Hi Marco, On Thu, Mar 1, 2012 at 6:17 AM, Marco Parra D. <[email protected]>wrote:
> Hi Josh, thank you for reply, > > On 29-02-2012 19:12, Josh Cooper wrote: > > Hi Marco, > > On Wed, Feb 29, 2012 at 10:52 AM, Marco Parra D. > <[email protected]>wrote: > >> Hi Josh, >> I'm runnig from cmd.exe, I'm using Administrator account on the windows >> box, this is the output for the command that you asked: >> >> C:\Users\Administrator>whoami /groups >> >> GROUP INFORMATION >> ----------------- >> >> Group Name Type SID >> Attributes >> ==================================== ================ ============ >> =============================================================== >> Everyone Well-known group S-1-1-0 >> Mandatory group, Enabled by default, Enabled group >> BUILTIN\Administrators Alias S-1-5-32-544 >> Mandatory group, Enabled by default, Enabled group, Group owner >> > > This shows that you are running elevated, which is good. > > >> BUILTIN\Users Alias S-1-5-32-545 >> Mandatory group, Enabled by default, Enabled group >> NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 >> Mandatory group, Enabled by default, Enabled group >> CONSOLE LOGON Well-known group S-1-2-1 >> Mandatory group, Enabled by default, Enabled group >> NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 >> Mandatory group, Enabled by default, Enabled group >> NT AUTHORITY\This Organization Well-known group S-1-5-15 >> Mandatory group, Enabled by default, Enabled group >> LOCAL Well-known group S-1-2-0 >> Mandatory group, Enabled by default, Enabled group >> NT AUTHORITY\NTLM Authentication Well-known group S-1-5-64-10 >> Mandatory group, Enabled by default, Enabled group >> Mandatory Label\High Mandatory Level Label S-1-16-12288 >> Mandatory group, Enabled by default, Enabled group >> >> C:\Users\Administrator> >> >> >> I found a page that talks about security on windows 2008, and I tried >> changing a configuration for the IIS, On the Ineternet Information Services >> Manager, under Management, Configuration Editor, selecting Providers, click >> on Edit Items, selecting DataProtectionConfigurationProvider, I change >> useMachineProtection, and save the change. >> >> On Windows 7 the scripts run perfect, but on Windows 2008 R2 still didn't >> work, still the execution said that the file was modified, but nothing >> happens on the file..... no errors it's showed.... >> > > Is your Windows 7 box 32-bit? If you're using 32-bit ruby on a 64-bit > Windows 2008 R2 to edit > C:\Windows\System32\inetsrv\config\applicationHost.config, > Windows may be redirecting you to %windir%\syswow64\inetsrv instead: > http://forums.iis.net/p/1150832/1875622.aspx > > > Yeah, I'm using a Windows 7 32 bits box, and it's works fine... in the > other hand, I've testing on Windows 2008 R2 64 bits server, I checked on > the path tha you said, and your right, the file is changed on > c:\windows\SysWOW64\inetsrv\config\applicationHost.config, but IIS uses the > file on c:\windows\system32\inetsrv\config\applicationHost.config > > C:\Windows\SysWOW64\inetsrv\Config>dir applicationHost.config > Volume in drive C has no label. > Volume Serial Number is F4D5-2946 > > Directory of C:\Windows\SysWOW64\inetsrv\Config > > 03/01/2012 06:01 AM 82,384 applicationHost.config > 1 File(s) 82,384 bytes > 0 Dir(s) 6,910,136,320 bytes free > > C:\Windows\SysWOW64\inetsrv\Config>dir > c:\Windows\System32\inetsrv\config\applicationHost.config > Volume in drive C has no label. > Volume Serial Number is F4D5-2946 > > Directory of c:\Windows\System32\inetsrv\config > > 02/29/2012 11:01 AM 82,122 applicationHost.config > 1 File(s) 82,122 bytes > 0 Dir(s) 6,910,136,320 bytes free > > > How can I tell ruby that don't uses c:\windows\SysWOW64\inetsrv\config > path? Is this posible?... > You can disable file system redirection using the special 'sysnative' alias: C:\Windows\Sysnative\inetsrv\config\applicationHost.config. But acccording to MS this is not available on 2003[1], which is odd, because then 32-bit processes in 64-bit 2003 can't disable file system redirection on a per-file basis. There are APIs for disabling file system redirection for the entire process, but that would probably break 32-bit ruby.exe Perhaps the best option is to create a symlink to the IIS configuration directory[2]. However, 2003 doesn't support symlinks, so again I'm not sure how to do this on 64-bit 2003. Also puppet cannot currently manage symlinks on Windows, so you'd have to use an exec resource to do that. I'll add a note to our troubleshooting guide about 32vs64bit. I'd be curious to hear about which approach you end up taking. Josh http://msdn.microsoft.com/en-us/library/aa384187(v=vs.85).aspx http://blogs.msdn.com/b/robert_mcmurray/archive/2008/10/27/using-visual-studio-2008-on-a-64-bit-computer-to-edit-applicationhost-config.aspx -- Josh Cooper Developer, Puppet Labs -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
