the Ineternet Information Services >>> Manager, under Management, Configuration Editor, selecting Providers, click >>> on Edit Items, selecting DataProtectionConfigurationProvider, I change >>> useMachineProtection, and save the change. >>> >>> On Windows 7 the scripts run perfect, but on Windows 2008 R2 still >>> didn't work, still the execution said that the file was modified, but >>> nothing happens on the file..... no errors it's showed.... >>> >> >> Is your Windows 7 box 32-bit? If you're using 32-bit ruby on a 64-bit >> Windows 2008 R2 to edit >> C:\Windows\System32\inetsrv\config\applicationHost.config, >> Windows may be redirecting you to %windir%\syswow64\inetsrv instead: >> http://forums.iis.net/p/1150832/1875622.aspx >> >> >> Yeah, I'm using a Windows 7 32 bits box, and it's works fine... in the >> other hand, I've testing on Windows 2008 R2 64 bits server, I checked on >> the path tha you said, and your right, the file is changed on >> c:\windows\SysWOW64\inetsrv\config\applicationHost.config, but IIS uses the >> file on c:\windows\system32\inetsrv\config\applicationHost.config >> >> C:\Windows\SysWOW64\inetsrv\Config>dir applicationHost.config >> Volume in drive C has no label. >> Volume Serial Number is F4D5-2946 >> >> Directory of C:\Windows\SysWOW64\inetsrv\Config >> >> 03/01/2012 06:01 AM 82,384 applicationHost.config >> 1 File(s) 82,384 bytes >> 0 Dir(s) 6,910,136,320 bytes free >> >> C:\Windows\SysWOW64\inetsrv\Config>dir >> c:\Windows\System32\inetsrv\config\applicationHost.config >> Volume in drive C has no label. >> Volume Serial Number is F4D5-2946 >> >> Directory of c:\Windows\System32\inetsrv\config >> >> 02/29/2012 11:01 AM 82,122 applicationHost.config >> 1 File(s) 82,122 bytes >> 0 Dir(s) 6,910,136,320 bytes free >> >> >> How can I tell ruby that don't uses c:\windows\SysWOW64\inetsrv\config >> path? Is this posible?... >> > > You can disable file system redirection using the special 'sysnative' > alias: C:\Windows\Sysnative\inetsrv\config\applicationHost.config. But > acccording to MS this is not available on 2003[1], which is odd, because > then 32-bit processes in 64-bit 2003 can't disable file system redirection > on a per-file basis. > While working on reboot support, we discovered that there is a hotfix to address this problem on 2003: http://support.microsoft.com/kb/942589 > There are APIs for disabling file system redirection for the entire > process, but that would probably break 32-bit ruby.exe > > Perhaps the best option is to create a symlink to the IIS configuration > directory[2]. However, 2003 doesn't support symlinks, so again I'm not sure > how to do this on 64-bit 2003. Also puppet cannot currently manage symlinks > on Windows, so you'd have to use an exec resource to do that. > > I'll add a note to our troubleshooting guide about 32vs64bit. I'd be > curious to hear about which approach you end up taking. > > Josh > > http://msdn.microsoft.com/en-us/library/aa384187(v=vs.85).aspx > > http://blogs.msdn.com/b/robert_mcmurray/archive/2008/10/27/using-visual-studio-2008-on-a-64-bit-computer-to-edit-applicationhost-config.aspx > > -- > Josh Cooper > Developer, Puppet Labs > > Josh -- Josh Cooper Developer, Puppet Labs -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users. For more options, visit https://groups.google.com/groups/opt_out.
