Unknown Error with Azure Active Directory Sync Tool

I ran into an issue while installing and configuring the Windows Azure Active Directory Sync Tool using the Configuration Wizard.   Specifically the error was noted as Configuration error – An unknown error occurred with the Microsoft Online Services Sign-in Assistant.   Contact Technical Support.

This was when entering the Office 365 credentials.   I had two admin accounts (global admins) and both were receiving the same error.

Error

Two days later on the phone with Office 365 technical support (who worked hard to try and root this out) we solved the problem by creating a third admin account.   We used the new account and all was well.   But that got me thinking about what was different between the new account we created and the existing accounts throwing the error.

The next time I logged in with my previous credentials directly to access the portal, the answer hit me.   I enabled two-factor encryption (for Office 365 currently it sends you a 6 digit code by text message when signing on) for the admin accounts a few days back.  While I prefer to have this active, it is definitely the reason the above error occurred.   I turned off two-factor encryption on the previous two accounts and turned it on with the newly created account and sure enough, the first two admin accounts worked and the new one began throwing the error above.

Current Solution – Until Microsoft fixes the Configuration Wizard to support two-factor encryption, you will need to turn it off with the account you plan on using with the Azure Active Directory Sync.   And its not something you can turn back on after you run the wizard, as the account and credentials are used for the constant syncing that goes on between your domain and Office 365.

Windows Server 2012 and Certificate Authority Web Enrollment

UPDATE 1/19/2013 – Based on a tip from Unbob, I did a little more research as I found the sometimes the registry key in the process below would be recreated and have to be deleted again.  To permanently fix it, in my case I went to my PDC that is running the Certificate Authority and found the file ActiveDirectoryCertificateServices.xml in the “C:\ProgramData\Microsoft\Event Viewer\Views\ServerRoles” directory.   I copied the xml file to the Certificate Authority Web Enrollment server (my IIS Server) into the same directory, refreshed in Server Manager, and the error went away.   Seems to be a more permanent fix.    If for some reason you can’t find a machine with the file, you can recreate the xml in the above directory.  I’m guessing this would work for other missing xml files reported as errors in Server Manager.  Here is the xml (sorry about the spacing, but if you paste it into a text editor, the proper line feeds should be there):

<ViewerConfig>
  <QueryConfig>
    <QueryParams>
      <UserQuery />
    </QueryParams>
    <QueryNode>
      <Name ResourceId="%windir%\system32\svrmgrnc.dll,-400">Active Directory Certificate Services</Name>
      <Description ResourceId="%windir%\system32\svrmgrnc.dll,-401">System events for Active Directory Certificate Services</Description>
      <SuppressQueryExecutionErrors>1</SuppressQueryExecutionErrors>
      <QueryList>
        <Query>
          <Select Path="Application">*[System[Provider[@Name=’Microsoft-Windows-CertificationAuthority’]]]</Select>
          <Select Path="Application">*[System[Provider[@Name=’Microsoft-Windows-NetworkDeviceEnrollmentService’]]]</Select>
          <Select Path="Application">*[System[Provider[@Name=’Microsoft-Windows-OnlineResponderWebProxy’]]]</Select>
          <Select Path="Application">*[System[Provider[@Name=’Microsoft-Windows-OnlineResponder’]]]</Select>
          <Select Path="Application">*[System[Provider[@Name=’Microsoft-Windows-OnlineResponderRevocationProvider’]]]</Select>
          <Select Path="Microsoft-Windows-EnrollmentPolicyWebService/Admin">*[System[Provider[@Name=’Microsoft-Windows-EnrollmentPolicyWebService’]]]</Select>
          <Select Path="Microsoft-Windows-EnrollmentWebService/Admin">*[System[Provider[@Name=’Microsoft-Windows-EnrollmentWebService’]]]</Select>
        </Query>
      </QueryList>
    </QueryNode>
  </QueryConfig>
</ViewerConfig>

BEGIN ORIGINAL POST

My server farm has the Certificate Authority running on the primary domain controller and while I wanted the ability to get certificates from the web for devices, I didn’t want to run IIS on the PDC.  Since the Certificate Authority supports scaling in the sense that I could install the Certificate Authority Web Enrollment feature on my web server already running IIS, I went ahead and did that.   Installation using 2012 Server Manager was surprisingly easy and after the installation and pointing the Web Enrollment to the correct Certificate Authority, I was up and running.

On problem though, after the installation, the following message appeared in the Manageability column in the servers list:  Online – Cannot get event data when it normally just says Online.

image

Checking out the Task Details brought up the following notification:  Events from ‘ActiveDirectoryCertificateServices.xml’ could not be enumerated.

SNAG-0021

The issue seems to be when installing the Certificate Authority Web Enrollment feature it brings some baggage from the full Certificate Authority installation.   Because the Certificate Authority is not fully installed and running on the Web Enrollment server, the logging Event Query that is configured by the installation fails.   I couldn’t figure out a way to activate the Event Query, so I just removed the reference to the ActiveDirectoryCertificateServices.xml Event Query located in the HKLM\Software\Microsoft\ServerManager\ServicingStorage\ServerComponentCache\AD-Certificate key by deleting the string value from the EventQuery regkey.

One reboot later and all the servers were happily reporting Online and not Online – Cannot get event data.

image

Windows Phone 7 Wish List

Don’t get me wrong, I love my new Windows Phone 7.   I have had it over two weeks now and I’ve been very happy with the purchase (It is a Samsung Focus, by the way).   It holds its own and exceeds an iPhone and Android phone in many categories.   Still, like anyone else who loves a tech device, you wish it was perfect.   Below is my first “Wish List” of WP7 features that if implemented correctly would make it the perfect device – which does not exist today!.    Feel free to add to it (or send me a suggestion and I’ll add it in the list), comment or just count down the hours with me until the first update in January and see what (besides cut and paste) it will bring.

General Features

  • Cut & Paste (I know, next release)
  • Better selection ability in a text box (now you can only select all or one word easily)
  • Ability to control time out before PIN Lock appears (pursuant to corporate policy of course)
  • Power settings – such as the ability to keep the display on when on AC/DC power – for GPS apps, Zune when powered
  • Select application background tasks (like Pandora, GPS apps)
  • Folders or an alternate way for applications menu to be sorted and not as long
  • Put / \ _ – on the URL keyboard
  • Fix the alarm bug (alarm ringing over 5 min causes sound to stop – has MS EVER released an OS where alarms worked right?)
  • Configurable Snooze Intervals for alarms (when setting the alarm)
  • Fix Marketplace hanging up when scrolling
  • Actual battery percentage on status screen or at least an advanced screen
  • More Landscape friendly apps – like Zune
  • Task Manager/App Switcher – sometimes I just want to make sure a program isn’t running – especially behind the lock screen
  • Ability to go straight to e-mail, text, VM, missed call etc., from Home Screen
  • A compass app?   We know it’s in there…

Bing/Search Features

  • Better, more specific search (for example when searching marketplace, let me specific if I want Apps, Music, Videos, etc.)
  • Updates to Bing functionality to make it compatible with other platforms (including WinMo 6.5)
  • Have search work across folders in mail (optionally)

Phone Features

  • Ability to key in numbers and have it do a smart lookup on contacts that correspond with those letter/number combinations
  • Ability to record a phone call
  • Ability to toggle silent mode easily
  • Visual Voice Mail
  • Bigger Answer & Hang Up buttons

Media Features

  • More Sound options  – like at ability to auto switch to vibrate at “night” or ring then vibrate for the phone
  • Ability to use songs as ringtones and manage ringtones
  • Better sound control (separate ring volume, music volume)
  • HD Codecs so you can play HD videos not recorded on the phone
  • Ability to shuffle songs in a playlist (how did this one get missed)
  • Sticky camera settings or even better the ability to create "themes" with settings

Programming Features

  • No ability to access to the camera, compass etc. via the API (Download the Tag Reader app from MS and you’ll see why this is annoying)
  • Ability to use system colors in icons that are not pinned to the main screen
  • Better performance of the Panorama and Pivot developer controls in custom apps
  • Ability to access Zune library files
  • Ability to access common document store

Social Media Features

  • Ability to directly integrate Linked In, Twitter etc. into the People Hub (same through contact linking)
  • Ability to upload video to Facebook or SkyDrive
  • More control of how and which contacts appear from the services
  • Ability to have Windows Live contacts selectable like Facebook

Office & Communication Features

  • Ability to print office docs (or my boarding pass) via Bluetooth
  • Ability to display free/busy information for a meeting request
  • Ability to see calendar snapshot in meeting requests
  • Integrated Inbox (make it optional – but some folks want it)
  • Threaded (Conversation) e-mail
  • Ability to auto sync non-inbox folders and have the unread counts combined
  • Ability to set “office hours” for mail delivery (on-off peak)
  • Ability to sync ALL my Hotmail if I want (setting is ignored over 7 days it seems)
  • Ability to configure MMS settings on unlocked phones – I figure there is a way, it’s just not been discovered yet…
  • Ability to store unfinished SMS messages as draft when switching away to answer call, look up address, etc.
  • Ability to pin Wi-Fi and Bluetooth switches to start screen or have some other way to access communication settings quickly
  • Ability to send files or at least contacts over Bluetooth
  • Ability to set the default calendar when creating new appointments
  • Ability to edit PowerPoint presentations – even if it’s just the text!
  • Week view in the calendar – I miss it greatly when planning my week or looking for when to have a meeting
  • Ability to snooze calendar items and reminders with different snooze times
  • Ability to zoom in on the month in Month View
  • Ability to auto DL e-mail attachments (and set the size cutoff)
  • Ability to set the range of the calendar items that are downloaded
  • Ability to set peak and off-peak sync times (including weekends)
  • Ability to add people to meetings that are not in the contact list (manual typing)
  • Microsoft Lync (new OCS) integration should include ability to create a Live Meeting or Conference Call from the phone
  • Live Messenger Application from Microsoft
  • Differentiate the color or shades of color in the SMS/MMS bubbles.

Hardware Features

  • A “Zune” like connector for accessories (docks, etc.)
  • HD Radio capability         

Browser Features

  • Flash and Silverlight in the browser
  • Ability to Sync Bookmarks to the cloud

Connectivity Features

  • Tethering Capability
  • Ability to add a non-visible Wi-Fi hotspot
  • Ability to store/sync office documents in the Cloud/Sky Drive and bring them to device
  • Integration with other cloud platforms (Dropbox, etc.)
  • Live Mesh with RDP capabilities
  • Network status and info screen
  • Ability to set a fixed IP on the device

Corporate Features

  • Corporate Policy Enhancements (including encryption)
  • Ability to use SharePoint Mobile with our Corporate MySites without APG (authentication issue)
  • Ability to side-load corporate applications

The Arrival of N754CA

As of November of last year, N188RD, my first airplane was sold (rumor has it to a chap in Atlantic City).  For the next few months I was without an airplane, but a fate would have it, I got the chance to buy into a share of a brand new Diamond DA-42, N754CA for a great price.   The plane is very close to operating a jet (maybe my next aircraft :)) in a lot of ways and seems like the perfect transition.  The airplane is still based in Morristown, NJ (KMMU) and is co-owned by Certified Flyers out of the same airport, so there is a chance you may end up flying in it some day to (please take good care of it for me).

image  1

Queensrÿche Treat

3This past weekend I had the chance to see Queensrÿche at a rare in-store appearance on Long Island.   You had to purchase the new Mindcrime at the Moore DVD & CD combo and that entitled me and about 120 others to a real treat – seeing the band perform an in-store acoustic set.   Queensrÿche played five songs acoustically (technically it was only Geoff, Mike and Michael…the rhythm section had the night off).   The songs I remember were "Sign of the Times", "Bridge", "Hands", and a rarity off the Q2K sessions – "Until There Was You", and finally closing with "Eyes of a Stranger".   I got to ask Michael a question that had been bugging me for a while – what ever happened to his coffee bean company…his answer (unsurprisingly), was "Starbucks".  And he didn’t sound too happy about it….

Anyway, one of the other nice things about the event was the store that hosted it – Looney Tunes CDs.   It was nice being back in a real record store like I remember growing up.  The decor was authentic, the owners were amazing and professional.  So much so that I made a personal commitment to start buying my CD’s from them from this point.

Moving the INETPUB Directory In Windows Vista

Introduction

After installing Vista and IIS 7.0 and playing with numerous configuration options, the conclusion was reached that it can only be installed in the \inetpub directory.   And there were no posts, KB entries or technical papers on how to accomplish this available.   Well, that was not going to work since I don’t like the name inetpub, let alone like being forced to install something the way someone else deems fit, so some time was spent figuring out how to make that possible.   The result of that work is this post, and the instructions below are the first guide that could be located on the Internet to accomplish that.   May the work done here benefit someone else as well.    And sorry about the screen shot quality.   It seems to be the best resolution that can be upload here.   Hopefully the descriptions are good enough, but if not, there is a Word document that could be sent of if really needed.

Please Read!

The following guide assumes a new IIS 7.0 installation into Vista. If an existing installation already exists, some of the configuration steps outlined below may need to be repeated for other Web Sites that may already exist. HTTP services is assumed to be installed, but instructions for configuring other services are provide as optional (MSMQ, FTP) and are indicated as such. If you don’t have those services running, the step can be safely skipped.

Note: All the modifications below have been tested on multiple virtual and physical machines by myself and have been proven to work on both the Ultimate and Enterprise editions of Vista, but depending on the configuration of Vista, IIS or the machine itself, serious, if not fatal errors may occur to the system. Please backup the system before attempting any part of this configuration. This information is provided as a guide, and I will not be responsible for any damages or harm to persons or systems that utilize this guide.

In a couple of places in the guide, some of the existing paths may include the %SystemDrive% token in the path. If the new directory is also on the system drive (directory where Windows is installed to) the same token could also be used. In the following examples, even though the new directory is on the same drive as the old one, the instructions do not use the %SystemDrive% token, but as stated above, could if desired.

Old and New Configurations

The diagram below show the pre- and post-configuration structure of the new and old directories.  The old directory is C:\inetpub and the new directory is C:\Internet Files.

Inetpub 1

Create New IIS Directories & Move files

1.  Create the directory (or directories if for example the logging directory is to be separated from main IIS Root directory) where the IIS Files will be relocated to (the path in the above example is C:\Internet Files).
2.  Copy ALL files from C:\inetpub to the new directory (C:\Internet Files) or directories.
3.  Create directory for logs if it has not already been created yet and come over as part of the copy process in step 1 (in the example, this directory is (C:\Internet Files\Logs\Log Files).
 

Move Log File Directories

While the most of the configuration can be done in the IIS 7.0 and 6.0 UIs, the log files cannot. Until Vista SP1 is released, there are two current ways to change the log file directories. An automatic way using a tool found at www.iis.net or a manual approach using the IIS appcmd tool. Steps are given below for both examples.

Note: Using the IIS 7.0 Logging Utilities method will NOT change the path indicated in steps 3-6 of the manual configuration section below (the main one required is changed), even after running the tool. While the rest of the installation can be followed and everything seems to work, having the one reference to the old path may cause the inetpub directory to reappear at a later time and therefore, the manual configuration method is recommended, or running the manual steps 1-6 (then an IIS Reset) after installing and using the automated IIS 7.0 Logging Utilities tool.

Method 1: Automated Using the IIS 7.0 Logging Utilities

Download Logging Utility

The Download the Logging Utility was created by Tobin Titus (blog site here: http://blogs.iis.net/tobintitus) from Microsoft and can be downloaded here: http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1328. Source code is also copied to the machine when installing the utility (but can be safely deleted afterwards, if the machine is a production machine).

At a later time, Vista SP1 should provide this functionality by default. Once it is released, I will update the procedure.

Install Logging Utility

1.  Download the ZIP file and extract the MSI.
2.  Install the MSI
3.  Run notepad as Administrator (do this by right-clicking your notepad shortcut and choosing "Run as Administrator")
4.  Open %systemdir%\system32\inetsrv\config\administration.config
5.  Find the <moduleProviders> section and add the following element:
<add name="VistaIisLogging" type="Microsoft.Web.Management.Iis.Server.LoggingModuleProvider, IisLoggingServer, Version=1.1.0.0, Culture=neutral, PublicKeyToken=74622615c9245f3f" />
6.  Find the <modules> section under the <location path"."> element and add the following element:
<add name="VistaIisLogging" />
7.  Save the file and open InetMgr.exe

Set Log Directories

1.  Run IIS 7.0 Administration
2.  Go to (double-click) “Server logging” item under “Other” in the Features View while at the IIS (top-level) of the management console.

Inetpub 2

3.  In the Actions pane, click on “Site Logging Defaults”

Inetpub 3

4.  Change the log files directory to the new directory (for the example this is C:\Internet Files\Logs\Log Files) and click Apply

Inetpub 4

5.  Repeat the same except this time select the Default Web Site before double-clicking on “Server logging”. Also, you will not need to select “Site Logging Defaults” for the site level items.
6.  Repeat as necessary if you have any other existing sites.
7.  Restart IIS.

Method 2: Manual Configuration using APPCMD Tool

1.  Open a command window by right clicking on the Command Prompt item and selecting “Run as Administrator”.
2.  Navigate to the C:\Windows\System32\inetsrv directory.
3.  I’ve had the commands fail when cutting and pasting the from the document and highly recommend typing them in
directly to the command prompt to execute.
4.  Run the following command:
appcmd set config -section:log /centralBinaryLogFile.directory:”C:\Internet Files\Logs\Log Files”
5.  The following message should appear: “Applied configuration changes to section "system.applicationHost/log" for "MACHINE/WEBROOT/APPHOST" at configuration commit path "MACHINE/WEBROOT/APPHOST".
6.  Run the following command:
appcmd set config -section:log /centralW3CLogFile.directory:”C:\Internet Files\Logs\Log Files”
7.  The following message should appear: “Applied configuration changes to section "system.applicationHost/log" for "MACHINE/WEBROOT/APPHOST" at configuration commit path "MACHINE/WEBROOT/APPHOST".
8.  Run the following command:
appcmd set config -section:sites /siteDefaults.logFile.directory:”C:\Internet Files\Logs\Log Files”
9. The following message will appear on successful completion: Applied configuration changes to section "system.applicationHost/sites" for "MACHINE/WEBROOT/APPHOST" at configuration commit path "MACHINE/WEBROOT/APPHOST".

Note: In a later step, the applicationHost file will be edited directly, and these paths will be present. Modifying the following locations WITHOUT using the appcmd utility has sometimes rendered IIS unable to start after manually typing in the paths. After running the appcmd tool, there will sometimes be some binary characters after the paths that the appcmd puts in (†in the diagram below). In an emergency they could be placed back in and IIS may work again, but the best way would be to rerun the above appcmd commands. The following diagram shows the applicationHost file after the modifications (including the binary characters). I’ve seen it both ways, so if they are not there, then it should not be an issue.

Inetpub 5

10.  Restart IIS. If starting IIS fails, then rerun the APPCMD commands above and ensure the success messages are produced. (See note above about typing command by hand).

Additional Configurations

Configure HTTP

1.  The following items point to the items that need to be updated by configuring them in IIS to point toward the new paths. The updates are listed below under three categories, Top-Level, Web Sites Level and Default Web Site Level. Top-Level includes all the default IIS adjustments, Web Sites Level is the parent of the Default Web Site Level which includes all the site level adjustments and will need to be configured for each web site if more than one is present. For each level, each item to be configured consists of the required selections necessary for the configuration of the item in this format: IIS -> ASP -> Services -> Caching Properties -> Cache Directory Path, followed by the default setting, followed by the setting for the example explained earlier. Items that exist in the Action Pane that need to be selected are bolded. It is also assumed that the different IIS pages are in “Features View” mode when navigating. For the above example, the Top-Level directory would be selected in the Tree View pane and then under the IIS group of the page the ASP item would be double clicked. On the ASP page, the Services then Caching Properties items would be expanded, and finally the Cache Directory Path would be edited. The screen would look like this before clicking Apply in the Action pane

Inetpub 6

2.  Top Level Adjustments (Root Path in tree pane)

a.  Cache Directory Path
         PATH: IIS -> ASP -> Services -> Caching Properties -> Cache Directory Path
         OLD:  %SystemDrive%\inetpub\temp\ASP Compiled Templates
         NEW:  C:\Internet Files\Temp\ASP Compiled Templates

3.  Web Site Adjustments (Web Sites leaf in tree pane)

a.  Failed Request Tracing
         PATH: Set Web Site Defaults -> Failed Request Tracing -> Directory
         OLD:  %SystemDrive%\inetpub\logs\FailedReqLogFiles
         NEW:  C:\Internet Files\Logs\Failed Req Log Files

4.  Default Web Site Adjustments (Default Web Site leaf under Web Sites leaf in tree pane).  For each additional Web Site present, these items should be changed as well.

a.  Physical Path
         PATH: Advanced Settings -> (General) -> Physical Path
         OLD:  %SystemDrive%\inetpub\wwwroot
         NEW:  C:\Internet Files\WWW Rootb.  Failed Request Tracing
         PATH: Advanced Settings -> Failed Request Tracing -> Directory
         OLD:  %SystemDrive%\inetpub\logs\FailedReqLogFiles
         NEW:  C:\Internet Files\Logs\Failed Req Log Files

c.  MSMQ Physical Path (Optional Installation)
         PATH: MSMQ -> Advanced Settings -> (General) -> Physical Path
         OLD:  C:\inetpub\wwwroot\msmq
         NEW:  C:\Internet Files\WWW Root\MSMQ

5.  Close IIS 7.0 Management Console

Configure FTP (Optional Installation)

To configure FTP the IIS 6.0 Console needs to be launched. The directions below show how to change this setting

1.  Launch IIS 6.0 Management Console
2.  Select FTP Sites -> Default FTP Site

Inetpub 7

3.  Select Default FTP Site (Click once)
4.  Right click Default FTP Site and select Properties
5.  Select Home Directory tab then update the Home Directory from C:\inetpub\ftproot to C:\Internet Files\FTP Root

Inetpub 8

6.  Click OK and Close IIS 6.0 Management Console

Registry Modifications

1.  The following items in the registry need to be edited.
2.  Start Registry Editor (Regedit.exe)
3.  Navigate to the following keys and change the values as indicated.
4.  KEY:  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InetStp\PathFTPRoot
     OLD:  %SystemDrive%\inetpub\ftproot
     NEW:  C:\Internet Files\FTP Root
5.  KEY: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InetStp\PathWWWRoot
     OLD:  %SystemDrive%\inetpub\wwwroot
     NEW:  C:\Internet Files\WWW Root
6.  HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WAS\Parameters (only needed if Vista SP1 or later is installed).
     ADD: A new REG_SZ (String Value) called ConfigIsolationPath
     NEW: – C:\Internet Files\Temp\AppPools
7.  Close Registry Editor

ApplicationHost Config Modifications

1.  Run Notepad as administrator (right click shortcut and select Run as Administrator)
2.  Open applicationHost file (C:\Windows\System32\InetSrv\Config\applicationHost.config – if the file cannot be viewed in the open dialog, it should still be able to be opened by directly typing the file name once in the directory.)
3.  Search and Replace the following items:
4.  HTTP Compression Directory
     OLD: <httpCompression directory="%SystemDrive%\inetpub\temp\IIS Temporary Compressed Files">
     NEW: <httpCompression directory="C:\Internet Files\Temp\IIS Temporary Compressed Files">
5. Custom Error Pages (Replace all instances – nine by default)
     OLD: "%SystemDrive%\inetpub\custerr"
     NEW: "C:\Internet Files\Custom Error"
6. Below is a screen shot of the edited items in Notepad

Inetpub 9

7.  Save file and exit Notepad (if an access error occurs when saving a file, it usually means notepad was not started in administrator mode, or the file is currently locked by IIS.   In the case of the former, reopen notepad in administrator mode and try again, in the case of the latter, stop all IIS services and try saving again).
8.  Restart IIS

Delete INETPUB Directory

1.  At this point ALL references to inetpub should be pointing to the new directory (C:\Internet Files) and the inetpub directory can be safely deleted.
2.  No more inetpub!

Inetpub 10

Conclusion

Please send any questions, comments, blatantly missed step, or if any of the steps are particularly confusing to me via this blog post. Someday, I may get around to scripting the process, but for now, while they may seem complicated at first, I can do the complete process in less than 10 minutes per machine using the above steps.

A Matter of Life and Death

For those of you unaware, Iron Maiden has recenly released their 14th studio recording: A Matter of Life and Death.   While I haven’t followed Iron Maiden in a few years I’ve always been a fan (Powerslave was the first actual CD I ever purchased, before I even had a CD player) and Stosh had an extra ticket to the show at the Tweeter Center in Camden, NJ last night and I agreed to go.   I had heard that the concert featured a lot of new material (actually, they played the entire CD along with 5 other "classics" at the show), so luckily my friend Stosh had a copy of the CD and we listed to it on the ride down to the show (well, after listening to the Yankees drop the ALDS to the Tigers).   To my surprise, it sounded a lot like classic Maiden, reminding me of the Piece of Mind days.   After just one listen, we were familiar enough with the songs to recognize the first five songs they played live at the show were the first five songs on the CD.   We even had our favorites picked out by then.   The show was a solid show, with the band sounding tight and looking almost exactly like they did 10 years ago when I last saw them…well, maybe Bruce Dickenson’s hair was a little shorter.   The show even had a "Spinal Tap" moment when the band announced that one of the visual effects (a tank with a machine gun toting Eddie the mascot on top) didn’t go off because of a plug issue backstage.   Eddie (sans the tank) still came out during the encore and made the required appearance.  The show was well worth going to and was one of the cheaper shows I’ve been to in a while.
 
Needless to say that today I picked up a copy of it at Best Buy and burned it to my Zen Vison M MP3 player so I can give it a few more listens.  
 
Track listing for A Matter of Life and Death:
 4
1.   Different World
2.   These Colours Don’t Run
3.   Brighter Than a Thousand Suns
4.   The Pilgrim
5.   The Longest Day
6.   Out of the Shadows
7.   The Reincarnation of Benjamin Breeg
8.   For the Greater Good of God
9.   Lord of Light
10. The Legacy
 
Tracks in blue indicate Dan’s Favorites
 
"Up The Irons!"

InfoPath 2007 Brower & Rich Client Compatibility

Recently a potential customer of ours asked us what functionality was lost when using InfoPath 2007 forms via the SharePoint Forms Services as opposed to using the rich client of InfoPath 2007. I couldn’t find a definitive list so I composed the following list based on what I could determine from the InfoPath 2007 B2TR that I’ve been working with.

Controls

Browser & Rich Client               Rich Client Only
Text Box                            Combo Box
Rich Text Box                       
Drop-Down List Box
List Box
Date Picker
Check Box
Option Button
Button
Section

Optional Section                    Horizontal Repeating Table
Repeating Section                   Master/Detail
Repeating Table                     Bulleted List
                                    Numbered List
                                    Plain List
                                    Multi-Selection List Box

File Attachment                     Picture
                                    Ink Picture

Hyperlink                           Vertical Label
Expression Box                      Scrolling Region
                                    Horizontal Region
                                    Choice Group
                                    Repeating Choice Group
                                    Choice Selection
                                    Repeating Recursive Section
                                    
                                    ActiveX Controls

Features

The following features are available only with the InfoPath 2007 Rich Client

User Roles
Save Using Custom Code
Form Code
Digital Signatures (For the entire form)
Custom Task Pane
Script
Depreciated (InfoPath 2003) Object Models
Form Merging
Word Print Views

The following features are available only with the Browser Rendered Forms

Mobile Form Rendering