MBSA 2.3 Reporting SQL Security mode as mixed when it is set to integrated (windows)

How to fix this.
I have searched everywhere and suprised no one else have ever seen this.
My SQL server is set to integrated security yet MBSA reports it as mixed.
Thanks
Mike

I ended up running MBSA locally on servers ( using a scheduled task) and transfer reports to a local server for further processing . trust me it works really good this way .

Similar Messages

[SQL SECURITY MODE ]

I have couple of questions regarding this [SQL SECURITY<MODE>].
1. Why it is defined.
2.while practicing the same i am not able to write it into the Imperative SQLScript logic programs.
why?
Please suggest.
Regards
Navneet

Hi Fernando
It worked.
I didn't know that in this context order can also be a issue.
Thank you for the support.
regards
Navneet

MBSA 2.3 Reporting SQL 32-bt instance is running in mixed mode when it is set to Integrated

I have SQL Server 2008 R2 64-bit installed. I just finished running MBSA 2.3 it is saying that the 32-bit instance is running in mixed mode. I only have one instance installed (64-bit). The 64-bit is set to Windows Authenticated.
How to I fix this finding?

Hi,
What is output of below
SELECT SERVERPROPERTY('IsIntegratedSecurityOnly')
GO
EXEC MASTER.SYS.XP_LOGINCONFIG 'LOGIN MODE'
Did you restarted SQL Server service after changing Authentication mode
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Wiki Article
MVP

"Security Warning" dialog box when click script set to Run at Server

I am rendering a PDF form using the renderForm component. I'm setting the Target URL. I have a script on a button set to "run at server". I can render my form in a browser and fill it out, but when I click the button I get a dialog box with a title of "Security Warning". It says "Acrobat is attempting to connect to [target URL]" with options to Allow or Block. Is this the expected behaviour for server-side execution of scripts?
I'm thinking that maybe I should just use a submit button instead. The problem with that though, is that I don't want to run the mandatory field rules and validation rules. As I understand, you can't submit a form with a submit button unless all the mandatory fields are completed.
Here's the requirement. I need to have two "submit" buttons. One checks all the mandatory field rules before submitting a "final" version of the form. The other button submits a "draft" version without the mandatory checks. I was hoping that the second button could be implemented as a normal command button with a script that executes server-side. Sure enough, it attempted to submit without checking the mandatory fields. Unfortunately I ran into other undesirable side-effects including a distressing "Security Warning" dialog box.
Ideas?
Jared Langdon

This was helpful (stopped the request to execute Thunderbird) . However, The pop up window is now asking what program do you want to use to access the website??? What is the next step??

Running Azure SQL database and reporting services native mode?

I would like to stand-up a remote Azure SQL Server to do Master Data Services (MDS) and SSRS in native mode. Can this be done from one Azure SQL Server instance?
William H. Neville Jr.

Hello，
Master Data Services (MDS)not supported by Microsoft Azure SQL Database.
In order to meet your requirement, you can try to create a SQL Server virtual machine in Azure, it similar to on-premises SQL Server installed on VM. It also install the SSRS and you can try to configure the SSRS in native mode.
To run Master Data Services in a virtual machine in Azure, you should also install the Web Server (Internet Information Services) and Silverlight, and also configure Master Data Services by using Master Data Services Configuration Tool (MDSConfigTool.exe).
Reference:
Reporting Services Native Mode Configuration
Getting Started with SQL Server in Azure Virtual Machines
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

Performance Issues with Acrobat Reader 11.0.0.2 when secure mode is enabled

Hello All,
We are experiencing sporadic issues with Acrobat 11.0.0.2 across our domain, users are reporting performance issues when opening PDF documents whether locally or from a network share.
We have found that turning off Secure Mode helps towards reducing this delay and in the cases it doesn't we are repairing the installation and/or reinstalling the application.
Due to the security implications we need to leave this turned on, I am wondering if anyone has encountered this issue and what steps were taken towards resolving it?
I also wonder whether the white list function in the new release 11.0.0.3 would be a solution to this issue?
Kind Regards,
Ryan McCarty

No probelm, so....
We had no problems with Adobe Reader 9 and 10, we encountered the issues when upgrading to 11.0.0.2.
Initially we found that turning off the Protected Mode, helped but did not resolve the issue.
We tried;
1. Turn off protected mode - issue still present
2. Clearing the recent file registry using the below registry path and deleting the keys underneath it.
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles (this does not turn recent files off permanently). - works but needs clearing regularly
3. Turning off welcome screen by creating - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown\cWelcomeScreen - works to improve app open speed.
4. uninstall/reinstall of 11.0.0.2 - works most likley due to the recent files being cleared.
5. upgrade to 11.0.0.3 - issue still present
Following reboots the issue is still present.
When Adobe Reader is the only application open this issue is still present.
As mentioned I have no systems available which I could test this issue using 11.0.0.1 as we have fixed them, albeit temporarily using the reinstall method.
I am concious that this issue is going to reoccur once that cache (recent files) builds back up because the fix above (#2) is clearing the recent files cache NOT disabling it.

The dreaded 404 message using basicHttpBinding, Transport security mode, and certificates

I am working on setting up a WCF service using mutual authentication with both client and server certifiates. The service is hosted in IIS 7, and I'm trying to access it from a simple console app. When I try to connect to the service, I get the error ""There
was no endpoint listening at
https://localhost/IISHostedService/MyService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details." The inner exception is "The remote server returned an error:
(404) Not Found."
I have seen people all over the net reporting this error, but so far none of their fixes work for me. I have an HTTPS binding in IIS for my app, and I am able to browse to my service (using either http or https) and view it with no problems. I can get the
wsdl (also over either protocol) with no issues, but connecting from the client doesn't work.
Here is my server config:
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior>
<serviceCredentials>
<serviceCertificate findValue="ServerCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName" />
<clientCertificate>
<authentication revocationMode="NoCheck" />
</clientCertificate>
</serviceCredentials>
<serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="true" />
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService">
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<services>
<service name="MyService">
<endpoint binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService" contract="Namespace.IContract" />
</service>
</services>
</system.serviceModel>
And my client:
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="clientEndpointBehavior">
<clientCredentials>
<clientCertificate findValue="ClientCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName"/>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService" closeTimeout="00:10:00"
openTimeout="00:10:00" receiveTimeout="00:10:00" sendTimeout="00:10:00"
allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
useDefaultWebProxy="true">
<readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
maxBytesPerRead="4096" maxNameTableCharCount="16384" />
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint address="https://localhost/IISHostedService/MyService.svc behaviorConfiguration="clientEndpointBehavior"
binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService"
contract="Namespace.IContract" name="BasicHttpBinding_MyService" />
</client>
</system.serviceModel>
I am not sure if it matters, but this client and server are running on the same physical machine in a test environment. I have confirmed that both the client and the server certificates are installed, and that the issuing authority is trusted. The virtual
folder is set in IIS to "Accept" client certificates, and SSL is not required.
Does anyone have any thoughts what I may be missing? This service works without a problem over HTTP, so it has to be somehow related to the certificate that is being passed. With the Server certificate, I just trapped the ServicePointManager.ServerCertificateValidationCallback
event to manually approve the certificate if the subject matched what I was looking for (the subject does not match the domain name, since this is a test environment). Do I need to do something similar for the client certificate?
EDIT: One thing I do notice is that, in the WSDL, the soap location is always pointing to http. I'm not sure if that is correct or not:
<wsdl:service name="MyService">
<wsdl:port name="BasicHttpBinding_MyService" binding="tns:BasicHttpBinding_MyService">
<soap:address location="http://computerName.domain.com/IISHostedService/MyService.svc" />
</wsdl:port>
</wsdl:service>

A little more information (since this is the main thing I have to work on today):
After some research, I decided to try using a custom certificate validator, in case something is wrong with the client certificate. In the clientCertificate\authentication node on the server, I set the certificateValidationMode="Custom" and set customValidationType="MyType.Validator,
MyType". My type is apparently being found (when it is not found I get a "service could not be activated" error), but my Validate() method is never being called.
Now this leads me to believe that it's not a problem with the client certificate, but something else, before it even gets that far.

Now I can start my Mac Pro only in "secure mode." I'm still appears on all monitors a series of bands such as seen in the attached file. Someone can give me a diagnosis? Thank you.

Now I can start my Mac Pro only in "secure mode."
I'm still appears on all monitors a series of bands such as seen in the attached file.
Someone can give me a diagnosis?
Thank you.

The attached file is not showing.
In Safe/Secure Mode many Drivers are not loaded. When your computer works in Safe Mode, but not regular mode, two types of problems are implicated:
1) Third-party kernel extensions. a conflict with some part of Mac OS X means that when those extensions load, your Mac can not run.
2) Failed graphics card. Since the Driver for the display is not loaded, the display in Safe Mode uses a very simple built-in Driver. In regular mode, once the driver is loaded, all parts of the graphics card must be working, or you could get bands of color on the display (which is just what you reported).
Which Model Mac Pro Tower or MacBook Pro is this?

SAP Business One 2007 - SQL Security best practice

I have a client with a large user base running SAP Business One 2007.
We are concerned over the use of the sql sa user and the ability to change the password of this ID from the logon of SAP Business One.
We therefore want to move to use Windows Authentication (ie Trusted Connection) from the SAP BO logon. It appears however that this can only work by granting the window IDs (of the SAP users) sysadmin access in SQL.
Does anyone have a better method of securing SAP Business One or is there a recommended best practice. Any help would be appreciated.
Damian

See Administrators Guide for best practise.
U can use SQL Authentication mode Don't tick Remember password.
Also check this thread
SQL Authentication Mode
Edited by: Jeyakanthan A on Aug 28, 2009 3:57 PM

PS2010 Report Center Security (subscribe to a report)

I don't see where I can manipulate the Report Center security, but I've noticed that people with the "Team Member" role cannot subscribe to reports. (Actions > Subscribe) The option is grayed out.
Any ideas?

Kevin,
1) The "Subscribe" option is only available if you are talking about SSRS Reports.
2) Standard BI Center in PS2010 does not come with SSRS reports. SO I am presuming you have Reporting Services implemented in SharePoint Integrated Mode.
In this scenario, the Team members group (Microsoft Project Server) is mapped to SharePoint Group Readers (Microsoft Project Server), which is why they cannot create subscriptions. The only was I see out of this is to break the inheritance
of permissions of BI Center from PWA and add users manually to at least Contribute Level, if you really need to the self-subscription option. Alternatively, you could just set up a subscription as an admin for the users I believe.
Prasanna Adavi,PMP,MCTS,MCITP,MCT TWitter: @prasannaadavi Blog: http://www.prasannaadavi.com

Print landscape report in character mode

Hi!
It seems that I should change xxx.prt file in DESFORMAT parameter to match different kinds of printers in order to print landscape report in character mode.
Our customers are international wide. How can I do to make this setting meet every customer for printing reports in landscape style?
We will run the reports on Unix on the middle tier and customers read them in browser.
Thanks for help.
null

Hi,
This sounds like a similar problem that I had (and still having). It was (is) a Bug. Go to metalink.oracle.com and reference this bug#1413754. See if this is your problem as well. My only work around was change the format of the file instead of using character mode I am now using PDF. Which is working fine for me.
~Vannette

Get a Report crashed error while running report using the mode character

Hello,
I'am getting an "Enable to run report - Report as crashde" issue only when I'am running reports using the mode character. The same report with desformat pdf never has any problems. I have changed the englife (set to one) increase the cachesize but I still have the same issue.
I'm using report 6i and Oracle 8i.
Thanks in advance for your help.
Regards,
Laurent.

Hi Thanks for the response,
In fact the report in character mode is working fine in my environnement but is not working on my customer environnement (which is supposed to be the same as mine). I was thinking of cache size issue or something like this ?
Regards,
Laurent.

How to create a Web Application when SQL is running in SQL Authentication mode ?

Hi,
I a have the following config:
SQL server 2012 with mixed authentication, running in the LAN
IIS server with SharePoint 2013 SP1, running in a DMZ --> SharePoint contacts the SQL server with a SQL login (not a Windows login, the required port has been opened in the FW)
SharePoint is working fine but when I want to create a new Web Application, I get an error: "Could not connect to MySQLServer\MySQLInstance,MyPortnumber using integrated security: Cannot
connect to database master at SQL server. The database might not exist, or the current user does not have permission to connect to it."
I think, since I use SQL authentification, I have to use PowerShell. I found a script on the Internet but this script was not made to create a Web App which a SharePoint installed with SQL authentication.
Can you help to adapt the script ?
Thks
THE SCRIPT Documentation:
New-SPWebApplication -ApplicationPool <String> -Name <String> [-AdditionalClaimProvider <SPClaimProviderPipeBind[]>] [-AllowAnonymousAccess <SwitchParameter>] [-ApplicationPoolAccount <SPProcessAccountPipeBind>]
[-AssignmentCollection <SPAssignmentCollection>] [-AuthenticationMethod <String>] [-AuthenticationProvider <SPAuthenticationProviderPipeBind[]>] [-Confirm [<SwitchParameter>]] [-DatabaseCredentials <PSCredential>] [-DatabaseName
<String>] [-DatabaseServer <String>] [-HostHeader <String>] [-Path <String>] [-Port <UInt32>] [-SecureSocketsLayer <SwitchParameter>] [-ServiceApplicationProxyGroup <SPServiceApplicationProxyGroupPipeBind>] [-SignInRedirectProvider
<SPTrustedIdentityTokenIssuerPipeBind>] [-SignInRedirectURL <String>] [-Url <String>] [-WhatIf [<SwitchParameter> ]] [<CommonParameters>]
The Example:
$siteName = “PowerShell for SharePoint”
$port = 80
$hostHeader = “lab.ps4sp.com”
$url = “http://lab.ps4sp.com”
$appPoolName = “PS4SPAppPool”
$managedAccount = “PS4SPspservice”
$dbServer = “PS-SQL”
$dbName = “PS4SP_SP2010_LAB_ContentDB”
$allowAnonymous = $true
$authenticationMethod = “NTLM”
$ssl = $false
New-SPWebApplication -Name $siteName -Port $port -HostHeader $hostHeader -URL $url -ApplicationPool $appPoolName -ApplicationPoolAccount (Get-SPManagedAccount “$managedAccount”) -DatabaseName $dbName -DatabaseServer $dbServer -AllowAnonymousAccess: $allowAnonymous
-AuthenticationMethod $authenticationMethod -SecureSocketsLayer:$ssl
Charles

Hi Scott,
Based on your aticle, I changed my script by adding the credential, but I still have an error.
Il also put the SQL specific port in the $dbServer variable.
Any idea ?
MY SCRIPT:
$siteName = "TEST Site"
$port = 80
$hostHeader = "sharepoint.test.be"
$url = "http://sharepoint.test.be"
$appPoolName = "TestAppPool"
$managedAccount = "DISNET\administrator"
$authenticationMethod = "NTLM"
$dbServer = "DSPORT-SQL02\DSPORTPRDEXT,50123"
$dbName = "WSS_TEST_Content"
$dbServer_secPassword = ConvertTo-SecureString "MySQLPassword" -AsPlaintext -Force
$dbServer_Creds = New-Object System.Management.Automation.PsCredential "DMZSharePointLoginSQL", $dbServer_secPassword
New-SPWebApplication -Name $siteName -Port $port -HostHeader $hostHeader -URL $url -ApplicationPool $appPoolName -ApplicationPoolAccount (Get-SPManagedAccount "$managedAccount") -AuthenticationMethod $authenticationMethod -DatabaseName
$dbName -DatabaseServer $dbServer -DatabaseCredentials $dbServer_Creds
Charles

Report in Character MODE

I have an Oracle Reports Server 6i and Forms Server 6i on the same machine.
Operation system Windows 2000 Server.
I can not run reports with BITMAP mode after runing report in CHARACTER MODE.
1 report: I run report on Forms server using command line:
rwcli60.exe report=report1.rep MODE=CHARCTER DESTYPE=MAIL DESNAME=MyMail BACKGROUND=YES server=REP_SERVER
It works correct.
When I run report by URL:
2 report: http://myhost/rwcgi60.exe?report=report2.rep DESTYPE=CACHE DESFORMAT=HTML server=REP_SERVER MODE=BITMAP
Report fails with message
REP-1920 character mode runtime incompatible with DESFORMAT of PDF,HTML,HTMLCSS or RTF
Then I restart reports server service and report2 works correct but after runing report1 report2 does not work.
Whats are problem?

Hi,
You are running into known bug 2460641. It is fixed in the latest patchset, patchset 13. Please give it a try as it should resolve your issue. If it does not, I'd suggest contacting Oracle Support.
Hope that helps,
Toby

Unable to open Webi report in edit mode

Hi All,
While i am trying to open a web intelligence report in "Modify" mode, its throwing an error "The document cannot be created or opened. The error code is: FILE NOT FOUND."
Please let me know how to retrieve the report as i am not having a back up of the reports.
Version: BO XI 3.1 SP3
Regards,
Akhil

Hi Akhil,
Generally if the "Preferences" you have set in InfoView for Creating/Modifying webi documents is Desktop, then this error is thrown.
You have 2 choices:
01. Change the preferences to "Web" and try the workflow.
02. Do this workflow where WebI Rich Client is installed.
Thanks
Niranjan

MBSA 2.3 Reporting SQL Security mode as mixed when it is set to integrated (windows)

Similar Messages

Maybe you are looking for