Knowledgebase

You can enable Single-Sign-On in IIS to allow user login without password entry.
The SpaceObServer Web Access automatically uses the authentication credentials from Windows.

Please follow the configuration steps in the manual.

1. Open IIS Manager
2. Go to Application Pools → Select the Web Access application pool
3. Right-click → Advanced Settings
4. Change Identity from ApplicationPoolIdentity to Custom Account
5. Enter the username and password of a user who has read permissions on the installation directory

The SpaceObServer Client Access connects to the SpaceObServer database. For the right-click Explorer context menu to work, it requires a direct connection to the file server, but this is optional. Also, for displaying a few MS Office specific metadata fields (Author, Last Saved By, Last Save Date, Keywords, …) it requires access to the files as these metadata is currently not part of the SpaceObServer database.

The SpaceObServer Web Access connects to the database only.

During your maintenance period, they are located at Downloads -> Older versions in the customer area, if you are logged in to your customer account.

You should be able to find the installation files and keys of the two last major versions there.

None of our applications depend on Java Spring or any other Java library and are thus not affected by this vulnerability.

All of our products are being developed in Delphi or C#. Although we use Spring4D(elphi) with some of the components, they are safe to use, because the reported vulnerability applies to Java Spring framework only.

This applies to all versions and editions of our applications (TreeSize, SpaceObServer, SpaceObServer WebAccess, HeavyLoad, SmartPOP2Exchange, Exchange Server Toolbox, SpamAssassin in a Box, SpamAssassin for Windows, SmartCallMonitor, SEPA-Transfer, ServerSentinel, and ShellBrowser). It is recommended to always use the latest available versions though to benefit from the latest patches, improvements, and features.

IIS-Manager (Internet Information Services) is a graphical interface for configuring your application pools or your Web, FTP, SMTP, or NNTP sites. There are multiple ways to start the IIS-Manager:

1. From the Start menu, point to Administrative Tools, and then click Internet Information Services (IIS) Manager
2. Navigate to the path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ and execute the shortcut IIS Manager.lnk
3. From the Start menu, click Run. In the Open box, type inetmgr, and click OK.

All of our products are being developed in Delphi or C#. Although we use Log4Net with some of the components, they are safe to use, because the reported vulnerability applies to Log4J only.

None of our applications depend on Log4J or any other Java library and are thus not affected by this vulnerability.

This applies to all versions and editions of our applications (TreeSize, SpaceObServer, SpaceObServer WebAccess, HeavyLoad, SmartPOP2Exchange, Exchange Server Toolbox, SpamAssassin in a Box, SpamAssassin for Windows, SmartCallMonitor, SEPA-Transfer, ServerSentinel, and ShellBrowser). It is recommended to always use the latest available versions though to benefit from the latest patches, improvements, and features.

1. Login with a Windows account which is member of the Web Access´s admin role.
2. Start the SpaceObServer Web Access admin page in the browser.
3. You can type http://yourhostname/admin in your browser or use the link 'Administration' on the top right.
4. In the admin backend select the tab 'Debug Logs' and press the button 'Enable'.
5. Use the menu entry 'Application' on the top right to go to the main application.
6. Now execute the steps that causes a problem and you want to log.
7. When you are finished, then please use the entry 'Administration' on the top right to go back to the administration page.
8. Select the tab 'Debug Logs' and press the button 'Disable'.
9. After that, please enter your email address and press 'Send File' to send the debug log files to our support.
   

The logged in user needs to have read access to the Active Directory Domain.

1. Go to the Domain Controller and start the tool 'Active Directory Users and Computers'.
2. Navigate through the tree to the user and open the context menu .over the user > select properties.
3. Go to tab 'Memberof'.
4. When user is Domain-User, then the user has access to the active directory by default.

Check if user is member of security group 'domain-user' via cmd:

> gpresult /user username /r

In the tab 'History' there is the configuration 'Show size changes in tree'. When this configuration is enabled, then the size growth will be displayed instead the size. The size growth is often 0. Deactivate the configuration 'Show size changes in tree' to show the size again.