Archive for ‘Microsoft’ Category
Microsoft »

This took a while to figure out, mainly because I’m a unix guy trying to “figure out” Windows Server and it’s archaic ACL system and the fact that ACL’s/attributes under OSX are just insane. The main issue I had with all the other recipes on the net describing this process was that it did NOT work for OSX/Finder. When users transferred the files, Finder was not able to strip off it’s “in-use” attribute from the file once copied to the destination. This would leave files in limbo (greyed out) and no one could touch/access them from another Mac until I stripped the “in-use” attribute off manually. Normally SMB capable NAS’s ignore Finder/OSX attributes and this does not happen, but FS7500 is “mac friendly” and preserves the attributes so we had to figure out a way to give Finder enough rights to be able to strip the attribute off once the file was copied.

The core idea here is that you have a windows share (\\elm\DROPBOX in my case) which has a bunch of subfolders under it, one per class (they are in the form of BDCxxx.yyy in my case). What we’re trying to do is give AD users who are in AD groups (also called BDCxxx.yyy in my case) which represent classes enough permission to get inside \\elm\dropbox and see the name of the subfolders and be able to drag files onto the appropriate class subfolder (BDCxxx.yyy), essentially submitting their assignment. What we don’t want to let the users do is to peak inside those subfolders. It’s the equivalent of a “write only” group permission on a folder (no execute or read bit) in unix land. We also want to have our instructors be able to access everything in the DROPBOX share, so we use a group called DropBoxMasters for that purpose.

For the sake of this example I will use the student/class group BDC974.011 which the students belong to and DropBoxMasters group for our instructors. So here we go:

1) We obviously need a share. If you’re using a FS7500 NAS you just create the share and that’s it, no sharing permissions, everything is controlled by Windows ACL’s. If your share is on windows then I guess you can give full control sharing permissions to Domain Users. Once this is done we access \\elm to set the Windows permissions on DROPBOX share.

2) For DROPBOX we need the following permissions to be set to Allow and Apply it to “This folder only”: Traverse folder/execute file, List folder/read data, Read attributes, Read extended attributes, Read permissions. This will allow our BDC974.011 students to see the content of this folder (i.e. the subfolders, one per course). Remember that you need to create this permission set for each individual course/group/class. And remember to apply to “This folder only”.

Screen Shot 2013-02-28 at 3.11.57 PM Screen Shot 2013-02-28 at 3.12.15 PM

3) Still on DROPBOX share permissions we want to setup the DropBoxMasters group. This one is easy since it’s “Full control” permission that applies to “This folder, subfolder and files”. Easy :-)

Screen Shot 2013-02-28 at 3.16.58 PM

4) Before we go on, a note about the above process. In the permissions/Advanced security settings you should only have the “class/course” groups, the DropBoxMasters group, SYSTEM group (with full control) and Domain Admins (with full control). Next we want to create the subfolders inside DROPBOX, one subfolder per course/class (BDC974.011 in my case). Permission wise we want to setup the following permissions for the group that matches our course/folder (i.e. the example screen shots here are for group BDC974.011 on subfolder \\elm\DROPBOX\BDC974.011). We need the following permissions to be set to Allow and Apply it to “This folder only”: List folder/read data, Read attributes, Read extended attributes, Create files/write data, Create folders/append data, Write attributes, Write extended attributes, Read permissions.

Screen Shot 2013-02-28 at 3.31.53 PM Screen Shot 2013-02-28 at 3.32.07 PM

5) Still in the security settings for the course subfolder we need to add “CREATOR OWNER” to the list of permissions (This is a built-in windows entity) and give it the following permissions for “Files only”: basically all the allow check boxes EXCEPT the following (leave unchecked)……Full control, Change permissions, Take ownership. Remember these permissions are to be applied to “Files only”.

Screen Shot 2013-02-28 at 3.37.06 PM Screen Shot 2013-02-28 at 3.37.18 PM

That’s it…..Now just keep repeating this for all your courses/groups.

How to Run Mac OS X Inside Windows Using VirtualBox

datePosted on 16:33, August 28th, 2012 by Many Ayromlou

How to Run Mac OS X Inside Windows Using VirtualBox:

Maybe you’d like to test drive OS X before switching to a Mac or building a Hackintosh, or maybe you just want to run that one killer OS X app on your Windows machine. Whatever your reason, you can actually install and run OS X on any Intel-based Windows PC with a program called VirtualBox. Here’s how.


How to install Office 2010 on Windows XP x64-bit edition

datePosted on 15:17, September 23rd, 2010 by Many Ayromlou

Let me guess… tried it and it failed. Well, there is a way (probably not sanctioned by MS) to get this done. I’ve installed it on two separate machines and verified that it works. First you need to download MSXML 6 from Microsofts website. Just go to and search for MSXML. There should be a link to MSXML6.0 download. Download the 64-bit version of the software and install it. Then force a windows update by choosing windows update from the start menu. You will notice a bunch of updates for MSXML. Let it update the files and reboot after that’s done.

Now you need to get the x86 version of office 2010 off the cd and copy it onto your computer somewhere (I just dragged the folder onto my desktop). We need to modify something and you can’t do that on the CD/DVD. Once the copy is done, find setup.exe right click on it and choose properties. Under the Compatibility tab choose “Run this program in compatibility mode for:” and choose Windows XP from the pull down.

Click Apply/Okay and double click setup to run it. That’s it. It works…..Happy days are here again :-).

The Ultimate File Transfer Utility for Windows

datePosted on 12:18, August 27th, 2010 by Many Ayromlou

I’ve been posting mainly about OSX for the last little while, but no worries, I haven’t given up on Windows…yet :-). Someone today was asking about a good WebDAV client and after searching around for a bit, it seems like there is really only a couple out there. But really none of them can beat BitKinex client in terms of features and “price”. Here is a short list of features (oh…and the price thing….it’s free:-) ):

  • Site Navigation Without Freezing Windows
    Unique technology of advanced directory caching and multi connection/threaded directory scanning makes the non-blocking browse windows possible.
  • Robust User Request Handling
    Resume and control in detail not only file transfers but all user requests – including file removals, moves, directory creations, remote edits, prints, etc.
  • Indirect Transfers
    Allows users to transfer files from one server to another regardless of which protocol they are running (FTP->SFTP, WebDAV->FTPS, HTTP->FTP, etc.)
  • Smart Messenger-like User Interface
    Does not occupy much space on your desktop.
  • Properties Inheritance
    For easy and flexible configuration.
  • Large Number of Supported Protocols
    Including FTP, FXP, FTPS, SFTP, HTTP, HTPS and WebDAV

I don’t know how they do it, but I would just grab a copy, if I were you :-).

Terminator 5: Revenge of the Microsoft Fanboy

datePosted on 15:23, May 4th, 2010 by Many Ayromlou

Todays must watch video comes to you curtesey of Leon Wang. I seriously think MS should hire this guy to do their ads. This is excellent stuff :-)….

Solid Colour background in Windows causes 30-second login delay…

datePosted on 12:38, January 19th, 2010 by Many Ayromlou

Yep MS strikes again. This time though it’s funny as hell. Turns out a bug in Windows 7 and Windows Server 2008 R2 causes a whopping 30 seconds delay to your login process if you have a solid colour background set as your desktop wallpaper. Why? Well it’s MS, what did you expect, a working OS….HAH??? My solution…..Format C:\…..If you prefer an MS solution, check the support page.

…and one final Windows 7 Launch Party Video…….

datePosted on 11:57, October 23rd, 2009 by Many Ayromlou

MMmmmmm…..Windows 7 Space Cake…….MMmmmmmm :-)

Ninite: Number 1 application you need in Windows…..

datePosted on 11:47, October 23rd, 2009 by Many Ayromlou

There are a lot of fantastic free software packages out there for the PC if you’re running windows. VLC, Firefox come to mind. The problem is that it takes a long time to install all of them on your PC. You know the routine, click, wait for download, double click, next, next, next, etc……Well, why? Head over to Ninite’s website, choose the applications you want and let them create a custom “Meta Installer” for all the applications in one package. Run the installer and wham, you got all those free/opensource apps downloaded and installed on your machine in one shot, with minimal clickage :-). No sign-up required, Free for personal use, Just in time for Windows 7 Upgrade (or potentially downgrade). Now if only someone would make something like this on OSX, so I can install Final Cut Pro Studio without having grass grow under my seat, that would be nice :-).

Windows Launch Party….maybe it wasn’t such a good idea…..

datePosted on 11:21, October 23rd, 2009 by Many Ayromlou

Here is a video for all the people who attended — or god forbid hosted — a windows 7 launch party yesterday. This will give you a rough idea of what people will think of your party video in about 17 years……hehehehe :-)

Microsoft Photocopies Apple Store…..Literally.

datePosted on 17:15, October 22nd, 2009 by Many Ayromlou

Holy crap…..MS has literally photocopied the Apple Store, replaced the Genius Bar with “Answer Bar” and the Genius’ with Guru’s……Does Microsoft ever come up with something original? :-) Here comes “Attack of the Clones”…..hehehehe