• Search for:
    16Jan, 2012
    The Common Language Runtime

    The Common Language Runtime

    The common language runtime is the core component of the Microsoft .Net Framework and manages memory, thread execution, code execution, code safety verification, compilation, and other system services. These features are intrinsic to the managed code that runs on the common language runtime.
    With regards to security, managed components are awarded varying degrees of trust, depending on a number of factors that include their origin (such as the Internet, enterprise network, or local computer). This means that a managed component might or might not be able to perform file-access operations, registry-access operations, or other sensitive functions, even if it is being used in the same active application.
    The runtime enforces code access security (CAS). For example, users can trust that an executable embedded in a Web page can play an animation on the screen or sing a song, play a WAV or MP3 file but cannot access their personal data, file system, or internal network. The security features of the runtime thus enable legitimate Internet-deployed software to be exceptionally feature rich.
    The runtime also enforces code robustness by implementing a strict type-and-code-verification infrastructure called the common type system (CTS). The CTS ensures that all managed code is self-describing. The various Microsoft and third-party language compilers generate managed code that conforms to the CTS. This means that managed code can consume other managed types and instances, while strictly enforcing type fidelity and type safety.
    In addition, the managed environment of the runtime eliminates many common software issues. For example, the runtime automatically handles object layout and manages references to objects, releasing them when they are no longer being used. This automatic memory management resolves the two most common application errors, memory leaks and invalid memory references.
    The runtime also accelerates developer productivity. For example, programmers can write applications in their development language of choice, yet take full advantage of the runtime, the class library, and components written in other languages by other developers. Any compiler vendor who chooses to target the runtime can do so. Language compilers that target the .NET Framework make the features of the .NET Framework available to existing code written in that language, greatly easing the migration process for existing applications.
    While the runtime is designed for the software of the future, it also supports software of today and yesterday. Interoperability between managed and unmanaged code enables developers to continue to use necessary COM components and DLLs.
    The runtime is designed to enhance performance. Although the common language runtime provides many standard runtime services, managed code is never interpreted. A feature called just-in-time (JIT) compiling enables all managed code to run in the native machine language of the system on which it is executing. Meanwhile, the memory manager removes the possibilities of fragmented memory and increases memory locality-of-reference to further increase performance.
    Finally, the runtime can be hosted by high-performance, server-side applications, such as Microsoft® SQL Server™ and Internet Information Services (IIS). This infrastructure enables you to use managed code to write your business logic, while still enjoying the superior performance of the industry’s best enterprise servers that support runtime hosting.
     

    15Nov, 2011
    Cannot join workstation to domain

    When you attempt to join a Windows 2000 domain from a computer running Windows NT 4.0 Workstation or Windows NT 4.0 Server, the following error message may be displayed:
    The machine account for this computer either does not exist or is unavailable.
    If the workstation or server you are attempting to join is a computer running Windows 2000 Professional or Windows 2000 Server, the following error message is displayed:
    Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.
    NOTE: This error message only occurs if you have already joined 10 workstations to the domain.
    Windows 2000 grants the “Add workstations to domain” privilege to the Authenticated Users group by default. When this privilege is enabled, authenticated users can bypass the access control list (ACL) check for up to a predefined maximum value. To prevent misuse, the maximum number of machine accounts any authenticated user can join is 10 by default.
    To resolve this problem, use the appropriate method.
    Method 1: Pre-Create the User’s Computer Account

    1. From the Active Directory Users and Computers snap-in, right-click the container where the account resides.
    • Click New, and then click Computer.

     

    • In the Computer name box, type the name of the Windows 2000-based computer that you want to add to the domain.

     
    Make sure the computer’s name is also entered in the Computer name (pre-Windows 2000) box (this should occur automatically).

    • Click Change. Select the user or group that will be joining this computer to the domain, and then click OK.

     

    • If you want Windows NT 4.0 and previous operating systems to use this computer name object, click to select the Allow pre-Windows 2000 computers to use this account check box, and then click OK.

     
     
    Method 2: Grant the “Create Computer Objects” and “Delete Computer Objects” Access Control Entries (ACEs) to the User

    1. From the Active Directory Users and Computers snap-in, click Advanced Features on the View menu so that the Security tab is exposed when you click Properties.
    • Right-click the Computers container, and then click Properties.

     

    • On the Security tab, click Advanced.

     

    • On the Permissions tab, click Authenticated Users, and then click View/Edit.

     
    NOTE: If the Authenticated Users group is not listed, click Add and add it to the list of permission entries.

    • Make sure the This object and all child objects option is displayed in the Apply onto box.

     

    • From the Permissions box, click to select the Allow check box next to the Create Computer Objects and Delete Computer Objects ACEs, and then click OK.

     
     
    Method 3: Override the Default Limit of the Number of Computers an Authenticated User Can Join to a Domain
    You can override the default limit, using either of the following methods:

    • Use the Ldp (Ldp.exe) tool included in the Microsoft Windows 2000 Resource Kit.
    • Use an Active Directory Services Interface (ADSI) script to increase or decrease the value of the Active Directory ms-DS-MachineAccountQuota attribute. To do this:
      1. Install the Windows 2000 Support tools if they have not already been installed. To install these tools, run Setup.exe from the SupportTools folder on the Windows 2000 Server or the Windows 2000 Professional CD-ROM.

       

    • Run Adsiedit.msc as an administrator of the domain.
    • Expand the Domain NC node. This node contains an object that begins with “DC=” and reflects the correct domain name. Right-click this object, and then click Properties.
    • In the Select which properties to view box, click Both.
    • In the Select a property to view box, click ms-DS-MachineAccountQuota.
    • In the Edit Attribute box, type a number. This number represents the number of workstations that you want users to be able to maintain concurrently.
    • Click Set, and then click OK.