About IM-8 Auditing ~ SSL RC4 Cipher Suites Supported

Recently we have some security audit is failed , so we need to fix something to pass the audit.  small part of the IM-8 we need to fix about the .

  SSL RC4 Cipher Suites Supported

 SSL Version 2 and 3 Protocol Detection

after ask around then found out need to change the server registry key to disable some other the RC4 , SSL V2 and V3 setting.

To make the task simple we have some simple tools for it :

first we need the scan tools , which is Nmap tools, you can download from internet.

after install and run following script :

nmap --script ssl-enum-ciphers 172.xx..yy.zz   -p 443

you will get the results look as following , as you see the SSlv3 is enable. 

Dowload NARTAC Software here : https://www.nartac.com/Products/IISCrypto/Download

After install then you can choice the setting you want , click Apply then Restart . Done.

OneDrive For Business ( On Premies ) issues

OneDrive For Business issues

• Unable to run SYNC with OneDrive client 
• Unable to Open With Explorer
• Unable to Edit Microsoft file with client office

All the standard checking at client and server for SharePoint setting is done but still unable to resolve the issues .  web client service ,  IE setting [Trusted site] and so on ...all checked.

Lastly find out is because of the  : ISAPI Filters  at IIS  have the URLSCAN cause it unable to open with explorer and edit document

Resolution : remove URLSCAN from ISAPI Filters  at IIS 

Install Solution powershell script

using powershell ISE need to run as Administrator
=====================================


if ((Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue) -eq $null)
{
    Add-PSSnapin "Microsoft.SharePoint.PowerShell"
}
$WEB_APP = "http://xxxx"
$SITE_URL = "http://xxxx/sca"
$SolutionPath = "D:\Sharepoint Applications\xxxsca.wsp"
$Features = @("xxxsca")

Write-Host "Adding solution:" $SolutionPath
Add-SPSolution -LiteralPath $SolutionPath | Out-Null
Write-Host "Solution added successfully."
Write-Host

$SolutionPackage = Get-Item -LiteralPath $SolutionPath
Write-Host "Deploying solution:" $SolutionPackage.Name
Install-SPSolution -Identity $SolutionPackage.Name -GACDeployment -WebApplication $WEB_APP

$Solution = Get-SPSolution -Identity $SolutionPackage.Name
while ($Solution.JobExists) {
        Start-Sleep -Seconds 10
}

Write-Host "Solution deployed successfully."
Write-Host

foreach ($featureName in $Features)
{
        Write-Host "Enabling feature:" $featureName
        Enable-SPFeature -Identity $featureName -Url $SITE_URL
        Write-Host "Feature enabled successfully."
        Write-Host
}

Read-Host "Finished. Press Enter to exit"

SQL query : Shrink SQL log file

use content_database_name

ALTER DATABASE content_database_name SET RECOVERY SIMPLE

DBCC SHRINKFILE(content_database_name_log )

ALTER DATABASE content_database_name SET RECOVERY FULL

Sql query check instance name and sever name

SELECT @@servicename AS Servicename --returns instance name, even if this is the default (MSSQLSERVER)

SELECT SERVERPROPERTY ('InstanceName') AS InstanceName --null mean is defalut

select @@SERVERNAME AS SQLclusterName

SELECT   CONVERT(char(20), SERVERPROPERTY('servername'))AS WindowsClusterName --use this name to connect to db

SELECT @@SERVERNAME  AS pre_change_name, --returns servername\instance as far as this is not the default instance

 Serverproperty('Servername') AS current_server_name