Today I setup a WDS server with 6 network cards in it.  Each adapter had its own subnet which had its own DHCP scope (which was hosted on the same system).  Make sure you tell WDS not to listen on port 67 if you have a DHCP running on the same machine.

But by default WDS would only bind to 1 network card in the machine.  I needed it to bind to 6 different network adapters in my multi-homed machine.

The error I would get on the PXE client was 'PXE-E55: dhcpProxy service did not reply to request on port 4011.'

After running 'netstat -a' I found that UDP port 4011 was only listening on a single IP address.

Here is how you fix it.

wdsutil /set-server /bindpolicy /add /address:<ip address> /AddressType:ip

Or you can modify the registry key HLKM\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\BindInterfaces

It is a REG_MULTI_SZ and the format is ip:<ip address> per line

You also need to make sure the HLKM\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\BindPolicy = 1 (DWORD).

On some systems (W2k3) you may also run into this http://support.microsoft.com/kb/929657 if you do just open the registry and modify it there.

At Blackhat Europe 2008 Chema Alonso and Jose Parada Gimeno from Microsoft Corp published a great talk about LDAP Injection & Blind LDAP Injection. 

Here are the links to thier presentation, whitepaper and tools

http://www.blackhat.com/presentations/bh-europe-08/Alonso-Parada/Whitepaper/bh-eu-08-alonso-parada-WP.pdf

http://www.blackhat.com/presentations/bh-europe-08/Alonso-Parada/Presentation/bh-eu-08-alonso-parada.pdf

http://www.blackhat.com/presentations/bh-europe-08/Alonso-Parada/Extras/LdapInjector_final.rar

Mike

I have a 2007 Prius with the NAV system.  One of the huge pains in the butt is the "I Agree" requirement when you go to the map.  So whenever I show the map after starting the car I must first "Agree" to a disclaimer that says I will not use it while driving.  It is very annoying!

Well the new 2008 Prius does NOT have this requirement.  It will just show a short disclaimer then go to the map. 

Last night we had a friend over for dinner who has a 2008 Blue Prius (very nice color).  We took his MAP DVD out of his car and put it in mine.  Right away the system starts to do an Upgrade.  This kinda scared me because I was not sure if my old DVD would continue to work.  Well part of this upgrade was that now my 2007 does NOT require me to press "I Agree"

While I know that there are "lock picks" out there that will fix this issue.  This is a fix that will not require you to take apart your dash.

Well I started back at Microsoft on Monday 2/4/2008.  This was after a took a little more than 1 year off to go work at a .com Startup in Seattle.

I had a great time working there and loved the commute (~10min from home) but there is just no way I could stay away from Microsoft. 

I am now a Program Manager with a primary focus on doing Networking.  I am on the Enterprise Engineering Center team that hosts customers vists. 

While I am not excited about my new commute I am excited for my new job. 

I had to sit through 1.5 days of NEO (new employee orientation)  :(  Not fun at all.  Being a returning employee 99.9% of the info I already knew.  But I still had to sit through it.

Any who

~m

Today I was working on getting the System Center Essentials Agent to install on a Vista and Windows Server 2008 machine.  And every time I tried to do the deployment it would return an "RPC Server is unavailable" error message. 

<error text>

The MOM Server could not execute WMI Query “Select * from Win32_OperatingSystem” on computer <computername>

Operation: Agent Install

Install Account: <Service account Name>

Error Code: 800706BA

Error Description: The RPC server is unavailable.

<\error text>

After some digging I found how the "Windows Firewall" was to blame.  But all the options of "enable File and Printer Sharing exceptions" did not resolve the issue. 

After looking at the "Windows Firewall with Advanced Security" settings with the "Domain Profile" I found that all the required ports (http://technet.microsoft.com/en-us/library/bb437377.aspx) were allowed with the existing inbound rules. But the pfirewall.log file would still report a DROP of TCP ports 445 and 135 when an incoming request was received.

I found that in addition to enabling "Windows Firewall: Allow inbound file and printer sharing exception" you must also enable "Windows Firewall: Allow inbound remote administration exception".  Once the "remote administration" option was enabled the agent could be deployed without any issues. 

I was able to test configurations changes without going through the deployment wizard by executing a simple WMI query against the target server

<vbscript>

strComputer = "vistabox"
Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

Set colQuickFixes = objWMIService.ExecQuery("Select * from Win32_QuickFixEngineering")
wscript.echo colQuickFixes.count

</vbscript>

I know I have not post in a while.  But now that I have setup my blog at its new home (I hope I never have to move it again) I will be posting more.

On Thanksgiving day 2006 I was on an Alaska Air flight from Seattle to Phoenix when I noticed that Steve Balmer (Microsoft CEO) and almost his entire family were on the plane me.  And they were all in coach!

SteveB is the 15th richest American (http://www.forbes.com/lists/2006/54/biz_06rich400_The-400-Richest-Americans_Rank.html) with about 13.6 Billion dollars. Yet he was just like another average Joe on Nov 23 2006 when he was enjoying his bag of peanuts and little to no leg room for the ~2 hour flight to Phoenix. 

It makes me happy to know that people like SteveB and his family (His parents sat directly in front of me) don't act like most billionaires.  They were nice and polite to the flight attendants and others around them. If I did not know that he was the CEO of Microsoft I would have never guessed that he was a rich as he is.