Posted by: kurtsh | August 15, 2006

BETA: Windows Live Writer Build 109

So now that it’s out, I guess I can write something about it finally:  I’ve been using this tool we’ve been developing called the Windows Live Writer and, dare I say it, been providing a bit of feedback on the device of the past few months of it’s development. 

It’s essentially a client-side blogging tool that enables you to write & post blog entries on your desktop without having to open a browser window.  To those of you who lift your noses at the prospect of having a real Win32 tool to post content, I say that you can’t possibly be a real blogger.   Blog writers have been plagued with the problems of lousy server-side editors for years.  Not having spellcheck, having crummy formatting tools, having to login-logout to switch between blogs… it’s a downright headache to maintain anything more than 1 blog – heaven forbid you actually have multiple audiences. (BTW:   Download of "Writer" is available here:  http://download.microsoft.com/download/f/9/a/f9a19…)

Personally, I think it’s looking pretty good although I don’t pretend to understand all its synergies with the rest of our online & desktop application strategy.   One thing I do know is that the tool’s been immensely useful.  It’s light, its easy to use, relatively bug free, and it’s provided me with a weird cross between FrontPage & Word to publish to my many Windows Live Spaces blogs.  (Yes, I have more than two out there.)

The tool does all the typical things other blog writers do… spellcheck, wordwrap, stylesheet replication, blah blah blah. (You can read everyone else’s blog if you want to read about that stuff) 

What the tool does that makes it unique in terms of client-side publishing are a few interesting things: 

  1. MULTIPLE BLOG SUPPORT
    The thing works with multiple blogs from multiple vendors using multiple user accounts and multiple saved passwords.  I can edit a Blogger blog, then immediately switch over and seamlessly sign in to my Windows Live Spaces blog, then do the same thing to my TypePad blog… all with a single dropdown menu on the toolbar.
  2. PUBLISHING PREVIEW
    This might not seem like a big deal to some of you but this is very FrontPage like and for those of you who have used FrontPage religiously like I have over the past 10 years since it was a Vermeer property, this is a godsend.  Being able to see a preview of your posting the way it will eventually be published is a really confidence booster for folks that publish as regularly as I do.
  3. TASKS PANE
    This is that window pane on the side of an application like Word 2003 that shows all the things that you can do in the current context of the application.  For example, when you first load Word 2003, you might look at the task pane and it would say, "Open New Document".  In the case of Windows Live Writer, it lists out all the DRAFT blog entries you still haven’t completed yet, it lists out all your most recent posts, and it shows you what sort of objects you can insert.  I think this paradigm was one of the true unheralded innovations in Office 2003 that’s been passed down to Writer:  Contextual help.
  4. AUTOSAVE
    The thing autosaves your blog entry after a default of 3 minutes (adjustable) of usage. 
    NUFF SAID.
  5. AUTOCORRECT & AUTOSPELLCHECK
    It both autocorrects and spellchecks automatically right before you post.  Again, nuff said.
  6. OFFLINE SUPPORT
    Admittedly this one surprised me because I didn’t expect it although I suppose I should have.  Writer gives you the ability to blog offline on an airplane flight example and save drafts for later posting.  It also enables you to review all the most recently posted entries that you’ve made through Writer to your blog which is really conveninient in the event you decide to make updates to past entries while you’re offline.

One thing that it lacks is Tablet PC stylus & digitizer support – aka support for digital ink.  Yes, I understand why this might have been left out but aren’t we at that point where EVERY application that Microsoft churns out should instinctively have Tablet PC Support?


Windows Live Writer (BETA)… a really cool Blog writer for your Windows desktop.

IT’S THE DESKTOP & THE SERVICE PROVIDER, STUPID

This brings up an important topic:  I understand a few important facts… one of which is that this is a v1.0 product but it’s a perfect example of where a desktop application working with online software makes for a super-powerful offering.  Why?  Because online applications have a ceiling in terms of their power and nothing beats having rich APIs powered by a local CPU.

Certain folks would have you believe that the "world is going to go completely online for their applications" – the day of the end of desktop applications is nye.  I say horse hockey.  The day Bank of America – a company that had a profit of $18 billion dollars last year – decides that it’s okay to have their financial analysts plug numbers into an online spreadsheet just to save the company $1 million in Excel software costs, is the day hell freezes over.

Some argue that there’s an area at "the bottom of the pyramid" of consumers that would move to an online application model that was ad sponsored and free.  It’s been proven time and time again that this model only managed to attract the folks that wouldn’t have paid for desktop software anyway. 

Seriously ask yourself:  How many Norwegian Linux users do you think have ever paid for a copy of Microsoft Office?  Yet how many of them do you think have used Microsoft Office?

THE SALESFORCE.COM EXPERIENCE

Look at Salesforce.com:  An online customer relationship management application that has become somewhat popular because of it’s ease-of-use (proving again that the user is king) and it’s ease-of-administration.  Basically anyone that’s a subscriber can get to any browser and work with their customers & their sales opportunities.

Wellllllll almost everyone.  Salesforce.com had a ‘tiny’ outage that had their customers hanging in the wind without their CRM data for over 24 hours.  They blamed Oracle’s database as the problem but the damage was done:  The online ERP model was seriously called into question, bringing rapid acceleration to the offline/desktop applications side of the business for Salesforce.com.  It was amazing how high profile their desktop version of their CRM application became after the outage as if to say, "Don’t worry!  You can have a local copy of your CRM data too, so this will never happen to you.

Posted by: kurtsh | August 15, 2006

NEWS: Free XNA Games Studio Express announced today!

"Microsoft is announcing XNA Game Studio Express at Gamefest on August 14 at 9am PST. We will be releasing a beta version of the XNA Game Studio Express on August 30th.

XNA Game Studio Express is a set of tools based on Visual C# Express 2005 th at allow students and hobbyists to build games that target both Windows and Xbox 360. XNA Game Studio Express contains the following:

  • The XNA Framework. A set of managed code development libraries based on the .NET Framework 2.0 which will allow game developers to be more productive when creating games for Windows and the Xbox 360.
  • The XNA Framework Content Pipeline. A set of tools that allow developers to more easily incorporate 3D content into their games.
  • Game Studio Express also contains a full set of documentation, how-to’s and starter-kits that demonstrate how best to utilize the content pipeline and XNA Framework.

Microsoft will be offering a new Xbox Live subscription program called the XNA Creators Club.  The XNA Creators Club provides everything a game developer needs to build non-commercial games which target the XNA Framework running on an Xbox 360 retail kit. This subscription program is open to anyone, including non-professional game developers such as students and hobbyists. We believe this program will revolutionize the game development industry by virtually eliminating the barrier to entry for aspiring game developers who wish to develop games for the Xbox 360, thus fostering in a new wave of innovation and fresh talent to the industry.

I invite you to read the additional details here:

Posted by: kurtsh | August 15, 2006

TRAINING: Project 2003 eLearning & Online Training

Recently I was asked to summarize all the available training for Microsoft Project 2003.

MICROSOFT eLEARNING:
There’s a couple courses that we have that you can get from Microsoft eLearning web site on Project 2003.

  • Course 4111: Core Training for Microsoft Office Project 2003 Plus Access to Online Book
    "The self-paced e-learning course will help you become familiar with the basic features and tools of Microsoft Office Project 2003 via interactive simulations that provide hands-on practice to master specific tasks. It also includes skills assessment to help pinpoint the areas where training can have the most impact. In addition, this course can be downloaded for offline use for the length of your subscription so you can learn even when you’re not connected to the Internet."
    The course is based on the book I gave you "Microsoft Office Project 2003 Inside Out" and costs $22.49. You have access to the course for 1-year.
    https://www.microsoftelearning.com/eLearning/offerDetail.aspx?offerPriceId=73960
  • Course 4009: Setting Up Projects for Success Using Microsoft® Office Project 2003
    Summary: This online course focuses on the critical planning stage of a project and how to set up a project for success. Hands-on exercises with Microsoft® Word and Project will demonstrate effective and easy-to-implement techniques to better plan, schedule, and allocate resources. The goal of this course is to enable project managers to increase their productivity, which means they have more time to stay on top of the critical project management tasks that increase the chances of project success.
    The course is based on the book I gave you "Microsoft Office Project 2003 Inside Out" and costs $22.49. You have access to the course for 1-year.
    https://www.microsoftelearning.com/eLearning/offerDetail.aspx?offerPriceId=69818

***IMPORTANT NOTE: If you are an Enterprise Agreement customer (if you’re one of mine, you are) you can actually enroll in the Microsoft eLearning courses without paying the $22/enrollment through your Enterprise Agreement – you’ll need to talk to the administrator of this part of the agreement to make this happen.  There’s a TON of free training available to you if your interested.

ON-DEMAND OFFICE SYSTEM WEBCASTS:
If you’re interested in "beginner 100-level" on-demand training and webcasts, the Office System webcasts are the way to learn. There’s about a dozen of these and are easy to understand.
http://www.microsoft.com/events/series/officesystemwebcasts.mspx#MicrosoftOfficeProject

ON-DEMAND TECHNET WEBCASTS:
If you’d like to see a Technet Webcast on Project, we have a LOT of them. Several hundred. These are more advanced in nature in general and can talk about basic planning all the way up to modifying the Project interface and doing code-level work with the tool.
http://www.microsoft.com/events/AdvSearch.mspx?EventsAndWebcastsControlName=As1%3AAdvSrc&As1%3AAdvSrc%3AAudienceID=0&As1%3AAdvSrc%3AProductID=a1d023a3-f612-4da2-acb8-fda8f850d645&As1%3AAdvSrc%3AEventType=OnDemandWebcast&As1%3AAdvSrc%3ACountryRegionID=en%7CUS%7CUnited+States&StateProvinceID=0&As1%3AAdvSrc%3ATimeframeID=-1&As1%3AAdvSrc%3ASearchFilter=%C2%A0+Go+%C2%A0

ONLINE TRAINING COURSES FOR CONSUMERS:
You can also go to this:
http://office.microsoft.com/en-us/training/CR061832711033.aspx
They have 3 online training courses there for Project 2003 although they are pretty specific to some particular areas like scheduling.

UPDATE – 8/9/2006: 
A friend of mine (Blake Handler) let me know that the Department of Homeland Security has posted a warning/announcement about MS06-040 basically stating "patch your systems ASAP".
DHS Recommends Security Patch to Protect Against a Vulnerability Found In Windows Operating Systems
http://www.dhs.gov/dhspublic/display?content=5789
————————–
ORIGINAL TEXT – 8/9/2006:
This is the first time I’ve ever written an entry in my blog about a set of monthly critical updates.
 
If you didn’t already know, this release is labelled a "Level 3 – Critical Update" within Microsoft.  This is the equivalent of "DEFCON 1" (Defense Condition 1) in the Microsoft security world and it means "all hands on deck" for those of us working with the customers in Enterprise Sales.  Premier Support TAMs (TAMs = Technical Account Managers: the guys that do the same thing I do for customers that have Enterprise Sales Agreements with Microsoft, except on the "Premier" side of the house for customers with Enterprise Support Contracts) are required to call their customers and send emails directly to those responsible for security & patching in 24 hours.
 
I’m not going to go over all of these vulnerabilities but just to show how nasty this month’s vulnerabilities are, here’s one English language description:
MS06-040 is a patch to the Server Service – something every Windows NT/2000/XP/2003 desktop and server has, that seals a very serious vulnerability – a buffer overflow – that allows the intruder to gain full administrative rights to the machine.  The buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code by simply transmitting a crafted RPC message.  Besides patching the machine, the vulnerability can be thwarted by Windows Firewall, blocking ports 139 & 445.
As you can see, just this first vulnerability is a REALLY serious problem and it just takes as single RPC message transmission from a hacker’s computer attack a remote system. 
 
So why should you hurry?   Well, this is where is gets really messed up.  You see, the creators of many of the intrusions, viruses, and hacks that you see in the wild these days are from 1 of 2 groups: 
  • Hacker groups that have formed exclusively around Windows vulnerabilities to create zombies that allow them to use your machine for spamming, remote hacking, or other activities. 
  • Actual crime syndicates with a LOT of cash behind them that use these attacks to extract charge card numbers, bank account information, personal data,
Either way, what these folks do is they reverse engineer our patches after we release them to figure out what the vulnerability is so they can take advantage of it.  They may not have known about the vulnerabilities existence before we released the patch however it’s a darned bet that they will within a few days after they’ve dissassembled the patch and done some forensics around the assembly code itself.  Seriously – these guys are downright diabolical. 
 
Bottom line:  This series of updates is really frickin’ important.  Patch every desktop and every server as soon as you can.
 
 
 
Information about each respective patch:
Posted by: kurtsh | August 9, 2006

BETA: Forefront Security for Exchange Server 2007

To protect Exchange Server 2007 against the latest malware and spam, Forefront Security for Exchange Server provides on-premise, server-level antivirus and anti-spam protection.
 
Forefront Security for Exchange protects organizations against the latest threats by managing multiple antivirus scan engines at multiple layers throughout the e-mail infrastructure. This approach allows Forefront for Exchange to minimize the average window of exposure for emerging e-mail threats by providing continual signature updates from multiple antivirus labs around the world. Forefront also protects by scanning at multiple layers in the Exchange 2007 infrastructure, including the Edge, Hub Transport, and Mailbox server roles, while using scanning intelligence to avoid needless repeat scanning.
 
Download Forefront Security for Exchange Server Beta:
Everyone in the press is talking about the failed voice recognition demonstration that occured at Microsoft’s financial analyst meeting, bringing back memories of the 1998 "blue screen of death" demo that occured with Chris Capposela and the consumer products catastrophy at CES in 2005.  Lord knows – the press love a good ‘failed demo’.  Meanwhile Systems Engineers and Technology Specialists worldwide, from Microsoft to IBM to even Apple all cringe:  We all feel each other’s pain when demos go wrong.
 
It turns out that the problem was a feedback loop.  Larry Osterman explains what happened and… well… his role in failure.
Internet Explorer 7.0 will be published at it’s release at the end of this calendar year as a High Priority update.  This  means that any machine with Automatic Update on it will receive Internet Explorer 7.0 on it, just as it would a published Critical Update.
 
Before everyone goes nuts, let me go through what the rationale is for this and explain the "big picture’.
 
Our official messaging is as such: 
"The new security features in Internet Explorer 7 (including “defense in depth” measures such as ActiveX Opt-In and Phishing Filter) provide really important security benefits, and Microsoft will recommend that all customers install the update as soon as possible.  Automatic Updates is being used to distribute Internet Explorer 7 because it is Microsoft’s primary means for helping unmanaged users become more secure and up-to-date.  (Note that Microsoft will continue to release security updates to fix identified security vulnerabilities for Internet Explorer 6.)"
 
The underlining is my doing in the above paragraph.  There’s a few things you can kind of read into in the implications of the above paragraph that isn’t made explicitly clear in the above paragraph and that is that:
 
1)  IE 7.0 is hardened.  In other words, version 7.0 is designed from the ground up using Microsoft’s new rigorous security principles in mind – the same ones that were applied to Windows Server 2003 & Windows XP SP2.  Microsoft knows that this build is by it’s own inherent nature going to be REVOLUTIONARILY more secure than IE 6.02.
 
2)  IE 6.02 has issues that have no current resolution.  While it’s probably not a surprise, the last couple lines are very telling, essentially stating that if any new security flaws arise, the user’s primary method of remediating them is to UPGRADE to IE7.0 – not that there will be a patch available in the immediate future.  They are careful to state that there’s going to be continued work to remedy security flaws in IE 6.02, but remember – patches are the implied "secondary means" by which someone can protect themselves.
 
There has only been two times in the history of our company when I can recall Microsoft pushing such a massive and complicated software component to end-users, and that was Windows XP SP2 – which protected a LOT of users from security threats through:
– Data Execution Protection (A new feature of SP2 that prevented many worms, viruses, and intrusive elements from running outside of the boundaries of Window’s control)
– Windows Firewall (A protective filter that prevented other systems from infecting workstations with viruses through the network)
– Intel/AMD No-Execute Support (A hardware/CPU feature that got enabled using SP2 that prevented renegade software from executing dangerous actions without the permissions of the user)
 
…and now, we’re doing it again.  This time with Internet Explorer 7.0.
 
We’ve been trying very hard to make sure our customers are happy.
– We’ve made Virtual PC free for workstations along with Virtual Server for servers
– We’ve given Enterprise’s 4 free licenses of WinXP to run on Virtual PC-enabled systems
– We’ve provided unlimited OS virtualization for Windows Server 2003 Datacenter owners
– We’ve been churning out all kinds of free tools for "Genuine Windows Users"
… but still we’re really pushing out IE 7.0 to everyone.
 
Trust me when I say, just like Windows XP SP2, this upgrade to IE 7.0 must be a pretty important thing for everyone.  That being said:
 
1) IE7 will not install without user consent: As part of the delivery, AU will notify users once the update is ready to install and will present a welcome screen summarizing key features and offering users options of “Install,” Don’t Install,” and “Ask Me Later.” Installation will not occur unless a user who is a local administrator chooses “Install.”  A draft of the welcome screen is include below.
 
2) There will be a Free Blocker Toolkit available for mid-large customers. Organizations relying on AU for patch management in some or all of their environments may wish to delay IE7 deployment (for example, to allow additional time for intranet site compatibility testing or user training).  In those situations, customers may choose to deploy a non-expiring Blocker Toolkit (similar to the one used for Windows XP SP2) prior to IE 7 RTM.  The Blocker Toolkit will be available on July 26th in the Microsoft Download Center at http://go.microsoft.com/fwlink/?linkid=65788. The Blocker Toolkit includes both a Group Policy template and a script that set a registry key to prevent Automatic Updates and the Windows Update and Microsoft Update sites from offering Internet Explorer 7 as a high-priority update. 
 
For more details visit, http://www.microsoft.com/ie
 
Important IT Links:
Designer announces $300,000 Windows Mobile Pocket PC Phone…

…and gets an order for 4 DEVICES!
 
 
Anyone got a spare $300,000 lying around?

The Live Toolbar plugin for Internet Explorer is now http://toolbar.live.com/. It has some nice features, including a number of mapping related tools:

 1. Recognize addresses on a web page and map all of them at once. This is great when you are at a http://osf.com/locations/menu-by-locations.htm with a bunch of addresses and you want to see them all on a map at once to compare them. with one click in Live Toolbar the addresses are passed to Live Local as a new scratchpad. You can view them, save them as a Collection, or share them with a friend. See the OSF screenshot below. One thing i really like about this feature is that the recognizer apparently is parsing the DOM in realtime, so it is compatible with AJAX sites, web forms and web editors! It not only parses the initially loaded page, but if an Asynchronous call is made to the server that delivers address information to the web page, they appear in the dropdown list as well.

 2. Get interactive inline maps on any web page. with Toolbar installed, whenever you highlight some text on a webpage a smart menu appears with a list of ways to operate on the selected text. if the text you selected is a street address, one of the choices will be to see a map right there on the webpage without having to surf off to a mapping site. very convenient!

Here is a list of features in the toolbar.

http://toolbar.live.com/features.aspx?mkt=en-us

Dear Apple:  It’s officially ON.  We’re goin’ head to head.  Get ready to get busy.
 
At our national sales meeting this week, Steve Ballmer threw it out on the floor and said, we’re goin’ to take on the 600lb gorilla of media players ourselves.  It seems that no one else can stand up to them.  Not Sony, not Creative, not iRiver, not Toshiba, not Samsung… no one. 
 
Except us.
 
We’ve got the only next gen video game console in the world.  We’ve got Media Center PCs.  We’ve got the richest integration with cameras.  We’ve got online services and we’ve got the strongest stable of developers on tap that you can shake a stick at.
 
We’ve hired the original Apple Macintosh user interface designers.   We’ve got a patent on the user interface that the iPod uses.  We’ve got our own media format, our own DRM, and our own consumer software for synchronization, ripping, and playback of audio, video, pictures, and event. 
 
And we’ve got millions of existing Windows Media Player users that are going to suddenly discover that with a click of the button, all their music will be transfered to a nice little device called "Zune".  And they won’t have to install any new software because it’ll work really nicely with Windows.
 
That’s right.  No more having to install the iTMS monster.
 
Oh yeah.  We’ve got our own music store.  We’ve got partners for accessories like Altec Lansing and Bose and Harmon Kardon and JVC and a bazillion other folks that are good friends with us because they’re tired of Apple’s dictatorship and frankly look forward to our co-marketing with them.  Oh, and we’ve got distribution channels.  We’ve got a worldwide sales force and we make more money for consumer electronics stores than Apple does every day.
 
And now we’re taking Apple on with all that and a few other soon-to-be-announced surprises.  And you know what the sick part of it all is?  This is just the FIRST of several announcements we’re gonna make in general that’s just gonna set the world afire.
 
Microsoft just ate the power pellet.  Run Clyde run.
 
URLs to dig into.

« Newer Posts - Older Posts »

Categories