ORCS Web Blogs

The server principal 'A' is not able to access the database 'B' under the current security context (Microsoft SQL Server, Error:916)

Desiree — Tue, 01 Jul 2008 21:55:00 GMT

Hi All!

I ran into an issue that I could not resolve for two days and, with the help of MS, it is finally resolved. It was enough of a thorn in my side that I thought I should post it online in hopes that it will help some resolve it a lot faster.

The error:

The server principal 'A' is not able to access the database 'B' under the current security context (Microsoft SQL Server, Error:916)

The issue:

This issue occurs with SQL Server 2008 RC0. Using SQL authentication, I could connect to database engine but I could not expand the ‘Databases’ node. It would result in the error above. The issue is with SQL Server Management Studio itself, not the database engine or any other aspect of SQL Server. I could connect to the SQL installation from another server running SQL Server 2008 RC0, using SQL authentication, and expand the ‘Databases’ node without any errors. But I couldn’t connect locally using SQL authentication.

In a nutshell:

Server A – While logged in locally on Server A, I could not connect and expand the ‘Databases’ node successfully using SQL authentication.

Server B – I could connect to the SQL instance on Server A and expand the ‘Databases’ node using SQL authentication successfully.

The work around:

1. Within SQL Server Management Studio, view Object Explorer Details window by selecting View --> Object Explorer Details in menu (or hitting F7)
2. In Object Explorer window click at Databases folder
3. In Object Explorer Details window right-click at the column header and select ‘Reset view’.
4. Refresh Databases folder

I hope this helps!!

Helping Others: Hosting Customer Service and Technical Support

Brad — Tue, 01 Jul 2008 11:37:00 GMT

“Successful people are always looking for opportunities to help others. Unsuccessful people are always asking, 'What's in it for me?'” -- Brian Tracy

I agree. When I started ORCS Web and we hosted our first customers back in 1996, the reason was to satisfy a real need that was communicated to us. The reason wasn't that the market was hot and we thought we could ride a wave and make a ton of money (like many people did during the "dot com" boom) but rather seriously trying to help clients by providing the absolute best customer service and technical support possible.

We continue to keep our focus on helping customers and providing true value so that they can excel at their business. We don't overload packages with unrealistic claims of "unlimited" resources (which obviously can't be a true claim - there are limits to everything) - instead we focus on customer needs and satisfying them with our proactive managed services to give our customers peace of mind knowing that their web team at ORCS Web will take care of anything that needs to be addressed.

~Brad

http://www.orcsweb.com/
Managed Hosting Solutions
#1 in Service and Support

SQL Injection rule explaination of what is actually scanned by URLScan

Steve Schofield Weblog — Fri, 27 Jun 2008 14:52:00 GMT

One of the things I was curious what URLScan actually scanned and how. What is just some server variables or what?! I asked Wade H from the IIS Team for further explaination. It is good to be aware when you are implementing URLScan 3.0 and sql injection...( read more )...(read more)

Tool to help detect SQL Injection

Steve Schofield Weblog — Fri, 27 Jun 2008 04:21:00 GMT

Here is a tool to help detect sql injections. You have to sign-up for the free tool, but it's worth it. http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2008/06/23/finding-sql-injection-with-scrawlr.aspx Hope this helps...( read more )...(read more)

URLScan 3.0 - help with sql injection attacks.

Steve Schofield Weblog — Wed, 25 Jun 2008 03:55:00 GMT

For those supporting a Classic ASP and ASP.NET application, you probably have noticed an increase in sql injection attempts. Microsoft has released an updated URLScan 3.0. Here is the link to download URlScan version 3 beta for 32 bit or 64 bit . You...( read more )...(read more)

SQL Injection information for IIS admins and developers

Steve Schofield Weblog — Mon, 23 Jun 2008 04:51:00 GMT

The sql injection that has came up is affecting several ASP and ASP.NET applications. Although the only way to prevent an attack is validate the code, hopefully these posts will provide some direction. I included some links that discuss this more. http...( read more )...(read more)

Powershell 2.0

Steve Schofield Weblog — Mon, 23 Jun 2008 03:35:00 GMT

I''ve tried really hard to get excited about Powershell 1.0, it just hasn't stuck. Am I the only one?! :) However, (yes there is a however). The great thing about software, there is a 2.0 release sooner or later. I've made the committment to learn Powershell...( read more )...(read more)

UMPC: Samsung Q1 update

Brad — Tue, 17 Jun 2008 19:12:00 GMT

Almost exactly a year after purchase and the Q1 is failing now. It sounds horrible - I believe the cooling fan is dying a painful death. The UMPC seems to be overheating because of this, which is causing it to shut itself down quite frequently lately. I haven't called Samsung about it yet. I'll post a quick blog about their response when I get a chance.

~Brad

New iPhone Announced

Brad — Mon, 09 Jun 2008 20:00:00 GMT

Those who know me know that I love mobile connectivity. I'm always on the lookout for lighter, but fast and usable, mobile devices. I've never used an Apple computer nor do I have an iPhone (my XV6800 from Verizon works quite well). I must admit though, the newest iPhone just announced sure sounds good. The fast 3G network; the built-in (and enabled!) GPS; the (theoretical at least) better integration with business applications and software (like Exchange); it sounds like this new version will be quite a nice little device.

~Brad

SMTP links for IIS

Steve Schofield Weblog — Sun, 08 Jun 2008 00:57:00 GMT

I was answering a question @ http://forums.iis.net on SMTP scripting. I ran across a couple links I wanted to share. Programatically configure SMTP service on IIS to route mails to a domain http://blogs.msdn.com/mahjayar/archive/2004/11/08/254202.aspx...( read more )...(read more)

IIS7 - post #69 - Remember to disable SSL 2.0

Steve Schofield Weblog — Fri, 06 Jun 2008 04:05:00 GMT

I'm not certain why SSL 2.0 isn't disabled on Windows Server 2008 by default, but here is the KB article to remember to do that on your system. http://support.microsoft.com/kb/187498 How to test if you accept SSL 2.0 using IE is go to Internet options...( read more )...(read more)

Graffiti CMS - VDirs - ISAPI Rewrite and Partial Trust

Scott Forsyth's WebLog — Thu, 05 Jun 2008 19:10:00 GMT

I thought I would spend a few minutes today testing out Graffiti from Telligent . Graffiti is a fairly new blogging and content management system (CMS) which is meant to be very easy to install and setup. True to its word, it is impressively easy to get up and going. There are a few things that I found that are worth noting. I wanted to install this in a VDir on a shared server here at ORCS Web and use ISAPI Rewrite to make it appear to run in the root folder with its own domain name. In brief terms...(read more)

Microsoft Security Response Center

Brad — Tue, 03 Jun 2008 14:14:00 GMT

If you aren't already familiar with the Microsoft Security Response Center (MSRC), you should check it out. It's a blog hosted by ORCS Web for Microsoft where they discuss all things related to Microsoft software security including clarification of issues and application/system patches when applicable. It is quite informative for anyone interested in security - and if you aren't interested in security topics - you should be.

~Brad

www.orcsweb.com
Managed Hosting Solutions
#1 in Service and Support

IIS 7 - post #68 - URL Rewrite module available

Steve Schofield Weblog — Fri, 30 May 2008 21:28:00 GMT

Exciting news for IIS 7.0 users. MS has released the much anticipated URL Rewrite module. Here is a post on it. http://learn.iis.net/page.aspx/460/using-url-rewrite-module/ Download the x86 CTP version for IIS 7.0: http://www.iis.net/downloads/default...( read more )...(read more)

IIS Debug Diag info

Steve Schofield Weblog — Fri, 30 May 2008 03:45:00 GMT

A co-worker posted a how-to using IIS Debug Diag . After going through this process, I have a new found respect for how easy and straight forward using IIS Debug Diag is http://blogs.orcsweb.com/jeff/archive/2008/05/29/using-iis-debug-diagnostics-to-troubleshoot...( read more )...(read more)

Closing open file handles

jeff — Thu, 29 May 2008 21:26:00 GMT

Every now and then we have problems deleting or changing permissions on a file because it is open by a process. However, we often times have trouble finding that process. There is a neat sysinternals (now MS) utility called "handle" that will show you all open handles on a file, and, more importantly, let you close that handle. Below is the syntax of how to find the handle, and close it:

To find the handle:

O:\Tools>handle C:\Test\Example.dll

Handle v3.31
Copyright (C) 1997-2008 Mark Russinovich
Sysinternals - www.sysinternals.com

svchost.exe pid: 1388 240: C:\Test\Example.dll

The above output shows us the name of the process, the pid, and file handle (in hex) and the file name. If we wanted to see all handles by a particular process, we could use the –p option:

O:\Tools>handle -p 1388

Handle v3.31
Copyright (C) 1997-2008 Mark Russinovich
Sysinternals - www.sysinternals.com

    8: File (---)   C:\WINDOWS\System32
   74: File (---)   C:\WINDOWS\System32\en-US\svchost.exe.mui
194: Section       \BaseNamedObjects\__ComCatalogCache__
198: Section       \BaseNamedObjects\__ComCatalogCache__
1A4: File (---)   C:\WINDOWS\Registration\R00000000000f.clb
1B0: File (---)   C:\WINDOWS\System32\en-US\crypt32.dll.mui
1B4: File (---)   C:\WINDOWS\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6
1C0: File (---)   C:\WINDOWS\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6
1CC: File (---)   C:\WINDOWS\System32\inetsrv\config\schema
1D8: File (---)   C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\CONFIG
1DC: File (---)   C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\CONFIG
1E0: File (---)   C:\WINDOWS\System32\inetsrv\config
1E8: Section       \RPC Control\DSEC56c
1FC: File (---)   C:\WINDOWS\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_152e7382f3bd50c6
200: Section       \BaseNamedObjects\windows_shell_global_counters
240: File (---)   C:\Test\Example.dll
264: File (---)   C:\WINDOWS\System32\en-US\kernel32.dll.mui
284: File (---)   C:\WINDOWS\System32\inetsrv\config

This happens to be a Windows 2008 box, so I can take it one step further and find the service via task manager:

Since we need to delete or change this file and windows is not allowing me to since it is locked by the FTP service, I can forcefully close the handle by specifying the handle and pid (*Note: This should be used with care as it can cause the process to crash. Consider using this as a last resort instead of restarting a service or rebooting to free the lock):

O:\Tools>handle -c 240 -p 1388

Handle v3.31
Copyright (C) 1997-2008 Mark Russinovich
Sysinternals - www.sysinternals.com

240: File (---) C:\Test\Example.dll
Close handle 240 in svchost.exe (PID 1388)? (y/n) y

Handle closed.

The file can now be modified/deleted.

Using IIS Debug Diagnostics to troubleshoot Worker Process CPU usage in II6

jeff — Thu, 29 May 2008 21:18:00 GMT

Failed request tracing in IIS7 can help track down many performance issues with websites, but we still have a broad customer base on IIS6. Troubleshooting performance issues in IIS6 has been quite difficult until Microsoft released a set of tools that gave greater insight into analyzing a stack trace.

The IIS Debug Diagnostics Tool can help track down CPU and memory issues from a worker process. Microsoft has a nice kb article that goes over the basics as well: http://support.microsoft.com/kb/919791.

1. Install the IIS Debug Diagnostics locally on the system.

2. Open the Debug Diagnostics Tool under Start > Programs > IIS Diagnostics > Debug Diagnostics Tool > Debug Diagnostics Tool.

3. Click Tools > Options And Settings > Performance Log tab. Select the Enable Performance Counter Data Logging option. Click OK.

4. Use task manager to find the PID of the worker process.

5. Select the Processes tab and find the process in the list.

6. Right-click on the process and select Create Full Userdump. This will take a few minutes and a box will pop-up giving you the path to the dump file.

7. Select the Advanced Analysis tab and click the Add Data Files button. Browse to the dump file that was jump created and click OK.

8. Select Crash/Hang Analyzers from the Available Analysis Scripts box for CPU Performance and crash analysis. Click Start Analysis.

After a few minutes, a report should be generated containing stack trace information as well as information about any requests executing for longer than 90 seconds. Note that the memory dump with use a few hundred megabytes of space, so be sure to install the tool on a drive with sufficient debugging space. Also, if the box is under heavy load, you can create the user dump on the system, copy the file to your workstation, and perform the analysis locally.

GraffitiCMS review

Steve Schofield Weblog — Sun, 25 May 2008 01:20:00 GMT

When I started http://www.appcmd.com , I wanted a content management system that allowed me to get up and going quickly. GraffitiCMS allowed me to do that. In one evening, I have over 30 posts in my new site + Search enabled automatically RSS feed capability...( read more )...(read more)

IIS7 - post #67 - New command line reference site http://appcmd.com

Steve Schofield Weblog — Sat, 24 May 2008 11:10:00 GMT

I'm not sure if humans are supposed to remember command line syntax. For me, the most frustrating part is remembering the syntax of a certain command line option. To help me remember these for future use, and hopefully share with the community. I created...( read more )...(read more)

WinDBG refresher

Steve Schofield Weblog — Thu, 22 May 2008 19:07:00 GMT

I had to analyze a memory dump from a server that blue screened. This blog is a reference how I used WinDBG to analyze the dump. I don't claim to be an expert in WinDBG, but these few steps can be done in minutes to determine a issue if you have the memory...( read more )...(read more)

Powerpoint Presentations from recent talks

Steve Schofield Weblog — Thu, 22 May 2008 02:42:00 GMT

I've spoke recently at a couple events. Here are my PowerPoints. It's always fun to get together with other IT Professionals and share ideas / knowledge. 1) West Michigan Day of .NET. This event is developer focused and is a real grass roots 1 day event...( read more )...(read more)

What's in a name?

Brad — Tue, 20 May 2008 14:24:00 GMT

Our name - ORCS Web - is a point of curiosity, and sometimes confusion, for some people.

Here is some background on it:
In the 1980's I ran a dial-up BBS on a Commodore 64 in the Washington DC area named "The Outer Reaches".

In the early 1990's I was running a BBS again, this time on a PC using various flavors of operating systems and software. (Does anyone remember OS/2?)

Around 1995 I started doing web development (Visual Basic) for a number of customers who wanted to leverage interactive technologies on Microsoft platforms (I wrote a lot of front-ends to JET data sources). Later that year and in early 1996 I started writing web applications for customers - still Microsoft platforms (IDC/HTX files at first) and still front-ends to JET (even with its scalability issues [note the KB article attributed to my early dealings with JET]). During this 1995/1996 desktop-to-Internet transition I renamed to The Outer Reaches Computer Solutions. (Starting to see a pattern? [O...R...C...S... :>]).

Mid-1996 my development customers were complaining more and more about the incredibly poor choices in Microsoft platform web hosting. Wanting to make sure my customers were happy, I bought my first server and started hosting them myself. In 1998 I stopped doing web development to focus only on web hosting and at that time changed the name to ORCS Web, Inc.

Now that you have the background. What are your thoughts about the name? Some people call us O.R.C.S. Some call us Orcs. Some call us Orcas. I've heard from some people who say names don't matter - just keep up the great service and support. I've heard from others who hate the name and, while they still say keep up the great service and support, they think a better name would be worth considering.

We have a great reputation tied to the name, but still, I want to put it out to anyone reading - what are your thoughts on the name? Love it? Hate it? Change it? Keep it? I'm just curious of my blog reader's opinions on the topic.

Oh, hey, if you need great Managed Hosting from a company specializing 100% in Microsoft platform hosting expertise, let us know. We'd love to put you in touch with some references for you to get a feel for the difference in our services versus the general hosting market.

Brad Kingsley
Founder and CEO

www.orcsweb.com
Managed Hosting Solutions
#1 in Service and Support

My Hyper-V experiences

Steve Schofield Weblog — Mon, 19 May 2008 01:15:00 GMT

Hyper-V is probably one of the more exciting technologies to come out of Redmond, on the IT Pro side. I don't keep up on all betas like I used to, but Hyper-V has caught my attention. I reloaded my home pc with Windows Server 2008 x64. Here is my pc type...( read more )...(read more)

Exchange 2007 message limit articles

Steve Schofield Weblog — Sun, 18 May 2008 18:04:00 GMT

I was tasked to update Exchange 2007 message size limits. For the casual Exchange admin, this can be a rather daunting task. Here are a couple links I found that were helpful. http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1545320&SiteID...( read more )...(read more)

Early Christmas present in May - DFS file replication on Windows Server 2008 web edition

Steve Schofield Weblog — Thu, 15 May 2008 01:03:00 GMT

Whoo hoo! DFS replication is available on web edition. This will make shared config and local contention replication possible on web edition. This is a HUGE deal. http://blogs.technet.com/filecab/archive/2008/05/14/installing-dfs-replication-on-windows...( read more )...(read more)