sjlittle's blog

Vulnerability in Windows SharePoint Services and SharePoint Team Services Could Allow Cross-Site Scripting and Spoofing Attacks (887981)

I stumbled upon this today. Looks like an update everyone should look into and probably apply just to be safe.

School is back in session after the winter break now. Fun stuff indeed. I read Bob Mixon's SharePoint – Simple Replacement for a File Share?">SharePoint – Simple Replacement for a File Share? shortly after before posting my first blog entry. I thought I'd share this example with everyone. I've been meaning to write this for a while but now I've got a free second. This is the first year at school the school yearbook (Alpha Omega) will be 100% digital. Like many other things done in the CAT progra…(read more)

Hi.

I'm Jay Little. For a little over half a year, I've been working with SPS2003 at my school, Center for Advanced Technologies located at Lakewood High School in St. Petersburg, Florida. After a bit of testing and researching, we deployed SPS toward the beginning of June and worked on it constantly over the summer.

I suppose the best way to explain the setup for the deployment is to explain how the school is setup. Lakewood is made up of 4 “learning communities” and the CAT program. Each learning community focuses on a general area of study.

• BAT – Business, Arts, and Technology
• PAS – Program for Athletic Studies
• PET – Program for Environmental Technology
• PICS – Program in Cultural Studies

Lakewood mainly uses Windows 2000 for desktops and servers. The main portal is used for Lakewood teachers to communicate with one another. There are portal level document libraries, lists, and discussion boards setup. Each learning community is a subsite that contains a couple document libraries and lists for learning community specific things. An effort was made to keep this area of the deployment as easy to get used to as possible because some teachers might not be willing to adapt to new technology.

The CAT program is generally willing to adapt to new technology. The desktops used in CAT all run Windows XP and most of the servers are now running Windows Server 2003. A subsite was setup for CAT teachers and another subsite for CAT students. The teachers site has lists for announcements, homework, and other things. The students site pulls out data from the teachers site for news and homework.

Here is a little screenshot of the student subsite. *cough* It might look familar from here. *cough*

Oh, I should probably mention the hardware that's being used to run all of this. The webserver is a dual proc 2.2 or 2.4 Xeon Dell PowerEdge 2600 with a a couple gigs of ram and couple 30-ishgb harddrives used for storing all of the websites used at Lakewood High. The server originally used for SQL databases was a dual proc Dell Precision 530 with 1gb of ram. This server serves as the backup domain controller and the print server for CAT. Over Thanksgiving break, a new quad proc 2.7ghz Dell PowerEdge 6600, with 4gb ram and about 250gb of space, was setup. Virtual Server 2005 is on the server and runs SUS and Symantec AV 9 Server virtually. This server now holds all of the SQL databases (the migration was fun but more on that later). There is a sort of “because we can“ attitude in the CAT program as you might have gathered.

I'll try my best to keep my new blog up to date and join in with the SharePoint community.

- Jay Little