Data Collection/UNICOM Intelligence Support Notification - K81-0587

As an active UNICOM Intelligence customer, the purpose of this notice is to notify you of an issue introduced in UNICOM Intelligence by the Microsoft® 10 July 2018 security updates, as follows:

Impact:
UNICOM Intelligence - Interviewer Server, Interview Tier Servers

Symptoms:
After installing the July 10, 2018, Security Updates from Microsoft, Interviewer Server session engine registration will fail with the error "Error connecting to DPM: Class not registered".

The error will be logged to both the IVW* and ISE* logs on the server, which are by default saved under <Program Files>\IBM\SPSS\DataCollection\7\Interviewer Server Administration\Logs.

All interviewing functionality on the server will be unavailable.

Scope:
Per CVE-2018-8202 | .NET Framework Elevation of Privilege Vulnerability, Microsoft has addressed a potential security vulnerability by updating how the .NET Framework activates COM objects. Specifically for COM objects running in IIS, there now appears to be a requirement for the authenticating identity to match the identity of the application pool. Unfortunately, the default configuration for Interviewer Server application pools (SPSS mrInterviewPoolx) has NetworkService as the application pool identity and the anonymous user configured at installation time as the authenticating user for each virtual folder. Given that the two identities are not the same, the .NET Framework blocks the creation of COM objects implemented in .NET.

The full list of Microsoft security updates that contain this fix are listed in the security article for CVE-2018-8202



Workaround:
The immediate workaround is to uninstall the security update that introduced the fix for CVE-2018-8202.

Resolution:
To resolve the issue, the Application Pool Identity for each of the SPSSmrInterviewPool application pools needs to be configured as the Interviewer Server anonymous user, as configured at install time.

To do this, complete the following steps:

  1. Open Internet Information Services (IIS) Manager on the impacted Interviewing Tier server.
  2. Select Application Pools from the management tree and for each of the SPSSmrInterviewPool application pools complete the following steps:
  3. Select 'Advanced Settings…'
  4. Under the 'Process Model' section, edit the Identity setting by clicking on the ellipsis (…) button.
  5. Select the 'Custom account:' option and press the 'Set…' button.
  6. Enter the User name and Password for the anonymous user configured at install time and then press the OK button for each of the dialog boxes.
  7. Select the Web Site into which UNICOM Intelligence is installed and complete the following steps for each of the mrIEngWS and SPSSMR virtual folders:
  8. Under the 'IIS' group, open the 'Authentication' option.
  9. Select the 'Anonymous Authentication' option and press the 'Edit…' option under 'Actions'.
  10. Select the 'Application pool identity' option and press the OK button.
  11. If 'Windows Authentication' is listed, but is not enabled, select the 'Windows Authentication' option and press 'Enable' under 'Actions'.
  12. Restart the IIS server by selecting the server name from the management tree and pressing the Restart option under Actions.
  13. From the command-line run the RegIntSvr utility, installed by default at <ProgramFiles>\IBM\SPSS\DataCollection\7\Interviewer Server\Server.

If the updates have been made correctly, session engine registration should return Active status for each instance on the server.

Please contact UNICOM Intelligence Support (This email address is being protected from spambots. You need JavaScript enabled to view it.) if you have any questions, or if you require assistance implementing the resolution.

SPSS Statistics Version 25

SPSS Statistics Version 25 continues to add to its predictive analytics techniques through new and advanced statistics, stronger integration and enhanced productivity.


Integrate better with third-party applications. Quickly create attractive, modern charts and edit them in Microsoft Office.:

  • Chart builder has been updated with the ability to create publication quality charts in just a few clicks.


Save time and effort with productivity enhancements:

  • With SPSS Statistics V25, there are enhancements to the SPSS Statistics data and syntax editor.


Analyze your data with new and advanced statistics:

 The Advanced Statistics module offers a variety of new features within GENLINMIXED and GLM/UNIANOVA methods and support for Bayesian inference, which is a method of statistical inference.

  • The Mixed Linear Models (MIXED) & Generalized Linear Mixed Models (GENLINMIXED) procedures have had substantial features added: including profile plots with error bars, bar/line charts, an option to include grand mean, and an option to force the chart to include 0 on Y axis.

Read more ...

Data Analysis with IBM SPSS Statistics

Analytical tools such as SPSS can provide a novice user with an overwhelming amount of information and a very broad range of options for analyzing patterns in the data.

By the end of this book, written by our team members Tony Babinec and Ken Stehlik-Barry, you will have a firm understanding of the various statistical analysis techniques offered by SPSS Statistics, and be able to master its use for data analysis with ease.

The journey starts with installing and configuring SPSS Statistics for first use and exploring the data to understand its potential (as well as its limitations). Use the right statistical analysis technique such as regression, classification and more, and analyze your data in the best possible manner. Work with graphs and charts to visualize your findings. With this information in hand, the discovery of patterns within the data can be undertaken. Finally, the high level objective of developing predictive models that can be applied to other situations will be addressed.


Read more ...

Your analytical skills gap – what you know vs. what you need to know

As your organization relies more on collecting and using data to drive decisions, it can quickly become apparent that you need help. Unfortunately, you aren't the only one who needs help. As the market demand for statisticians, data scientists and analysts continues to grow, there may not be enough talent available for you where and when you need them. And, if you do find someone with the right skills, that person may be out of your price range.  You need to find an alternative approach.

Read more ...

Reducing Survey Errors with a Smile

We have all been there! 

You ask someone to fill out a customer satisfaction questionnaire with options that range from one (“Extremely Satisfied”) to five (“Extremely Unsatisfied”).  When you get the results, you see that the customer gave you all 5’s!  Being the customer-oriented manager you are, you contact that person to see if you can rectify the problems and improve their impression of your service.  And, what does the customer say?  “Oh, it was a little hard to tell how to read the answer choices, so I thought giving you more points was a good thing!  You did a great job!”  

Read more ...
Page 1 of 2

CONTACT

3701 North Ravenswood, Suite 204 Chicago, Illinois 60613-3553
773-880-0034
http://www.channelgroupinc.com