Re: [OT] SSL testing

[Greg Keogh]

>
> On windows systems there is a simple powershell script that you run which
> alters the registry and disables to fallback to older algorithms that have
> exploits. It does depend on the OS level though as to how much you need to
> do. I attached the powershell script I used to disable a older algorithms
> on one of my servers but make sure it suits your OS. I don’t have the link
> handy where I got it from tho. Sorry
>

The script looks too risky for me to run on my Win 2008 R2 Standard server
because, as you say, things like this worry me as being very OS level
dependent. It creates a bunch of HKLM registry keys that don't exist. I
only have Protocols\SSL 2.0\Client and nothing else at the moment. My site
is only used for software testing, so I'll leave it alone for now.

Coincidentally, I had that same area of HKLM open last week. I found
thousands of items in the event log about TLS not negotiated (or something
like that). The workaround was to add this value:

HKLM\SYSTEM\CurrentControlSet\Control\Security\Providers\SCHANNEL\EventLogging=DWORD(0)

*Greg*

Re: SSL Certs

[罗格雷格博士]

Yes I wondered about that one - just seemed over the top. Initial page doesn't 
need SSL so might look at DNS redirect from .com.au to .com.

Regards

Greg

Dr Greg Low
SQL Down Under
+61 419201410
1300SQLSQL (1300775775)

On 3 Nov 2015, at 6:58 AM, Paul Glavich 
> wrote:

Actually, maybe this would suit you better 
https://www.digicert.com/unified-communications-ssl-tls.htm


-  Glav

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Greg Low (??)
Sent: Monday, 2 November 2015 9:08 PM
To: ozDotNet >
Subject: RE: SSL Certs

I suppose a more basic question is:

What’s the cleanest way in an Azure website MVC app to route all requests for 
abcdef.com.au to abcdef.com ?

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

From: Greg Low (罗格雷格博士)
Sent: Monday, 2 November 2015 9:03 PM
To: ozDotNet >
Subject: SSL Certs

Hi Guys,

If using two domains like:

abcdef.com
and
abcdef.com.au

(and obviously the site also has the www. versions of those too).

For SSL on Azure websites, thoughts on whether we should do two certs, or just 
do that on one of them and then do some sort of redirect for the other one? 
(It’s MVC)

TIA,

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

RE: SSL Certs

[Paul Glavich]

Hey Greg,

 

Not sure on the .com.au and .com SSL certs as I have always grabbed a cert
for one or the other. You could look at something like this
https://www.digicert.com/ev-multi-domain-ssl.htm which is a multi-domain
cert but even then I am not sure whether you could do .com and .com.au. You
may be better off getting 2 simple SSL certs. Azure will let you add
multiple domain names to a site, as long as you own the domains, it is
pretty easy, as well as adding in multiple certificates.

 

While you could technically route the requests from .com.au to .com (and
probably via DNS is best that is, .com.au goes to same ip as .com) unless
you have a cert to match the domain, it will complain. At least that is how
I understand it anyway.

 

-  Glav

 

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com]
On Behalf Of Greg Low (??)
Sent: Monday, 2 November 2015 9:08 PM
To: ozDotNet 
Subject: RE: SSL Certs

 

I suppose a more basic question is:

 

What’s the cleanest way in an Azure website MVC app to route all requests
for abcdef.com.au to abcdef.com ?

 

Regards,

 

Greg

 

Dr Greg Low

 

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
fax 

SQL Down Under | Web:   www.sqldownunder.com

 

From: Greg Low (罗格雷格博士) 
Sent: Monday, 2 November 2015 9:03 PM
To: ozDotNet  >
Subject: SSL Certs

 

Hi Guys,

 

If using two domains like:

 

abcdef.com 

and 

abcdef.com.au 

 

(and obviously the site also has the www. versions of those too).

 

For SSL on Azure websites, thoughts on whether we should do two certs, or
just do that on one of them and then do some sort of redirect for the other
one? (It’s MVC)

 

TIA,

 

Regards,

 

Greg

 

Dr Greg Low

 

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
fax 

SQL Down Under | Web:   www.sqldownunder.com

 

RE: SSL Certs

[Paul Glavich]

Actually, maybe this would suit you better
https://www.digicert.com/unified-communications-ssl-tls.htm

 

-  Glav

 

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com]
On Behalf Of Greg Low (??)
Sent: Monday, 2 November 2015 9:08 PM
To: ozDotNet 
Subject: RE: SSL Certs

 

I suppose a more basic question is:

 

What’s the cleanest way in an Azure website MVC app to route all requests
for abcdef.com.au to abcdef.com ?

 

Regards,

 

Greg

 

Dr Greg Low

 

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
fax 

SQL Down Under | Web:   www.sqldownunder.com

 

From: Greg Low (罗格雷格博士) 
Sent: Monday, 2 November 2015 9:03 PM
To: ozDotNet  >
Subject: SSL Certs

 

Hi Guys,

 

If using two domains like:

 

abcdef.com 

and 

abcdef.com.au 

 

(and obviously the site also has the www. versions of those too).

 

For SSL on Azure websites, thoughts on whether we should do two certs, or
just do that on one of them and then do some sort of redirect for the other
one? (It’s MVC)

 

TIA,

 

Regards,

 

Greg

 

Dr Greg Low

 

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
fax 

SQL Down Under | Web:   www.sqldownunder.com

 

RE: [OT] SSL testing

[Paul Glavich]

You generally should fix these as it means your system is open to information 
leakage or inspection from malicious people. Depending on the site and what it 
hosts, this may not be a big issue but the tools to exploit these holes get 
more common as time goes on.

 

To fix the certificate issues, just get a new cert from somewhere like Digicert 
that offers quality certificates that are quite cheap (note: if you have to 
support older OS’s like Windows XP, they will not have the necessary root 
certificates installed and thus complain about your cert).

 

For the other warnings, you generally have to patch the OS to some degree. On 
windows systems there is a simple powershell script that you run which alters 
the registry and disables to fallback to older algorithms that have exploits. 
It does depend on the OS level though as to how much you need to do. I attached 
the powershell script I used to disable a older algorithms on one of my servers 
but make sure it suits your OS. I don’t have the link handy where I got it from 
tho. Sorry

 

-  Glav

 

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Greg Keogh
Sent: Monday, 2 November 2015 2:40 PM
To: ozDotNet 
Subject: Re: [OT] SSL testing

 

I noticed a mate's shopping site over the weekend returning the following in 
the connection info for the certificate:

 

I just tested my own domain with its 6 month old certificate. I also got a 
series of frightening warnings:

 

This server supports SSL 2, which is obsolete and insecure. Grade set to F. 
This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to 
mitigate. Grade capped to C.
Certificate uses a weak signature. When renewing, ensure you upgrade to SHA2.
The server supports only older protocols, but not the current best TLS 1.2. 
Grade capped to C.
This server accepts the RC4 cipher, which is weak. Grade capped to B.

 

The long and detailed list of test results are quite complicated. I'm not happy 
about getting an F for flunk grade, but I'm not sure what I can do about it, or 
if I'm even supposed to do anything.

 

Comments ... anyone knowledgeable on these matters?

 

Greg K



DisableSSLv3.ps1
Description: Binary data

RE: [OT] SSL testing

[ILT]

A web search for the string ‘disableSSLv3.ps1’ should give you a TechNet 
description (which might have been the source?) and a few other links. 

 

  _  

Ian Thomas
Albert Park, Victoria

 

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Paul Glavich
Sent: Monday, November 02, 2015 7:46 PM
To: 'ozDotNet'
Subject: RE: [OT] SSL testing

 

You generally should fix these as it means your system is open to information 
leakage or inspection from malicious people. Depending on the site and what it 
hosts, this may not be a big issue but the tools to exploit these holes get 
more common as time goes on.

 

To fix the certificate issues, just get a new cert from somewhere like Digicert 
that offers quality certificates that are quite cheap (note: if you have to 
support older OS’s like Windows XP, they will not have the necessary root 
certificates installed and thus complain about your cert).

 

For the other warnings, you generally have to patch the OS to some degree. On 
windows systems there is a simple powershell script that you run which alters 
the registry and disables to fallback to older algorithms that have exploits. 
It does depend on the OS level though as to how much you need to do. I attached 
the powershell script I used to disable a older algorithms on one of my servers 
but make sure it suits your OS. I don’t have the link handy where I got it from 
tho. Sorry

 

-  Glav

 

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Greg Keogh
Sent: Monday, 2 November 2015 2:40 PM
To: ozDotNet 
Subject: Re: [OT] SSL testing

 

I noticed a mate's shopping site over the weekend returning the following in 
the connection info for the certificate:

 

I just tested my own domain with its 6 month old certificate. I also got a 
series of frightening warnings:

 

This server supports SSL 2, which is obsolete and insecure. Grade set to F. 
This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to 
mitigate. Grade capped to C.
Certificate uses a weak signature. When renewing, ensure you upgrade to SHA2.
The server supports only older protocols, but not the current best TLS 1.2. 
Grade capped to C.
This server accepts the RC4 cipher, which is weak. Grade capped to B.

 

The long and detailed list of test results are quite complicated. I'm not happy 
about getting an F for flunk grade, but I'm not sure what I can do about it, or 
if I'm even supposed to do anything.

 

Comments ... anyone knowledgeable on these matters?

 

Greg K

RE: SSL Certs

[罗格雷格博士]

I suppose a more basic question is:

What’s the cleanest way in an Azure website MVC app to route all requests for 
abcdef.com.au to abcdef.com ?

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

From: Greg Low (罗格雷格博士)
Sent: Monday, 2 November 2015 9:03 PM
To: ozDotNet 
Subject: SSL Certs

Hi Guys,

If using two domains like:

abcdef.com
and
abcdef.com.au

(and obviously the site also has the www. versions of those too).

For SSL on Azure websites, thoughts on whether we should do two certs, or just 
do that on one of them and then do some sort of redirect for the other one? 
(It’s MVC)

TIA,

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

SSL Certs

[罗格雷格博士]

Hi Guys,

If using two domains like:

abcdef.com
and
abcdef.com.au

(and obviously the site also has the www. versions of those too).

For SSL on Azure websites, thoughts on whether we should do two certs, or just 
do that on one of them and then do some sort of redirect for the other one? 
(It’s MVC)

TIA,

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

RE: [OT] Office 365

[Ken Schaefer]

Of course. But the “who uses SharePoint?” question kinda implies that 
SharePoint’s been superseded in all areas that it does (document storage, 
workflow, calendaring, collaboration etc.). So, I’m not asking for a ERP 
system, or a CRM or something that people might have shoe-horned into 
SharePoint before. But just looking at SharePoint’s core functionality 
(document lists, Office integration, AD integration etc.), is there anything 
that people are flocking to now that is, arguably, superior to the way 
SharePoint works (whether it be scalability, ease of use, extensibility, 3rd 
party add-in support, whatever)

I realise this is a bit vague, but I’ve only just started on this, so I haven’t 
yet compiled a list of requirements yet.


From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Michael Ridland
Sent: Monday, 2 November 2015 2:25 PM
To: ozDotNet 
Subject: Re: [OT] Office 365


Wouldn't this all depend on your requirements?

Thanks


Michael Ridland | Technical Director | Xamarin MVP

XAM Consulting - Mobile Technology Specialists

www.xam-consulting.com

Blog: www.michaelridland.com



On Mon, Nov 2, 2015 at 2:19 PM, Ken Schaefer 
> wrote:
Serious question – I have to look at this at work right now. We have 
SharePoint, but if there’s alternatives out there that people recommend (for a 
corporate environment), then I’d be keen to look into them

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of DotNet Dude
Sent: Monday, 2 November 2015 12:57 PM
To: ozDotNet >
Subject: Re: [OT] Office 365

Damn I've been busted u... lotus notes

On Mon, Nov 2, 2015 at 12:50 PM, Ken Schaefer 
> wrote:
What alternatives would you recommend?

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of DotNet Dude
Sent: Sunday, 1 November 2015 7:04 PM
To: ozDotNet >
Subject: Re: [OT] Office 365

People still use sharepoint? Lol

On Sunday, 1 November 2015, Stephen Price 
> wrote:
Actually did some more reading and it looks like the business version gives you 
access to Lync (for business), Sharepoint and I think collaborative office 
editing. As well as the Home stuff. All of which I am not using so don't need. 
I think Office 365 Home is the way to go for me right now.

On Sun, 1 Nov 2015 at 15:32 DotNet Dude 
> wrote:
>From what I've heard (which is very little)
the business version gives you more control in the "dashboard" to customise 
stuff. I also don't think you're meant to use non-business versions for 
commercial use, whatever that means. 

On Sunday, 1 November 2015, Stephen Price 
> wrote:
Hey all,

I know a few here use Office 365 (from previous threads) and was wondering if 
anyone is using the Office 365 Business? Trying to work out what it gives you 
and so far it looks exactly the same as the Home version except its more 
expensive. Perhaps business support is the extra?

I'm currently using the freebie given to me via my msdn account and its great. 
Its called Office 365 Developer Subscription. Its not documented anywhere that 
that is, but it says I'm using Office 365 Personal except I have +1 install (2 
total) when compared with the real Office 365 Personal product.
I have a few more machines than that, and have decided to drop Dropbox (its in 
the name... they have been telling to do it all along...) and make OneDrive my 
main cloud storage. So wanted a couple more installs (and figure if i'm not 
paying for Dropbox anymore that can pay for Office 365.

Going to go with Office 365 Home, but curious what the Office 365 Business 
Premium gives you. They only compare it with the other Business products, can't 
find a Home vs Business comparison. Not one that spells it out...

RE: Sql Server Patch Scripts

[Ken Schaefer]

Oops –I replied to the wrong email ☺

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Ken Schaefer
Sent: Tuesday, 3 November 2015 10:42 AM
To: ozDotNet 
Subject: RE: Sql Server Patch Scripts

The other option might be to keep the Billion as a mere modem+NAT+router, then 
stick something behind that to handle your internal LAN and WiFi etc. I do that 
with a DLink 2890AL acting solely as a moden+NAT (turned off WiFi, single LAN 
uplink). I then have a Cisco SG-300 L3 switch (does routing, switching etc.) to 
handle the core LAN functionality, and a (getting old now) DLink  DAP2310 WAP 
from their “business range”. I’ve found that to be a lot more solid than 
relying on the “SOHO” all-in-one boxes, which just seem to get overloaded and 
fall over every so often. The SG-300 has a good web interface, as well as 
excellent doco. The DAP2310 not so much, but still easy to configure unless 
you’re going into the more advance functions (like VLANs) where the doco starts 
to get ambiguous.

Cheers
Ken

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Burstin
Sent: Monday, 2 November 2015 3:16 PM
To: ozDotNet >
Subject: Re: Sql Server Patch Scripts

We use SQL Server projects for patching, version controlled with git.

For schema changes, we run a compare on the project and the dev database 
(assuming that is where the schema changes are) and create an upgrade script 
from that.

For actual data changes to be applied, we create separate scripts in the sql 
project specifically for those.

This seems to work pretty well for us. YMMV.

Cheers
Dave

On 2 November 2015 at 14:53, Grant Castner 
> wrote:
Hi Tony,
We use dbup (https://dbup.github.io/) - it allows you to create a small visual 
studio project so that you can track scripts as well as check them in.

Cheers,
Grant


Grant Castner
Phone: 0458 770 749
Twitter: https://twitter.com/grantcastner
LinkedIn: 
au.linkedin.com/pub/grant-castner



Date: Mon, 2 Nov 2015 14:48:56 +1100
Subject: Sql Server Patch Scripts
From: tonyw...@gmail.com
To: ozdotnet@ozdotnet.com

Hi all,

Almost every system I have developed has been against a SQL Server database, 
and every environment has needed to be patched as greenfields projects 
introduce new changes.

The reality is that I have found providing patch scripts for sql server quite 
problematic and have never been very happy about what we do to apply patch 
scripts.

I want to know what scripts have been applied to a database, and I also want to 
know that scripts applied are transactional (that is, if a script "breaks" when 
applied, nothing has changed.) I also want to be able to add data to be 
inserted into tables to my scripts.

What are people currently doing to solve these issues?

Warm regards,
Tony

RE: [OT] Office 365

[罗格雷格博士]

There really is quite a shift going on.

For years, every time we asked for enhancements to the portals in SQL Server 
Reporting Services, etc. the response was that “we already have a portal 
business and it’s called SharePoint”. Now all the SQL Server directions are 
away from SharePoint, back to native implementations.

Even most of my SharePoint friends are mostly pushing SharePoint Online now.

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Ken Schaefer
Sent: Tuesday, 3 November 2015 10:30 AM
To: ozDotNet 
Subject: RE: [OT] Office 365

Of course. But the “who uses SharePoint?” question kinda implies that 
SharePoint’s been superseded in all areas that it does (document storage, 
workflow, calendaring, collaboration etc.). So, I’m not asking for a ERP 
system, or a CRM or something that people might have shoe-horned into 
SharePoint before. But just looking at SharePoint’s core functionality 
(document lists, Office integration, AD integration etc.), is there anything 
that people are flocking to now that is, arguably, superior to the way 
SharePoint works (whether it be scalability, ease of use, extensibility, 3rd 
party add-in support, whatever)

I realise this is a bit vague, but I’ve only just started on this, so I haven’t 
yet compiled a list of requirements yet.


From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Michael Ridland
Sent: Monday, 2 November 2015 2:25 PM
To: ozDotNet >
Subject: Re: [OT] Office 365


Wouldn't this all depend on your requirements?

Thanks


Michael Ridland | Technical Director | Xamarin MVP

XAM Consulting - Mobile Technology Specialists

www.xam-consulting.com

Blog: www.michaelridland.com



On Mon, Nov 2, 2015 at 2:19 PM, Ken Schaefer 
> wrote:
Serious question – I have to look at this at work right now. We have 
SharePoint, but if there’s alternatives out there that people recommend (for a 
corporate environment), then I’d be keen to look into them

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of DotNet Dude
Sent: Monday, 2 November 2015 12:57 PM
To: ozDotNet >
Subject: Re: [OT] Office 365

Damn I've been busted u... lotus notes

On Mon, Nov 2, 2015 at 12:50 PM, Ken Schaefer 
> wrote:
What alternatives would you recommend?

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of DotNet Dude
Sent: Sunday, 1 November 2015 7:04 PM
To: ozDotNet >
Subject: Re: [OT] Office 365

People still use sharepoint? Lol

On Sunday, 1 November 2015, Stephen Price 
> wrote:
Actually did some more reading and it looks like the business version gives you 
access to Lync (for business), Sharepoint and I think collaborative office 
editing. As well as the Home stuff. All of which I am not using so don't need. 
I think Office 365 Home is the way to go for me right now.

On Sun, 1 Nov 2015 at 15:32 DotNet Dude 
> wrote:
>From what I've heard (which is very little)
the business version gives you more control in the "dashboard" to customise 
stuff. I also don't think you're meant to use non-business versions for 
commercial use, whatever that means. 

On Sunday, 1 November 2015, Stephen Price 
> wrote:
Hey all,

I know a few here use Office 365 (from previous threads) and was wondering if 
anyone is using the Office 365 Business? Trying to work out what it gives you 
and so far it looks exactly the same as the Home version except its more 
expensive. Perhaps business support is the extra?

I'm currently using the freebie given to me via my msdn account and its great. 
Its called Office 365 Developer Subscription. Its not documented anywhere that 
that is, but it says I'm using Office 365 Personal except I have +1 install (2 
total) when compared with the real Office 365 Personal product.
I have a few more machines than that, and have decided to drop Dropbox (its in 
the name... they have been telling to do it all along...) and make OneDrive my 
main cloud storage. So wanted a couple more installs (and figure if i'm not 
paying for Dropbox anymore that can 

RE: Sql Server Patch Scripts

[Ken Schaefer]

The other option might be to keep the Billion as a mere modem+NAT+router, then 
stick something behind that to handle your internal LAN and WiFi etc. I do that 
with a DLink 2890AL acting solely as a moden+NAT (turned off WiFi, single LAN 
uplink). I then have a Cisco SG-300 L3 switch (does routing, switching etc.) to 
handle the core LAN functionality, and a (getting old now) DLink  DAP2310 WAP 
from their “business range”. I’ve found that to be a lot more solid than 
relying on the “SOHO” all-in-one boxes, which just seem to get overloaded and 
fall over every so often. The SG-300 has a good web interface, as well as 
excellent doco. The DAP2310 not so much, but still easy to configure unless 
you’re going into the more advance functions (like VLANs) where the doco starts 
to get ambiguous.

Cheers
Ken

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of David Burstin
Sent: Monday, 2 November 2015 3:16 PM
To: ozDotNet 
Subject: Re: Sql Server Patch Scripts

We use SQL Server projects for patching, version controlled with git.

For schema changes, we run a compare on the project and the dev database 
(assuming that is where the schema changes are) and create an upgrade script 
from that.

For actual data changes to be applied, we create separate scripts in the sql 
project specifically for those.

This seems to work pretty well for us. YMMV.

Cheers
Dave

On 2 November 2015 at 14:53, Grant Castner 
> wrote:
Hi Tony,
We use dbup (https://dbup.github.io/) - it allows you to create a small visual 
studio project so that you can track scripts as well as check them in.

Cheers,
Grant


Grant Castner
Phone: 0458 770 749
Twitter: https://twitter.com/grantcastner
LinkedIn: 
au.linkedin.com/pub/grant-castner



Date: Mon, 2 Nov 2015 14:48:56 +1100
Subject: Sql Server Patch Scripts
From: tonyw...@gmail.com
To: ozdotnet@ozdotnet.com

Hi all,

Almost every system I have developed has been against a SQL Server database, 
and every environment has needed to be patched as greenfields projects 
introduce new changes.

The reality is that I have found providing patch scripts for sql server quite 
problematic and have never been very happy about what we do to apply patch 
scripts.

I want to know what scripts have been applied to a database, and I also want to 
know that scripts applied are transactional (that is, if a script "breaks" when 
applied, nothing has changed.) I also want to be able to add data to be 
inserted into tables to my scripts.

What are people currently doing to solve these issues?

Warm regards,
Tony

RE: Sql Server Patch Scripts

[罗格雷格博士]

That’s so funny Ken. I was just reading that email and thinking “I know that 
threads drift but I hadn’t realised that one had drifted that far”. It still 
seemed plausible ☺

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Ken Schaefer
Sent: Tuesday, 3 November 2015 10:44 AM
To: ozDotNet 
Subject: RE: Sql Server Patch Scripts

Oops –I replied to the wrong email ☺

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Ken Schaefer
Sent: Tuesday, 3 November 2015 10:42 AM
To: ozDotNet >
Subject: RE: Sql Server Patch Scripts

The other option might be to keep the Billion as a mere modem+NAT+router, then 
stick something behind that to handle your internal LAN and WiFi etc. I do that 
with a DLink 2890AL acting solely as a moden+NAT (turned off WiFi, single LAN 
uplink). I then have a Cisco SG-300 L3 switch (does routing, switching etc.) to 
handle the core LAN functionality, and a (getting old now) DLink  DAP2310 WAP 
from their “business range”. I’ve found that to be a lot more solid than 
relying on the “SOHO” all-in-one boxes, which just seem to get overloaded and 
fall over every so often. The SG-300 has a good web interface, as well as 
excellent doco. The DAP2310 not so much, but still easy to configure unless 
you’re going into the more advance functions (like VLANs) where the doco starts 
to get ambiguous.

Cheers
Ken

From: ozdotnet-boun...@ozdotnet.com 
[mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Burstin
Sent: Monday, 2 November 2015 3:16 PM
To: ozDotNet >
Subject: Re: Sql Server Patch Scripts

We use SQL Server projects for patching, version controlled with git.

For schema changes, we run a compare on the project and the dev database 
(assuming that is where the schema changes are) and create an upgrade script 
from that.

For actual data changes to be applied, we create separate scripts in the sql 
project specifically for those.

This seems to work pretty well for us. YMMV.

Cheers
Dave

On 2 November 2015 at 14:53, Grant Castner 
> wrote:
Hi Tony,
We use dbup (https://dbup.github.io/) - it allows you to create a small visual 
studio project so that you can track scripts as well as check them in.

Cheers,
Grant


Grant Castner
Phone: 0458 770 749
Twitter: https://twitter.com/grantcastner
LinkedIn: 
au.linkedin.com/pub/grant-castner



Date: Mon, 2 Nov 2015 14:48:56 +1100
Subject: Sql Server Patch Scripts
From: tonyw...@gmail.com
To: ozdotnet@ozdotnet.com

Hi all,

Almost every system I have developed has been against a SQL Server database, 
and every environment has needed to be patched as greenfields projects 
introduce new changes.

The reality is that I have found providing patch scripts for sql server quite 
problematic and have never been very happy about what we do to apply patch 
scripts.

I want to know what scripts have been applied to a database, and I also want to 
know that scripts applied are transactional (that is, if a script "breaks" when 
applied, nothing has changed.) I also want to be able to add data to be 
inserted into tables to my scripts.

What are people currently doing to solve these issues?

Warm regards,
Tony

Re: [OT] SSL testing

[Tom Rutter]

For those interested I contacted Troy Hunt who had this to say

*"An F grade is unacceptably bad, definitely something he needs to get
sorted. Hold the web developer / company accountable for that."*

He also sent a link to an article of his which is quite interesting

http://www.troyhunt.com/2015/05/do-you-really-want-bank-grade-security.html

Cheers

On Mon, Nov 2, 2015 at 2:24 PM, Tom Rutter  wrote:

> Folks
>
> I noticed a mate's shopping site over the weekend returning the following
> in the connection info for the certificate:
>
> *Your connection to www.somesite.com  is encypted
> using an obsolete cipher suite.*
>
> Did some googling, didn't understand much of it but landed on ssllabs.com
> which runs a test on the site. It gave the site an F rating with the
> following info
>
> - This server supports anonymous (insecure) suites (see below for
> details). Grade set to F.
> - This server supports weak Diffie-Hellman (DH) key exchange parameters.
> Grade capped to B.
> - This server accepts the RC4 cipher, which is weak. Grade capped to B.
> - This server supports TLS_FALLBACK_SCSV to prevent protocol downgrade
> attacks.
>
> Should my mate be concerned? The people who created and run his site I
> assume don't know or do know and aren't concerned. Anybody here used
> ssllabs before or an alternative and how much should you care about the
> rating? Even the microsoft store only gets a B with various warnings about
> inconsistent server configurations.
>
> Cheers
>

Re: [OT] SSL testing

[Greg Keogh]

>
> *"An F grade is unacceptably bad, definitely something he needs to get
> sorted. Hold the web developer / company accountable for that."*
>

I could barely sleep last night knowing that I'd flunked with an F. The
trouble is, I don't know who to blame (I am the *developer* and the
*company*!!). My web server is a pretty vanilla Win2008R2 install and I got
the cert from Comodo 6 months ago. I sort of expected that regular Windows
Updates would be fixing this sort of thing, or perhaps I'd get some sort of
security alert somehow. Why are out-of-the-box servers falling behind best
security practises?

I want my server to get an A, but the script I mentioned before worries me
and I'd prefer some specific and trustworthy instructions from somewhere
like TechNet, a KB or MSDN to tell me exactly what to do.

*Greg K*

Re: SSL Certs

[Stephen Price]

Personally, I'd pick the domain name you want people to use and get SSL for
that. Then the other domain name is just to catch people who went to that
one instead and route all your traffic to the main one.
If you have just two domain names then I can understand the questionmark
over how to use both. If you imagine adding a bunch more domain names (you
might have some alternate names to help catch more traffic) and route them
all to the main domain then it makes more sense. If you had 10 domain names
you wouldn't want an SSL for every one of them. Redirect is the way to go,
IMHO.

On Tue, 3 Nov 2015 at 04:37 Greg Low (罗格雷格博士)  wrote:

> Yes I wondered about that one - just seemed over the top. Initial page
> doesn't need SSL so might look at DNS redirect from .com.au to .com.
>
> Regards
>
> Greg
>
> Dr Greg Low
> SQL Down Under
> +61 419201410
> 1300SQLSQL (1300775775)
>
> On 3 Nov 2015, at 6:58 AM, Paul Glavich 
> wrote:
>
> Actually, maybe this would suit you better
> https://www.digicert.com/unified-communications-ssl-tls.htm
>
>
>
> -  Glav
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [
> mailto:ozdotnet-boun...@ozdotnet.com ] *On
> Behalf Of *Greg Low (??)
> *Sent:* Monday, 2 November 2015 9:08 PM
> *To:* ozDotNet 
> *Subject:* RE: SSL Certs
>
>
>
> I suppose a more basic question is:
>
>
>
> What’s the cleanest way in an Azure website MVC app to route all requests
> for abcdef.com.au to abcdef.com ?
>
>
>
> Regards,
>
>
>
> Greg
>
>
>
> Dr Greg Low
>
>
>
> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
> fax
>
> SQL Down Under | Web: www.sqldownunder.com
>
>
>
> *From:* Greg Low (罗格雷格博士)
> *Sent:* Monday, 2 November 2015 9:03 PM
> *To:* ozDotNet 
> *Subject:* SSL Certs
>
>
>
> Hi Guys,
>
>
>
> If using two domains like:
>
>
>
> abcdef.com
>
> and
>
> abcdef.com.au
>
>
>
> (and obviously the site also has the www. versions of those too).
>
>
>
> For SSL on Azure websites, thoughts on whether we should do two certs, or
> just do that on one of them and then do some sort of redirect for the other
> one? (It’s MVC)
>
>
>
> TIA,
>
>
>
> Regards,
>
>
>
> Greg
>
>
>
> Dr Greg Low
>
>
>
> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
> fax
>
> SQL Down Under | Web: www.sqldownunder.com
>
>
>
>

Re: SSL Certs

[David Connors]

+1 to Stephen's advice.

I also wouldn't do the routing as a function of the MVC app. Use IIS
Rewrite module and just make it part of the config (you can put the rules
in your web.config so they deploy with your app). IIS Rewrite module is
amazeballs.

On Tue, 3 Nov 2015 at 14:23 Stephen Price  wrote:

> Personally, I'd pick the domain name you want people to use and get SSL
> for that. Then the other domain name is just to catch people who went to
> that one instead and route all your traffic to the main one.
> If you have just two domain names then I can understand the questionmark
> over how to use both. If you imagine adding a bunch more domain names (you
> might have some alternate names to help catch more traffic) and route them
> all to the main domain then it makes more sense. If you had 10 domain names
> you wouldn't want an SSL for every one of them. Redirect is the way to go,
> IMHO.
>
> On Tue, 3 Nov 2015 at 04:37 Greg Low (罗格雷格博士)  wrote:
>
>> Yes I wondered about that one - just seemed over the top. Initial page
>> doesn't need SSL so might look at DNS redirect from .com.au to .com.
>>
>> Regards
>>
>> Greg
>>
>> Dr Greg Low
>> SQL Down Under
>> +61 419201410
>> 1300SQLSQL (1300775775)
>>
>> On 3 Nov 2015, at 6:58 AM, Paul Glavich 
>> wrote:
>>
>> Actually, maybe this would suit you better
>> https://www.digicert.com/unified-communications-ssl-tls.htm
>>
>>
>>
>> -  Glav
>>
>>
>>
>> *From:* ozdotnet-boun...@ozdotnet.com [
>> mailto:ozdotnet-boun...@ozdotnet.com ] *On
>> Behalf Of *Greg Low (??)
>> *Sent:* Monday, 2 November 2015 9:08 PM
>> *To:* ozDotNet 
>> *Subject:* RE: SSL Certs
>>
>>
>>
>> I suppose a more basic question is:
>>
>>
>>
>> What’s the cleanest way in an Azure website MVC app to route all requests
>> for abcdef.com.au to abcdef.com ?
>>
>>
>>
>> Regards,
>>
>>
>>
>> Greg
>>
>>
>>
>> Dr Greg Low
>>
>>
>>
>> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
>> fax
>>
>> SQL Down Under | Web: www.sqldownunder.com
>>
>>
>>
>> *From:* Greg Low (罗格雷格博士)
>> *Sent:* Monday, 2 November 2015 9:03 PM
>> *To:* ozDotNet 
>> *Subject:* SSL Certs
>>
>>
>>
>> Hi Guys,
>>
>>
>>
>> If using two domains like:
>>
>>
>>
>> abcdef.com
>>
>> and
>>
>> abcdef.com.au
>>
>>
>>
>> (and obviously the site also has the www. versions of those too).
>>
>>
>>
>> For SSL on Azure websites, thoughts on whether we should do two certs, or
>> just do that on one of them and then do some sort of redirect for the other
>> one? (It’s MVC)
>>
>>
>>
>> TIA,
>>
>>
>>
>> Regards,
>>
>>
>>
>> Greg
>>
>>
>>
>> Dr Greg Low
>>
>>
>>
>> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
>> fax
>>
>> SQL Down Under | Web: www.sqldownunder.com
>>
>>
>>
>> --
David Connors
da...@connors.com | @davidconnors | LinkedIn | +61 417 189 363

Re: SSL Certs

[Tom Rutter]

Can't this redirect just be done at the hoster and point to the same IP
before it even gets to IIS?

On Tuesday, 3 November 2015, David Connors  wrote:

> +1 to Stephen's advice.
>
> I also wouldn't do the routing as a function of the MVC app. Use IIS
> Rewrite module and just make it part of the config (you can put the rules
> in your web.config so they deploy with your app). IIS Rewrite module is
> amazeballs.
>
> On Tue, 3 Nov 2015 at 14:23 Stephen Price  > wrote:
>
>> Personally, I'd pick the domain name you want people to use and get SSL
>> for that. Then the other domain name is just to catch people who went to
>> that one instead and route all your traffic to the main one.
>> If you have just two domain names then I can understand the questionmark
>> over how to use both. If you imagine adding a bunch more domain names (you
>> might have some alternate names to help catch more traffic) and route them
>> all to the main domain then it makes more sense. If you had 10 domain names
>> you wouldn't want an SSL for every one of them. Redirect is the way to go,
>> IMHO.
>>
>> On Tue, 3 Nov 2015 at 04:37 Greg Low (罗格雷格博士) > > wrote:
>>
>>> Yes I wondered about that one - just seemed over the top. Initial page
>>> doesn't need SSL so might look at DNS redirect from .com.au to .com.
>>>
>>> Regards
>>>
>>> Greg
>>>
>>> Dr Greg Low
>>> SQL Down Under
>>> +61 419201410
>>> 1300SQLSQL (1300775775)
>>>
>>> On 3 Nov 2015, at 6:58 AM, Paul Glavich >> > wrote:
>>>
>>> Actually, maybe this would suit you better
>>> https://www.digicert.com/unified-communications-ssl-tls.htm
>>>
>>>
>>>
>>> -  Glav
>>>
>>>
>>>
>>> *From:* ozdotnet-boun...@ozdotnet.com
>>>  [
>>> mailto:ozdotnet-boun...@ozdotnet.com
>>> ] *On
>>> Behalf Of *Greg Low (??)
>>> *Sent:* Monday, 2 November 2015 9:08 PM
>>> *To:* ozDotNet >> >
>>> *Subject:* RE: SSL Certs
>>>
>>>
>>>
>>> I suppose a more basic question is:
>>>
>>>
>>>
>>> What’s the cleanest way in an Azure website MVC app to route all
>>> requests for abcdef.com.au to abcdef.com ?
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Greg
>>>
>>>
>>>
>>> Dr Greg Low
>>>
>>>
>>>
>>> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
>>> fax
>>>
>>> SQL Down Under | Web: www.sqldownunder.com
>>>
>>>
>>>
>>> *From:* Greg Low (罗格雷格博士)
>>> *Sent:* Monday, 2 November 2015 9:03 PM
>>> *To:* ozDotNet >> >
>>> *Subject:* SSL Certs
>>>
>>>
>>>
>>> Hi Guys,
>>>
>>>
>>>
>>> If using two domains like:
>>>
>>>
>>>
>>> abcdef.com
>>>
>>> and
>>>
>>> abcdef.com.au
>>>
>>>
>>>
>>> (and obviously the site also has the www. versions of those too).
>>>
>>>
>>>
>>> For SSL on Azure websites, thoughts on whether we should do two certs,
>>> or just do that on one of them and then do some sort of redirect for the
>>> other one? (It’s MVC)
>>>
>>>
>>>
>>> TIA,
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Greg
>>>
>>>
>>>
>>> Dr Greg Low
>>>
>>>
>>>
>>> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
>>> fax
>>>
>>> SQL Down Under | Web: www.sqldownunder.com
>>>
>>>
>>>
>>> --
> David Connors
> da...@connors.com | @davidconnors | LinkedIn | +61 417 189 363
>

Re: SSL Certs

[David Connors]

On Tue, 3 Nov 2015 at 14:30 Tom Rutter  wrote:

> Can't this redirect just be done at the hoster and point to the same IP
> before it even gets to IIS?


The request still needs to hit a web server somewhere - might as well be
one you control.

David.

-- 
David Connors
da...@connors.com | @davidconnors | LinkedIn | +61 417 189 363

RE: SSL Certs

[罗格雷格博士]

Even once it hits the IP, it’s got to provide the host header to map to the 
appropriate web site.

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On 
Behalf Of Tom Rutter
Sent: Tuesday, 3 November 2015 3:31 PM
To: ozDotNet 
Subject: Re: SSL Certs

Can't this redirect just be done at the hoster and point to the same IP before 
it even gets to IIS?

On Tuesday, 3 November 2015, David Connors 
> wrote:
+1 to Stephen's advice.

I also wouldn't do the routing as a function of the MVC app. Use IIS Rewrite 
module and just make it part of the config (you can put the rules in your 
web.config so they deploy with your app). IIS Rewrite module is amazeballs.
On Tue, 3 Nov 2015 at 14:23 Stephen Price 
>
 wrote:
Personally, I'd pick the domain name you want people to use and get SSL for 
that. Then the other domain name is just to catch people who went to that one 
instead and route all your traffic to the main one.
If you have just two domain names then I can understand the questionmark over 
how to use both. If you imagine adding a bunch more domain names (you might 
have some alternate names to help catch more traffic) and route them all to the 
main domain then it makes more sense. If you had 10 domain names you wouldn't 
want an SSL for every one of them. Redirect is the way to go, IMHO.

On Tue, 3 Nov 2015 at 04:37 Greg Low (罗格雷格博士) 
> wrote:
Yes I wondered about that one - just seemed over the top. Initial page doesn't 
need SSL so might look at DNS redirect from .com.au to .com.

Regards

Greg

Dr Greg Low
SQL Down Under
+61 419201410
1300SQLSQL (1300775775)

On 3 Nov 2015, at 6:58 AM, Paul Glavich 
>
 wrote:
Actually, maybe this would suit you better 
https://www.digicert.com/unified-communications-ssl-tls.htm


-  Glav

From: 
ozdotnet-boun...@ozdotnet.com
 
[mailto:ozdotnet-boun...@ozdotnet.com]
 On Behalf Of Greg Low (??)
Sent: Monday, 2 November 2015 9:08 PM
To: ozDotNet 
>
Subject: RE: SSL Certs

I suppose a more basic question is:

What’s the cleanest way in an Azure website MVC app to route all requests for 
abcdef.com.au to abcdef.com ?

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

From: Greg Low (罗格雷格博士)
Sent: Monday, 2 November 2015 9:03 PM
To: ozDotNet 
>
Subject: SSL Certs

Hi Guys,

If using two domains like:

abcdef.com
and
abcdef.com.au

(and obviously the site also has the www. versions of those too).

For SSL on Azure websites, thoughts on whether we should do two certs, or just 
do that on one of them and then do some sort of redirect for the other one? 
(It’s MVC)

TIA,

Regards,

Greg

Dr Greg Low

1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913 fax
SQL Down Under | Web: www.sqldownunder.com

--
David Connors
da...@connors.com | @davidconnors | LinkedIn | +61 
417 189 363

Re: [OT] Office 365

[Grant Maw]

I with Ken on this - if the bell is starting to toll for Sharepoint, what
alternatives are being used?

I've never liked Sharepoint, it always seemed to me to be an ugly, bloated,
cumbersome thing to use, so I for one won't weep if it's nearing the end of
its life, but there must be some alternative that is filling the void,
shouldn't there?

On 3 November 2015 at 09:58, Greg Low (罗格雷格博士)  wrote:

> There really is quite a shift going on.
>
>
>
> For years, every time we asked for enhancements to the portals in SQL
> Server Reporting Services, etc. the response was that “we already have a
> portal business and it’s called SharePoint”. Now all the SQL Server
> directions are away from SharePoint, back to native implementations.
>
>
>
> Even most of my SharePoint friends are mostly pushing SharePoint Online
> now.
>
>
>
> Regards,
>
>
>
> Greg
>
>
>
> Dr Greg Low
>
>
>
> 1300SQLSQL (1300 775 775) office | +61 419201410 mobile│ +61 3 8676 4913
> fax
>
> SQL Down Under | Web: www.sqldownunder.com
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [mailto:
> ozdotnet-boun...@ozdotnet.com] *On Behalf Of *Ken Schaefer
> *Sent:* Tuesday, 3 November 2015 10:30 AM
> *To:* ozDotNet 
> *Subject:* RE: [OT] Office 365
>
>
>
> Of course. But the “who uses SharePoint?” question kinda implies that
> SharePoint’s been superseded in all areas that it does (document storage,
> workflow, calendaring, collaboration etc.). So, I’m not asking for a ERP
> system, or a CRM or something that people might have shoe-horned into
> SharePoint before. But just looking at SharePoint’s core functionality
> (document lists, Office integration, AD integration etc.), is there
> anything that people are flocking to now that is, arguably, superior to the
> way SharePoint works (whether it be scalability, ease of use,
> extensibility, 3rd party add-in support, whatever)
>
>
>
> I realise this is a bit vague, but I’ve only just started on this, so I
> haven’t yet compiled a list of requirements yet.
>
>
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [
> mailto:ozdotnet-boun...@ozdotnet.com ] *On
> Behalf Of *Michael Ridland
> *Sent:* Monday, 2 November 2015 2:25 PM
> *To:* ozDotNet 
> *Subject:* Re: [OT] Office 365
>
>
>
>
>
> Wouldn't this all depend on your requirements?
>
>
>
> Thanks
>
>
> *Michael Ridland | Technical Director | Xamarin MVP*
>
> XAM Consulting - Mobile Technology Specialists
>
> www.xam-consulting.com
>
> Blog: www.michaelridland.com
>
>
>
>
>
> On Mon, Nov 2, 2015 at 2:19 PM, Ken Schaefer  wrote:
>
> Serious question – I have to look at this at work right now. We have
> SharePoint, but if there’s alternatives out there that people recommend
> (for a corporate environment), then I’d be keen to look into them
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [mailto:
> ozdotnet-boun...@ozdotnet.com] *On Behalf Of *DotNet Dude
> *Sent:* Monday, 2 November 2015 12:57 PM
> *To:* ozDotNet 
> *Subject:* Re: [OT] Office 365
>
>
>
> Damn I've been busted u... lotus notes
>
>
>
> On Mon, Nov 2, 2015 at 12:50 PM, Ken Schaefer 
> wrote:
>
> What alternatives would you recommend?
>
>
>
> *From:* ozdotnet-boun...@ozdotnet.com [mailto:
> ozdotnet-boun...@ozdotnet.com] *On Behalf Of *DotNet Dude
> *Sent:* Sunday, 1 November 2015 7:04 PM
> *To:* ozDotNet 
> *Subject:* Re: [OT] Office 365
>
>
>
> People still use sharepoint? Lol
>
> On Sunday, 1 November 2015, Stephen Price 
> wrote:
>
> Actually did some more reading and it looks like the business version
> gives you access to Lync (for business), Sharepoint and I think
> collaborative office editing. As well as the Home stuff. All of which I am
> not using so don't need. I think Office 365 Home is the way to go for me
> right now.
>
>
>
> On Sun, 1 Nov 2015 at 15:32 DotNet Dude  wrote:
>
> >From what I've heard (which is very little)
>
> the business version gives you more control in the "dashboard" to
> customise stuff. I also don't think you're meant to use non-business
> versions for commercial use, whatever that means. 
>
>
> On Sunday, 1 November 2015, Stephen Price 
> wrote:
>
> Hey all,
>
>
>
> I know a few here use Office 365 (from previous threads) and was wondering
> if anyone is using the Office 365 Business? Trying to work out what it
> gives you and so far it looks exactly the same as the Home version except
> its more expensive. Perhaps business support is the extra?
>
>
>
> I'm currently using the freebie given to me via my msdn account and its
> great. Its called Office 365 Developer Subscription. Its not documented
> anywhere that that is, but it says I'm using Office 365 Personal except I
> have +1 install (2 total) when compared with the real Office 365 Personal
> product.
>
> I have a few more machines than