Kurt Shintaku's Blog

A coworker showed me this list.  (Thanks Mark)

This is a list of tools that companies can use to assist with the deployment of Office 2010 in their company.

It covers everything from deployment to on-going management to security to end user education.  (I have a separate post on end user training for Office 2010)

Microsoft Security Compliance Manager (SCM) 2 enables organizations to take better advantage of their existing knowledge and investments, and customize security and compliance settings with ease. Customers can harden their machines to industry standards, monitor for configuration drift and address the configuration requirements of hundreds of regulations like SOX, PCI and HIPAA. Learn more.

• Join the Security Compliance Manager Beta Review Program
• Members, bookmark this link to get the latest project details

New SCM 2 features include:

• GPO import: SCM 2 can now import Group Policy Object (GPO) Backup files to allow organizations to import and compare their existing knowledge against Microsoft baseline recommendations. This long-awaited feature effectively helps you to customize and manage your organization’s existing knowledge stored in Active Directory.
• Baseline setting customization: Modifying baselines just got easier. Adding, extending, or deleting settings from a baseline is an effortless process in this new version of the tool.
• Local GPO functionality: Apply security baselines directly to client and server computers using the LocalGPO command-line tool, which enables you to secure stand-alone computers and test different baselines without using Active Directory to deploy them. Use this tool to create local policy snapshots that you can import into SCM 2 using the new GPO import capabilities, which you can then compare, customize, and export as needed.
• Additional features: These include a new and enhanced UI that provides simpler navigation in the tool, and improved installation with SQL Server 2005 and later releases of SQL Server.

Version 2 of the SCM tool will release with a full complement of Microsoft product baselines, including these new and/or updated baselines:

• Windows Internet Explorer 9
• Windows Server 2008 R2 Service Pack 1 (SP1)
• Windows Server 2008 SP2
• Windows Server 2003 SP2

In more detail
Microsoft Security Compliance Manager (SCM) 2 provides security and compliance configuration recommendations from Microsoft, centralized baseline management features, a baseline portfolio, customization capabilities, and security and compliance baseline export flexibility to accelerate your organization’s ability to efficiently manage the security and compliance process for the most widely used Microsoft products and technologies. The formerly stand-alone product-specific security guides are now included in the SCM tool.

• To learn more about SCM, visit the TechNet Library.

Version 2 of the SCM tool releases with a full complement of Microsoft security and compliance baselines, including a new Windows Internet Explorer 9 Security Baseline, and updated baseline versions for Windows Server 2008 R2 SP1, Windows Server 2008 SP2, and Windows Server 2003 SP2.

These new beta baselines provide:

• Setting severity ratings, allowing you to quickly sort, prioritize, and apply Microsoft security and compliance recommendations.
• Consolidated product baselines that eliminate EC and SSLF baseline components, and make viewing, customizing, and implementing your security baselines easier than ever!
• New compliance-based settings groups allow quicker and easier compliance reporting and audit preparation, when used with the  GRC management solution within System Center.

Additional product baselines are currently in development, including baselines for: Windows 7 SP1, Microsoft Exchange Server 2007, Exchange Server 2010, SQL Server 2008 and SQL Server 2008 R2 (multiple roles), Office 2010, Windows Vista SP2, Windows XP SP3, and Windows Internet Explorer 8.

Call to Action

• Join the Security Compliance Manager Beta Review Program:  Join the beta, and influence the development of this latest version of the tool.
• Tell us what you think! Test drive the beta release, and send us your constructive feedback. We value your input; this is the perfect opportunity to be heard.

The beta will be available for download on Microsoft Connect through early August.

Note: New and existing users can access the beta version of Microsoft Security Compliance Manager 2 through Microsoft Connect. For existing users, simply download the beta and use the installation wizard to walk you through the upgrade process, and automatically transfer your existing baselines and settings.

Tell your peers and customers about Security Solution Accelerators! Please forward this to anyone who wants to learn more about security and Microsoft Solution Accelerators.

Already using Security Solution Accelerators? We’d like to hear about your experiences. Please send comments and suggestions to  secwish@microsoft.com.

Something I learned today about the “Home Use Program” that customers with Software Assurance have:

If a company decides to discontinue Software Assurance on their agreement, all HUP licenses will need to be uninstalled from end user home desktops as HUP is an SA benefit and it expires with the SA Benefits expiration.

This is from the Product List posted on www.microsoft.com/licensing.

Customers are not responsible for their individual employee’s compliance with the Home Use Program end user license terms.  Those terms are between Microsoft and the customer’s employee and do vary from the rights provided under the customers Volume Licenses (e.g. the employee may install only one copy of the HUP software). We do require that customers limit the Home Use Program access to employees and inform employees of when they should discontinue use of the Home Use Program software in conjunction with a lapse in Software Assurance coverage or employment termination.

[Note:  4K sector drives are not a new thing however what IS new is that OEMs are starting to ship them in enterprise class systems and unbeknownst to some IT folk, these drives are not supported with older operating systems.]

OEMs have started shipping HDDs with 4K sectors. Windows Server 2003, Windows Server 2003 R2, or Windows XP are not supported on HDDs with 4K sectors.  If the HDD you receive has 4K sectors and you install one of these older versions of Windows on it, you will have an unsupported configuration.  http://support.microsoft.com/kb/2510009

For Windows 7 and Windows 2008 Server R2, Microsoft only supports the hardware 512 emulated mode 512e.

Support for Hard Disk Formats based on OS Version

Microsoft released an update to several SDP Diagnostic Packages adding support to detect Advance Format Disks.

This KB also links to a hotfix that resolves a list of the known issues related with these disks on Windows 7 and Windows Server 2008 R2. http://support.microsoft.com/kb/982018

Some of the OEMs are using the same part numbers as the HDDs with 512 byte sectors, so please keep that in mind when you are spec’ing out your hardware.

(This is not a recommendation.  It’s just what I did.  Caveat installer.)

I upgraded my Samsung Series 9 to 8GB of RAM.  It was pretty easy and took no more than 15 minutes with the right parts, and the knowledge that I was nuking my warranty since Samsung doesn’t support RAM upgrades on this laptop, despite the fact that the unit supports a max of 8GB but only comes with 4GB stock. 

PREPARATION:
Here’s what I used:

1. Electronics-grade Philips head screwdriver
2. A single 4GB PC3 8500 DDR3 SODIMM ($29)
3. A willingness to invalidate my warranty

The casing was relatively easy to pry off once you realize that there are no fewer than TEN SCREWS holding the back metal plate in place.  These 10 screws include:

1. 3 exposed screws near the front
2. 4 screws at the sides of the port trays, hidden by small rubber circles
3. 2 screws hidden under the larger rubber “feet” near the rear
4. 1 screw hidden under the tiny rubber foot in the middle rear

…the case comes off after a little prying with a flathead screwdriver. 

INSIDE THE CHASSIS
Inside, there’s a curious sight:

1. There are two slots for memory DIMMS.  The Series 9, instead of having two 2GB DIMMs – one in each slot – it has a single 4GB DIMM in slot 0.
2. There is an actual STICKER covering slot 1, providing instructions on how to install the second DIMM into the remaining slot.  (How nice of them.)

I removed and read the sticker, and it explicitly shows that one needs to disconnect the power from the motherboard before installing the new memory purchased into slot 1.  The power is a 9 wire cable that is just below the empty memory slot. 

(The sticker that was attached to the empty slot is shown above along with the 4GB DDR3 DIMM I purchased from http://www.edgetechcorp.com/ram/Samsung/Samsung-Series-9-Notebooks/NP900X3A-(NP900X3A%252dA01US)-Memory for $28.  They delivered in 2 days and explicitly state that this memory is guaranteed to work on the Samsung Series 9.)  The location of the power cable is circled in RED to the right.

Once I disconnected the power, I inserted the DIMM firmly at an angle then locked it into place by gently pushing it down against the motherboard, then reconnected the power.  

Once I reattached the cover and boot up, I found that the machine automatically detects the new memory and Windows finds 8GB of RAM available.

I asked my coworker, Michael Ghekiere, the question, “How can I find a specific folder in Outlook?” and this is what he gave me as a solution.  Pretty cool out of the box thinking.

I have a massive folder hierarchy within Outlook/Exchange and I’d accidentally dragged and dropped a folder from somewhere in the hierarchy to somewhere else and I couldn’t figure out where the folder got placed in my Mailbox hierarchy.  Surely you’ve had the same issue where you accidentally “lost a folder” somewhere when your drag and drop failed.

It turns out that Outlook’s search will not work for “folder names” but it will work for mail items.  If you know the content of at least ONE mail message that exists in the folder that you lost, then you can search for that email WITHIN OUTLOOK and it will tell you in the mail object’s properties what folder the email is, but it won’t tell you how to get to that folder from within the hierarchy.

So this is the solution that Michael Ghekiere came up with.  Something to save in the back of your mind.  It involves using Windows Search to find the folder instead of using Outlook’s search:

1. Try the search from Windows 7’s search pane.  Search in the START menu for a message you know is in the folder you lost.
2. Right-click on the message, click “Show Conversation”
3. Browser window appears. Select the message in the window.
4. In the bottom pane of the explorer will be some message properties, including a full folder path. Hover over that path.  There you go!

I love my new Samsung Series 9.  This is the first ultraportable laptop that I’ve ever used that TRUMPED my previous full-sized laptop.

The biggest difference (besides the obvious size/look & feel differential) is the switch from Core2Duo to Core i5 w/ Sandy Bridge architecture.  The performance on this thing is stunning.

I created the following table from a variety of sources to compare it to “the other guys”.

Other noticeable differences:

• TEMPERATURE
  Runs cool… even when SpeedBoosting!  Not gonna burn your lap… unlike the MacBook Air which may leave a scorch mark on a wooden boardroom table.
• CHASSIS
  The laptop is encased in “Duralumin”, a metal composite used to build jet airliners for it’s strength & lightweight.  It is of very sturdy construction as a result.
• NETWORK PERFORMANCE
  The Series 9 has a native, integrated gigabit network adapter with actual performance of up to 1Gb/sec data transmission rates due to its integration with the PCI-E bus.  The Macbook Air’s lesser 100Mbps network adapter is a USB adapter that not only takes up a USB slot, but is relegated to USB data channel performance.
• SALES TAX
  An interesting thing about the Samsung is that you can buy it out of state and avoid paying sales tax.  For example:  In CA, you can pick up the Samsung from Amazon and be tax free & shipping free.  Not so much with the MacBook Air:  Apple’s likely got a store in your state and if that’s the case, you’re paying sales tax.  This is roughly a $140 premium for really no value.
• WIRELESS DISPLAY
  Something that no one seems to mention is because the Samsung Series 9 leverages the integrated graphics processor – the HD 3000 – on the Core i5, Intel’s Wireless Display technology or “WiDi” is available to the user.  This allows users of the Series 9 to wirelessly transmit their laptop screen at 1080p full 30fps to their consumer HD TV using a WiDi receiver, requiring no additional hardware on their PC.  Great for video sharing!

A few great links for the Samsung Series 9:

1. Samsung’s official site for the Series 9 including marketing photos:
   http://www.samsung.com/ca/consumer/office/mobile-computing/performance/NP900X3A-A01CA/index.idx?pagetype=prd_detail&returnurl=
   &pid=ca_mobilecomputingtype_keyvisual1_np900x3a_20110504
2. TechRepublic’s very excellent hardware tear down of the Series 9:
   http://www.techrepublic.com/blog/itdojo/samsung-series-9-worthy-rival-to-apple-macbook-air/2607
3. Tej Babra’s look at the Intel WiDi Wireless Display feature of the Series 9:
   http://www.tejbabra.com/index.php/reviews/samsung-series-9-laptop-review-with-intel-widi/

Announcing Microsoft Virtualization Jump Start Training Videos!

Just after MMS 2011, Microsoft Learning hosted another new and exclusive Jump Start virtual training event – “Microsoft Virtualization for VMware Professionals.” We are thrilled to announce availability of the HD-quality video recordings – FREE – on TechNet Edge, MS Showcase, the Zune Marketplace, iTunes! Additionally, every module will be made available (with assessment questions) on the Microsoft Virtual Academy (MVA) later this month.

Who is the target audience for this training?

• IT Professionals, Virtualization Engineers, Data Center Managers, IT Decision Makers, Network Administrators, Storage/Infrastructure Administrators & Architects.
• Microsoft customers and partners currently using VMware.
• Companies using VMware searching for real-world answers as they consider whether or not Microsoft Virtualization truly fits their needs.

What’s the high-level overview?

• The 15-hour course is broken into three sections: (1) Platform, (2) Management, and (3) VDI
• “Team-teaching” approach led by Microsoft partner and virtualization architect, Corey Hynes, and Microsoft Technical Evangelist, Symon Perriman
• Every module is an engaging discussion, packed with best practices and real-world demonstrations

Where do I go for this great training?
The HD-quality video recordings of this course are on TechNet Edge. If you’re interested in one specific topic, I’ve included links to each module as well.

• Entire course on TechNet Edge: “Microsoft Virtualization for VMware Professionals” Jump Start
• Links directly to specific modules
• Virtualization Jump Start (01): Virtualization Overview
• Virtualization Jump Start (02): Differentiating Microsoft & VMware
• Virtualization Jump Start (03a): Hyper-V Deployment Options & Architecture | Part 1
• Virtualization Jump Start (03b): Hyper-V Deployment Options & Architecture | Part 2
• Virtualization Jump Start (04): High-Availability & Clustering
• Virtualization Jump Start (05): System Center Suite Overview with focus on DPM
• Virtualization Jump Start (06): Automation with Opalis, Service Manager & PowerShell
• Virtualization Jump Start (07): System Center Virtual Machine Manager 2012
• Virtualization Jump Start (08): Private Cloud Solutions, Architecture & VMM Self-Service Portal 2.0
• Virtualization Jump Start (09): Virtual Desktop Infrastructure (VDI) Architecture | Part 1
• Virtualization Jump Start (10): Virtual Desktop Infrastructure (VDI) Architecture | Part 2
• Virtualization Jump Start (11): v-Alliance Solution Overview
• Virtualization Jump Start (12): Application Delivery for VDI
• Links to course materials on Born to Learn

Where can people learn more?
Clearly, virtualization experts worldwide are taking a new look at Microsoft Virtualization. After this Jump Start, we hope you’ll want to learn why. Check out the Microsoft Learning “Virtualization Training Portal” to better understand virtualization-specific certifications and where to find instructor-led classes to help you and your team. Of course, these videos will also be posted to the Microsoft Virtual Academy (MVA) where you can learn at your own pace.

Justin Campana has a special web site dedicated to optimizing your Windows 7 tablet/slate device for touch control.

His configuration was designed for the Asus Eee Slate EP121 Tablet PC but it should work for any slate.

He has a set of free tools that he uses to get the interface that you see on the right.

• Justin Campana’s Touch Optimizations for Windows 7
  http://windows7tablet.blogspot.com/

Over 100,000 customers are actively using the beta of Office 365 and will go into production on June 28th.

There is a 73 page document that goes over the different steps for running a trial.

Adoption procedures are grouped into the following scenarios:

• Scenario 1: Signing Up for a 30-Day Trial
• Scenario 2: Performing the “Start Here Tasks”
• Scenario 3: Adding a Custom Domain to Office 365
• Scenario 4: Managing Exchange Online
• Scenario 5: Managing a SharePoint Site Collection
• Scenario 6: Preparing Your System for Office 365
• Scenario 7: Using Exchange Online
• Scenario 8: Using SharePoint Online
• Scenario 9: Using Lync Online
• Scenario 10: Getting Support
• Scenario 11: Converting a Trial Account to Paid Subscription

DOWNLOAD:  Microsoft Office 365 Guides for midsize business and enterprises
http://www.microsoft.com/download/en/details.aspx?id=26123