Your worst security risk may work for you!

Most developers consider security as an outside risk. However, contrary to popular belief, most security breeches occur from within an organization. This article from Microsoft.com discusses this issue in more detail and offers some solutions to combat this problem.

Checklist for Testing Web Parts

For those developing web parts for SharePoint, here's an article on testing web parts. The article has a checklist and detailed How-To instructions on changing the various settings to test the web part for different scenarios.

SharePoint 2003 Limitations using WMSDE

Q: I want to use WMSDE for a very limited POC (proof of Concept) of SPS 2003. Other than Search and performance, are there any other things to be concerned about?

A: If SPS 2003 is not installed WSS uses a special version of MSDE, known as SQL Server 2000 Desktop Engine (Windows), or WMSDE. This is an unthrottled version of MSDE designed only to be used by Windows components, and as such is not limited in the same way as MSDE. The maximum size limit and current connections limit have both been removed. However it is still much more limited than SQL Server 2000 in the following ways:

• WMSDE does not include enterprise management tools such as those provided with SQL Server 2000 (e.g. SQL Enterprise Manager MMC tool) for backing up and restoring the database. However command line tools can still be used (e.g. stsadm tool).
• WMSDE can only be managed locally – you cannot remotely connect.
• WMSDE does not support full-text search – so search from within team sites is not possible.
• You cannot deploy WMSDE in web farm/clustered configurations, so the solution cannot scale beyond certain limits, and remains a single point of failure.
• You cannot use WMSDE for anything other than WSS due to the custom schema it uses (MSDE or SQL Server 2000 can also be used for other custom applications). There is no user interface to edit the database file.
• WMSDE will support a maximum of 1000 web sites.

For more information, goto http://blogs.msdn.com/grahamtyler/archive/2004/10/19/244496.aspx

Windows Fundamentals

Microsoft Corp. released a new version of its operating system for businesses this week that extends the life of older PCs by effectively turning them into thin-client computers. Called "Windows Fundamentals" for Legacy PCs, the software is offered only to customers on Microsoft's Software Assurance licensing and maintenance program.

It is not a full-featured operating system, but it improves the security and manageability of PCs for customers with systems that are too old for Windows XP and who aren't ready to upgrade their hardware, Microsoft said.

For the full article, visit http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9001761&source=NLT_PM&nlid=8

Can 32-Bit Applications run on Windows 2003 64-Bit?

Q: Can I run SQL Server 2000 32 bit on Windows 2003 64 bit?

A: The short answer is yes. WOW64 (Windows on Windows 64) is a compatibility environment provided by the operating system that allows a 32-bit application to run on a Windows 64-bit operating system. For more information, see 64–Bit Windows Part 11: Windows on Windows 64.

For web applications, Windows Server 2003 SP1 enables WOW64 compatibility for 32–bit Web applications in IIS 6.0. Based on the value of a metabase property, IIS will either start a 32–bit or a 64–bit worker process. In other words, IIS 6.0 can run applications in WOW64 or native 64–bit, but not both. For more information, see Windows Server 2003 SP1 enables WOW64 compatibility for 32-bit Web applications in IIS 6.0.

Nine Tips to Enhance IIS Security

Listed below is a link to an article on 9 tips to enhance security using IIS 6.0. To view the article, go to http://www.microsoft.com/technet/technetmag/issues/2006/05/ServingTheWeb/default.aspx

Next Versions of VS and SQL Server

Orcas: code name for the next version of Visual Studio, due in 2007 or 2008. One of the big
features of the new VS is Language-Integrated Query (LINQ). LINQ is a breakthrough technology that eliminates the impedance mismatch among different data domains. With LINQ, developers do not need to learn separate query syntaxes when querying over diverse data domains such as XML, Relational and Objects. LINQ has been very well received both last year at its announcement at the PDC, and more recently at Tech-Ed in Boston. Orcas, the next version of Visual Studio, includes LINQ infrastructure that enables this powerful combination of languages and API’s, as well as concrete support in multiple programming languages and data domains.

Orcas is based on the .Net Framework 3.0, which is comprised of the existing .NET Framework 2.0 components, including ASP.NET, WinForms, ADO.NET, CLR, and additional base class libraries. It will also include Windows Presentation Foundation (WPF), Windows Communication Foundation (WCF), Windows Workflow Foundation (WF) and the newly christened Windows CardSpace (WCS) formerly known under the codename “InfoCard.”
The .NET Framework has always been at the core of WinFX, but the WinFX brand didn’t convey this.

The WinFX brand helped us introduce the incredible innovations in terms of The brand also
created an unnatural discontinuity between previous versions of our framework and the current version. With this in mind, WinFX will be renamed the .NET Framework 3.0.
To read more about it and download the CTP, go to http://www.microsoft.com/downloads/details.aspx?familyid=1A994549-94CB-4F61-903D-A8C8E453EEF4&displaylang=en


Katmai: code name for the next version of SQL Server, due out in 2007 or 2008. It will provide support for unstructured data and auto-admin work.

Passing values to JavaScript

Q: I have an ASP.Net application where I would like to pass the value of a variable to JavaScript code on the same page. How can I do that?

A: An article found at http://aspalliance.com/ArticleViewer.aspx?aid=851&pid=-1 explains exactly how to do that. First, place the script in a separate .js file. Then pass the required value to the script using Page.ClientScript.RegisterClientScriptBlock().

In ASP.Net 2.0 Page.ClientScript.RegisterClientScriptBlock() is used to download and store a script in a browser's cache for quicker reponse in the browser.

Another similar method is Page.ClientScript.RegisterStartupScript(). This method is best used when you have a JavaScript function that you want to initiate when the page is loaded. The code, including this method call, would be placed in the Page_Load() event handler.

For more information, go to http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/JAVAwASP2.asp.

Best Practices for Developing Web Parts

For those developing web parts, Microsoft has released "Best Practices for Developing Web Parts for SharePoint Products and Technologies" . This can be accessed at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/odc_sp2003_ta/html/ODC_WSSWebPartTips.asp

Importing Mutliple Web Parts Simultaneously

During the last SIG meeting, one of the members asked if multiple web parts could be deployed simultaneously. There was no obvious way to use the SharePoint UI to import multiple web parts at once. However, other solutions are available by use of STSADM.EXE and InstallAssemblies.EXE.

STSADM.EXE
To use the Stsadm.exe command to deploy a Web Part package on a server computer running Windows SharePoint Services, open a command prompt, and then type the following command:

stsadm.exe -o addwppack -filename Web_Part_Pack_name [-url URL] [-globalinstall] [-force]

A series of these commands can be entered into a batch file and used to import multiple web parts simultaneously.

STSADM.EXE is a standard SharePoint utility, and is installed by default on the SharePoint server.


InstallAssemblies
InstallAssemblies is an assembly installation tool for Windows SharePoint Services. The tool is designed for use within development and testing environments. By default, InstallAssemblies will start in interactive mode, but it can run in command line mode. Once InstallAssemblies.exe boots, you will need to select which assemblies to install. This can be done by either clicking on the “Select assemblies” button, or dragging and dropping assemblies onto the tree view control initially labeled “No assemblies have been selected”. Afterwards, ensure all other options are properly set before clicking on the “Install” button. The results of all actions are displayed in the Results sections.

InstallAssemblies is a free download available with the SharePoint 2003 Resource Kit.

Office 2007 Delayed

Microsoft announced today that office 2007 will be delayed for the purpose of shipping a better product. Different versions of Office 2007 will shipping at different times in 2007.

The 2 business editions are:
Office Professional Plus 2007
Office Enterprise 2007

The 6 consumer versions are:
Office Home 2007
Office Student 2007
Office Professional 2007
Office Small Business 2007
Office Standard 2007
Office Ultimate 2007 edition.

The business editions are now expected to ship by the end of 2006, a few months later than the previously announced October date. Consumer editions are expected to ship in "early 2007", instead of the January 2007.

To try Office 2007 Beta2 online, please go to http://www.microsoft.com/office/preview/beta/testdrive.mspx

Web Part Resources

As a follow-up to this month's meeting, listed below are a few SharePoint 2003 Web Part resources.

• Web Part Template for Visual Studio
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CAC3E0D2-BEC1-494C-A74E-75936B88E3B5&displaylang=en
  
• Son of Smart Part
  http://www.gotdotnet.com/workspaces/workspace.aspx?id=6cfaabc8-db4d-41c3-8a88-3f974a7d0abe
  
• “The Rational Guide to Building SharePoint Web Parts”
  http://www.amazon.com/gp/product/0972688862/qid=1151515832/sr=1-1/ref=sr_1_1/102-1550737-3506543?s=books&v=glance&n=283155
  
• “Microsoft SharePoint Products and Technologies Resource Kit”
  http://www.bookpool.com/ss?qs=sharepoint+resource+kit&x=0&y=0
  

This list has been incorporated into the PowerPoint presentation. The presentation is titled SharePoint 2003 Web Parts and is listed under the Previous Presentations section of the SIG web site.

Retrieving Identity Values

Q: How do you retrieve the Identity value of a row that was last inserted in a SQL Server DB?

A: SCOPE_IDENTITY, IDENT_CURRENT, and @@IDENTITY can all be used to return values inserted into IDENTITY columns. However, each one has its own scope limitations. Scope refers to a specific module (i.e. a stored procedure, trigger, function, batch).

• SCOPE_IDENTITY will return last identity values generated in any table in the current session, but within the current scope.
  
• IDENT_CURRENT returns the value generated for a specific table in any session and any scope. It is not limited by scope and session, but it is limited to a specified table.
  
• @@IDENTITY will return the last IDENTITY column value inserted across any scope in the current session, but it is not limited to a specific scope.

For more information, see http://msdn.microsoft.com/library/default.asp?url=/library/en-us/tsqlref/ts_sa-ses_6n8p.asp