Kurt Shintaku's Blog

We were in a presentation room, when I struck up a conversation with Mark Russinovich, Technical Fellow here at Microsoft, and one of the 2 founders of Winternals/Sysinternals.  Mark was about to go into his talk on malware & Windows Vista when the two of us started talking about the acquisition of Winternals and how things had been "life after acquisition" so to speak.

One of his most famous tools, and a personal favorite of mine, is Process Explorer… the Professional’s Task Manager.  Think TaskMan++.  Task Manager Premium Edition.  Task Manager v2.0.

And one of the most interesting things that Process Explorer has are the additions Mark’s made to accomodate Windows Vista.

PROCESS VIRTUALIZATION
One of them is whether or not a running process is "virtualized" into a higher user rights context:  This is a process state that will be most commonly associated with ‘Vista’-based processes because of the manner in which Windows Vista popularizes the concept of running with a limited user account on a day to day basis and ‘virtualizing an environment with elevated rights’ in order to execute a process that requires administrative rights.

INTEGRITY LEVELS
Another is the concept of integrity levels.  When you elevate the rights available to a process, a virtualized environment is created for that process.  To protect the the elevated process space (with superuser permissions) from intrusion from the standard user context, the concept for "integrity" levels was introduced – high integrity levels are assigned to elevated rights processes, and medium/lower levels are assigned to lesser states.  Lower levels of integrity can not write directly into the space of a higher levels of "integrity", isolating them to some degree.  (This is debated and contested in Mark’s recent blog entry, "PsExec, User Account Control and Security Boundaries" however the point of this post isn’t to debate the security of rights elevation but rather to make a point that Process Explorer can help people understand the internals of process management & security rights within Windows Vista)

In any case, here’s what’s new in Process Explorer – just updated for Windows Vista!

What’s new in Version 10.2:

• Vista integrity level and virtualized columns and process properties
• Signed driver for 64-bit Vista for x64 processors

What’s new in Version 10.1:

• Vista process cycle counters in process properties and as column
• Service permissions viewing and editing
• Workaround for .NET runtime handle leak
• Many new I/O columns and process properties
• System and per-process I/O bytes history graphs
• I/O history minigraph
• Memory commit history minigraph
• Optional I/O history tray icon
• Windows 64-bit for Itanium support

DOWNLOAD: 
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Virtual PC 2007 shipped so go download it now! 

So what’s so special about it?  Well, I decided that the information available on our web site wasn’t very detailed so I wrote up some of the many reasons why Virtual PC 2007 rules and why you should use it as your virtualization technology of choice. 

(To the "haters":  I’ve gotten the chance to personally talk to our virtualization technology group and I have to say, Microsoft is really at the forefront of virtualization – the world just hasn’t gotten the chance to see what we’re coming with.  There are close to a dozen reasons why I feel confident enough to make that claim, however at the end of this article, I’ll write 3 of those reasons down, with a promise that once we make some announcements, I’ll write more.)

• UNIFIED VM FORMAT (VS2005, Windows Vista, Longhron Server, Xen)
  VPC leverages the same VM file format as Virtual Server R2 and prior revisions of Virtual PC.  It is also the same format as the files that are created by Windows Vista Backups and as such are accessible by "mounting them" to a local workstation file system.  Additionally, the file format ".VHD" is the same format that will be leveraged in the upcoming Windows Virtualizaiton Hypervisor in Windows Server "Longhorn", which promises to be the fastest, most versatile virtualization engine on the market in 2007.
  …and even Open Source projects like Xen have licensed the .VHD format for use.
• DESKTOP INTEGRATION
  VPC enables end users to copy, paste, drag & drop between the host desktop and that of any guest virtual machine, making it easy to transfer content, clipboard information, and files between systems for testing.  Dynamically resizing the desktop by changing the size of the virtual machine window is also very convenient when comparing multiple screens
  Anyone that uses virtual machine technology knows how important this ease of configuration is
• WINDOWS VISTA SUPPORT
  VPC is fully supported on Windows Vista Enterprise, Business, and Ultimate host machines, and Microsoft products are supported within VPC guest machines..  The lay person might disregard this as a bunch of hub bub, but ask any business user:  This is a very serious point. 
  Why?  Software within virtual machines needs to be supported otherwise what’s the point in testing?  The fact is that Windows and all Microsoft products in general are NOT SUPPORTED within other virtual machine technologies such as VMWare, making Virtual PC all the more important for production application testing, desktop compatibility, and simulation work.
• 64-BIT HOST SUPPORT
  Windows Vista 64-bit can be used as a host system to run VPC 2007.  The benefit of using x64 computing architecture in this manner is three-fold:  Greater computational performance per clock cycle & high addressable memory limits, and more expansive instruction sets for faster overall throughput.
  CPU PERFORMANCE:  Virtual PC 2007 takes advantage of all of these.  We all know that virtual machines are some of the most CPU intensive applications of personal computers today and having twice the number of register data makes Virtual PC 2007 fly.  
  MEMORY ADDRESSABILITY:  And unlike multi-user kernels like that used in Terminal Services for Windows Server or the "fast user switching" feature of Windows XP, each virtual machine requires its own dedicated memory space:  With 64-bit addressable memory, each workstation can natively address at least 128GB of RAM.  This has the benefit of not only making it possible to run all virtual machines in real memory instead of virtualized (disk swapped) memory, but it also means that memory addressing for any machine is done as rapidly as possible without any complex addressing schemes to accommodate higher memory limits.
  x64 SERVICES & KERNEL:  But the hidden benefit of 64 bit architectures for Virtual PC 2007 is the fact that the PLATFORM that VPC2007 runs on – Windows Vista – is designed for and runs on x64 instructions.  Remember that the underlying kernel, services, and I/O subsystems are all x64 operating system functions that are designed to take advantage of the x64 architecture, thus providing faster disk writes, quicker networking functions, more rapid multiprocessing for multicore chipsets, etc.  The fact that the operating system that Virtual PC 2007 runs on is x64 oriented makes Virtual PC 2007 faster.
• IMPROVED PERFORMANCE
  VPC now runs faster than it’s predecessor, Virtual PC 2004, in no small part to Virtual PC 2007’s newest support for Intel Vanderpool/"VT" technology and its rival, AMD’s Pacifica/"-V" technology. 
  Each respective technology is built into the latest processors and provides a new instruction set specifically to facilitate & accelerate hardware virtualization technologies such as Virtual PC 2007.  These "virtualization instructions" provide a sub-ring of operations below Ring 1, but above Ring 0.  (Half rings?) 
  The idea of these rings is to make it possible for hardware to manage memory management between virtual machines at the lowest level, maximizing performance for the virtual machine operations themselves and minimizing any overhead involved with sustaining these virtual environments.  In previous revisions of Virtual PC (2004) and other virtualization products, memory management between virtual machines (the swapping of information in the CPU cache) had to be handled by the software itself creating a significant drag on performance, however Intel VT/AMD-V technologies made it possible to do all of this through hardware.
  (Note:  Your CPU must support Intel VT/AMD-V technologies and have it enabled in BIOS for Virtual PC 2007 to see the most substantial performance benefits, otherwise, the increase in performance will not be as significant.)

DOWNLOAD:  http://www.microsoft.com/windows/products/winfamily/virtualpc/default.mspx

————————-

A note on Microsoft’s leadership in virtualization: 

I am quite aware that our competition has a technlogical edge when it comes to released products:  This is true however in just 4-6 months, you can anticipate seeing that edge drastically diminish and with a little more time, disappear.  Things like SMP CPU affinity, P2V support, and even littler bits like USB support are all of course covered – and surpassed!

Here are 3 things to keep in mind with regard to virtualization and Microsoft’s role in the marketplace:

1. Symmetric Multiprocessing, Hot plug memory/CPU/storage support, Failover Cluster Management, etc.
   At VMWorld this past year, Microsoft demonstrated several technologies that it’s competition had no answer for, nor is there any apparent roadmap for some of these functions.  Hot pluggability is one of these:  The ability to hot-add more CPU or memory on the fly with no downtime is simply something only our researchers have been able to put together.
2. Windows Virtualization Hypervisor
   At the lowest level possible to minimize overhead, "Viridian" or the Windows Virtualization Hypervisor slated for Windows Server Longhorn, will be the fastest virtualization platform available on the market, while still supporting every Windows-supported hardware platform on the market today:  Commodity Windows drivers will work with the Hypervisor just as they do with normal OS functions.  And the Hypervisor will allow for the live management of resources, allocating up to 8 CPUs per VM, more than 32GB RAM for VM, and have more than 64 virtual machines running on a single host server at the same time.
   Additionally, all cross-service administrative & operational needs will be respected.  For example, "remote access & management" of virtual machines will be secured using Windows’ Active Directory users & groups.  "Service levels & round-the-clock metering" will be monitored using Windows’ Performance Monitor.  "Access loggin & events" will be logged through the Windows Event logs.  "Automation & Orchestrated Management" will be done using WMI & PowerShell scripting.
   And to top it all off, the hypervisor will be a free technology incorporated into the operating system as a value to Windows Server customers, ensuring both worldwide adoption as well as a monstrous market for 3rd party partner solutions driven by the Hypervisor SDK Microsoft has developed.
3. Virtual Machine Manager
   Want a single console for the entire Enterprise Farm for virtual machines? 
   Want to move or provide "live migration" of virtual machines from server-to-server? 
   Want to provide Physical-to-Virtual conversions to migrate your existing servers to the new virtualization paradigm? 
   Want utilization counters & synthetic resource managers to provide strict service level agreements to business units? 
   Want clear reporting systems to demonstrate usage & accountability? 
   Want the ability to manipulate virtual machine hard drives offline?
   Want the ability to provide "checkpoints" for any VM to revert back to like a "system restore"?

If this is interesting to you, check out this presentation for a quick briefing on just SOME of the features Microsoft Virtualization is bringing in 2007.  (Note that this is a SUBSET.  Much of what is coming has not been publicly announced yet.)

WEBCAST:  Transitioning to Windows Virtualization
http://www.microsoft.com/events/EventDetails.aspx?CMTYSvcSource=MSCOMMedia&Params=%7eCMTYDataSvcParams%5e%7earg+Name%3d%22ID%22+Value%3d%221032298427%22%2f%5e%7earg+Name%3d%22ProviderID%22+Value%3d%22A6B43178-497C-4225-BA42-DF595171F04C%22%2f%5e%7earg+Name%3d%22lang%22+Value%3d%22en%22%2f%5e%7earg+Name%3d%22cr%22+Value%3d%22US%22%2f%5e%7esParams%5e%7e%2fsParams%5e%7e%2fCMTYDataSvcParams%5e

Most consumers activate Windows Vista over the Internet, however there are times when it’s more convenient to activate with the assistance of someone from the Microsoft Product Activation call center.  These folks have "powers" that neither you nor I have to "make things work" so it’s often a good way to get an installation going if you find yourself stuck.

The phone number is supposed to be displayed if you don’t have Internet access, however if you do, it doesn’t tell you what the phone number is in my experience.  So the phone number for consumers, for future reference, is 1-866-740-1256.  Keep it handy, write it down… and again, this is for consumers or home users that bought Windows Vista off-the-shelf at CompUSA or online at Amazon.com.

CONSUMERS:

Microsoft Windows Vista Consumer Product Activation Phone Number: 
1-866-740-1256

One other thing:  A lot of hub bub has been made over Windows Vista activation.  The thing that I personally want to communicate is that in my experience, Windows Vista activation through the phone number above has been very liberal.

In other words, if you’ve used up your activations and find yourself stuck without the ability to activate using the Windows Vista key you rightly have for your workstation (because you’ve blanked thne hard drive on your original computer, bought a new upgraded PC, and and you want to install your legally acquired copy of Windows Vista) you can call the number above and they’re quite forgiving.

I believe the activation process exists only to make it difficult for pirates to use the same key over and over again.  The intent is not to push around the average home user who’s just trying to get their newly acquired PC using their legally acquired Windows Vista license.

——–

BUSINESSES:

For customers that purchased Windows Vista in volume through an Enterprise Agreement or Volume Licensing, there’s a different number to use:

US DOMESTIC:  Microsoft Windows Vista Volume Activation Phone Number: 
(888) 652-2342

Obviously, this is US only but for you guys that have International subsidiaries that need to call in, check the web site here for the phone number for your respective country.

INTERNATIONAL: Microsoft Windows Vista Volume Activation Phone Numbers: 
http://www.microsoft.com/licensing/resources/vol/numbers.mspx

SQL Server 2005 SP2 is now available for download. In addition to Vista/Office 2007 compatibility, included in this release:

• Enhanced BI Capabilities
• Interoperability Enhancements
• Performance and Manageability Enhancements

WHAT’S NEW IN SQL SERVER 2005 SP2:
http://download.microsoft.com/download/2/b/5/2b5e5d37-9b17-423d-bc8f-b11ecd4195b4/WhatsNewSQL2005SP2.htm

DOWNLOAD:
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/servicepacks/sp2.mspx

Spend enough time performing routine system administration tasks and one word pops to mind: automation. For that, that I have two words for you: Windows PowerShell.

Windows PowerShell, as you might have learned, is the new shell scripting interface built on the Microsoft .NET framework that enables IT Pros and .NET developers to control and automate the administration of Windows and applications. It uses a new admin-focused scripting language and features more than 130 standard command-line tools.

WHY WINDOWS POWERSHELL?
What makes Windows Powershell so inherently important moving forward is the fact that, virtually all administrative tools for our products – Active Directory Users & Computers, Systems Management Server Administration, Exchange Admin, etc. – are all going to be rewritten (or they’ve already been rewritten, as in the case of Exchange Admin) to be GUI tools with scripting underneath it all.  That’s right:  The GUI’s are essentially just clicks that allow you to orchestrate scripted actions in the background. 

The obvious benefit of this is the ability to do everything WITHOUT the GUI.  You’ll be able to see all the script under the tool so that you can incorporate it into your own automation scripts for on-going management.

Today, you can download Windows PowerShell 1.0 for Windows XP Service Pack 2 and Windows Server 2003, and the English language version of Windows PowerShell for Windows Vista and Windows Server "Longhorn."

If you haven’t checked out the PowerShell scripting interface or you are new to scripting, do yourself a favor and download the Getting Started Guide and Quick Reference sheet. Those little one-liners can really improve your life. And if you’re interested in seeing some script examples, look at what’s going in the PowerShell blog or revisit Windows PowerShell Week, a series of on-demand webcasts.

Microsoft has created some great resources for Windows Vista end users. Have the end users in your company discover how the breakthrough Windows Vista computing experience enables them to organize and find their information more efficiently, giving them personalized ways to view and work with their files.

• Windows Vista Top 10 Tips & Tricks (Level 100)
  http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032322312&EventCategory=5&culture=en-US&CountryCode=US
• Be One of the First to See Tips & Tricks for Windows Vista (Level 100)
  http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032316536&EventCategory=5&culture=en-US&CountryCode=US
• A First Look at the 2007 Microsoft Office System and Windows Vista: Working Better Together
  http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032313120&EventCategory=4&culture=en-US&CountryCode=US
• Microsoft Learning Online Course: Working with Windows Vista
  https://www.microsoftelearning.com/eLearning/offerDetail.aspx?offerPriceId=114507
  ($9.99)

New version of Windows Mobile’s syncing software is available.  The only thing that I’ve noticed is that sync & connectivity is in fact faster but I’m sure there’s a slew of fixes implemented.

DOWNLOAD:  http://www.microsoft.com/downloads/details.aspx?FamilyID=9e641c34-6f7f-404d-a04b-dc09f8141141&DisplayLang=en

<taken from http://www.veign.com/blog/2007/02/relocate-menu-bar-in-ie7-to-top-of.html>

Would you rather have the menu bar in IE7 to be more like IE6 in the sense that it will appear at the very top of the window? A simple reg hack will get that going for you.

1) Copy the bold text below into a text file (between the lines)
        ———————————————————–
        REGEDIT4
        [HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerToolbarWebBrowser]
        "ITBar7Position"=dword:00000001
        ———————————————————–
2) Save the text file with a REG extension (like toolbar.reg)
3) Double click the file and allow it to update your registry
4) Shut down IE7 (if open) and restart it.

(Download reg file to accomplish the above:  http://veign.com/blog/files/ie7menufix.zip)

 
Before

 
After

Microsoft Diagnostics and Recovery toolset brings new tools to the market helping you to diagnose and recover Windows systems.

We have scheduled a LIVE MEETING session on Friday this week 16th February 2007 at 8:00am PST (4:00pm GMT).  During this session, we will cover some of the most important diagnostics and recovery scenarios.

As an example, we will demonstrate how to determine with the Crash Analyzer tool the root cause of a dump, how you can disable a failing driver, recover a Windows system from a dramatic change to get it booting again and recover deleted files from an unfortunate deletion.  These are some of the few things you can do to recover critical data from a Windows system.

We would like to demonstrate the value of the tools to help you to use this suite of tools in your day-to-day tasks.  We will be also looking for your immediate feedback about these tools during the session or via our beta newsgroup.

This session will be a combination of a PowerPoint deck combined with live demos, with plenty of time for Q&A.  We’ll be answering the questions you post in the live Meeting Tool during the session and we are also looking for ongoing continued feedback in the newsgroup, this is through Microsoft.beta.msdart.general

LIVE MEETING
Date: Friday, February 16, 2007
Time: 8:00 – 9:00 am PST

Please join the session 15 minutes BEFORE start time.

Use this url to join this live meeting
https://www.livemeeting.com/cc/microsoft/join?id=5BMGD2&role=attend&pw=s%2C%3CzhN2BP

If you can’t click the above meeting URL or it does not work, click the following link: https://www.livemeeting.com/cc/microsoft/join

When you click on either URL, the Join Meeting page appears. In the following fields, verify or enter this information:

Name: (Enter your first and last name)
Meeting ID: 5BMGD2
Meeting Key: s,<zhN2BP

Audio will be delivered via VoIP and questions may be submitted with the Live Meeting tool. To receive audio, you must have the full Live Meeting Console installed and not just the web portion.  Sound checks will be done both 10 minutes and 5 minutes prior to the start of the meeting.

This meeting will broadcast internet audio directly to your computer. Please ensure that you have Windows Media Player 9 or higher installed.

FIRST TIME USERS: To save time before the meeting, check your system to make sure it is compatible with Microsoft Office Live Meeting.