Networking Windows .local and Apple Macintosh

November 13th, 2008

What to do if .local has been used in Windows Network as the first level domain name of the Internal domain and you are deploying in an “Apple Mac centric” network with older Mac’s in the environment?

To help Mac DNS resolve .local Please read KB836413 - You receive an “unexpected error occurred” error message when you try to access resources on a Windows-based network from your Macintosh computer

content of KB Article

To connect Mac OS X to SBS please read Connecting Mac OS X 10.3 and Higher Clients to a Windows Small Business Server 2003 Network

(the Chihuahua) comments on SBSanswerfile.xml and OOBE in SBS 2008

November 13th, 2008

A LESSON LEARNED FROM SEAN DANIELSSBS PM

The sbsanswerfile.xml can be used, when setting up Small Business Server 2008, to define setup parameters via text string entries. These same parameters may also be defined using a different tool, the OOBE wizard. To reach the OOBE wizard, the sbsanswerfile.xml is bypassed (never placed into the machine) and Small Business Server 2008 setup reaches OOBE (Out of Box Experience wizard) because it doesn’t see the sbsanswerfile.xml during boot/setup.

In the OOBE wizard, the level of specificity is not as detailed as using the sbsanswerfile.xml. A more important difference is that the OOBE wizard “hard codes” certain defaults and predefines certain assumptions about the installation. One of the most important of these entries is the DOMAIN-NAME for the SBS2008 environment.

The “domain name” parameter has brought us to write this article today.

DEFINING PARAMETERS BEFORE BEGINNING SETUP

The SBS Team developed Small Business Server 2008 so that “IF and WHEN” the admin wants to change the default parameters, then an answer file (a text file called sbsanswerfile.xml) must be defined prior to beginning setup. The xml file is then written to a USB drive (or other media) and placed in the machine before placing the SBS setup disk into the server. The OOBE wizard is not used in this case.

In the real world: VAR’s, IT Consultants, MS Partners, etc… often receive OEM boxes with Small Business Server 2008 already partially installed. This creates a quandry because the opportunity to define the answer file and then point SBS setup to sbsanswerfile.xml has already passed.

this circumstance raises the following question?:

How do we still define these settings once setup has already begun and the binaries have already been installed on the drive?

In our scenario (and In the case of most OEM boxes), the first stages of the SBS2008 installation are accomplished by the manufacturer. Therefore, the system launches straight into OOBE and and ultimately the wizard that defines the core SBS settings (text strings).

Since an sbsanswerfile cannot possibly be defined “with our answers” at the manufacturer, and pressing Power ON boots us straight into OOBE, how do we offer the machine the more “flexible and definitive parameter set using sbsanswerfile.xml”?

Sean Daniels emailed the response today:

As long as you

  • DO NOT go past the first screen in OOBE
  • DO NOT enter any data whatsoever in OOBE (i.e. the SERVER NAME /DOMAIN NAME / etc…)
  • SHUT DOWN THE MACHINE immediately

You can still define the sbsanswerfile.xml and still have the machine call it when booting from a powered off state.

This gives you the ability to define specific settings (i.e. SERVERNAME / FULL DOMAIN NAME / etc… ) even though a partial install has already been accomplished at the factory.

How?

  • Just grab the SBS Setup disk
  • define and save your sbsanswerfile.xml to USB or other media
  • place the media in the machine (prior to booting from powered off state)
  • boot and wait for SBS setup to locate the sbsanswerfile.xml , enumerate the text strings, and commit your settings automatically

REPEATING “THE VERY IMPORTANT POINT”: do not launch an OEM box into OOBE without first defining the answer file.

What happens if you do start OOBE on an OEM SBS2008 box?

If you continue a SBS2008 install on an OEM Small Business Server 2008 box from OOBE you will irrevocably turn off the only method to explicitly define the setup parameters. Even if you partially begin OOBE and then bail out without writing or saving any data …a complete re-install will be required to change the SBS settings using an sbsanswerfile.xml. Why, because the method that calls to the sbsanswerfile.xml is irrevocably “turned off” (by design) If OOBE is entered or defined on any level.

So what happened in our case?

So there we were, installing a machine on-site that had a partially completed Small Business Server 2008 installation. We didn’t know (yet) the information contained in this article (duh!). Upon receipt of the machine we started the unit and were taken directly into OOBE. Upon arrival at the setup screens for SERVER NAME, DOMAIN NAME, etc… we realized we did not want to accept the defaults and thought “Hey, what about the sbsanswerfile.xml?” So we bailed out and in doing so, turned off the method available to call sbsanswefile.xml. We could no longer make certain changes to the OOBE based install using the sbsanswerfile.xml :(

You might be wondering: Why did we not move forward with the default OOBE install in the first place?

In our case, we bailed out because…. the FULL INTERNAL DOMAIN can not be defined in OOBE and we did not want to use the SBS Development Team’s  “default OOBE choice of .local as the top level domain”. Why… because we had a network full of Macs.

If you are not aware: Small Business Server defines .local as the top level domain (by default) when using the OOBE wizard and their is “NO WAY” to alter a top-level domain in SBS setup except by using the sbsanswerfile.xml

To sum up our story, we irrevocably entered OOBE and clicked next before abandoning the OOBE wizard.

Because we had a “time constraint” on delivery to this client, we needed to finish this install quickly, so we went ahead with the .local top level domain. Alas for our own choice for the full domain name (sigh). We then had to deal with the .local top-level domain issue on Mac.

By the way, about Mac on SBS:

Remember, exit OOBE immediately when setting up an SBS 2008 machine from an OEM and you can still define the environment using the sbsanswerfile.xml. Restart clean with the sbsanswerfile.xml on USB . In doing so, you can still have it “your way”.

Thanks seanda

Open Source Tools in Linux supporting Microsoft Core Server Technologies

November 11th, 2008

Every once in a while I clarify to clients that the Open Source community has provided excellent tools and components to accomplish work in the Windows Enterprise.

Big name companies and their projects earn a lot of the business press, like Sun with Open Solaris and Novell with SuSE. However, you can download Debian, Gentoo, Ubuntu, and install powerful and free Open Source software and still get the job done in working together with Windows while retaining your presense (and preference) for Linux.

These are resources I often suggest to our clients. Please try them out. They’re open source, high quality code and completely free.

Linux distros

Any quality GNOME Desktop distribution of Linux

Web Browser

eMail Client - Microsoft Exchange capable

Terminal Services Remote Desktop Protocol Client

Office Suite

  • OpenOffice
  • OpenOffice.org’s Mission Statement is…
    To create, as a community, the leading international office suite that will run on all major platforms and provide access to all functionality and data through open-component based APIs and an XML-based file format

iPhone and Microsoft Exchange

November 9th, 2008

Connecting iPhone and Microsoft Exchange reveals two primary connectivity relationships.

  • IMAP (possible with iPhone 1.0 and 2.0)
  • Exchange Active Sync employing Direct Push (iPhone 2.0 and newer)

Exchange has two major releases that support iPhone

The service packs for Exchange also support different functionality.

The key turning point for iPhone in relation to Exchange has been Apple’s support for Direct Push technology and Exchange Active Sync (achieved in iPhone 2.0 release). Microsoft has placed the emphasis on Direct Push since Exchange 2003 Service Pack 2 released in June 2005, and now Apple is on-board. H

Prior to 2.0 release, Apple offered only IMAP as a supported method of connecting iPhone to Exchange.

Here are some great articles on setting up IMAP in your Exchange environment

Followed by Apple’s own articles on connecting iPhone to Exchange using Exchange Active Sync. First is Apples definitive guide (.pdf) on deploying iPhone in the Enterprise . There are also Apple specific articles including:

This is what iPhone 2.0 looks like from the Exchange 2007 administrator’s perspective if connected using Exchange Active Sync.

POP3 and IMAP are still supported in the latest release of Exchange 2007 SP1. Therefore iPhone can support both methods. One question that may also be asked prior to selecting the method is whether you require support for Public Folders from Exchange to be supported in the iPhone. At this time only IMAP connectivity will provide iPhone users any view of Public Folders in Exchange.

To learn more about the differences between IMAP and EAS, please read Mobile Device Connectivity to Exchange using IMAP vs Exchange ActiveSync .

Finally, the follow table examines iPhone on Exchange 2003 and 2007 in light of Public Folders

Exchange 2003 SP2 Direct Push Exchange 2003 SP2 IMAP Exchange 2007 SP1 Direct Push Exchange 2007 SP1 IMAP
iPhone 1.0 CONTACTS/CALENDAR/EMAIL N Y N Y
iPhone 1.0 w/PUBLIC FOLDERS N Y N Y
iPhone 2.0 CONTACTS/CALENDAR/EMAIL Y Y Y Y
iPhone 2.0 w/PUBLIC FOLDERS N Y N Y

Why the emphasis on Public Folders? Clients are often interested in the Public Folder concept of Microsoft Exchange. Microsoft however has recently “de-emphazied” Public folders… making them essentially an endangered species in reference to future support and expansion of the concept.

TO BE CONTINUED

Using Apple Macintosh File Systems with Windows Services for Mac

November 8th, 2008

File Systems tools for interoperability between Windows, Apple Macintosh, and Linux

Useful free tools (and good reading) for use in a heterogeneous [ Windows / Mac / Linux ] File System environment

Windows File System tools serving Mac

Services For Macintosh (SFM)

SFM was an effort by Microsoft supporting Mac integration into the Windows Network. SFM is available in Windows 2000 Server and Windows 2003 Server (but has been dropped from Windows 2008 Server). Services For Mac includes these three key Server services:

File Server for Mac - KB147438

File Server for Macintosh (FSM), which is part of SFM, allows Windows and Macintosh clients to create and open files on the same share by presenting the files to the clients with the naming conventions used by their operating systems.

Macintosh and Windows Server Integration - TechFAQ

The folks at TechFAQ have written an excellent article on Mac and Windows Server Integration. The article includes detail walkthroughs about activiting and administering verious Services For Macintosh features.

Also, here are genrally helpful tips on Performance Tuning Guidelines for Microsoft Services for Network File System

File System Tools from the Open Source Community

NTFS-3G

An NTFS driver for Mac OS X and Linux is NTFS-3G - ( also read the NTFS-3G FAQ )

The NTFS-3G driver is a freely and commercially available and supported read/write NTFS driver for Linux, FreeBSD, Mac OS X, NetBSD, Solaris, Haiku, and other operating systems. It provides safe and fast handling of the Windows XP, Windows Server 2003, Windows 2000 and Windows Vista file systems. POSIX file system operations are supported, and full file ownership and permission support is available as well.

Mac File System software serving Windows

Linux File System software serving Windows and Apple Macintosh

User Space File System software

  • Linux - FUSE -  http://fuse.sourceforge.net/wiki/index.php/OperatingSystems
  • Mac - MacFUSE - http://code.google.com/p/macfuse/
  • Windows - WinFUSE - http://www.suchwerk.net/sodcms_FUSE_for_WINDOWS.htm
  • Windows - UniversalFUSE - http://www.eldos.com/cbfs/

Experiment with these File System resources in your heterogeneous environments. Please comment if you have more, better, or mo-better solutions.

Thanks.

no choice but .local on OEM Small Business Server 2008 installs

November 6th, 2008

Today I’m installing Small Business Server 2008 for a client that has a bunch of Macs.

THE PROBLEM

The Small Business Server was delivered with a “partial install” of SBS2008 already complete. The challenge right now is that I cannot use the sbsanswerfile.xml to control the FULL INTERNAL DOMAIN name. My opinion: “this is either an oversight or mistake in SBS 2008 setup design”. The oversight being that the answer file cannot be called upon when “continuing setup” if a partial install has already been completed (this is even though the internal domain name has not yet been defined by the wizard).

The wizards allow the admin to define “only the secondary level domain name” (the vanity domain) and not the top level domain.  The default top level domain in SBS, as a result of using the wizard, must then be .local . My opinion: “It would have been much better to allow the sbsanswerfile.xml to be called from the setup wizard upon continuation of an OEM based install.” This could provide more flexibility and be a 2nd option in addition to clean installs that call the sbsanswerfile.xml from the very beginning.

Anyone who does VAR based work for a living experiences these “partial complete installs” as common place when working with an SBS box from an OEM manufacturer (i.e. Dell, HP, etc…). So why kill all other possibilities on these boxes than .local for the top level of the FULL INTERNAL DOMAIN. Doing so leaves admins in the “real world” with no other option than the requirement of a complete re-install?

To review: use of the sbsanswerfile.xml is the only resource from which “the FULL INTERNAL DOMAIN (which includes the “top level domain) can be defined. The sbsanswerfile must be called from the very first stages of an SBS 2008 install or .local will be the top level domain internally.

THE CLIENT

So getting back to my client: It appears that we have no choice. A (.local) top level domain will “have to” be used for the internal domain because we’ve got an OEM partial install. Since we are installing for a client that has Macs, I would have far rather used the answer file and altered the internal domain name to companyname.pri . The reason is in relation to Rendevous (now called Bonjour) and Mac’s design that treats any request relating to a .local first level domain in the context of Rendevous (Bonjour).

Networking Windows .local and Apple Macintosh

What to do if .local has been used in Windows Network as the first level domain name of the Internal domain and you are deploying in an “Apple Mac centric” network with older Mac’s in the environment?

To help Mac DNS resolve .local Please read KB836413 - You receive an “unexpected error occurred” error message when you try to access resources on a Windows-based network from your Macintosh computer

content of KB Article

To connect Mac OS X to SBS please read Connecting Mac OS X 10.3 and Higher Clients to a Windows Small Business Server 2003 Network
TO BE CONTINUED…

Administration of Exchange Public Folders fails due to SSL

October 9th, 2008

When administering Exchange for the first time with newer clients, we find Microsoft Exchange Public Folders to be one of the most underutilized features of Exchange installations. The more we inform our clients about Public Folders, what they can do and how to use them, the more value they generally receive from their existing Exchange installations (that is of course when public folders provide a make sense solution to certain needs within their organization).

Because Outlook Web Access is often one of the first features used by clients, we find ourselves looking over and tightening up security by encrypting credentials for OWA access through use of an SSL certificate (yes, we still find businesses authenticating in the clear!). The need to encrypt access credentials is obvious but many small businesses completely overlook this security fundamental OR do not have the funds needed to purchase a “brand name” certificate from the highly recognized Authorities like Thawte, Verisign, etc… Buying a basic Server certificate from Verisign (as an example) is $995 year. While this amount of money is a drop in the bucket for big IT infrastructures, for some small businesses it’s not affordable at all and they find it hard to justify paying the fee each year (especially when they may not even have ever been told why encryption is important to security in the first place).

At WIGITAL, we generate a lot of self signed certificates at 2048 bit count encryption as part of our services. This DIY approach saves the client a bunch of money each year, they get the encryption they need for OWA and we get to sleep better at night as consultants.

Here is where the failure can occur when attempting to Administer Public Folders in Exchange after a selfSSL certificate (or any certificate for that matter) is generated for OWA Outlook Web Access.

The typical method of generating a self signed SSL certificate using selfssl.exe requests a common name during the process of making the certificate. The CN is used to identify the cert with the site (ex CN=owa.mycompany.com). The certificate is named so that when Users log on to OWA, they can recognized the “name” of the SSL certificate matches the name of the website. This name matching of certificate and URL is also part of the warning system of most browsers with the browser prompting the user if the name of the certificate does not match the name of the website.

In the case of Exchange and OWA however, unless the administrator also publishes the COMPUTERNAME of the Exchange Server (or Front End Exchange Server) in the certificate along with the website name, Exchange will cause Public Folders to become inaccessible to administration. This is because the SSL cert causes an error when attempting to access the Public Folders using Exchange System Manager.

Exchange System Manager can (and will) throw errors such as the following when the CN on a self signed SSL certificate does not match the SERVERNAME of the Exchange Server or is not trusted.

Errors

ID c103b404 The SSL certificate server name is incorrect.

OR

ID 80090325 The certificate chain was issued by an authority that is not trusted.

The second error indicating the certificate is not trusted can be a simple oversight on the part of the administrator. The selfSSL tool does have a parameter to make sure a certificate “trusted” at the time it’s created. However, adding the cert to the Trusted Root using the Certificate snap-in does not solve the problem “when” the SERVERNAME is not one of the Common Name’s in the certificate.

Fortunately the work around is pretty simple.

Exchange System Manager uses IIS as it’s vehicle to provide the administrative functionality for Exchange Public Folders. In other words, the administration of ESM actually rides on top of IIS using IIS as the engine to provide the functionality for administration. A virtual server (exadmin) is created during Exchange setup in IIS as a subsite (or child) of the default web site. exadmin in IIS, then…. is the engine on which we administer (EXchange ADMINistration) Public Folders.

Using an SSL certificate above the exadmin node (on the Default web site root) and then requiring SSL at the level of the exadmin virtual server can cause the errors we’re writing about. Exchange will not allow administration if the name of the certificate does not match the name of the server (and this is always the case if the certificate is named for the “public URL” of the default website).

SOLUTION: Simply disable the requirement for SSL on the exadmin virtual server in IIS and problem is solved.

You can also enter multiple Common Names into self signed certificates (including the proper SEVERNAME) using selfSSL by following this article

http://wintivity.wigital.net/security/multiple-common-names-for-certificates-using-selfsslexe

Be advised however, that it is never advisable to publish the FQDN Fully Qualified Domain Name of a server on your internal network into the details of a certificate to be published on a public facing website.

READING

See this thread at msexchange.org

Here are some additional articles with other reasons why Public Folders may fail to open when attempting to administer them:

You receive an SSL Certificate error message when you view public folders in Exchange System Manager

http://support.microsoft.com/kb/324345

Troubleshooting Microsoft Exchange System Manager Public Folder Expansion Problems

http://technet.microsoft.com/en-us/library/aa996098(EXCHG.65).aspx

Cleaning up Exchange 2000/2003 administrative groups - Do not delete the admin group that holds the public folders

http://mostlyexchange.blogspot.com/search?q=public+folder+delete

Thanks for reading,

Mark Raborn
WIGITAL
Business Computing and Technology Professionals

Integrating Office Accounting on the Network with Business Contact Manager for Outlook

October 7th, 2008

you are reading Article 7

In the previous articles we accomplished the initial work to setup and share BCM and MOA across a network from a Remote SQL Database. To review what we’ve done to this point:

  • We installed SQL Server on a dedicated Server machine
  • We established an instance named MSSMLBIZ
  • We installed Business Contact Manager on one of the Client Workstations on our network and pointed it to our MSSMLBIZ instance
  • We moved the data and log files (.mdf and .ldf) to a more universal and stable location within the file structure of our Server

Now that the BCM database (.mdf and .ldf) files have been re-attached to the MSSMLBIZ instance, we move on to installing and then integrating Microsoft Office Accounting 2008 with our existing BCM installation. The end result will provide both Office Accounting and Business Contact Manager functionality as a unified platform on which to conduct business from our network.

Key integration points for those new to the platform:

Microsoft Office Accounting 2008’s database can be MERGED with an existing Business Contact Manager database. The merging provides significant benefits to Small Businesses looking to achieve a fully integrated Customer Relationship and Accounting platform. The integration can be accomplished over a network and makes the data and functionality available to multiple users. The price/performance ratio makes this combination a “very good value” given that BCM is as little as $150/seat and Office Accounting Pro is $199/seat. The final piece needed is SQL Server 2005 Express or higher. While SQL Server 2005 Express is “free software” and will work similarly, our article series is written based on using SQL Server 2005 Standard on a dedicated SQL Server.

Order of Software Installation: Office Accounting 2008 is installed ”after” Business Contact Manager has been completely configured. One copy of Office Accounting must be installed on the SQL Server. Because integration uses Accounting’s menus, the full task of completing integration must be finished at the SQL Server before other “workstation” installations of Office Accounting can be added. These subsequent ”Client” installations are directed to the integrated database. Client installations do not then require a local SQL database as part of their installation (see Custom Workstation Installations of Office Accounting at end of article).

PLEASE NOTE: we have chosen to use a dedicated SQL Administrator account for the initial install of Microsoft Office Accounting on the SQL Server. This provides access to the full array of tools and functionality. Since our SQL Admin account “owns” the database, we have unrestricted administration rights and can change the installation as needed using SQL Configuration Manager, SQL Management Studio and the proprietary Office Accounting data tools, (please read earlier articles for explanation).

Integration Procedure Office Accounting 2008 and Business Contact Manager for Outlook 2007

On the SQL Server - install Office Accounting 2008 using the SQL Administrator account (details about this account earlier in the series)

This initial installation of the “first” Office Accounting 2008 to be installed uses the same MSSMLBIZ instance already installed on the SQL Server for BCM. During Accounting setup, a second database will be created within the MSSMLBIZ instance. This second database is exclusively for Office Accounting. Note that at this point the databases of BCM and Accounting have not been merged.

To integrate the Microsoft Office Accounting database with Business Contact Manager for Outlook 2007 database, follow these steps:

  • Open Microsoft Office Accounting Professional
  • Go To Company | Integrate with Business Contact Manager

Integrate MOA with BCM - Office Accounting 2008

  • The Integrate with Microsoft Office Outlook with Business Contact Manager wizard will launch
  • Review the Welcome text, click Next

Integrate with BCM Wizard - Office Accounting 2008

  • Select a Business Contact Manager for Outlook database
    • This should be the same database name created for BCM originally, or the one currently active if you have created additional databases since first installing the software.
  • Select the database from the drop-down menu, click Next

Select BCM database - Office Accounting 2008

  • Back up databases
    • Backing up both of the existing BCM and MOA databases is REQUIRED prior to Integration. This is to protect your existing Business Contact Manager data (as it currently exists) AND your Office Accounting data (as it currently exists)
  • Browse to the directories in which you want to store your BCM and MOA backups

Backup Databases for both BCM and Office Accounting 2008

  • Name your backup files

Backup MOA Micrsoft Office Accounting 2008 database

Select Backup location Business Contact Manager

Backup MOA Micrsoft Office Accounting 2008 database

  • Type a password to protect your data (if necessary)
  • Be ABSOLUTELY CERTAIN TO WRITE DOWN AND RETAIN THE PASSWORD! It is required to restore data if ever needed.
  • Click Next

Set Backup password BCM - Office Accounting 2008

  • Business Contact Manager Email Auto Linking
  • Make your choice as to Retain the Email Auto-linking settings or Disable them
  • Click Next

Email Auto-linking Business Contact Manager

Merge Duplicate Accounts and Customers

!!! IMPORTANT !!! if you have been using Office Accounting and Business Contact Manager separately for some time (meaning “prior to merging them”), consider this carefully:

  • SCENARIO 1: If you have a small contact database and you are not certain as to what records are current what records are outdated; you may want to ALLOW duplicate records to be created. With only a few records, the time necessary to scrub the data (clean it up) may not be excessive.
  • SCENARIO 2: however !!… if you have a large database of BCM “Contacts & Accounts” and a large database of Accounting “Customers” and these programs have been used “separately”, you may want to audit the records in both programs prior to merging them (which means STOP HERE AND DO NOT INTEGRATE YET!). Allowing duplicates to be created when there are “many many” records creates obviously “much more work”. Think sensibly about duplication before making your selection and always attempt to keep records current so that the data merged is exactly the “same” data :).
  • NOTE: remember this only applies when BCM and MOA have been used separately prior to integration. If this is a completely new and clean install of the programs, you will have no records to merge, so merging therefore would not be an issue.

Make your choice, click Next

Merge databases Business Contact Manager and Office Accounting


The list of CURRENT OFFICE ACCOUNTING USERS will be presented at this point.

To review considerations regarding permissions (for both applications), read this Article.

Here is a quick review of the topic:

ALL users with permissions in Office Accounting will have permission to use Business Contact Manager

The same is not true in reverse. Business Contact Manager Users must be “explicitly granted permission to have to access in Office Accounting (i.e. accessing financial records of Customers, generating quotes and invoices, viewing and changing financial records for Banking, etc….)

On a domain, access to accounting is based upon Active Directory Users (not Groups). Users located in the directory are given “permission” to log on to Accounting. The level of access available upon log on varies. Users “level of access” is generally determined by the business Owner/Manager. These decisions should be made prior to integrating BCM and Office Accounting. Finalizing access considerations assures that Users will have the “full” functionality (in their roles) that is expected of the Office Accounting software once integration is completed.

Office Accounting offers the following roles which are assigned to users on the domain:

  • No Access
  • Read-only User
  • Salesperson
  • Accountant
  • Office Manager
  • Owner

Confirm your selections for Office Accounting users

Click Next

Review accounting rights and permissions - Microsoft Office Accounting 2008

Reviewing the function and importance of the .sbc file in Microsoft Office Accounting

Business Contact Manager for Outlook was oriented to the MSSMLBIZ instance in Article 4 of our series. BCM locates the shared database “differently” than Microsoft Office Accounting.

To review Microsoft Office Accounting design when locating a shared database:

Office Accounting locates the SQL Server by querying a Small Business Company text file using the file extension (.sbc). The .sbc text file is located somewhere on the network and is literally “how” Microsoft Office Accounting gets directed to the Remote Database Server. Deciding where to store and how to access the .sbc file is a fundamental consideration whenever Office Accounting is being shared amongst multiple computers. The (.sbc) file is always required in “shared scenarios” and will still be required after integrating an Office Accounting database with a Business Contact Manager database.

Choosing a filename and location for the .sbc file in the Microsoft Office Accounting integration wizard

To complete the basic steps in configuring Office Accounting for multiple users, the location from which the company.sbc is accessed must be properly SHARED to users. All users requiring access to Microsoft Office Accounting will require access to this file from their local machines. Place the file in a Network Share and let every person running Office Accounting know where it is and how it can be accessed on the network

Once the location for the .sbc file has been determined and confirmed as SHARED.

  • Select that location from within the Integration Wizard
  • confirm the “name” of the .sbc file
  • click Save, and click Next

Select and update .sbc file for Office Accounting 2008

That’s it. Office Accounting now knows where (and how) to access the shared database. The next step is to complete your work to this point and integrate (merge) the databases.

Here we go…. Drum rollllll pleeeaaassee.

To continue, click Integrate

Integrating (process-1) BCM and Office Accounting 2008

Backup of the database will now begin

Followed by moving and merging the necessary tables as well as re-defining the database schema for both programs

Integrating (process-2) BCM and Office Accounting 2008

The wizard will then assign the Office Accounting Permissions to domain users on the network as specified earlier

and then…

Integration Completed - Business Contact Manager and Microsoft Office Accounting 2008

 

COMPLETED (ta da!)

Turn on the OPEN sign, we’re ready for business

 

What is inside a Small Business Company (.sbc) file?

On workstation installations, Microsoft Office Accounting must be instructed “where to find” the Office Accounting Remote Database. To review our earlier statements, Office Accounting answers this question by use of the .sbc “text file”.  The text file (yourcompany.sbc) details specifics about the remote SQL Database (you can open the .sbc file with any text editor). Here is what the .sbc file contains:

  • the NAME of the database
  • the NAME-OF-THE-SERVER the database is located on
  • the SQL-PORT-NUMBER on which you must make your requests

How we choose to Share the .sbc file and its parent directory

  • Locate the FOLDER in your TEAMFOLDER (see earlier article) in which you will store and share the .sbc file

Folder on which to set ACLS for access to .sbc and database

  • Right click on the chosen folder and select Sharing and Security

Sharing and Security - setting acls for BCM and Office Accounting 2008

  • Share the folder containing the .sbc file

Share folder to access .sbc file Office Accounting 2008

Set permissions for folder containing .sbc file. Our practice is to create two Groups first

  • Management “Admin/Management Group
  • BCMMOA “Users Group

The Management group “could include” the Network Administrator and potentially the Owner/Office Manage

  • provide “Modify” permissions to the Management “Group”

The BCMMOA group included all other Users (employees, salespersons, bookkeepers, etc…)

  • provide “Read” permissions to the BCMMOA “Group”.

Using these permissions, regular users (the BCMMOA Group) can launch Office Accounting locally on their Client machine. Office Accounting would then READ the .sbc file from the network share. The information in the .sbc directs the Client to the SQL Server. All Client machines read and write to the same database.

Management Group Users do the same, however, with MODIFY permissions (the Management Group) permissions on the share could be altered as needed. In unusual cases even “deny” ACLs could be used. REMEMBER however that Office Accounting provides control of permissions from within the software itself. Access rights can be set to No Access using the GUI. Be careful about using Deny ACLS on the share as this will completely bar Users from accessing the Accounting 2008 .sbc file which in turn would override any permissions in Office Accounting because the .sbc pointer to Accounting would be closed to access.

Once these permissions are properly set, you are clear to finish your Client installations. Congratulations.

Changing Permissions for .sbc file Microsoft Office Accounting 2008

About Microsoft Office Accounting on Workstations and Laptops

Custom Installation: During Client installation of Accounting, simply choose “CUSTOM” during the first steps of installation. You can tell the installer not to install SQL Server as well as provide the location of the .sbc file you have shared on your network.

Remember Permissions: For each Workstation installation, Office Accounting requires you to explicitly permit access to each User in the domain. Permissions are granted using the Accounting software program itself.  Groups are not recognized in granting permission so individual Users must be granted access one by one. Here are the levels of access:

Available Roles:

  • No Access
  • Read-only User
  • Salesperson
  • Accountant
  • Office Manager
  • Owner

Accounting access can be granted at the SQL Server (using the Office Accounting GUI). Permissions can also be granted from a Workstation “IF” the logged on User has the Owner role or Office Manager role.

Using the SQL Administrator Account to grant access:

REMINDER: our practice throughout this article series (when working at the SQL Server) has been to use a master SQL Administrator account (for installs of Office Accounting and BCM). “By default” this account has the highest level of access possible for your Office Accounting installation. The SQL Admin Account is a valuable resource if something goes wrong with permissions. You can always go to your SQL Server, logon using SQL Administrator Account, launch Office Accounting 2008 and set permissions for Users. This is always possible because (the SQL Administrator Account owns the database) and is grated Owner permissions in Accounting “by default”.

If permissions are every negatively altered from a workstation (by an Owner or Office Manager) in a way that is destructive to access, the SQL Administrator Account should provide the necessary level of access to restore proper function.

CLIENT INSTALLATIONS OF OFFICE ACCOUNTING 2008 - (AVOIDING LOCAL INSTALLATIONS OF SQL SERVER ON WORKSTATIONS)

One improvement over BCM that exists is in the Office Accounting 2008 setup and installation procedure is that Accounting offers the ability/choice to not install a SQL database at time of first installation. BCM does not give this option. For Accounting installations use the Advanced Options to avoid installation SQL and to point Office Accounting to the existing database. The advantages:

  1. it is a big time saving element during install
  2. it improves system performance by not having an unneeded SQL install on the machine

NOTE: in existing BCM installations that are connected to a Remote Database (as with the example in this article series) - for client “Desktop” machines, you may uninstall SQL Server 2005 Express and the MSSMLBIZ instance entirely from that client “Desktop” machine. SQL is not needed on any “Desktop” machine permanently connected to the network and requesting its data from the Remote SQL Server. Removing the local SQL instance takes only a little time and the performance gains are significant (especially for older machines).

NOTE: for laptop machines, keeping the MSSMLBIZ instance of SQL Server 2005 Express installed is advisable. Having a local instance of MSSMLBIZ on laptops enables the ability to use the company’s central BCM Database offline. This enables Salespersons to travel outside the office (taking a copy of the database with them), they can conduct business “in the field” using the company BCM database locally on their laptops and then sync up the database upon return to the office. This feature is “huge” in the real world for SalesPeople especially because items from Office Accounting (Services and Products) can be quoted in BCM while “unattached from the network”. This allows the Salesperson to take their products and services with them! For those unfamiliar with the feature, Quoting Services and Products in BCM is accomplished using the Opportunity feature and it’s very cool.

This concludes Article 7

About WIGITAL. We are IT Experts providing services to companies that seek technology to empower business. We are located in Southern California. Please contact us at WIGITAL.

Thank you for reading :)

Mark Raborn - WIGITAL

 

 

BGInfo PC Stat Background Information Tool for IT Pros

October 3rd, 2008

As an IT Professional, finding tools that make service calls quicker (and more affordable to clients) are valuable to both sides. One such tool is BGInfo.

Written by Bryce Cogswell, you can read about BGInfo on TechNet here: BGInfo Article

BGINFO DOWNLOAD IS HERE: BGInfo Download at SysInternals

Mark Russinovich has written about basic configuration using BGInfo here.

This tool displays system information layered above the Background of a Windows desktop. That system information is then merged into the background to create a bitmap that is displayed as your Windows Desktop. The system information includes msinfo data such as:

  • Boot Time
  • CPU Statistics
  • Memory
  • Network Interface Card Speed
  • Domain Name
  • IP Address and Subnet Mask
  • UserName
  • Disk Volume Data
  • and more….

By default, BGInfo reveals 24 separate pieces of information. You can remove any field you don’t want visible, and then add it back later if you change your mind. You can also easily pop in additional fields. BGInfo will display any environment variable, most registry values, and the output from VBScript and Windows Management Instrumentation (WMI) queries. The WMI interface provides a simple way to build queries by selecting values from a dropdown menu. BGInfo can also tap into certain files to display their version information, time stamp, and contents.

The display is highly customizable.

Besides being very useful, BGInfo is just plain cool to have in your toolbox.

Very helpful. 5 STARS :)

Windows XP and Vista keyboard shortcuts on MacBook

September 23rd, 2008
  Windows Print Screen
shortcuts on MacBook
 
Function: Print Screen fn+shift+F11
Function: Print Screen (ACTIVE WINDOW) fn+shift++alt+F11
  Start Menu and Basic
shortcuts on MacBook
 
Function: Start (Windows Start) command
Function: Enter enter
Function: Numlock fn+F6
Function: Alt alt
  Windows Cursor Movement
shortcuts on MacBook
 
Function: Backspace delete
Function: Delete fn+greater than symbol (i.e. >)
Function: Home fn+right arrow
Function: End fn+left arrow
Function: Jump one word Left ctrl+left arrow
Function: Jump one word Right ctrl+right arrow
Function: Highlight one letter Left shift+left arrow
Function: Highlight one letter Right shift+right arrow
Function: Highlight one word Left ctrl+shift+left arrow
Function: Highlight one word Right ctrl+shift+right arrow
Function: Highlight Sententence Left fn+shift+left arrow
Function: Highlight Sententence Right fn+shift+right arrow
Function: Page Up fn+up arrow
Function: Page Down fn+down arrow
Function: Up Arrow up arrow
Function: Down Arrow down arrow
Function: Right Arrow right arrow
Function: Left Arrow left arrow

more data

MacBook Pro Windows Keyboard Shortcuts
http://support.apple.com/kb/HT1220

Windows PC (XP and Vista) Keyboard Shortcuts on Macs
http://support.apple.com/kb/HT1167

more to follow, be back soon :)